$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/9fa98f84-5902-38d4-b16f-becadb732860.roa File: 9fa98f84-5902-38d4-b16f-becadb732860.roa (raw, json) Hash identifier: XHDzDHJFYrb7HdOwUJQop9hLY6kKlND+/NDJToYQM9Y= Subject key identifier: 16:04:10:FF:F5:CB:1F:D8:4C:4E:94:D8:B9:B4:46:32:43:C0:CA:88 Certificate issuer: /CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259 Certificate serial: 010D0C9F432858478B510ADC35D1750A87704880 Authority key identifier: 9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/9fa98f84-5902-38d4-b16f-becadb732860.roa Signing time: Tue 15 Oct 2024 01:00:35 +0000 ROA not before: Tue 15 Oct 2024 01:00:35 +0000 ROA not after: Mon 13 Jan 2025 02:00:35 +0000 asID: 14866 IP address blocks: 2604:4280::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8b:51:0a:dc:35:d1:75:0a:87:70:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259 Validity Not Before: Oct 15 01:00:35 2024 GMT Not After : Jan 13 02:00:35 2025 GMT Subject: CN=e77ca706-7ee7-4e29-b803-3ae1f6a0f6b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8d:fd:e2:93:8b:a9:7d:7c:82:3b:d6:10:80: f4:d8:fa:b8:cd:32:fd:2f:76:77:02:6e:14:70:20: 2d:80:75:4d:6c:61:85:1c:32:d2:e9:72:bf:2f:0e: 94:85:cc:4b:f1:fd:32:e7:09:5d:23:98:6c:f9:d3: ef:c8:30:d1:2c:45:a7:1f:f7:67:c2:e3:f4:02:23: 72:be:4b:77:14:05:8e:74:cd:73:bc:9c:30:51:8c: 1c:a3:6d:43:39:94:bb:7f:1b:13:44:35:3f:92:4a: ff:77:58:ac:81:ea:4c:5e:39:3f:04:8b:6e:02:82: 4a:1c:6c:96:b8:c4:4b:1b:9e:f3:4f:04:5c:70:cc: f4:a7:d1:53:09:07:0e:c1:ad:b1:90:98:0d:d0:e4: d1:57:fa:85:1e:48:34:a6:9e:db:0d:bb:1a:90:e1: 29:5f:a7:59:b9:98:af:c0:ba:3a:80:1d:97:32:7b: 1e:8b:9c:26:02:21:7e:63:59:d6:f1:16:9d:0a:ba: b5:09:a0:87:47:82:1a:e4:1b:4b:5b:f2:34:90:37: 68:9c:1e:a1:fa:4c:35:11:0c:6e:ea:91:d9:99:40: 05:5d:22:41:48:af:8f:7a:63:c0:ac:f5:98:7d:10: 87:fc:61:04:05:c8:16:a1:1a:5f:8d:31:96:21:0a: fe:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:04:10:FF:F5:CB:1F:D8:4C:4E:94:D8:B9:B4:46:32:43:C0:CA:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/9fa98f84-5902-38d4-b16f-becadb732860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.crl X509v3 Authority Key Identifier: keyid:9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer sbgp-ipAddrBlock: critical IPv6: 2604:4280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:52:53:0e:00:2f:2f:d9:df:5d:bb:15:68:2e:e4:58:8e:df: d1:ca:22:50:40:f3:fc:9c:97:cf:78:4f:57:75:12:07:14:9f: 61:84:48:90:80:82:e2:e0:ba:77:9c:15:1b:56:1e:d4:50:50: 06:fb:32:ba:0d:af:ab:7d:0d:05:ef:5b:04:da:00:1a:c8:37: 2f:95:d2:45:c7:c4:47:68:4d:7d:e9:e6:f3:01:ba:da:2b:c7: 84:52:ac:e9:8e:b1:4d:8f:2a:11:01:03:9a:61:6e:8d:56:ac: c1:52:9d:0a:8e:59:76:03:10:2b:e6:c8:f9:8c:61:77:22:c8: ea:19:df:a3:a8:99:49:6d:fa:a2:09:fe:18:6d:56:83:53:07: 80:2d:38:ce:cf:39:5d:e0:33:a4:2f:0c:cd:1d:03:01:b3:d1: 58:2c:2c:8b:48:08:b8:35:d9:9c:00:f0:6c:df:81:80:d7:2a: 87:0c:a6:07:72:87:87:a6:e6:42:84:c5:3b:f0:5e:c2:13:6a: d3:af:04:a2:64:14:9d:46:27:08:c9:22:2a:d5:9f:c6:ad:f2: e9:c9:38:53:c1:4b:63:45:29:71:a8:23:61:ec:22:c3:e6:37: d3:90:66:b1:6d:a0:65:7a:24:43:42:f5:0d:7f:4d:64:56:cc: fd:24:ca:15 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeLUQrcNdF1CodwSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjdhMzJjZGYtYWY0YS00N2Q1LTg2ZGMtZTljZGNmNjhj MjU5MB4XDTI0MTAxNTAxMDAzNVoXDTI1MDExMzAyMDAzNVowLzEtMCsGA1UEAxMk ZTc3Y2E3MDYtN2VlNy00ZTI5LWI4MDMtM2FlMWY2YTBmNmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Y394pOLqX18gjvWEID02Pq4zTL9L3Z3Am4U cCAtgHVNbGGFHDLS6XK/Lw6UhcxL8f0y5wldI5hs+dPvyDDRLEWnH/dnwuP0AiNy vkt3FAWOdM1zvJwwUYwco21DOZS7fxsTRDU/kkr/d1isgepMXjk/BItuAoJKHGyW uMRLG57zTwRccMz0p9FTCQcOwa2xkJgN0OTRV/qFHkg0pp7bDbsakOEpX6dZuZiv wLo6gB2XMnsei5wmAiF+Y1nW8RadCrq1CaCHR4Ia5BtLW/I0kDdonB6h+kw1EQxu 6pHZmUAFXSJBSK+PemPArPWYfRCH/GEEBcgWoRpfjTGWIQr+FwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBYEEP/1yx/YTE6U2Lm0RjJDwMqIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mN2Ez MmNkZi1hZjRhLTQ3ZDUtODZkYy1lOWNkY2Y2OGMyNTkvOWZhOThmODQtNTkwMi0z OGQ0LWIxNmYtYmVjYWRiNzMyODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjdhMzJjZGYtYWY0YS00N2Q1LTg2 ZGMtZTljZGNmNjhjMjU5L2Y3YTMyY2RmLWFmNGEtNDdkNS04NmRjLWU5Y2RjZjY4 YzI1OS5jcmwwHwYDVR0jBBgwFoAUns2WOXoXY3LPoEdHHjUTuHN2FuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mN2EzMmNkZi1hZjRhLTQ3ZDUtODZkYy1lOWNk Y2Y2OGMyNTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRCgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAHUlMOAC8v2d9duxVoLuRYjt/RyiJQQPP8nJfPeE9XdRIHFJ9hhEiQ gILi4Lp3nBUbVh7UUFAG+zK6Da+rfQ0F71sE2gAayDcvldJFx8RHaE196ebzAbra K8eEUqzpjrFNjyoRAQOaYW6NVqzBUp0Kjll2AxAr5sj5jGF3IsjqGd+jqJlJbfqi Cf4YbVaDUweALTjOzzld4DOkLwzNHQMBs9FYLCyLSAi4NdmcAPBs34GA1yqHDKYH coeHpuZChMU78F7CE2rTrwSiZBSdRicIySIq1Z/GrfLpyThTwUtjRSlxqCNh7CLD 5jfTkGaxbaBleiRDQvUNf01kVsz9JMoV -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:47 2024 by rpki-client on console-fra.rpki-client.org