$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/21595d0b-23d2-37e5-a27d-6bb8c3d2c2c2.roa File: 21595d0b-23d2-37e5-a27d-6bb8c3d2c2c2.roa (raw, json) Hash identifier: 5zeIxoXSLTzS97otkd4tcf9RojI57jNT/Z/KXkCpy7g= Subject key identifier: 92:48:6B:C5:23:A2:BD:79:C1:58:E3:70:CA:D0:CB:53:42:B3:8A:A4 Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Certificate serial: 010D0C9F4328584769D0D3468CD2683C272B2100 Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/21595d0b-23d2-37e5-a27d-6bb8c3d2c2c2.roa Signing time: Thu 03 Oct 2024 01:00:31 +0000 ROA not before: Thu 03 Oct 2024 01:00:31 +0000 ROA not after: Wed 01 Jan 2025 02:00:31 +0000 asID: 6597 IP address blocks: 2607:f948::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:69:d0:d3:46:8c:d2:68:3c:27:2b:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Validity Not Before: Oct 3 01:00:31 2024 GMT Not After : Jan 1 02:00:31 2025 GMT Subject: CN=68330ca2-0662-4edb-bb82-cc160cb9d473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:38:70:6d:b0:dd:d7:75:d7:c9:fb:2a:2b:49: 2f:21:ec:eb:a7:09:9c:7e:5e:12:84:16:e7:2b:1e: f3:4c:cb:3e:7b:c4:cb:ca:89:b6:de:13:21:20:64: da:dd:73:1a:76:f6:c7:ab:2e:1b:6e:c3:52:03:3a: f1:ba:c4:99:3d:17:5e:8a:0c:05:23:30:a5:6a:64: 28:4f:8a:3c:6f:95:e2:fb:b2:71:ba:b0:f6:db:8e: 06:99:d0:7e:43:bf:c6:4b:76:a7:0f:d8:91:a1:9e: 8c:15:f8:5b:ce:f6:2b:54:8a:0d:16:56:09:4b:05: 39:15:d5:88:c5:6a:c4:5a:62:77:53:d7:cf:f1:1b: 2a:8f:ec:9f:85:b3:d4:92:13:2a:03:94:63:09:42: 2a:3e:97:f3:04:46:6c:31:b9:e8:46:6e:00:99:cb: b5:68:06:f8:7b:17:54:1f:c6:1e:87:e7:e2:77:88: ee:92:a1:13:e1:20:8e:94:95:84:b6:ea:d0:94:b2: d9:36:d8:6a:d2:6d:3f:87:b3:fa:79:b6:7f:5e:3e: be:11:09:6f:43:c6:28:9e:e4:0d:40:01:07:4d:04: ee:e0:31:e9:ed:33:ce:22:d4:fb:37:df:b2:4d:10: 5f:a4:bf:41:7d:bc:d2:00:a9:4b:64:2b:f9:3f:16: 35:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:48:6B:C5:23:A2:BD:79:C1:58:E3:70:CA:D0:CB:53:42:B3:8A:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/21595d0b-23d2-37e5-a27d-6bb8c3d2c2c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl X509v3 Authority Key Identifier: keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer sbgp-ipAddrBlock: critical IPv6: 2607:f948::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:3a:08:3d:01:e3:6f:93:2e:d2:5c:a2:99:2a:cd:ad:01:b8: ff:8f:5b:16:35:fe:7d:eb:c7:4a:b1:fe:54:8f:c7:c7:b1:ce: 4b:7d:1e:b8:1c:ca:31:0c:9f:7b:b0:4c:17:34:36:7e:79:f5: 32:35:1c:79:94:40:36:eb:ca:c2:81:da:3b:6b:68:04:e2:d1: 6c:91:86:dd:4b:5f:b3:f2:58:ba:a0:e7:32:63:aa:c7:d0:48: 5e:32:f4:4b:30:39:59:1d:cd:f1:52:8e:59:25:9b:39:fb:f6: f8:95:af:63:2e:f4:94:30:32:8c:c3:52:d8:76:08:22:d1:9b: 76:41:83:d0:5d:38:25:c8:85:11:2e:23:d2:1d:3b:51:79:14: ce:2f:c3:a3:65:c6:b4:86:91:02:db:8a:af:77:15:3a:21:60: e1:80:ab:1e:79:66:2b:4f:0e:08:b2:29:55:07:64:f0:be:ca: 06:b0:9f:1d:af:f2:ee:90:fa:55:a5:e2:98:fd:8c:7c:86:7a: 55:a3:1b:2f:0d:08:b6:cb:dc:ae:47:e7:42:5c:c7:0e:ae:8b: 8a:13:83:08:c2:e2:08:3d:f0:fd:ea:83:18:a2:04:03:53:3b: 38:db:0b:43:c9:e3:95:04:98:31:cd:c1:01:f3:4b:57:56:44: df:fc:80:26 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdp0NNGjNJoPCcrIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0ZDcxMDUtZDliZC00ZWU0LWI5NTgtMmU5OTAyZDVl Yjk3MB4XDTI0MTAwMzAxMDAzMVoXDTI1MDEwMTAyMDAzMVowLzEtMCsGA1UEAxMk NjgzMzBjYTItMDY2Mi00ZWRiLWJiODItY2MxNjBjYjlkNDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhThwbbDd13XXyfsqK0kvIezrpwmcfl4ShBbn Kx7zTMs+e8TLyom23hMhIGTa3XMadvbHqy4bbsNSAzrxusSZPRdeigwFIzClamQo T4o8b5Xi+7JxurD2244GmdB+Q7/GS3anD9iRoZ6MFfhbzvYrVIoNFlYJSwU5FdWI xWrEWmJ3U9fP8Rsqj+yfhbPUkhMqA5RjCUIqPpfzBEZsMbnoRm4Amcu1aAb4exdU H8Yeh+fid4jukqET4SCOlJWEturQlLLZNthq0m0/h7P6ebZ/Xj6+EQlvQ8YonuQN QAEHTQTu4DHp7TPOItT7N9+yTRBfpL9BfbzSAKlLZCv5PxY1oQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJJIa8Ujor15wVjjcMrQy1NCs4qkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRk NzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5MDJkNWViOTcvMjE1OTVkMGItMjNkMi0z N2U1LWEyN2QtNmJiOGMzZDJjMmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2I0ZDcxMDUtZDliZC00ZWU0LWI5 NTgtMmU5OTAyZDVlYjk3LzNiNGQ3MTA1LWQ5YmQtNGVlNC1iOTU4LTJlOTkwMmQ1 ZWI5Ny5jcmwwHwYDVR0jBBgwFoAUrPgBtzCVI7GVWIX/ouTrJrmfYzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRkNzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5 MDJkNWViOTcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf5SDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB7Ogg9AeNvky7SXKKZKs2tAbj/j1sWNf5968dKsf5Uj8fHsc5LfR64 HMoxDJ97sEwXNDZ+efUyNRx5lEA268rCgdo7a2gE4tFskYbdS1+z8li6oOcyY6rH 0EheMvRLMDlZHc3xUo5ZJZs5+/b4la9jLvSUMDKMw1LYdggi0Zt2QYPQXTglyIUR LiPSHTtReRTOL8OjZca0hpEC24qvdxU6IWDhgKseeWYrTw4IsilVB2TwvsoGsJ8d r/LukPpVpeKY/Yx8hnpVoxsvDQi2y9yuR+dCXMcOrouKE4MIwuIIPfD96oMYogQD Uzs42wtDyeOVBJgxzcEB80tXVkTf/IAm -----END CERTIFICATE-----Generated at Fri Nov 22 11:39:38 2024 by rpki-client on console-fra.rpki-client.org