$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/857171dc-1cf1-350c-bc80-6881e5f008ea.roa File: 857171dc-1cf1-350c-bc80-6881e5f008ea.roa (raw, json) Hash identifier: bw6Fom0rsqg+z6QNFdSkGcn/+HUv0j4BOQ1Tn+OjhIw= Subject key identifier: A3:5F:B3:3F:A8:41:EF:95:35:F2:EE:69:68:A7:37:1C:B8:47:AE:24 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F432858478B51161328FB1F110B4DF1E0 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/857171dc-1cf1-350c-bc80-6881e5f008ea.roa Signing time: Tue 15 Oct 2024 01:00:35 +0000 ROA not before: Tue 15 Oct 2024 01:00:35 +0000 ROA not after: Mon 13 Jan 2025 02:00:35 +0000 asID: 11232 IP address blocks: 2605:4a80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8b:51:16:13:28:fb:1f:11:0b:4d:f1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Oct 15 01:00:35 2024 GMT Not After : Jan 13 02:00:35 2025 GMT Subject: CN=a086f61e-7c45-4e60-9580-47f1c3dc3b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7c:f0:76:ff:2d:0d:21:2e:63:f9:c2:41:8c: b9:16:f7:95:02:ab:22:22:c5:03:56:15:90:73:52: 8d:7f:3b:ac:5f:dc:2b:87:98:c5:97:2c:67:d8:ab: f0:ed:53:5e:d6:47:47:d5:55:c1:a0:ba:9a:21:da: 1b:c1:0b:f2:56:e4:7d:79:86:0e:f3:d1:a0:66:db: 86:a8:67:fc:ab:8a:97:2e:ae:fc:f9:42:ad:bf:ca: 1d:a5:e6:17:90:9c:1e:9e:b2:26:0c:a1:88:d1:27: dd:62:f0:73:02:a2:4d:b3:1b:0b:cf:e0:f2:23:7d: d9:a6:a1:c9:62:3a:c6:60:0a:da:54:5d:47:84:08: dc:a9:2a:bd:56:70:55:26:da:5b:1b:ce:b0:41:be: a2:05:83:a6:bd:18:59:85:a0:bf:5f:7a:f3:5c:52: a0:b9:e2:d3:0e:5c:39:ee:18:68:da:b0:7f:1c:36: d8:6a:0e:a2:97:09:18:1c:0c:e1:6c:5a:4b:56:93: c5:23:83:65:af:1f:41:3a:e5:74:4a:e5:38:63:79: 21:63:e7:9e:a4:f6:e5:e4:77:28:b0:62:e9:f7:50: 43:b1:d9:cc:b4:ef:11:4c:06:0e:73:ec:58:b0:fb: 0c:22:f5:7d:3d:cf:6d:d5:bd:97:99:89:ff:69:5c: 5e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:5F:B3:3F:A8:41:EF:95:35:F2:EE:69:68:A7:37:1C:B8:47:AE:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/857171dc-1cf1-350c-bc80-6881e5f008ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv6: 2605:4a80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:71:28:6d:0e:7f:ac:65:40:5e:12:2f:ad:3d:8d:3a:e8:48: 65:3b:a2:16:92:b9:36:a5:5f:ca:26:bf:f4:bb:9b:80:cd:7c: 75:13:46:a9:6e:23:33:53:f9:4f:e7:e9:15:a3:64:74:ae:ec: d1:88:3f:37:61:9a:1a:e6:27:17:75:20:46:b7:e4:18:27:df: 5f:5a:ba:fe:7f:65:52:cc:e3:4b:51:d9:dc:67:72:1f:97:fb: fd:b8:5d:6e:d4:ec:89:d6:6c:2f:48:bc:32:b4:64:3c:15:57: 9b:09:af:1c:32:b7:3a:aa:26:4a:ac:d2:1b:74:12:9a:b7:c8: de:a7:61:47:7f:4b:13:1c:9b:39:68:5b:05:14:4b:7a:0e:ea: 2d:49:41:f8:46:d5:ac:c4:70:fd:9e:7e:bd:5a:fa:93:8d:20: ab:1b:0a:be:61:87:f8:7d:8d:b1:d7:58:d0:82:2a:68:09:b7: fb:0f:ce:dc:ed:a2:20:df:fa:29:04:e6:b2:9c:50:d6:2b:48: 90:ef:61:4c:d9:7b:bd:d1:8b:13:21:c8:94:bb:8a:82:37:04: 0e:40:f9:1d:c7:e8:7a:1c:44:2e:fc:6a:03:5a:63:2d:25:e4: 2b:d0:4f:f0:c6:86:ab:a1:90:0b:2f:bc:63:df:e6:6e:25:23: 8f:57:64:8f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeLURYTKPsfEQtN8eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI0MTAxNTAxMDAzNVoXDTI1MDExMzAyMDAzNVowLzEtMCsGA1UEAxMk YTA4NmY2MWUtN2M0NS00ZTYwLTk1ODAtNDdmMWMzZGMzYjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXzwdv8tDSEuY/nCQYy5FveVAqsiIsUDVhWQ c1KNfzusX9wrh5jFlyxn2Kvw7VNe1kdH1VXBoLqaIdobwQvyVuR9eYYO89GgZtuG qGf8q4qXLq78+UKtv8odpeYXkJwenrImDKGI0SfdYvBzAqJNsxsLz+DyI33ZpqHJ YjrGYAraVF1HhAjcqSq9VnBVJtpbG86wQb6iBYOmvRhZhaC/X3rzXFKgueLTDlw5 7hho2rB/HDbYag6ilwkYHAzhbFpLVpPFI4Nlrx9BOuV0SuU4Y3khY+eepPbl5Hco sGLp91BDsdnMtO8RTAYOc+xYsPsMIvV9Pc9t1b2XmYn/aVxe4QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKNfsz+oQe+VNfLuaWinNxy4R64kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvODU3MTcxZGMtMWNmMS0z NTBjLWJjODAtNjg4MWU1ZjAwOGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVKgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAjcShtDn+sZUBeEi+tPY066EhlO6IWkrk2pV/KJr/0u5uAzXx1E0ap biMzU/lP5+kVo2R0ruzRiD83YZoa5icXdSBGt+QYJ99fWrr+f2VSzONLUdncZ3If l/v9uF1u1OyJ1mwvSLwytGQ8FVebCa8cMrc6qiZKrNIbdBKat8jep2FHf0sTHJs5 aFsFFEt6DuotSUH4RtWsxHD9nn69WvqTjSCrGwq+YYf4fY2x11jQgipoCbf7D87c 7aIg3/opBOaynFDWK0iQ72FM2Xu90YsTIciUu4qCNwQOQPkdx+h6HEQu/GoDWmMt JeQr0E/wxoaroZALL7xj3+ZuJSOPV2SP -----END CERTIFICATE-----Generated at Fri Nov 22 04:23:03 2024 by rpki-client on console-fra.rpki-client.org