$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/db48cbec-4811-31a3-98cf-ab8a3dde22c1.roa File: db48cbec-4811-31a3-98cf-ab8a3dde22c1.roa (raw, json) Hash identifier: 9nE48nZOcxqAP23nH7ukNPCJdRSk5VxbR/wDahPfdn0= Subject key identifier: A1:75:8C:EF:33:0C:08:E3:EF:9D:16:8A:D4:85:90:29:07:5B:FA:82 Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F43285847B10168B872C7C49A6DD05100 Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/db48cbec-4811-31a3-98cf-ab8a3dde22c1.roa Signing time: Mon 28 Oct 2024 13:00:40 +0000 ROA not before: Mon 28 Oct 2024 13:00:40 +0000 ROA not after: Sun 26 Jan 2025 14:00:40 +0000 asID: 29838 IP address blocks: 2602:ffb5::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b1:01:68:b8:72:c7:c4:9a:6d:d0:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: Oct 28 13:00:40 2024 GMT Not After : Jan 26 14:00:40 2025 GMT Subject: CN=8f8a5712-696d-4a73-9a3a-2e6ba918fe23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e0:b8:00:f8:b7:dd:ba:e1:51:d2:55:4e:a1: 48:c5:6e:2c:e6:ed:59:b2:02:a7:46:ad:42:e9:dc: 28:4e:db:59:23:be:42:03:03:df:a6:72:a4:19:93: 03:97:0c:69:ad:9f:af:22:c1:40:05:d0:da:23:67: b4:1d:aa:9b:e9:11:e2:97:ed:84:df:8e:64:25:9a: 96:10:13:39:39:d4:c1:9d:a7:2d:24:b0:40:79:3c: 86:6e:1a:38:d2:c2:1c:05:1e:38:4a:61:61:b4:c7: 5b:46:36:5b:32:ca:a8:ec:57:d6:79:1e:f0:c2:6a: 48:bd:46:00:5b:c9:b6:b2:8d:3d:fa:dd:11:bf:49: 93:f6:56:69:8c:aa:48:64:16:e4:2a:83:8a:36:63: 87:4c:a5:22:3f:5b:8e:76:d6:94:84:d8:63:6a:a1: 67:b2:24:a7:17:0c:1f:09:09:9e:28:5b:28:51:53: c5:b7:cd:a5:74:21:a1:03:1a:3d:b4:c8:54:e2:56: f9:79:fd:76:27:05:e3:73:7c:d2:b8:95:c5:4f:fe: 91:02:3b:71:1b:91:96:fa:66:3c:8a:a2:6d:68:0d: 76:37:2f:e7:da:fa:97:a7:7e:3e:aa:d4:d9:5d:8e: e8:92:30:3e:ec:89:61:91:c3:fd:b3:a3:33:f3:35: 81:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:75:8C:EF:33:0C:08:E3:EF:9D:16:8A:D4:85:90:29:07:5B:FA:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/db48cbec-4811-31a3-98cf-ab8a3dde22c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv6: 2602:ffb5::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:d6:14:0f:5a:3f:1c:ff:16:7b:d6:7f:89:14:d6:fd:de:25: 23:c4:a1:5e:e1:cf:1e:f9:42:9c:99:28:96:23:74:9e:a0:9e: f7:e9:67:fc:ce:79:2f:35:bc:74:ea:26:7a:c6:53:90:3f:e5: bd:25:fd:b8:98:e9:db:80:0b:07:1f:f8:98:f7:7c:66:07:94: c5:4f:73:a6:21:99:ec:f8:82:fa:57:92:a0:d9:0d:c6:93:9c: 6f:c8:e0:9d:07:e0:a5:aa:e5:ad:6e:76:79:57:ce:8c:d7:03: c0:39:b3:d2:9a:56:c8:73:a1:4e:50:81:19:02:99:54:e8:26: 09:32:ec:55:0b:ba:12:ea:6c:e4:62:5c:bb:94:82:f5:91:18: e0:ac:a6:7a:3a:99:02:03:ae:45:c2:ef:9a:82:a2:2c:ac:c8: af:75:56:9c:ed:75:1d:2c:c8:11:89:54:6b:87:68:85:99:fa: fd:7f:d4:f6:42:59:00:06:1c:fb:91:01:5d:be:e3:9a:2f:92: 78:67:f3:b4:40:18:05:c3:70:a8:4b:96:ee:de:7a:d4:2e:1f: a0:e4:d9:41:32:d1:d7:98:bb:ae:cd:de:b2:7b:ec:e6:27:11: 5e:3c:28:68:bd:3f:81:87:6d:5c:bf:8b:be:63:cd:20:1f:0f: e4:e5:c3:da -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEexAWi4csfEmm3QUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk OGY4YTU3MTItNjk2ZC00YTczLTlhM2EtMmU2YmE5MThmZTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeC4APi33brhUdJVTqFIxW4s5u1ZsgKnRq1C 6dwoTttZI75CAwPfpnKkGZMDlwxprZ+vIsFABdDaI2e0Haqb6RHil+2E345kJZqW EBM5OdTBnactJLBAeTyGbho40sIcBR44SmFhtMdbRjZbMsqo7FfWeR7wwmpIvUYA W8m2so09+t0Rv0mT9lZpjKpIZBbkKoOKNmOHTKUiP1uOdtaUhNhjaqFnsiSnFwwf CQmeKFsoUVPFt82ldCGhAxo9tMhU4lb5ef12JwXjc3zSuJXFT/6RAjtxG5GW+mY8 iqJtaA12Ny/n2vqXp34+qtTZXY7okjA+7IlhkcP9s6Mz8zWByQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKF1jO8zDAjj750WitSFkCkHW/qCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvZGI0OGNiZWMtNDgxMS0z MWEzLTk4Y2YtYWI4YTNkZGUyMmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL/tQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYdYUD1o/HP8We9Z/iRTW/d4lI8ShXuHPHvlCnJkoliN0nqCe9+ln /M55LzW8dOomesZTkD/lvSX9uJjp24ALBx/4mPd8ZgeUxU9zpiGZ7PiC+leSoNkN xpOcb8jgnQfgparlrW52eVfOjNcDwDmz0ppWyHOhTlCBGQKZVOgmCTLsVQu6Eups 5GJcu5SC9ZEY4KymejqZAgOuRcLvmoKiLKzIr3VWnO11HSzIEYlUa4dohZn6/X/U 9kJZAAYc+5EBXb7jmi+SeGfztEAYBcNwqEuW7t561C4foOTZQTLR15i7rs3esnvs 5icRXjwoaL0/gYdtXL+LvmPNIB8P5OXD2g== -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:21 2024 by rpki-client on console-fra.rpki-client.org