$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/02b3d6de-dde7-3c25-aba8-656086e431bd.roa File: 02b3d6de-dde7-3c25-aba8-656086e431bd.roa (raw, json) Hash identifier: qRcPfcnpN4ve/vUsapPzdgbF30jgMru2usHCA1UgVUI= Subject key identifier: A9:6E:C3:72:2F:E9:E7:34:74:5B:AC:FF:E2:53:AA:41:47:C9:07:CB Certificate issuer: /CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Certificate serial: 010D0C9F4328584762D64F2A217FC48DE7ED6760 Authority key identifier: 0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/02b3d6de-dde7-3c25-aba8-656086e431bd.roa Signing time: Mon 30 Sep 2024 13:00:42 +0000 ROA not before: Mon 30 Sep 2024 13:00:42 +0000 ROA not after: Sun 29 Dec 2024 14:00:42 +0000 asID: 399668 IP address blocks: 2620:98:a000::/48 maxlen: 64 2620:98:a001::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:62:d6:4f:2a:21:7f:c4:8d:e7:ed:67:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Validity Not Before: Sep 30 13:00:42 2024 GMT Not After : Dec 29 14:00:42 2024 GMT Subject: CN=a67f999b-6357-4d97-8f60-3f158013002b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e0:af:cd:b9:2c:08:a7:72:68:e8:e0:47:03: 7c:fe:24:4d:dc:70:4a:f7:5c:00:0c:53:fa:c3:a0: 26:4a:d2:fd:27:ba:34:d2:d2:cc:5f:db:14:aa:4e: 17:81:f0:49:4b:41:46:3c:da:a7:71:f0:f6:19:0f: da:84:5c:b5:aa:72:25:21:4a:42:9a:1e:a5:22:52: 3a:3d:62:14:8c:f1:aa:bd:08:b7:b0:a6:e5:cd:2f: 75:f9:02:d0:5f:f9:c3:85:15:bd:93:92:67:ac:12: 05:39:a9:be:ab:3b:3f:26:c1:3b:6b:ef:34:f1:f6: db:86:80:71:97:00:10:b4:73:c4:4c:1f:27:3d:0f: 82:57:38:54:0e:13:2f:1b:8c:9a:73:67:66:47:e0: e6:f0:63:01:f5:c9:32:b2:07:81:27:ab:30:d3:1e: 82:2b:f5:28:67:a6:6d:2d:ec:a3:59:3c:1a:c4:a0: bc:27:85:78:2f:7a:9c:45:bf:e9:f7:bf:9b:7c:0d: ee:bf:a2:4a:ea:f5:09:de:bc:d0:e7:06:7d:f2:28: f2:11:80:a3:c6:fe:40:f7:65:30:1a:3c:d7:e1:ad: 1f:30:65:e3:17:f1:32:be:89:5b:2d:83:62:fa:86: 13:f9:d7:74:ae:15:83:fc:54:a8:fd:02:7a:7d:da: 6a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6E:C3:72:2F:E9:E7:34:74:5B:AC:FF:E2:53:AA:41:47:C9:07:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/02b3d6de-dde7-3c25-aba8-656086e431bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl X509v3 Authority Key Identifier: keyid:0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer sbgp-ipAddrBlock: critical IPv6: 2620:98:a000::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:6d:a9:2e:9e:08:c8:01:aa:a7:0d:79:fb:52:b7:3f:63:e5: f6:44:06:c4:bb:d5:0b:7b:ba:bc:d4:6b:af:be:c8:ad:24:f7: 36:b2:97:09:b0:25:78:f8:24:e8:98:b2:b9:88:1d:55:ba:ab: 60:61:eb:97:7b:27:56:b7:52:13:cf:e8:da:2e:0b:f2:84:91: bd:07:50:7b:5e:aa:f1:7d:39:8d:8c:e6:be:d2:fb:85:61:ab: df:27:40:c2:1a:9f:de:1b:33:4b:94:7a:13:d1:d7:2b:9a:9c: 03:96:b9:cb:14:85:3f:95:b3:86:25:97:3c:80:56:52:46:b3: 5f:bb:6e:30:94:f6:cc:fd:98:fc:c7:e5:a1:e1:38:4b:49:e0: ab:b8:d9:9e:c8:c7:db:3f:95:b1:dc:6c:ea:0f:22:39:3e:29: 45:70:8b:89:4f:cd:e0:60:a8:43:ce:26:22:d0:51:36:bd:92: b8:c4:9a:37:ac:2e:80:ed:7f:b4:fa:5b:01:3d:9e:1e:96:d8: 96:62:8f:6a:ac:b4:d3:11:1e:33:8e:41:57:49:8e:c4:44:40: 80:68:39:75:9b:1c:08:6d:53:7f:11:5d:ce:55:1c:2a:26:be: 61:9a:7a:92:d1:45:f9:51:4b:4f:1e:0f:08:84:4b:d7:b3:9b: 53:98:db:16 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdi1k8qIX/EjeftZ2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4NTY4NmItYmFjMy00MGQyLWI0NmUtZjI1OTNmYjBi YzZiMB4XDTI0MDkzMDEzMDA0MloXDTI0MTIyOTE0MDA0MlowLzEtMCsGA1UEAxMk YTY3Zjk5OWItNjM1Ny00ZDk3LThmNjAtM2YxNTgwMTMwMDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieCvzbksCKdyaOjgRwN8/iRN3HBK91wADFP6 w6AmStL9J7o00tLMX9sUqk4XgfBJS0FGPNqncfD2GQ/ahFy1qnIlIUpCmh6lIlI6 PWIUjPGqvQi3sKblzS91+QLQX/nDhRW9k5JnrBIFOam+qzs/JsE7a+808fbbhoBx lwAQtHPETB8nPQ+CVzhUDhMvG4yac2dmR+Dm8GMB9ckysgeBJ6sw0x6CK/UoZ6Zt LeyjWTwaxKC8J4V4L3qcRb/p97+bfA3uv6JK6vUJ3rzQ5wZ98ijyEYCjxv5A92Uw GjzX4a0fMGXjF/EyvolbLYNi+oYT+dd0rhWD/FSo/QJ6fdpqCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKluw3Iv6ec0dFus/+JTqkFHyQfLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1 Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5M2ZiMGJjNmIvMDJiM2Q2ZGUtZGRlNy0z YzI1LWFiYTgtNjU2MDg2ZTQzMWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWI4NTY4NmItYmFjMy00MGQyLWI0 NmUtZjI1OTNmYjBiYzZiL2FiODU2ODZiLWJhYzMtNDBkMi1iNDZlLWYyNTkzZmIw YmM2Yi5jcmwwHwYDVR0jBBgwFoAUDl72Pqf/QsCEXBjtlhm3bYrZhr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5 M2ZiMGJjNmIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAmKAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ9tqS6eCMgBqqcNeftStz9j5fZEBsS71Qt7urzUa6++yK0k9zay lwmwJXj4JOiYsrmIHVW6q2Bh65d7J1a3UhPP6NouC/KEkb0HUHteqvF9OY2M5r7S +4Vhq98nQMIan94bM0uUehPR1yuanAOWucsUhT+Vs4YllzyAVlJGs1+7bjCU9sz9 mPzH5aHhOEtJ4Ku42Z7Ix9s/lbHcbOoPIjk+KUVwi4lPzeBgqEPOJiLQUTa9krjE mjesLoDtf7T6WwE9nh6W2JZij2qstNMRHjOOQVdJjsREQIBoOXWbHAhtU38RXc5V HComvmGaepLRRflRS08eDwiES9ezm1OY2xY= -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:22 2024 by rpki-client on console-fra.rpki-client.org