$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/705a3eec-c65b-3d01-bd41-f12f8b9fe00c.roa File: 705a3eec-c65b-3d01-bd41-f12f8b9fe00c.roa (raw, json) Hash identifier: xKXg8VyM+MYiujimL8LVP9sfXi6rM4Y47spBlevI384= Subject key identifier: AB:36:57:AA:33:4C:2C:8C:6E:D4:BF:EF:A1:25:03:8F:89:8D:F6:26 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F432858474F4B7AD85E255CAF09FC8D40 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/705a3eec-c65b-3d01-bd41-f12f8b9fe00c.roa Signing time: Mon 23 Sep 2024 13:00:40 +0000 ROA not before: Mon 23 Sep 2024 13:00:40 +0000 ROA not after: Sun 22 Dec 2024 14:00:40 +0000 asID: 23467 IP address blocks: 2602:816:5000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4f:4b:7a:d8:5e:25:5c:af:09:fc:8d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Sep 23 13:00:40 2024 GMT Not After : Dec 22 14:00:40 2024 GMT Subject: CN=aaaa4681-c73f-4ce8-abc3-fb0d0298fa3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e8:d3:25:39:c9:5a:c7:a0:de:ec:b6:39:95: e2:9c:22:9d:17:0d:a8:41:23:6b:43:46:45:c7:95: 13:6b:fe:d2:ee:72:87:18:70:b7:d3:01:56:b5:0d: 4d:47:33:05:fd:31:b9:d1:42:2f:b7:f5:f4:47:bb: 0f:34:7a:ea:ec:cf:76:bf:36:fa:e9:84:bf:68:4f: f6:af:91:1f:54:b6:19:8d:98:4a:97:28:a6:5a:18: 73:14:fb:ee:16:e8:d5:0c:87:87:42:9a:50:ee:6b: 61:b6:58:bf:21:79:1f:bb:8a:e5:a5:53:af:52:09: d3:dc:47:ee:64:d1:71:69:6c:f6:0f:88:b6:bb:6e: 4d:f2:1f:22:70:ff:42:95:c1:09:13:1b:7e:b8:36: 43:e4:b1:94:13:78:bf:9f:1c:d0:91:74:f3:e4:87: eb:d5:1f:c8:7a:b2:68:dc:b4:7d:62:86:5b:fd:29: e5:2b:28:7d:de:b9:f3:1c:c4:a6:f7:9f:e6:15:12: 96:86:b5:18:6c:65:3e:7f:29:90:b9:d6:92:dd:35: 6b:d3:db:b9:37:45:da:27:1a:ad:95:bd:a3:75:a8: ed:a0:ef:c8:90:b0:e7:ef:96:5a:1a:80:49:2e:db: fa:63:00:60:a9:1c:11:63:e2:1b:8e:c5:5d:52:20: b4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:36:57:AA:33:4C:2C:8C:6E:D4:BF:EF:A1:25:03:8F:89:8D:F6:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/705a3eec-c65b-3d01-bd41-f12f8b9fe00c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv6: 2602:816:5000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:04:46:ee:4b:bf:62:86:ca:4f:e6:88:4c:07:0f:63:54:6f: 74:4a:8d:ed:7a:d5:43:76:5c:35:1a:87:57:8d:2e:ae:8e:cc: 35:4a:2d:88:ab:a3:41:12:de:bd:f3:c5:74:6f:18:b9:de:74: 68:54:91:64:76:79:de:2b:f8:f6:42:21:c2:06:ab:e8:5d:61: 6e:48:8c:e6:56:44:56:c3:bd:94:78:6f:f0:6d:48:95:a2:7c: 5c:2d:ed:fb:af:9b:0c:6f:51:1e:5e:2a:f8:67:1f:fa:2f:83: 9e:2a:d1:14:86:59:4b:af:98:a8:43:0f:b3:c8:a1:10:a9:29: 65:5f:97:76:09:55:c4:19:a0:db:89:87:c2:32:57:e2:1f:99: 56:63:b8:15:b0:10:05:7e:90:0a:97:71:d2:e3:ab:12:5d:73: da:8c:9e:8d:b2:9e:9a:ba:d9:c1:ee:75:33:77:99:a1:87:e5: 1e:35:cb:b1:d1:e7:ff:5c:8d:c5:53:6b:2a:0e:6d:98:70:69: 09:a3:21:44:ba:d5:ba:f3:89:a4:83:86:88:68:05:e2:4b:54: 7b:57:a2:27:96:21:19:e5:8d:e0:50:76:e9:4d:a6:ea:6b:16: 0b:37:ab:a4:6f:70:15:37:d9:53:8c:0e:70:a4:e9:94:24:1c: 59:95:a4:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdPS3rYXiVcrwn8jUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI0MDkyMzEzMDA0MFoXDTI0MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk YWFhYTQ2ODEtYzczZi00Y2U4LWFiYzMtZmIwZDAyOThmYTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ujTJTnJWseg3uy2OZXinCKdFw2oQSNrQ0ZF x5UTa/7S7nKHGHC30wFWtQ1NRzMF/TG50UIvt/X0R7sPNHrq7M92vzb66YS/aE/2 r5EfVLYZjZhKlyimWhhzFPvuFujVDIeHQppQ7mthtli/IXkfu4rlpVOvUgnT3Efu ZNFxaWz2D4i2u25N8h8icP9ClcEJExt+uDZD5LGUE3i/nxzQkXTz5Ifr1R/IerJo 3LR9YoZb/SnlKyh93rnzHMSm95/mFRKWhrUYbGU+fymQudaS3TVr09u5N0XaJxqt lb2jdajtoO/IkLDn75ZaGoBJLtv6YwBgqRwRY+IbjsVdUiC0swIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKs2V6ozTCyMbtS/76ElA4+JjfYmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvNzA1YTNlZWMtYzY1Yi0z ZDAxLWJkNDEtZjEyZjhiOWZlMDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFlAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJcERu5Lv2KGyk/miEwHD2NUb3RKje161UN2XDUah1eNLq6OzDVK LYiro0ES3r3zxXRvGLnedGhUkWR2ed4r+PZCIcIGq+hdYW5IjOZWRFbDvZR4b/Bt SJWifFwt7fuvmwxvUR5eKvhnH/ovg54q0RSGWUuvmKhDD7PIoRCpKWVfl3YJVcQZ oNuJh8IyV+IfmVZjuBWwEAV+kAqXcdLjqxJdc9qMno2ynpq62cHudTN3maGH5R41 y7HR5/9cjcVTayoObZhwaQmjIUS61brziaSDhohoBeJLVHtXoieWIRnljeBQdulN puprFgs3q6RvcBU32VOMDnCk6ZQkHFmVpFM= -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:26 2024 by rpki-client on console-fra.rpki-client.org