$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/7711e710-d931-3d65-aa3c-e7e676c7e85e.roa File: 7711e710-d931-3d65-aa3c-e7e676c7e85e.roa (raw, json) Hash identifier: YIU7GvXZewch7HS2Nitx/npALw+Dgqq8z82O/PKxQY0= Subject key identifier: 65:F6:68:CA:BB:6B:04:B5:48:83:06:CD:D7:25:5C:E8:76:E4:27:26 Certificate issuer: /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Certificate serial: 010D0C9F43285847C1DF4CD5885671978F2D0AA0 Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/7711e710-d931-3d65-aa3c-e7e676c7e85e.roa Signing time: Sun 03 Nov 2024 14:00:49 +0000 ROA not before: Sun 03 Nov 2024 14:00:49 +0000 ROA not after: Sat 01 Feb 2025 14:00:49 +0000 asID: 395403 IP address blocks: 2620:4d:400e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c1:df:4c:d5:88:56:71:97:8f:2d:0a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Validity Not Before: Nov 3 14:00:49 2024 GMT Not After : Feb 1 14:00:49 2025 GMT Subject: CN=4cd87677-a0a2-448a-bf50-b864bdefc2df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:eb:a7:60:e3:2f:79:62:5e:ca:10:d3:24:d7: 33:72:40:fe:df:8e:59:3a:4c:23:7a:d3:4e:d5:ab: 77:2f:a0:96:54:c3:4f:13:c2:f8:ff:e9:11:41:d6: 79:42:0d:81:8b:19:8a:5e:51:fa:4b:5e:58:7b:d9: ec:ab:61:ab:e8:2e:48:44:17:99:a6:7b:73:0f:d9: 9e:d3:dd:58:6b:40:39:81:2b:8c:8f:fe:d5:e8:ce: 45:4d:65:7c:8d:72:52:56:8b:99:49:21:09:79:a6: 23:34:61:b5:6e:98:58:3e:23:6d:c3:cd:5b:9d:ad: a5:c6:d1:ff:7a:bd:2d:c1:4e:da:a9:10:31:54:03: f5:0e:0e:ac:5b:8e:1c:6b:75:bc:6d:e3:01:75:05: 57:cf:c9:01:35:94:3e:07:e4:5f:f7:1c:d1:a3:87: 8c:4b:e6:b2:22:c4:a4:32:64:7c:59:d0:eb:47:a2: c4:50:e0:6d:ce:e9:de:b2:26:8b:47:a1:9b:fb:75: fa:b0:63:8e:fd:7a:bb:68:2b:28:13:ff:4a:a8:78: 36:8d:b9:2d:a1:37:e7:6b:2b:80:69:ff:66:bb:89: dd:39:5c:18:62:62:a1:83:31:92:8d:13:74:6d:dd: cd:7f:70:a7:75:d3:13:54:51:a4:9b:17:a5:f9:b7: f3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F6:68:CA:BB:6B:04:B5:48:83:06:CD:D7:25:5C:E8:76:E4:27:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/7711e710-d931-3d65-aa3c-e7e676c7e85e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl X509v3 Authority Key Identifier: keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer sbgp-ipAddrBlock: critical IPv6: 2620:4d:400e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:71:32:cf:1d:39:5e:75:56:e9:94:f5:d7:02:e5:07:89:54: 53:49:2b:3a:f2:7e:38:f3:78:a7:48:c6:fa:fd:08:ab:ae:44: 85:39:5a:32:02:6d:24:0e:9f:26:e5:a6:1a:ab:c7:87:50:1e: 75:ce:1d:8f:77:2c:a6:a0:89:84:7d:0a:f9:6b:20:65:be:27: bd:16:9b:99:78:e1:1b:68:5f:6f:c4:36:88:62:07:39:6f:56: f9:9b:db:31:28:59:9a:d1:6f:e8:1c:6e:da:06:aa:5b:f5:60: 89:ca:90:d6:e0:1d:df:5a:25:2e:36:07:79:22:7b:f6:d1:c0: 12:26:d4:39:da:9f:3e:9d:bb:8f:bc:69:d0:65:d1:44:32:d3: b8:d4:1d:ba:9a:dc:fb:c7:31:c0:d6:07:69:f8:0b:46:ec:8b: 09:78:3f:42:3b:c9:6f:bc:f3:33:cf:bb:3a:f6:84:de:14:28: 3a:36:95:0f:5c:0f:8c:81:b5:4a:61:4d:77:48:ac:dc:45:26: 8f:8a:39:7e:5d:ff:3b:d9:1e:e2:3e:73:4d:16:b8:5d:57:cc: b3:4c:40:a0:40:d5:2c:82:5f:d4:51:1a:01:dc:18:65:95:c9: f7:6a:6c:25:b3:7c:16:62:9f:39:0e:91:71:7d:ac:56:6d:56: 64:53:5f:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfB30zViFZxl48tCqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEwYjU0ZDQtOTIxYS00MDVhLThjN2EtNmFhMWRjYjI2 M2VhMB4XDTI0MTEwMzE0MDA0OVoXDTI1MDIwMTE0MDA0OVowLzEtMCsGA1UEAxMk NGNkODc2NzctYTBhMi00NDhhLWJmNTAtYjg2NGJkZWZjMmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguunYOMveWJeyhDTJNczckD+345ZOkwjetNO 1at3L6CWVMNPE8L4/+kRQdZ5Qg2BixmKXlH6S15Ye9nsq2Gr6C5IRBeZpntzD9me 091Ya0A5gSuMj/7V6M5FTWV8jXJSVouZSSEJeaYjNGG1bphYPiNtw81bna2lxtH/ er0twU7aqRAxVAP1Dg6sW44ca3W8beMBdQVXz8kBNZQ+B+Rf9xzRo4eMS+ayIsSk MmR8WdDrR6LEUOBtzunesiaLR6Gb+3X6sGOO/Xq7aCsoE/9KqHg2jbktoTfnayuA af9mu4ndOVwYYmKhgzGSjRN0bd3Nf3CnddMTVFGkmxel+bfzRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGX2aMq7awS1SIMGzdclXOh25CcmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBi NTRkNC05MjFhLTQwNWEtOGM3YS02YWExZGNiMjYzZWEvNzcxMWU3MTAtZDkzMS0z ZDY1LWFhM2MtZTdlNjc2YzdlODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwYjU0ZDQtOTIxYS00MDVhLThj N2EtNmFhMWRjYjI2M2VhL2RhMGI1NGQ0LTkyMWEtNDA1YS04YzdhLTZhYTFkY2Iy NjNlYS5jcmwwHwYDVR0jBBgwFoAUBL87a95hwed1KW8LcOgjFNgbvA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBiNTRkNC05MjFhLTQwNWEtOGM3YS02YWEx ZGNiMjYzZWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAATUAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI5xMs8dOV51VumU9dcC5QeJVFNJKzryfjjzeKdIxvr9CKuuRIU5 WjICbSQOnyblphqrx4dQHnXOHY93LKagiYR9CvlrIGW+J70Wm5l44RtoX2/ENohi BzlvVvmb2zEoWZrRb+gcbtoGqlv1YInKkNbgHd9aJS42B3kie/bRwBIm1Dnanz6d u4+8adBl0UQy07jUHbqa3PvHMcDWB2n4C0bsiwl4P0I7yW+88zPPuzr2hN4UKDo2 lQ9cD4yBtUphTXdIrNxFJo+KOX5d/zvZHuI+c00WuF1XzLNMQKBA1SyCX9RRGgHc GGWVyfdqbCWzfBZinzkOkXF9rFZtVmRTX5E= -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:28 2024 by rpki-client on console-fra.rpki-client.org