$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/fb4fa6ad-6a59-35fc-ae9f-11e188719cda.roa File: fb4fa6ad-6a59-35fc-ae9f-11e188719cda.roa (raw, json) Hash identifier: JBSXKzhT3iJJB9v65ARf+HfnFEomagFP07n1my7Cvys= Subject key identifier: 45:89:72:CE:BE:CA:E5:88:B2:21:B7:3B:8C:31:5D:B2:A9:42:15:27 Certificate issuer: /CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Certificate serial: 010D0C9F432858477BF664E519D2CCB23521D800 Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/fb4fa6ad-6a59-35fc-ae9f-11e188719cda.roa Signing time: Wed 09 Oct 2024 13:00:42 +0000 ROA not before: Wed 09 Oct 2024 13:00:42 +0000 ROA not after: Tue 07 Jan 2025 14:00:42 +0000 asID: 62856 IP address blocks: 2620:130:f001::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7b:f6:64:e5:19:d2:cc:b2:35:21:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Validity Not Before: Oct 9 13:00:42 2024 GMT Not After : Jan 7 14:00:42 2025 GMT Subject: CN=553dd563-7873-421d-aad6-55b5dc50d1e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ec:9f:85:bb:82:74:04:88:44:33:e4:e3:d5: a7:05:c8:d1:31:86:71:cc:42:29:39:f3:43:1f:37: 4a:4b:8e:c2:a3:fd:10:c2:0a:b7:6e:22:ab:26:54: f8:1f:cb:84:a2:99:bb:9d:bc:ae:93:d4:94:64:f0: ec:04:ac:c5:6b:fe:a9:b9:5c:89:cf:65:18:00:ae: e1:50:97:a3:05:a0:96:06:0c:9f:6d:14:0a:45:28: 96:d3:44:0e:ad:fa:20:2e:f5:48:3b:78:18:16:27: d4:e7:91:71:0c:bf:c1:a1:d6:93:93:46:3f:6d:40: af:eb:ce:0f:a0:de:f0:35:11:d4:cb:30:2d:f9:90: 93:be:60:0c:89:56:d9:11:3f:7c:ce:3a:0f:3d:e0: e0:38:11:ab:60:fd:0f:47:ec:18:fa:4d:84:ab:da: eb:c0:0a:dc:ec:6f:50:c2:01:2a:ee:1b:61:cd:9a: 86:d2:37:06:1a:ce:a6:1f:bb:18:e4:66:a8:3e:de: d6:ff:27:d9:9e:b5:d0:ed:2e:db:3c:3b:fd:2d:c1: 62:d7:58:6c:25:fe:e0:42:bb:a0:7d:87:29:ed:75: c8:8e:c3:ba:35:7f:3b:4f:2b:a8:a3:8d:60:d4:76: 29:a7:6c:07:ae:2d:6b:5f:94:39:68:87:8b:5b:3f: e1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:89:72:CE:BE:CA:E5:88:B2:21:B7:3B:8C:31:5D:B2:A9:42:15:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/fb4fa6ad-6a59-35fc-ae9f-11e188719cda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl X509v3 Authority Key Identifier: keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer sbgp-ipAddrBlock: critical IPv6: 2620:130:f001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:7a:0d:78:7f:12:94:2b:6e:90:e6:37:16:d5:7b:ee:c2:73: 33:39:4e:dd:19:ee:33:c3:6f:47:e1:26:b5:21:b3:43:d9:c1: 7f:99:a9:33:30:af:61:e4:5d:2e:2b:93:02:9e:2a:91:a3:43: a6:79:e5:f0:db:94:d2:f2:34:f8:91:69:84:5a:98:58:e3:9d: 19:bd:57:f8:59:fd:96:67:a6:21:fe:80:6c:4a:5d:b9:42:24: 1c:f0:bb:39:d9:3f:8e:c9:ec:62:46:3a:3a:72:f4:d9:0f:9e: 3d:48:b5:79:d9:68:24:cb:42:2b:52:c0:d6:4b:4c:f7:c1:5d: 84:83:af:14:26:4d:2f:7a:de:44:bd:31:85:4f:0f:9b:2f:79: 87:e2:37:ec:b0:8d:3a:cf:05:df:b0:f9:f3:56:1f:88:82:06: a5:a0:14:ed:e2:fe:f9:95:f9:59:97:7d:f0:91:e3:2d:2e:ac: 96:74:12:4b:6d:44:f7:d3:e1:ec:76:bb:51:a4:a8:e9:7b:06: b5:3d:8e:19:be:1e:11:55:b0:ea:9d:7a:d1:4b:91:2f:f7:a6: e7:cd:39:f3:32:27:7a:54:da:be:50:86:c2:af:78:5d:f2:ef: 7f:3d:29:a2:58:03:32:5b:ae:81:b4:76:3f:2d:36:8b:3b:31: c6:57:cf:8d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEd79mTlGdLMsjUh2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5 ZWYzMB4XDTI0MTAwOTEzMDA0MloXDTI1MDEwNzE0MDA0MlowLzEtMCsGA1UEAxMk NTUzZGQ1NjMtNzg3My00MjFkLWFhZDYtNTViNWRjNTBkMWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuyfhbuCdASIRDPk49WnBcjRMYZxzEIpOfND HzdKS47Co/0Qwgq3biKrJlT4H8uEopm7nbyuk9SUZPDsBKzFa/6puVyJz2UYAK7h UJejBaCWBgyfbRQKRSiW00QOrfogLvVIO3gYFifU55FxDL/BodaTk0Y/bUCv684P oN7wNRHUyzAt+ZCTvmAMiVbZET98zjoPPeDgOBGrYP0PR+wY+k2Eq9rrwArc7G9Q wgEq7hthzZqG0jcGGs6mH7sY5GaoPt7W/yfZnrXQ7S7bPDv9LcFi11hsJf7gQrug fYcp7XXIjsO6NX87Tyuoo41g1HYpp2wHri1rX5Q5aIeLWz/hvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEWJcs6+yuWIsiG3O4wxXbKpQhUnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3 ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvZmI0ZmE2YWQtNmE1OS0z NWZjLWFlOWYtMTFlMTg4NzE5Y2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWFmN2RmMzUtYzY3Zi00NDBkLTk3 OTktNDYxZTdhODA5ZWYzL2VhZjdkZjM1LWM2N2YtNDQwZC05Nzk5LTQ2MWU3YTgw OWVmMy5jcmwwHwYDVR0jBBgwFoAU2Wzj3bzwBlTPKTIqIy/84RLCWzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFl N2E4MDllZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABMPAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHZ6DXh/EpQrbpDmNxbVe+7CczM5Tt0Z7jPDb0fhJrUhs0PZwX+Z qTMwr2HkXS4rkwKeKpGjQ6Z55fDblNLyNPiRaYRamFjjnRm9V/hZ/ZZnpiH+gGxK XblCJBzwuznZP47J7GJGOjpy9NkPnj1ItXnZaCTLQitSwNZLTPfBXYSDrxQmTS96 3kS9MYVPD5sveYfiN+ywjTrPBd+w+fNWH4iCBqWgFO3i/vmV+VmXffCR4y0urJZ0 EkttRPfT4ex2u1GkqOl7BrU9jhm+HhFVsOqdetFLkS/3pufNOfMyJ3pU2r5QhsKv eF3y7389KaJYAzJbroG0dj8tNos7McZXz40= -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:12 2024 by rpki-client on console-fra.rpki-client.org