$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/c299288c-7614-30cd-a6e7-c56fc746d67e.roa File: c299288c-7614-30cd-a6e7-c56fc746d67e.roa (raw, json) Hash identifier: 17tPTja8zfBLR0GCpCDW7N3k4+U0qgSpcz03aafVNg4= Subject key identifier: 4C:92:F9:74:5C:3A:37:0B:AC:51:D8:F7:1A:A7:D4:E7:E2:36:DF:6B Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F43285847EBBF853E389CB73BF37C9CE0 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/c299288c-7614-30cd-a6e7-c56fc746d67e.roa Signing time: Mon 18 Nov 2024 14:00:40 +0000 ROA not before: Mon 18 Nov 2024 14:00:40 +0000 ROA not after: Sun 16 Feb 2025 14:00:40 +0000 asID: 33322 IP address blocks: 2607:fbb0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:eb:bf:85:3e:38:9c:b7:3b:f3:7c:9c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Nov 18 14:00:40 2024 GMT Not After : Feb 16 14:00:40 2025 GMT Subject: CN=21a2cd76-9f20-437c-b314-7f51339903c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:34:7b:bc:84:82:e5:37:58:a3:24:17:17:7c: 4b:fd:32:d4:28:bb:0f:bd:a6:73:7b:68:c7:dd:f9: 67:1f:ab:05:a5:77:ea:f8:6a:8a:b6:54:3b:f7:67: 9e:1a:c0:39:08:1c:08:2e:f9:94:d0:20:2f:51:5a: b4:01:de:ec:a2:40:a2:64:f1:3d:b5:64:b6:4b:6a: a6:d4:66:31:a5:80:58:73:fb:86:69:3e:86:16:55: 1b:86:07:5f:4c:0e:a2:40:59:de:f4:bd:1e:46:94: 7d:0e:cb:e1:9e:2f:e0:87:14:07:e9:00:69:73:86: fb:92:51:ef:96:5d:e1:8c:22:71:1c:38:89:7b:f4: 12:0e:b9:a6:b8:26:f1:93:ea:ce:fe:17:74:7a:5a: fa:3e:51:ae:65:41:0f:33:83:31:ac:55:5f:90:85: cd:19:cb:43:86:75:b9:e9:68:09:9b:a9:7a:34:41: 7d:5b:53:4d:ca:59:89:16:f0:f7:52:55:bd:77:0c: e6:a3:2a:e4:ee:ec:8c:f9:1f:44:49:e7:c9:88:6a: 73:84:73:78:23:ce:f0:4b:19:26:cb:bc:9a:86:c8: 30:68:22:ef:5a:d7:32:ec:52:fd:92:7f:ee:6d:81: 2a:85:fa:9b:66:e8:06:08:38:52:14:54:1c:ff:88: 54:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:92:F9:74:5C:3A:37:0B:AC:51:D8:F7:1A:A7:D4:E7:E2:36:DF:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/c299288c-7614-30cd-a6e7-c56fc746d67e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv6: 2607:fbb0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:48:6c:56:3b:dd:7a:d7:a2:a5:69:00:f9:01:3a:44:c7:34: 75:e5:cd:01:0b:a2:29:48:eb:46:04:15:06:c7:f7:cc:0c:cb: 4c:eb:16:97:74:15:df:4c:9a:46:7b:bc:86:d5:fb:a5:3e:f7: 49:d2:74:00:29:49:83:3e:95:e7:39:d4:0f:b8:4e:79:12:51: 40:50:c5:dd:b1:b4:3b:c8:7a:f0:58:4a:1d:25:38:3d:c3:6b: 91:a0:c3:90:77:b2:e2:c2:29:77:12:38:15:c0:c9:c0:35:78: e1:0f:44:9d:b6:49:12:e1:ac:54:0f:3e:3c:4a:20:b0:d6:85: cf:22:0a:82:d0:40:02:9c:4f:4b:09:f3:28:75:7d:7d:0f:26: 18:dd:3f:71:44:e4:c7:d9:23:f3:cf:28:d9:df:4c:57:f7:4b: 52:fe:7d:0d:19:f7:74:b7:62:67:b4:af:b7:74:00:51:4b:f8: 42:3a:75:f9:34:bb:a1:69:f2:3d:aa:51:53:5d:b1:92:01:2f: c5:d1:88:93:87:0f:13:ed:b9:1b:71:36:b3:0e:f6:2c:d7:0c: 12:93:93:94:88:e0:54:d6:38:a5:11:87:74:05:2d:57:6f:6f: 31:c0:cf:df:54:0c:ba:0e:41:02:b0:07:dc:45:52:6a:6d:ef: a7:fb:e0:48 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfrv4U+OJy3O/N8nOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI0MTExODE0MDA0MFoXDTI1MDIxNjE0MDA0MFowLzEtMCsGA1UEAxMk MjFhMmNkNzYtOWYyMC00MzdjLWIzMTQtN2Y1MTMzOTkwM2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTR7vISC5TdYoyQXF3xL/TLUKLsPvaZze2jH 3flnH6sFpXfq+GqKtlQ792eeGsA5CBwILvmU0CAvUVq0Ad7sokCiZPE9tWS2S2qm 1GYxpYBYc/uGaT6GFlUbhgdfTA6iQFne9L0eRpR9Dsvhni/ghxQH6QBpc4b7klHv ll3hjCJxHDiJe/QSDrmmuCbxk+rO/hd0elr6PlGuZUEPM4MxrFVfkIXNGctDhnW5 6WgJm6l6NEF9W1NNylmJFvD3UlW9dwzmoyrk7uyM+R9ESefJiGpzhHN4I87wSxkm y7yahsgwaCLvWtcy7FL9kn/ubYEqhfqbZugGCDhSFFQc/4hUCwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEyS+XRcOjcLrFHY9xqn1OfiNt9rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvYzI5OTI4OGMtNzYxNC0z MGNkLWE2ZTctYzU2ZmM3NDZkNjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf7sDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCaSGxWO91616KlaQD5ATpExzR15c0BC6IpSOtGBBUGx/fMDMtM6xaX dBXfTJpGe7yG1fulPvdJ0nQAKUmDPpXnOdQPuE55ElFAUMXdsbQ7yHrwWEodJTg9 w2uRoMOQd7Liwil3EjgVwMnANXjhD0SdtkkS4axUDz48SiCw1oXPIgqC0EACnE9L CfModX19DyYY3T9xROTH2SPzzyjZ30xX90tS/n0NGfd0t2JntK+3dABRS/hCOnX5 NLuhafI9qlFTXbGSAS/F0YiThw8T7bkbcTazDvYs1wwSk5OUiOBU1jilEYd0BS1X b28xwM/fVAy6DkECsAfcRVJqbe+n++BI -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:33 2024 by rpki-client on console-fra.rpki-client.org