$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b/a7fd3b0b-95ed-3c09-9e46-697cf064d848.roa File: a7fd3b0b-95ed-3c09-9e46-697cf064d848.roa (raw, json) Hash identifier: 7ao0WdJaeWsnaZeYt/h8op2V5J6qWkmG1rHB8RmHa0s= Subject key identifier: 7E:FA:CE:C2:95:AE:91:5A:F8:07:71:D6:2B:56:B4:E6:D3:44:50:58 Certificate issuer: /CN=0b60a007-9fb6-4096-9503-20f30414834b Certificate serial: 010D0C9F4328584754E0DC3CDDF735A8A4254DC0 Authority key identifier: 9F:37:ED:89:6C:B5:EB:1F:A8:8B:B6:C5:90:AE:F9:15:1C:9D:07:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b/a7fd3b0b-95ed-3c09-9e46-697cf064d848.roa Signing time: Wed 25 Sep 2024 13:00:41 +0000 ROA not before: Wed 25 Sep 2024 13:00:41 +0000 ROA not after: Tue 24 Dec 2024 14:00:41 +0000 asID: 395800 IP address blocks: 2602:facf::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b/0b60a007-9fb6-4096-9503-20f30414834b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b/0b60a007-9fb6-4096-9503-20f30414834b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:54:e0:dc:3c:dd:f7:35:a8:a4:25:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b60a007-9fb6-4096-9503-20f30414834b Validity Not Before: Sep 25 13:00:41 2024 GMT Not After : Dec 24 14:00:41 2024 GMT Subject: CN=d7ec2963-b443-4abc-86ed-4bc2d307615a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:29:86:b1:14:76:c3:3a:24:89:94:66:7d:51: ee:7f:cd:d8:7c:95:5c:47:8c:bf:e9:1f:65:11:55: 16:d0:de:e7:fe:72:ee:1f:3a:d8:34:43:ec:2d:08: 09:99:4e:cf:99:0e:5f:c6:ab:fd:f0:8b:35:15:5b: 96:f8:72:28:7d:4f:61:49:d8:e0:f2:ba:b3:2a:22: 12:88:e7:63:d6:3e:1f:73:14:f9:f2:37:1c:db:bb: 82:83:3b:f0:7b:6d:d3:ae:b6:fe:6e:f8:61:a4:6e: bf:5e:15:f3:aa:8d:b1:d5:d5:04:b8:07:66:ee:40: 86:56:b0:9c:78:43:03:e4:69:9f:39:4a:6a:f0:3a: 91:da:61:28:dc:af:a3:e8:3d:40:33:3f:98:1e:95: 31:dc:11:99:fd:be:07:e0:99:36:15:1a:e5:2d:6d: e0:2b:82:50:13:56:82:9b:94:1f:04:47:ee:3f:6c: f7:4d:38:30:9d:20:76:52:c9:86:27:2c:48:50:c7: c6:ef:cc:04:ec:0f:d0:d6:e4:81:59:30:28:c9:49: 7b:08:e8:55:71:13:ee:c1:9e:6a:55:aa:cc:c3:c7: 73:20:68:f2:49:58:a2:ce:ca:bf:74:6e:61:4b:2f: e8:46:72:87:99:91:16:4b:3a:7e:2a:f7:b7:a9:f6: 94:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FA:CE:C2:95:AE:91:5A:F8:07:71:D6:2B:56:B4:E6:D3:44:50:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b/a7fd3b0b-95ed-3c09-9e46-697cf064d848.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b/0b60a007-9fb6-4096-9503-20f30414834b.crl X509v3 Authority Key Identifier: keyid:9F:37:ED:89:6C:B5:EB:1F:A8:8B:B6:C5:90:AE:F9:15:1C:9D:07:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b.cer sbgp-ipAddrBlock: critical IPv6: 2602:facf::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:d1:42:6e:e6:1e:81:4a:31:a2:f2:e9:da:e9:08:8e:a7:b1: c5:43:54:de:ba:97:14:7f:d1:d1:63:8d:da:58:cf:54:71:35: 81:09:bf:56:4a:a0:3c:32:3d:71:37:86:35:87:1b:b2:ef:88: 7a:48:de:73:80:55:2d:04:60:97:d7:cc:b0:64:ce:d6:87:66: c8:64:e8:4a:58:d6:b0:10:ae:af:17:66:c3:e0:bf:79:09:4d: 95:e4:e1:30:2d:cd:b5:65:32:ec:48:81:27:2a:74:5c:a3:d2: 85:29:d0:28:a9:22:5d:32:ac:5c:3c:90:0c:98:0a:d5:34:ae: 89:68:f3:17:04:71:44:6a:d7:ea:28:29:6d:41:fc:47:e5:c5: 31:d4:e8:76:42:90:b8:02:b1:01:a6:9f:05:fc:b5:32:3c:02: 13:55:1e:eb:e1:ce:0c:50:ea:4e:c1:22:0e:12:a7:a1:cd:74: e8:a5:c2:cf:90:d2:b3:f6:3e:7c:bc:0a:03:0f:c8:f0:ec:42: 25:64:5c:df:6b:e0:44:e9:a1:07:64:98:98:1b:23:dd:1c:9b: 67:0c:84:43:9f:c2:8b:a2:47:8e:e4:5c:a8:d8:66:b3:f0:47: 1b:a3:40:2e:c3:4e:2b:18:d7:7e:1d:53:b2:49:b7:ae:31:9e: 9d:56:bf:94 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEdU4Nw83fc1qKQlTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGI2MGEwMDctOWZiNi00MDk2LTk1MDMtMjBmMzA0MTQ4 MzRiMB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZDdlYzI5NjMtYjQ0My00YWJjLTg2ZWQtNGJjMmQzMDc2MTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuimGsRR2wzokiZRmfVHuf83YfJVcR4y/6R9l EVUW0N7n/nLuHzrYNEPsLQgJmU7PmQ5fxqv98Is1FVuW+HIofU9hSdjg8rqzKiIS iOdj1j4fcxT58jcc27uCgzvwe23Trrb+bvhhpG6/XhXzqo2x1dUEuAdm7kCGVrCc eEMD5GmfOUpq8DqR2mEo3K+j6D1AMz+YHpUx3BGZ/b4H4Jk2FRrlLW3gK4JQE1aC m5QfBEfuP2z3TTgwnSB2UsmGJyxIUMfG78wE7A/Q1uSBWTAoyUl7COhVcRPuwZ5q VarMw8dzIGjySViizsq/dG5hSy/oRnKHmZEWSzp+Kve3qfaUywIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFH76zsKVrpFa+Adx1itWtObTRFBYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYjYw YTAwNy05ZmI2LTQwOTYtOTUwMy0yMGYzMDQxNDgzNGIvYTdmZDNiMGItOTVlZC0z YzA5LTllNDYtNjk3Y2YwNjRkODQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGI2MGEwMDctOWZiNi00MDk2LTk1 MDMtMjBmMzA0MTQ4MzRiLzBiNjBhMDA3LTlmYjYtNDA5Ni05NTAzLTIwZjMwNDE0 ODM0Yi5jcmwwHwYDVR0jBBgwFoAUnzftiWy16x+oi7bFkK75FRydBwAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYjYwYTAwNy05ZmI2LTQwOTYtOTUwMy0yMGYz MDQxNDgzNGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6zwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATNFCbuYegUoxovLp2ukIjqexxUNU3rqXFH/R0WON2ljPVHE1gQm/ VkqgPDI9cTeGNYcbsu+Iekjec4BVLQRgl9fMsGTO1odmyGToSljWsBCurxdmw+C/ eQlNleThMC3NtWUy7EiBJyp0XKPShSnQKKkiXTKsXDyQDJgK1TSuiWjzFwRxRGrX 6igpbUH8R+XFMdTodkKQuAKxAaafBfy1MjwCE1Ue6+HODFDqTsEiDhKnoc106KXC z5DSs/Y+fLwKAw/I8OxCJWRc32vgROmhB2SYmBsj3RybZwyEQ5/Ci6JHjuRcqNhm s/BHG6NALsNOKxjXfh1Tskm3rjGenVa/lA== -----END CERTIFICATE-----Generated at Mon Nov 25 03:29:53 2024 by rpki-client on console-fra.rpki-client.org