$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/bd24ff87-c178-3f0d-a1e7-788cf90a8c56.roa File: bd24ff87-c178-3f0d-a1e7-788cf90a8c56.roa (raw, json) Hash identifier: F12rRWZRIhx8A39s+zGCRN/2OX54T15Rx3esrHhXWL0= Subject key identifier: 71:2B:38:4F:89:A0:E5:21:0F:DF:D9:2B:61:97:F7:51:FC:D0:EE:87 Certificate issuer: /CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f Certificate serial: 010D0C9F43285847792BB5EB8A6E2CF92566D8D0 Authority key identifier: E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/bd24ff87-c178-3f0d-a1e7-788cf90a8c56.roa Signing time: Tue 08 Oct 2024 13:00:40 +0000 ROA not before: Tue 08 Oct 2024 13:00:40 +0000 ROA not after: Mon 06 Jan 2025 14:00:40 +0000 asID: 0 IP address blocks: 2001:504:1b::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:79:2b:b5:eb:8a:6e:2c:f9:25:66:d8:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f Validity Not Before: Oct 8 13:00:40 2024 GMT Not After : Jan 6 14:00:40 2025 GMT Subject: CN=bba6bde6-1df0-4386-bf64-a8c3153a28e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7e:d2:ab:81:50:31:5e:bf:16:55:39:c7:4e: 32:68:62:d4:f5:45:41:85:ba:55:e5:a7:ad:a2:b8: fe:db:d6:7d:83:84:a2:6d:d6:1e:ac:31:c9:45:df: da:fd:92:5e:0b:50:f2:eb:b3:91:d7:ed:8b:16:07: f7:7e:8e:e1:45:64:35:c3:64:f3:68:33:05:4f:b1: e8:a1:32:e7:76:41:47:df:01:b0:83:c2:3e:d6:e6: b7:07:e1:b4:b7:aa:bf:3f:87:e9:a2:8a:98:25:71: da:ef:e1:92:96:bb:4d:ab:d5:0a:ce:98:d7:2c:2a: 66:92:cb:65:f1:c1:0a:6d:41:e2:31:b0:f5:d5:d2: 72:cd:dd:51:7d:8e:60:58:07:95:ea:43:dd:44:a5: 18:35:98:aa:0e:93:35:4f:7d:15:72:8d:3a:44:97: 8b:a7:61:6a:59:33:b4:42:b7:33:94:ae:b1:51:f2: 40:5a:bf:96:09:0a:73:12:67:39:bd:8a:45:2b:79: 72:4f:44:71:f9:bf:6c:55:f8:2d:68:31:26:61:8e: 3b:75:cc:98:c8:53:d6:3f:a6:2e:8b:af:3e:c4:3f: b4:9c:88:d3:41:a3:83:3d:3d:5f:80:1c:69:6b:f9: 9a:31:36:7a:ac:41:40:3a:af:1c:5a:3f:05:42:6e: c8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2B:38:4F:89:A0:E5:21:0F:DF:D9:2B:61:97:F7:51:FC:D0:EE:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/bd24ff87-c178-3f0d-a1e7-788cf90a8c56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl X509v3 Authority Key Identifier: keyid:E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:47:14:fe:22:5a:41:ff:77:fc:dc:f9:4e:94:3f:08:77:ad: ad:ef:a9:3d:4a:07:23:b7:ef:61:42:e6:c0:ad:1e:9a:da:b4: 17:74:6d:7f:7a:6f:c8:63:fb:5d:37:e1:67:57:b5:c2:37:93: 77:e6:6c:b4:77:a7:bc:3a:7e:d1:6a:7a:6d:a3:be:43:56:1b: 7a:6d:0b:0d:d6:f4:0c:6d:0c:20:08:90:3f:65:07:42:de:f5: aa:08:bc:93:26:10:d4:0b:23:10:34:16:e9:29:8d:5d:cc:4b: 15:c8:d3:75:71:62:28:7b:c6:28:b7:67:a9:1f:16:9b:8f:8c: e3:b5:bf:88:2a:52:08:6c:8f:2d:47:89:86:17:37:5e:5f:61: cb:06:09:69:e1:6f:5b:26:67:cd:90:03:7c:6d:83:f2:10:b0: 71:15:06:f8:e4:e9:98:2c:72:be:22:39:d2:e4:55:1f:df:79: 97:57:6e:d9:a8:7d:b7:0f:22:d9:50:49:ce:df:ce:05:59:d1: 5e:e5:76:9d:7f:dd:fc:0e:32:85:36:55:75:2e:51:ae:ee:da: a8:6d:6c:d2:75:f5:ed:60:cc:9a:d7:87:84:f1:95:52:13:f5: d1:70:47:25:b7:f8:88:53:6e:83:67:ba:82:f7:7a:9b:7c:9c: 1e:77:69:35 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEd5K7Xrim4s+SVm2NAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE2MTFlZjEtMTk1ZS00OTU4LWE2YWMtZjRhMWQyY2Q4 YzhmMB4XDTI0MTAwODEzMDA0MFoXDTI1MDEwNjE0MDA0MFowLzEtMCsGA1UEAxMk YmJhNmJkZTYtMWRmMC00Mzg2LWJmNjQtYThjMzE1M2EyOGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx37Sq4FQMV6/FlU5x04yaGLU9UVBhbpV5aet orj+29Z9g4SibdYerDHJRd/a/ZJeC1Dy67OR1+2LFgf3fo7hRWQ1w2TzaDMFT7Ho oTLndkFH3wGwg8I+1ua3B+G0t6q/P4fpooqYJXHa7+GSlrtNq9UKzpjXLCpmkstl 8cEKbUHiMbD11dJyzd1RfY5gWAeV6kPdRKUYNZiqDpM1T30Vco06RJeLp2FqWTO0 QrczlK6xUfJAWr+WCQpzEmc5vYpFK3lyT0Rx+b9sVfgtaDEmYY47dcyYyFPWP6Yu i68+xD+0nIjTQaODPT1fgBxpa/maMTZ6rEFAOq8cWj8FQm7I6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHErOE+JoOUhD9/ZK2GX91H80O6HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yYTYx MWVmMS0xOTVlLTQ5NTgtYTZhYy1mNGExZDJjZDhjOGYvYmQyNGZmODctYzE3OC0z ZjBkLWExZTctNzg4Y2Y5MGE4YzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmE2MTFlZjEtMTk1ZS00OTU4LWE2 YWMtZjRhMWQyY2Q4YzhmLzJhNjExZWYxLTE5NWUtNDk1OC1hNmFjLWY0YTFkMmNk OGM4Zi5jcmwwHwYDVR0jBBgwFoAU58NNkhO9kN6+mFO2dWGXhlsnRk0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yYTYxMWVmMS0xOTVlLTQ5NTgtYTZhYy1mNGEx ZDJjZDhjOGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAAb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACJHFP4iWkH/d/zc+U6UPwh3ra3vqT1KByO372FC5sCtHpratBd0 bX96b8hj+1034WdXtcI3k3fmbLR3p7w6ftFqem2jvkNWG3ptCw3W9AxtDCAIkD9l B0Le9aoIvJMmENQLIxA0FukpjV3MSxXI03VxYih7xii3Z6kfFpuPjOO1v4gqUghs jy1HiYYXN15fYcsGCWnhb1smZ82QA3xtg/IQsHEVBvjk6Zgscr4iOdLkVR/feZdX btmofbcPItlQSc7fzgVZ0V7ldp1/3fwOMoU2VXUuUa7u2qhtbNJ19e1gzJrXh4Tx lVIT9dFwRyW3+IhTboNnuoL3ept8nB53aTU= -----END CERTIFICATE-----Generated at Thu Nov 21 17:30:26 2024 by rpki-client on console-fra.rpki-client.org