$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/5ad628d2-cff0-3eea-ad5d-af6af4a6dce4.roa File: 5ad628d2-cff0-3eea-ad5d-af6af4a6dce4.roa (raw, json) Hash identifier: 8VImGehxprp+Q2K5YjxZTZgam8+u6szvKaguEJwaE5Q= Subject key identifier: F9:61:E8:B6:48:94:7B:BA:B0:67:D3:F3:2E:77:31:BB:90:AD:F1:28 Certificate issuer: /CN=62f9290e-905b-4384-a03f-fbec24a43858 Certificate serial: 010D0C9F43285847E35F7704C71A7DF7F8C12060 Authority key identifier: DC:A4:47:1D:FE:4E:7C:71:C8:40:3B:73:60:AF:06:53:E1:24:4F:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/5ad628d2-cff0-3eea-ad5d-af6af4a6dce4.roa Signing time: Fri 15 Nov 2024 14:00:39 +0000 ROA not before: Fri 15 Nov 2024 14:00:39 +0000 ROA not after: Thu 13 Feb 2025 14:00:39 +0000 asID: 683 IP address blocks: 2602:278::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/62f9290e-905b-4384-a03f-fbec24a43858.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/62f9290e-905b-4384-a03f-fbec24a43858.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e3:5f:77:04:c7:1a:7d:f7:f8:c1:20:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62f9290e-905b-4384-a03f-fbec24a43858 Validity Not Before: Nov 15 14:00:39 2024 GMT Not After : Feb 13 14:00:39 2025 GMT Subject: CN=f1a1db2e-d2aa-40d0-8c9f-2ac6dec461d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ac:53:13:bb:e6:78:1b:df:b1:b2:5a:58:c5: b0:08:c1:49:ab:30:cb:77:38:80:5e:55:dc:75:33: 6e:60:56:91:86:36:2b:43:5d:97:a5:20:97:70:96: 46:f4:2a:df:b1:b1:e7:16:19:29:48:8a:fb:44:74: 63:40:c1:af:3c:1d:c0:7f:1f:d2:d2:a0:c4:e5:72: 20:e6:e1:7d:42:69:6b:9a:fd:f8:40:06:f5:92:32: 80:79:8b:0f:53:45:33:d3:3c:c0:c7:51:b2:85:2e: 19:a6:8e:39:d8:7b:8e:ef:74:d6:d3:9a:de:80:80: ff:ff:70:52:af:5e:ad:25:9c:a0:c3:b3:95:20:fb: 8a:10:82:63:31:8d:02:24:c9:ce:16:6f:74:fc:91: 8d:a7:02:ea:9a:74:21:c6:54:44:53:c2:00:3c:f2: b3:37:95:e6:e1:ae:4b:f2:ee:c3:b7:ed:02:89:17: d8:b6:21:dc:97:9c:9b:f4:4b:6c:9b:a3:f3:30:51: a5:1e:cb:3d:1e:f8:10:8d:92:d1:fc:9f:69:5e:bc: ae:bd:87:27:5e:19:f2:2e:06:e3:54:1b:5b:3e:95: 70:d2:74:29:ad:23:18:e7:1d:9d:18:1f:68:d9:64: 83:5f:ee:81:ed:da:3c:bf:72:e1:f1:b0:db:ac:e3: 3f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:61:E8:B6:48:94:7B:BA:B0:67:D3:F3:2E:77:31:BB:90:AD:F1:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/5ad628d2-cff0-3eea-ad5d-af6af4a6dce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/62f9290e-905b-4384-a03f-fbec24a43858.crl X509v3 Authority Key Identifier: keyid:DC:A4:47:1D:FE:4E:7C:71:C8:40:3B:73:60:AF:06:53:E1:24:4F:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858.cer sbgp-ipAddrBlock: critical IPv6: 2602:278::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:60:b3:1c:57:23:23:0e:72:4a:96:f2:a4:55:c0:0d:d6:71: 11:58:0a:08:81:d9:ac:c1:09:4b:03:af:33:d7:99:8a:02:ca: c3:74:50:81:78:bc:8b:28:97:ce:26:af:fc:69:42:b7:87:c0: 9c:4c:19:e5:ef:53:e2:12:fc:4d:31:eb:1b:fe:3b:fa:c3:e6: 76:41:27:68:7d:e8:1c:08:fc:d7:06:40:c5:27:58:d2:bd:8b: 4c:a0:49:ec:61:08:9d:44:5f:b4:dd:d4:ce:65:a6:8d:15:fd: 69:66:e3:64:c0:73:15:ad:49:b2:69:1b:85:91:98:9e:60:9b: 8b:f6:e5:f2:cb:51:96:34:24:41:d1:b0:5d:7f:e9:05:46:c8: 68:cd:74:4c:09:07:69:c9:bb:43:fa:3a:6a:46:ab:2d:32:48: 3b:aa:7e:9a:29:65:af:24:20:fe:fa:3b:d4:20:ff:5d:e1:b2: 48:f9:81:c8:20:f1:43:ca:7c:19:ff:a6:05:58:12:a7:e9:c5: 94:59:2d:f2:d8:6a:59:7e:2c:5d:1d:56:92:60:64:6a:fd:03: cf:05:b4:1f:97:ab:c2:7e:9d:cc:95:1e:3f:06:72:d6:d0:70: f6:01:28:c2:56:6c:bc:a5:d0:69:7d:a1:e4:ac:43:ea:af:3f: 27:7a:f4:54 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfjX3cExxp99/jBIGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjJmOTI5MGUtOTA1Yi00Mzg0LWEwM2YtZmJlYzI0YTQz ODU4MB4XDTI0MTExNTE0MDAzOVoXDTI1MDIxMzE0MDAzOVowLzEtMCsGA1UEAxMk ZjFhMWRiMmUtZDJhYS00MGQwLThjOWYtMmFjNmRlYzQ2MWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaxTE7vmeBvfsbJaWMWwCMFJqzDLdziAXlXc dTNuYFaRhjYrQ12XpSCXcJZG9CrfsbHnFhkpSIr7RHRjQMGvPB3Afx/S0qDE5XIg 5uF9Qmlrmv34QAb1kjKAeYsPU0Uz0zzAx1GyhS4Zpo452HuO73TW05regID//3BS r16tJZygw7OVIPuKEIJjMY0CJMnOFm90/JGNpwLqmnQhxlREU8IAPPKzN5Xm4a5L 8u7Dt+0CiRfYtiHcl5yb9Etsm6PzMFGlHss9HvgQjZLR/J9pXryuvYcnXhnyLgbj VBtbPpVw0nQprSMY5x2dGB9o2WSDX+6B7do8v3Lh8bDbrOM/pwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPlh6LZIlHu6sGfT8y53MbuQrfEoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82MmY5 MjkwZS05MDViLTQzODQtYTAzZi1mYmVjMjRhNDM4NTgvNWFkNjI4ZDItY2ZmMC0z ZWVhLWFkNWQtYWY2YWY0YTZkY2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjJmOTI5MGUtOTA1Yi00Mzg0LWEw M2YtZmJlYzI0YTQzODU4LzYyZjkyOTBlLTkwNWItNDM4NC1hMDNmLWZiZWMyNGE0 Mzg1OC5jcmwwHwYDVR0jBBgwFoAU3KRHHf5OfHHIQDtzYK8GU+EkT98wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82MmY5MjkwZS05MDViLTQzODQtYTAzZi1mYmVj MjRhNDM4NTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgICeDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCYYLMcVyMjDnJKlvKkVcAN1nERWAoIgdmswQlLA68z15mKAsrDdFCB eLyLKJfOJq/8aUK3h8CcTBnl71PiEvxNMesb/jv6w+Z2QSdofegcCPzXBkDFJ1jS vYtMoEnsYQidRF+03dTOZaaNFf1pZuNkwHMVrUmyaRuFkZieYJuL9uXyy1GWNCRB 0bBdf+kFRshozXRMCQdpybtD+jpqRqstMkg7qn6aKWWvJCD++jvUIP9d4bJI+YHI IPFDynwZ/6YFWBKn6cWUWS3y2GpZfixdHVaSYGRq/QPPBbQfl6vCfp3MlR4/BnLW 0HD2ASjCVmy8pdBpfaHkrEPqrz8nevRU -----END CERTIFICATE-----Generated at Mon Nov 25 03:30:06 2024 by rpki-client on console-fra.rpki-client.org