$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/76d101bd-4a94-3580-b17f-bb5950fdbf72.roa File: 76d101bd-4a94-3580-b17f-bb5950fdbf72.roa (raw, json) Hash identifier: w5IkPhWuTmwDGxWnuSV298/2hNzJrFVA8DAgQpt6UVA= Subject key identifier: 5C:8F:1C:06:7D:BA:B0:8A:CC:24:45:FD:42:7C:CB:25:E1:37:32:97 Certificate issuer: /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Certificate serial: 010D0C9F432858479EF9A2E0D8E9EF8DBF055150 Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/76d101bd-4a94-3580-b17f-bb5950fdbf72.roa Signing time: Tue 22 Oct 2024 02:00:39 +0000 ROA not before: Tue 22 Oct 2024 02:00:39 +0000 ROA not after: Mon 20 Jan 2025 03:00:39 +0000 asID: 401416 IP address blocks: 2607:dd40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Oct 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9e:f9:a2:e0:d8:e9:ef:8d:bf:05:51:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Validity Not Before: Oct 22 02:00:39 2024 GMT Not After : Jan 20 03:00:39 2025 GMT Subject: CN=ebf12b82-bb28-46f0-a035-806977a69955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:92:fa:8d:43:13:99:8c:7c:eb:4c:2d:e7:0a: 94:9f:64:4a:0b:70:83:54:20:bd:e0:d3:c8:12:ca: 75:c7:6a:6f:8c:8b:ee:bc:04:90:cc:30:06:92:11: 6a:b5:ba:18:8d:c1:c0:99:e8:41:75:12:6b:c1:b5: ce:45:0f:84:50:ae:0e:30:1a:cc:34:f9:14:84:9e: fe:ed:6e:0c:88:8e:ae:a3:bb:3a:2e:e4:bf:a3:d8: ff:ef:d9:75:59:1c:86:50:82:09:58:a1:9e:9a:5f: 28:62:ed:3e:06:8d:2e:9c:a7:f6:0f:42:5c:f6:e1: 5c:9c:94:cd:d7:35:b4:5f:ad:19:76:07:60:27:4c: 1d:ca:57:3b:29:89:f5:72:b1:74:48:83:a2:2a:23: fe:85:5d:25:ea:62:95:93:ec:65:1e:55:2d:a1:e2: af:59:4b:4b:1b:39:8b:bf:6f:29:ba:52:be:c2:b9: f1:27:c8:7a:5d:b0:91:81:46:55:10:52:a8:11:5a: 6b:97:8b:eb:68:65:30:8e:96:52:af:55:46:fb:cb: b3:41:09:b1:27:10:6b:b6:f7:0d:72:2e:c4:11:c3: b5:5b:cc:14:ca:db:d8:65:52:cf:ce:ac:fa:82:6a: d2:5a:91:b7:f6:9d:7d:8e:e6:2f:9e:e0:c9:3b:8e: 2e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8F:1C:06:7D:BA:B0:8A:CC:24:45:FD:42:7C:CB:25:E1:37:32:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/76d101bd-4a94-3580-b17f-bb5950fdbf72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl X509v3 Authority Key Identifier: keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer sbgp-ipAddrBlock: critical IPv6: 2607:dd40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:6d:67:b2:99:cb:45:6a:53:bd:78:f3:ef:3f:7a:47:56:74: cc:43:d6:63:ce:b1:a8:36:34:36:ca:5c:d8:9b:d0:17:53:d5: 4f:f8:6b:9c:4a:41:ff:3d:21:38:07:96:e2:79:5e:bd:f5:06: 77:bd:13:a2:32:f2:08:4b:c4:de:c9:bd:76:c3:4a:03:5a:7a: 93:ed:ca:cc:29:9e:92:a2:0c:96:fd:74:3d:ff:dd:42:cd:a6: 1d:a4:b3:ef:27:17:7b:32:fe:10:32:46:10:83:1d:e7:c8:08: a8:a0:7c:53:22:d8:42:9b:1d:cc:e2:09:1b:64:0c:30:d1:f8: 50:ff:c1:d2:a5:24:67:aa:a6:b0:ea:cc:c2:41:a8:32:c5:29: ca:35:5c:17:6e:d9:b3:3c:53:4d:89:2b:a7:cc:ba:d5:cb:a8: 50:16:5d:eb:dd:da:71:3d:94:01:42:ce:89:2d:ca:ff:68:d7: fc:3e:db:6e:51:11:14:42:46:59:26:9e:30:14:25:c0:ca:5e: 64:c4:59:df:98:9b:e5:fb:fc:eb:de:2d:fc:cf:24:47:54:61: 8f:00:fa:6e:67:4c:1b:65:f1:b4:b6:6a:e3:fe:e6:f0:b9:1b: f1:44:c5:6b:bb:db:30:8a:e4:0c:85:d5:64:df:a3:57:ba:c1: ec:b9:5f:92 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEee+aLg2Onvjb8FUVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkM2MzMDQtNjE5ZC00ZTZkLWFlZDUtOWUyNTE2NWNi YzczMB4XDTI0MTAyMjAyMDAzOVoXDTI1MDEyMDAzMDAzOVowLzEtMCsGA1UEAxMk ZWJmMTJiODItYmIyOC00NmYwLWEwMzUtODA2OTc3YTY5OTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpL6jUMTmYx860wt5wqUn2RKC3CDVCC94NPI Esp1x2pvjIvuvASQzDAGkhFqtboYjcHAmehBdRJrwbXORQ+EUK4OMBrMNPkUhJ7+ 7W4MiI6uo7s6LuS/o9j/79l1WRyGUIIJWKGeml8oYu0+Bo0unKf2D0Jc9uFcnJTN 1zW0X60ZdgdgJ0wdylc7KYn1crF0SIOiKiP+hV0l6mKVk+xlHlUtoeKvWUtLGzmL v28pulK+wrnxJ8h6XbCRgUZVEFKoEVprl4vraGUwjpZSr1VG+8uzQQmxJxBrtvcN ci7EEcO1W8wUytvYZVLPzqz6gmrSWpG39p19juYvnuDJO44ufQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFyPHAZ9urCKzCRF/UJ8yyXhNzKXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zM2Qz YzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1MTY1Y2JjNzMvNzZkMTAxYmQtNGE5NC0z NTgwLWIxN2YtYmI1OTUwZmRiZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzNkM2MzMDQtNjE5ZC00ZTZkLWFl ZDUtOWUyNTE2NWNiYzczLzMzZDNjMzA0LTYxOWQtNGU2ZC1hZWQ1LTllMjUxNjVj YmM3My5jcmwwHwYDVR0jBBgwFoAUjkoNtMfpM0cLNL0AOGQeSnjs4mowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zM2QzYzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1 MTY1Y2JjNzMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfdQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDQbWeymctFalO9ePPvP3pHVnTMQ9ZjzrGoNjQ2ylzYm9AXU9VP+Guc SkH/PSE4B5bieV699QZ3vROiMvIIS8Teyb12w0oDWnqT7crMKZ6SogyW/XQ9/91C zaYdpLPvJxd7Mv4QMkYQgx3nyAiooHxTIthCmx3M4gkbZAww0fhQ/8HSpSRnqqaw 6szCQagyxSnKNVwXbtmzPFNNiSunzLrVy6hQFl3r3dpxPZQBQs6JLcr/aNf8Pttu UREUQkZZJp4wFCXAyl5kxFnfmJvl+/zr3i38zyRHVGGPAPpuZ0wbZfG0tmrj/ubw uRvxRMVru9swiuQMhdVk36NXusHsuV+S -----END CERTIFICATE-----