$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/2535f4f4-8af4-3e4f-aa82-e950f1c67732.roa File: 2535f4f4-8af4-3e4f-aa82-e950f1c67732.roa (raw, json) Hash identifier: BGJof0rBhKmUw12OyhNLQvlmqG5YEvkFk61xnIHWLmE= Subject key identifier: 7E:FC:94:02:40:5E:B8:D0:0F:1D:A3:C5:8E:70:0D:8A:23:0D:DD:AE Certificate issuer: /CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af Certificate serial: 010D0C9F43285847F7407CFF5B35EF6FDB18BA00 Authority key identifier: EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/2535f4f4-8af4-3e4f-aa82-e950f1c67732.roa Signing time: Fri 22 Nov 2024 16:54:33 +0000 ROA not before: Fri 22 Nov 2024 16:54:33 +0000 ROA not after: Thu 20 Feb 2025 16:54:33 +0000 asID: 401507 IP address blocks: 2602:f78a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f7:40:7c:ff:5b:35:ef:6f:db:18:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af Validity Not Before: Nov 22 16:54:33 2024 GMT Not After : Feb 20 16:54:33 2025 GMT Subject: CN=20d8abb2-ee74-4a1f-9890-c9e36c874889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f7:b7:3b:52:3a:1d:82:fe:95:19:91:d9:6d: f9:67:eb:56:88:8c:bf:f2:b7:a4:ff:69:c8:49:74: 14:97:5b:01:92:14:9b:47:45:8e:bc:20:90:a4:e1: b1:31:ab:f3:d0:3b:2c:b3:39:f9:e0:3d:76:0a:24: 37:ff:f8:26:8b:50:e3:f7:82:65:cc:a8:16:ec:8c: 51:91:b7:da:fc:5b:bb:2d:c1:36:2e:58:1f:d9:b2: 62:2f:84:ba:9f:27:bd:c1:18:be:21:92:d7:5a:6e: 89:eb:18:67:42:ce:13:c7:75:87:ed:04:7c:e9:f9: 80:58:e1:2a:1b:af:ac:91:5f:36:fb:e5:1d:6c:4f: 14:54:d6:5d:77:e8:72:7b:2c:8f:22:6e:9f:7e:9d: e4:39:b0:c2:f3:31:c1:a1:f6:f5:90:01:71:ab:06: 0d:52:2c:ee:54:66:0c:90:73:6b:39:b0:1c:e2:0c: 7b:d7:f8:46:ac:f8:56:27:dc:dd:72:fb:16:81:3b: 7d:2d:95:6f:cb:e2:95:90:eb:38:8d:a1:47:d6:8c: c0:7e:ad:1f:8c:10:43:56:eb:42:fc:f4:11:b1:01: 9e:13:6d:fa:28:ee:17:8a:14:d1:68:03:31:26:31: 89:25:87:f9:d0:a7:91:5f:39:5a:60:9f:aa:2e:fc: b5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FC:94:02:40:5E:B8:D0:0F:1D:A3:C5:8E:70:0D:8A:23:0D:DD:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/2535f4f4-8af4-3e4f-aa82-e950f1c67732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.crl X509v3 Authority Key Identifier: keyid:EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer sbgp-ipAddrBlock: critical IPv6: 2602:f78a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:6e:44:86:61:ab:5d:88:f4:6a:5c:87:b7:c0:c4:64:e4:bb: 6d:f0:b7:69:f9:29:7d:db:31:e2:82:71:63:e8:a2:90:df:ec: 0e:b1:c6:f5:88:77:f9:a6:b8:c4:78:c1:89:6d:85:af:83:b0: 2f:26:c9:db:79:ed:15:a9:da:94:9d:d4:a3:05:99:ba:dd:13: 17:72:54:3f:2b:1e:77:ab:f6:46:f6:5e:49:50:6e:ea:9c:2f: 89:06:a2:f1:67:49:3d:2f:78:8f:fc:cc:c7:eb:9d:65:1b:33: 2c:0e:76:44:fd:f5:a4:5f:a2:15:1f:33:d1:2e:46:18:5c:7b: af:47:34:c2:18:45:fb:d3:60:f0:40:79:0f:85:cf:0f:d5:a3: 1e:3d:3e:49:5a:8b:1b:82:56:85:e3:48:2a:b9:8e:e1:7b:da: 9b:e2:92:f2:d7:81:eb:a6:48:68:72:31:9a:ff:aa:26:0e:c8: c0:f9:0c:71:36:ac:16:26:df:91:9a:31:01:b0:3e:10:45:17: 49:9b:1e:37:cc:c3:63:cb:8f:62:df:cf:2e:a9:27:df:42:77: 79:56:0b:bf:59:a5:0c:8b:00:a4:37:5a:1a:ee:74:3e:90:a2: 66:99:2f:ca:eb:45:71:71:82:05:29:3d:54:db:b0:1d:11:e2: 52:3e:94:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEf3QHz/WzXvb9sYugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFlMzdmNWItY2ZlMi00YWVkLTg2MTYtOTk5N2QzZjJm MGFmMB4XDTI0MTEyMjE2NTQzM1oXDTI1MDIyMDE2NTQzM1owLzEtMCsGA1UEAxMk MjBkOGFiYjItZWU3NC00YTFmLTk4OTAtYzllMzZjODc0ODg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/e3O1I6HYL+lRmR2W35Z+tWiIy/8rek/2nI SXQUl1sBkhSbR0WOvCCQpOGxMavz0Dssszn54D12CiQ3//gmi1Dj94JlzKgW7IxR kbfa/Fu7LcE2Llgf2bJiL4S6nye9wRi+IZLXWm6J6xhnQs4Tx3WH7QR86fmAWOEq G6+skV82++UdbE8UVNZdd+hyeyyPIm6ffp3kObDC8zHBofb1kAFxqwYNUizuVGYM kHNrObAc4gx71/hGrPhWJ9zdcvsWgTt9LZVvy+KVkOs4jaFH1ozAfq0fjBBDVutC /PQRsQGeE236KO4XihTRaAMxJjGJJYf50KeRXzlaYJ+qLvy1WQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH78lAJAXrjQDx2jxY5wDYojDd2uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYWUz N2Y1Yi1jZmUyLTRhZWQtODYxNi05OTk3ZDNmMmYwYWYvMjUzNWY0ZjQtOGFmNC0z ZTRmLWFhODItZTk1MGYxYzY3NzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmFlMzdmNWItY2ZlMi00YWVkLTg2 MTYtOTk5N2QzZjJmMGFmL2JhZTM3ZjViLWNmZTItNGFlZC04NjE2LTk5OTdkM2Yy ZjBhZi5jcmwwHwYDVR0jBBgwFoAU61+QtmDWCOe68zylk+CiekPL5yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYWUzN2Y1Yi1jZmUyLTRhZWQtODYxNi05OTk3 ZDNmMmYwYWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3igAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADhuRIZhq12I9Gpch7fAxGTku23wt2n5KX3bMeKCcWPoopDf7A6x xvWId/mmuMR4wYltha+DsC8mydt57RWp2pSd1KMFmbrdExdyVD8rHner9kb2XklQ buqcL4kGovFnST0veI/8zMfrnWUbMywOdkT99aRfohUfM9EuRhhce69HNMIYRfvT YPBAeQ+Fzw/Vox49PklaixuCVoXjSCq5juF72pvikvLXgeumSGhyMZr/qiYOyMD5 DHE2rBYm35GaMQGwPhBFF0mbHjfMw2PLj2Lfzy6pJ99Cd3lWC79ZpQyLAKQ3Whru dD6QomaZL8rrRXFxggUpPVTbsB0R4lI+lGo= -----END CERTIFICATE-----Generated at Sat Nov 23 16:10:52 2024 by rpki-client on console-fra.rpki-client.org