$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa File: 519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa (raw, json) Hash identifier: DfzgEO6QbkyMsWrf21rP0llfiyrnMaRxUbLZg9SsLkM= Subject key identifier: EC:E4:EF:79:2F:95:C7:66:B4:2D:4B:46:71:9A:11:65:ED:EE:5A:6D Certificate issuer: /CN=f95a39d1-400d-423a-89c4-37f7f1a145f2 Certificate serial: 010D0C9F43285847CD6A36718E68F40D34165500 Authority key identifier: 45:8E:89:B4:32:05:8D:58:19:8A:7F:23:01:4B:F6:1F:1D:CD:44:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa Signing time: Thu 07 Nov 2024 17:14:40 +0000 ROA not before: Thu 07 Nov 2024 17:14:40 +0000 ROA not after: Wed 05 Feb 2025 17:14:40 +0000 asID: 399844 IP address blocks: 2620:68:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:cd:6a:36:71:8e:68:f4:0d:34:16:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f95a39d1-400d-423a-89c4-37f7f1a145f2 Validity Not Before: Nov 7 17:14:40 2024 GMT Not After : Feb 5 17:14:40 2025 GMT Subject: CN=2048aade-67d0-4e45-b287-764cc26e2c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ac:3b:a3:b4:d9:cd:b9:13:a2:ac:d2:62:03: 0a:21:b0:4a:d5:d1:13:43:c5:6a:76:8f:58:0b:5c: 96:aa:30:3d:e3:5d:43:91:07:48:e2:31:35:e3:87: 1b:b2:a7:c9:73:cc:35:88:e1:8b:d6:82:7f:cf:ee: 11:6e:1e:8d:7c:46:8d:34:2e:a7:85:bb:e6:1b:26: e6:a7:44:0c:57:1a:5b:14:98:43:60:e3:76:33:30: a2:87:27:29:69:95:e5:51:f6:88:24:c4:12:71:45: f5:7c:33:18:c7:51:1d:d2:b5:33:9d:7c:e0:48:f0: f8:53:b0:f7:1b:aa:39:42:aa:6c:de:d1:bc:35:62: f4:37:b3:74:ff:33:b2:d6:34:31:8c:2f:71:9e:a9: 0a:fb:2c:ac:8b:bf:1b:e3:e1:53:bc:4f:43:0f:0c: e5:47:37:79:61:9d:a0:b4:2c:d9:ff:dc:7b:ce:dc: 42:85:a1:6d:bc:4d:be:b3:3b:f8:34:0e:f7:d5:36: d0:b3:c6:c5:74:fc:37:67:69:72:00:8d:14:7e:41: 7f:5b:4c:1d:e8:d6:fe:37:99:38:c4:82:c9:97:12: 06:ba:b2:3f:f2:b3:f3:fc:38:40:3a:3c:a7:1e:1e: e5:47:37:16:a4:b5:d6:a2:32:87:f0:6e:6b:e5:ab: ad:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E4:EF:79:2F:95:C7:66:B4:2D:4B:46:71:9A:11:65:ED:EE:5A:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.crl X509v3 Authority Key Identifier: keyid:45:8E:89:B4:32:05:8D:58:19:8A:7F:23:01:4B:F6:1F:1D:CD:44:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer sbgp-ipAddrBlock: critical IPv6: 2620:68:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:86:f5:b3:08:ec:cc:86:df:7c:9e:40:a4:dd:3c:37:f6:f6: e4:a0:e3:1e:16:bc:b9:18:ae:fa:59:fb:ef:5e:a9:1e:31:20: fa:51:d2:3f:d1:62:f3:6e:33:4f:bd:dd:86:a8:4c:56:f9:2b: 46:1d:61:e3:86:00:7a:ae:bf:f3:7d:7c:bf:77:19:88:91:00: 32:c0:6f:53:d5:ba:54:a1:40:c5:2d:52:b8:b4:8d:fd:8f:38: 9c:a2:2d:38:2d:42:6e:fc:db:87:07:b9:c3:18:3c:9a:5f:71: 50:50:fd:ed:0e:45:ce:6b:d5:48:ad:89:d3:6b:1f:78:cb:4f: fa:eb:b0:3f:b7:70:af:22:ae:bc:05:8d:22:f8:e8:c2:75:55: 1a:f2:84:52:b4:cc:81:3a:cb:7e:8f:22:64:1f:54:8c:a4:34: 2c:e3:3f:b2:a1:21:b2:00:0f:70:d6:8e:ca:c2:27:74:c3:43: b8:f8:74:de:f0:33:03:9d:20:11:68:09:ef:0f:79:d0:94:69: bf:46:db:b8:19:1a:c0:63:2b:c5:07:b5:12:35:e9:7d:63:d8: 40:19:02:44:f6:d8:12:61:57:af:02:d7:12:d4:38:a6:ef:a4: 97:b0:5d:29:40:2c:26:1c:e2:47:ad:04:57:2d:62:4b:d2:b7: ea:06:0a:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfNajZxjmj0DTQWVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1YTM5ZDEtNDAwZC00MjNhLTg5YzQtMzdmN2YxYTE0 NWYyMB4XDTI0MTEwNzE3MTQ0MFoXDTI1MDIwNTE3MTQ0MFowLzEtMCsGA1UEAxMk MjA0OGFhZGUtNjdkMC00ZTQ1LWIyODctNzY0Y2MyNmUyYzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaw7o7TZzbkToqzSYgMKIbBK1dETQ8Vqdo9Y C1yWqjA9411DkQdI4jE144cbsqfJc8w1iOGL1oJ/z+4Rbh6NfEaNNC6nhbvmGybm p0QMVxpbFJhDYON2MzCihycpaZXlUfaIJMQScUX1fDMYx1Ed0rUznXzgSPD4U7D3 G6o5Qqps3tG8NWL0N7N0/zOy1jQxjC9xnqkK+yysi78b4+FTvE9DDwzlRzd5YZ2g tCzZ/9x7ztxChaFtvE2+szv4NA731TbQs8bFdPw3Z2lyAI0UfkF/W0wd6Nb+N5k4 xILJlxIGurI/8rPz/DhAOjynHh7lRzcWpLXWojKH8G5r5autFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOzk73kvlcdmtC1LRnGaEWXt7lptMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTVh MzlkMS00MDBkLTQyM2EtODljNC0zN2Y3ZjFhMTQ1ZjIvNTE5ZWQxY2YtZGE3Yy0z ZjgwLWFiZDEtZDhlNGFkOWQ4Nzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1YTM5ZDEtNDAwZC00MjNhLTg5 YzQtMzdmN2YxYTE0NWYyL2Y5NWEzOWQxLTQwMGQtNDIzYS04OWM0LTM3ZjdmMWEx NDVmMi5jcmwwHwYDVR0jBBgwFoAURY6JtDIFjVgZin8jAUv2Hx3NRHUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTVhMzlkMS00MDBkLTQyM2EtODljNC0zN2Y3 ZjFhMTQ1ZjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAaCAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJeG9bMI7MyG33yeQKTdPDf29uSg4x4WvLkYrvpZ++9eqR4xIPpR 0j/RYvNuM0+93YaoTFb5K0YdYeOGAHquv/N9fL93GYiRADLAb1PVulShQMUtUri0 jf2POJyiLTgtQm7824cHucMYPJpfcVBQ/e0ORc5r1UitidNrH3jLT/rrsD+3cK8i rrwFjSL46MJ1VRryhFK0zIE6y36PImQfVIykNCzjP7KhIbIAD3DWjsrCJ3TDQ7j4 dN7wMwOdIBFoCe8PedCUab9G27gZGsBjK8UHtRI16X1j2EAZAkT22BJhV68C1xLU OKbvpJewXSlALCYc4ketBFctYkvSt+oGCtI= -----END CERTIFICATE-----Generated at Fri Nov 22 02:37:35 2024 by rpki-client on console-fra.rpki-client.org