$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa File: d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa (raw, json) Hash identifier: e7KFukhudqoEVqRPWHb4X2aSjKq7BaCnmg8P8/9mCmg= Subject key identifier: EE:24:F4:58:9A:93:2F:5A:3A:59:51:79:D1:07:42:30:75:96:22:79 Certificate issuer: /CN=3878fd50-eae1-4b38-a142-8eff8910579b Certificate serial: 010D0C9F43285847DAFF5E9AC8DE39DCD02D3F00 Authority key identifier: 40:C5:C3:67:52:AA:6D:D6:3D:34:E0:AE:33:29:E3:75:C3:86:A8:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa Signing time: Tue 12 Nov 2024 14:00:40 +0000 ROA not before: Tue 12 Nov 2024 14:00:40 +0000 ROA not after: Mon 10 Feb 2025 14:00:40 +0000 asID: 14807 IP address blocks: 2607:b7c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:da:ff:5e:9a:c8:de:39:dc:d0:2d:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3878fd50-eae1-4b38-a142-8eff8910579b Validity Not Before: Nov 12 14:00:40 2024 GMT Not After : Feb 10 14:00:40 2025 GMT Subject: CN=bedfb4b5-cbc6-4721-81bf-3db17e479bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fe:87:d0:fa:2c:25:82:ef:54:51:05:4e:cd: 22:d5:c6:7b:14:41:40:b2:a7:f0:04:3c:63:b8:f5: e2:54:c3:8a:ca:46:5f:de:7c:fb:a4:02:33:f5:09: 66:5e:db:82:5d:4e:d7:5f:55:72:fa:ba:3b:fd:ad: cd:4c:39:4d:a3:16:28:ec:63:92:24:58:cb:03:b6: 84:13:ad:79:40:3f:05:02:72:a7:ce:cd:7b:90:67: ac:5b:4b:c0:81:ab:10:be:0a:95:19:a0:a3:95:82: 52:c7:5d:f8:01:b5:7d:63:4b:b3:24:86:4f:4e:60: 7a:9e:d7:25:cf:a0:f1:7e:b9:7d:56:63:28:3a:1b: 5f:5e:c2:e2:5c:b6:c4:1a:0d:fe:2a:db:99:6c:d9: 62:71:a2:3e:0d:ac:53:1e:1d:c2:c4:19:54:5e:a0: e5:5b:2f:5f:d0:22:3c:b1:45:bd:5c:89:71:81:e4: 6b:47:03:d8:91:c8:eb:64:ee:b6:32:75:a9:7b:31: fc:cd:8d:5f:2e:92:1d:4c:3d:ca:00:bd:b6:a8:c4: ad:9b:42:d0:8c:09:5c:e5:ba:c6:6f:cf:cc:ad:f1: 00:87:b6:7e:13:42:03:40:df:ec:d5:ea:ef:a2:cc: aa:a6:8e:81:25:73:de:39:e5:52:e2:6e:fd:9d:f3: ec:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:24:F4:58:9A:93:2F:5A:3A:59:51:79:D1:07:42:30:75:96:22:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.crl X509v3 Authority Key Identifier: keyid:40:C5:C3:67:52:AA:6D:D6:3D:34:E0:AE:33:29:E3:75:C3:86:A8:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer sbgp-ipAddrBlock: critical IPv6: 2607:b7c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:a9:88:70:dc:66:7c:d6:e4:ad:87:94:dd:8f:25:6f:3f:ce: 42:b3:68:00:a0:28:bd:3a:74:83:f5:c2:28:6d:12:55:b6:75: 22:1d:2a:0d:de:46:4c:8a:c7:60:41:cd:cc:4d:69:ad:39:25: e8:0f:e5:f8:90:98:f7:2f:a0:ba:96:08:12:f5:ab:22:15:47: c7:0b:3a:dd:b4:8e:50:6d:30:aa:7b:cc:7f:1b:87:0b:d7:34: 7f:e0:03:59:5b:00:6c:44:65:a4:11:6e:8f:b4:25:09:51:80: 14:d0:8d:f6:fe:bf:de:b5:9a:f1:ef:c3:2a:73:37:42:fa:f3: 7b:39:6b:d3:26:f1:c4:54:37:08:17:b6:b7:02:9f:b0:0a:4a: c1:bb:d9:7e:0a:d9:be:fc:c6:58:2e:6d:20:63:65:74:35:51: 7c:ff:e3:f2:46:59:5e:29:c3:42:52:4c:c3:ad:7f:e6:da:8d: 7c:8d:1e:49:cc:1b:4f:a7:68:29:a5:2e:2a:d0:00:b7:4d:64: bf:9d:7b:62:c6:50:f8:b7:77:c5:71:28:eb:d0:74:81:2d:2b: b8:7f:80:9b:a4:f9:5f:81:c8:1f:7d:9c:bd:c3:21:f4:c7:d6: 6c:9d:1a:b0:c7:c8:aa:2e:e0:c9:88:c8:f4:ab:a9:ca:21:a0: 4e:75:9a:55 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfa/16ayN453NAtPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg3OGZkNTAtZWFlMS00YjM4LWExNDItOGVmZjg5MTA1 NzliMB4XDTI0MTExMjE0MDA0MFoXDTI1MDIxMDE0MDA0MFowLzEtMCsGA1UEAxMk YmVkZmI0YjUtY2JjNi00NzIxLTgxYmYtM2RiMTdlNDc5YmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/6H0PosJYLvVFEFTs0i1cZ7FEFAsqfwBDxj uPXiVMOKykZf3nz7pAIz9QlmXtuCXU7XX1Vy+ro7/a3NTDlNoxYo7GOSJFjLA7aE E615QD8FAnKnzs17kGesW0vAgasQvgqVGaCjlYJSx134AbV9Y0uzJIZPTmB6ntcl z6Dxfrl9VmMoOhtfXsLiXLbEGg3+KtuZbNlicaI+DaxTHh3CxBlUXqDlWy9f0CI8 sUW9XIlxgeRrRwPYkcjrZO62MnWpezH8zY1fLpIdTD3KAL22qMStm0LQjAlc5brG b8/MrfEAh7Z+E0IDQN/s1ervosyqpo6BJXPeOeVS4m79nfPsSQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO4k9Fiaky9aOllRedEHQjB1liJ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zODc4 ZmQ1MC1lYWUxLTRiMzgtYTE0Mi04ZWZmODkxMDU3OWIvZDg4ZjE5ZGYtNzdmNS0z ZGM1LWE0OGEtOWIxNGM1YzllNzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzg3OGZkNTAtZWFlMS00YjM4LWEx NDItOGVmZjg5MTA1NzliLzM4NzhmZDUwLWVhZTEtNGIzOC1hMTQyLThlZmY4OTEw NTc5Yi5jcmwwHwYDVR0jBBgwFoAUQMXDZ1KqbdY9NOCuMynjdcOGqMEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zODc4ZmQ1MC1lYWUxLTRiMzgtYTE0Mi04ZWZm ODkxMDU3OWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJge3wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCfqYhw3GZ81uSth5TdjyVvP85Cs2gAoCi9OnSD9cIobRJVtnUiHSoN 3kZMisdgQc3MTWmtOSXoD+X4kJj3L6C6lggS9asiFUfHCzrdtI5QbTCqe8x/G4cL 1zR/4ANZWwBsRGWkEW6PtCUJUYAU0I32/r/etZrx78MqczdC+vN7OWvTJvHEVDcI F7a3Ap+wCkrBu9l+Ctm+/MZYLm0gY2V0NVF8/+PyRlleKcNCUkzDrX/m2o18jR5J zBtPp2gppS4q0AC3TWS/nXtixlD4t3fFcSjr0HSBLSu4f4CbpPlfgcgffZy9wyH0 x9ZsnRqwx8iqLuDJiMj0q6nKIaBOdZpV -----END CERTIFICATE-----Generated at Mon Nov 25 19:19:06 2024 by rpki-client on console-ams.rpki-client.org