$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/5aff0123-c654-3a1d-bbad-1e7208a52d23.roa File: 5aff0123-c654-3a1d-bbad-1e7208a52d23.roa (raw, json) Hash identifier: +JrolZ8RDgMoHhHI5YL0s3UOzNCR+qEJEvZ0vhU/h3c= Subject key identifier: F3:F2:66:4B:E8:26:E3:DF:3D:40:35:90:AC:BB:64:0C:DB:E3:3D:BB Certificate issuer: /CN=0f950b17-8345-41e7-bf75-5481729a0012 Certificate serial: 010D0C9F43285847B3CC110D5B5D0EAEC98CDD89 Authority key identifier: 56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/5aff0123-c654-3a1d-bbad-1e7208a52d23.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 32723 IP address blocks: 2607:2040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:11:0d:5b:5d:0e:ae:c9:8c:dd:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f950b17-8345-41e7-bf75-5481729a0012 Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=8074dc5a-3c27-4b3d-8a56-5072b42f32ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6a:d5:99:24:80:ea:b2:e2:bd:2e:68:97:e3: 45:b2:95:86:16:e8:59:13:60:f4:1b:6b:5e:26:cc: 59:07:a0:42:98:b0:67:af:39:91:b8:92:50:51:3f: e1:67:91:f0:d3:35:31:0a:61:6b:53:c7:c1:57:d6: e7:1a:d8:44:10:c1:bb:14:b6:c7:7a:86:e3:9b:c0: 75:a0:1f:b6:29:72:44:40:c5:ec:d7:df:c0:fd:80: 2a:3e:69:79:43:41:30:e8:f2:84:1f:5a:c9:d4:06: e1:f9:43:83:65:ae:b1:66:83:1b:e8:8f:f2:4b:9c: c5:47:c2:25:da:43:c7:cc:1c:2e:df:15:3a:0f:ce: 0b:9f:69:94:12:05:67:c2:68:df:83:af:72:1f:09: 4b:bc:9b:73:b4:99:91:70:9f:ee:63:e8:5b:f4:61: c8:e3:77:de:a7:49:f7:32:0f:35:6d:4e:71:15:fe: 5b:bd:0e:84:7f:92:16:06:54:fc:1e:3e:11:13:5d: c4:f1:a5:3d:fa:31:83:7e:fd:8d:c1:e7:4f:96:3f: 4f:6d:3c:ab:ba:a8:21:6b:2c:fe:6d:7f:84:9d:b1: 04:07:c3:ec:b1:94:26:d0:d7:65:be:b5:e1:9e:26: cc:2e:39:81:dc:05:01:1e:44:9d:f7:e3:20:2c:2a: 40:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F2:66:4B:E8:26:E3:DF:3D:40:35:90:AC:BB:64:0C:DB:E3:3D:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/5aff0123-c654-3a1d-bbad-1e7208a52d23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl X509v3 Authority Key Identifier: keyid:56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer sbgp-ipAddrBlock: critical IPv6: 2607:2040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:07:05:3d:d9:89:b3:10:19:cb:90:ec:99:e1:51:3b:ed:e0: 1a:41:b5:10:e3:97:c8:65:70:db:84:42:d2:5d:2d:01:cf:9e: 4f:b0:c1:3a:77:d6:e9:98:58:ca:cf:5d:67:84:8b:a7:c8:e7: d7:a1:20:f1:c1:c1:75:9e:07:91:ff:01:e7:97:c1:3b:b8:c7: 95:84:1f:f8:22:1a:a7:9c:74:c1:11:03:6c:8b:b3:e2:f0:34: 14:e1:98:52:b5:6f:a0:6e:e3:e6:85:86:91:df:d5:eb:a3:03: 2f:87:31:a4:37:41:46:b1:d2:1c:65:3e:b5:f9:aa:07:24:a5: 5c:c0:fd:2f:38:6b:18:40:ff:f8:1c:29:8b:a9:86:32:1c:7b: b5:c1:20:06:2d:76:19:a9:10:db:01:ac:9d:f4:60:40:b9:c9: 9a:f6:35:8a:31:66:bc:eb:1a:b8:d5:52:6d:48:25:86:df:b2: 49:fd:26:5f:d6:ad:5a:05:db:d6:35:85:20:d8:8a:7b:fd:59: 0e:03:8a:29:7e:27:c4:4e:db:c0:de:f1:59:2a:49:d9:35:d4: 99:95:ec:df:ee:aa:3e:93:3c:1c:8b:f9:32:b9:00:ad:69:15: 36:38:cf:66:a0:ea:e5:36:fe:59:78:ec:0c:71:26:d0:17:ee: 18:7d:63:42 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEezzBENW10OrsmM3YkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY5NTBiMTctODM0NS00MWU3LWJmNzUtNTQ4MTcyOWEw MDEyMB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk ODA3NGRjNWEtM2MyNy00YjNkLThhNTYtNTA3MmI0MmYzMmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGrVmSSA6rLivS5ol+NFspWGFuhZE2D0G2te JsxZB6BCmLBnrzmRuJJQUT/hZ5Hw0zUxCmFrU8fBV9bnGthEEMG7FLbHeobjm8B1 oB+2KXJEQMXs19/A/YAqPml5Q0Ew6PKEH1rJ1Abh+UODZa6xZoMb6I/yS5zFR8Il 2kPHzBwu3xU6D84Ln2mUEgVnwmjfg69yHwlLvJtztJmRcJ/uY+hb9GHI43fep0n3 Mg81bU5xFf5bvQ6Ef5IWBlT8Hj4RE13E8aU9+jGDfv2NwedPlj9PbTyruqghayz+ bX+EnbEEB8PssZQm0NdlvrXhnibMLjmB3AUBHkSd9+MgLCpAHwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPPyZkvoJuPfPUA1kKy7ZAzb4z27MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1 MGIxNy04MzQ1LTQxZTctYmY3NS01NDgxNzI5YTAwMTIvNWFmZjAxMjMtYzY1NC0z YTFkLWJiYWQtMWU3MjA4YTUyZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGY5NTBiMTctODM0NS00MWU3LWJm NzUtNTQ4MTcyOWEwMDEyLzBmOTUwYjE3LTgzNDUtNDFlNy1iZjc1LTU0ODE3Mjlh MDAxMi5jcmwwHwYDVR0jBBgwFoAUVjwr/D78tHnEgtdq3t5zMLCztmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1MGIxNy04MzQ1LTQxZTctYmY3NS01NDgx NzI5YTAwMTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcgQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCYBwU92YmzEBnLkOyZ4VE77eAaQbUQ45fIZXDbhELSXS0Bz55PsME6 d9bpmFjKz11nhIunyOfXoSDxwcF1ngeR/wHnl8E7uMeVhB/4IhqnnHTBEQNsi7Pi 8DQU4ZhStW+gbuPmhYaR39XrowMvhzGkN0FGsdIcZT61+aoHJKVcwP0vOGsYQP/4 HCmLqYYyHHu1wSAGLXYZqRDbAayd9GBAucma9jWKMWa86xq41VJtSCWG37JJ/SZf 1q1aBdvWNYUg2Ip7/VkOA4opfifETtvA3vFZKknZNdSZlezf7qo+kzwci/kyuQCt aRU2OM9moOrlNv5ZeOwMcSbQF+4YfWNC -----END CERTIFICATE-----Generated at Sun Nov 24 16:05:10 2024 by rpki-client on console-ams.rpki-client.org