$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/41cb8e23-5c24-31ab-b10c-5a8f453e6889.roa File: 41cb8e23-5c24-31ab-b10c-5a8f453e6889.roa (raw, json) Hash identifier: qifk9zipMuzvMOVIazNMx27niC4rDNKZzLX4Gzc9OEs= Subject key identifier: 3C:81:D7:34:A9:E9:84:AB:FB:35:1F:A0:33:FF:B5:D9:52:65:E8:4D Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847D4048F3FE47ED866A2984480 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/41cb8e23-5c24-31ab-b10c-5a8f453e6889.roa Signing time: Sun 10 Nov 2024 02:00:27 +0000 ROA not before: Sun 10 Nov 2024 02:00:27 +0000 ROA not after: Sat 08 Feb 2025 02:00:27 +0000 asID: 852 IP address blocks: 2001:56b:9f0e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d4:04:8f:3f:e4:7e:d8:66:a2:98:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 10 02:00:27 2024 GMT Not After : Feb 8 02:00:27 2025 GMT Subject: CN=0df6764b-d3f8-4b60-b067-3026fba12779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:6f:af:96:a8:93:97:23:2f:d0:ee:05:50:f6: 75:93:38:42:ba:c0:52:3a:49:50:1c:51:0b:b9:27: d5:0e:34:5d:b1:79:e9:33:49:9a:d2:7e:1a:b9:b6: 7e:43:5d:3f:49:7b:8b:44:23:7c:11:f4:79:6c:71: 1c:57:ba:ab:83:f3:4c:a9:dd:2c:a3:54:2b:81:cb: 4c:f5:dc:49:c0:ec:ad:83:23:b7:1f:8f:70:86:c9: a5:6c:d2:07:57:02:a7:3f:63:fc:d7:75:2d:bc:c2: f5:72:f8:13:ee:8b:7e:19:78:ab:30:c3:06:4b:14: 3c:88:7b:97:97:5a:ee:ab:e9:70:31:7b:b6:29:6f: 84:14:a1:ab:7c:08:6d:b8:69:f6:55:a4:8a:01:ce: b8:21:da:69:93:ce:32:84:c8:1a:34:39:3e:32:31: 76:9b:c4:3c:43:d9:2b:86:9a:76:a0:ec:3b:3f:aa: 72:8f:ab:cb:da:bd:ac:cd:48:07:1a:b3:67:5e:e9: db:56:38:6b:9b:48:d0:8c:83:43:b2:b8:07:56:1b: 04:23:e5:e3:03:e7:c3:ad:c2:cc:a8:cd:0a:2c:6f: 16:fd:e0:88:91:a9:f3:38:d5:a5:a3:47:94:dc:e4: ff:a9:3f:07:df:06:41:ff:25:93:e8:6a:6e:dd:19: 1c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:81:D7:34:A9:E9:84:AB:FB:35:1F:A0:33:FF:B5:D9:52:65:E8:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/41cb8e23-5c24-31ab-b10c-5a8f453e6889.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56b:9f0e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:c9:58:ec:db:25:d3:c1:48:0b:fa:c5:2f:e8:ef:59:c9:56: a9:08:d0:cc:0a:9f:77:c9:35:ad:6b:e6:d7:b0:2f:f1:70:f4: 0e:e3:c6:de:04:ca:25:8a:73:16:bb:78:07:cc:0a:40:b3:50: b7:e0:11:a9:75:da:e5:83:55:2b:35:08:0c:82:ae:17:48:47: c1:73:d7:04:d6:a0:06:68:20:fb:67:5c:be:c7:84:8e:46:b3: fc:6f:b7:08:24:f9:65:31:c8:98:4a:81:a0:60:ad:14:8f:93: 24:d3:3a:9f:62:87:63:a3:c1:45:8c:dc:88:08:42:25:99:b5: a9:b2:22:d1:54:97:6a:81:08:e0:e4:2e:a3:4b:5b:5d:45:5d: 4b:37:67:8e:48:86:a1:f7:f4:0f:65:7f:62:a6:48:91:cf:ba: d1:a3:89:1a:59:26:72:33:bd:5b:be:0a:08:94:30:2e:b7:d0: 5c:23:8e:ea:61:89:e6:25:2b:85:99:2d:8d:f3:5d:a5:89:87: 12:02:5f:1d:21:31:f8:96:65:c5:42:c1:15:ac:10:f1:ed:68: 4f:98:98:c6:80:5b:03:ec:c3:81:79:a3:59:a5:15:be:9f:75: 30:90:62:30:0e:36:51:93:73:0d:ea:4e:06:dc:ff:c8:71:a3: 7f:c2:1d:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfUBI8/5H7YZqKYRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTExMDAyMDAyN1oXDTI1MDIwODAyMDAyN1owLzEtMCsGA1UEAxMk MGRmNjc2NGItZDNmOC00YjYwLWIwNjctMzAyNmZiYTEyNzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8m+vlqiTlyMv0O4FUPZ1kzhCusBSOklQHFEL uSfVDjRdsXnpM0ma0n4aubZ+Q10/SXuLRCN8EfR5bHEcV7qrg/NMqd0so1QrgctM 9dxJwOytgyO3H49whsmlbNIHVwKnP2P813UtvML1cvgT7ot+GXirMMMGSxQ8iHuX l1ruq+lwMXu2KW+EFKGrfAhtuGn2VaSKAc64Idppk84yhMgaNDk+MjF2m8Q8Q9kr hpp2oOw7P6pyj6vL2r2szUgHGrNnXunbVjhrm0jQjINDsrgHVhsEI+XjA+fDrcLM qM0KLG8W/eCIkanzONWlo0eU3OT/qT8H3wZB/yWT6Gpu3RkcnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDyB1zSp6YSr+zUfoDP/tdlSZehNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDFjYjhlMjMtNWMyNC0z MWFiLWIxMGMtNWE4ZjQ1M2U2ODg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFa58O MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMzJWOzbJdPBSAv6xS/o71nJVqkI0MwKn3fJNa1r5tewL/Fw9A7j xt4EyiWKcxa7eAfMCkCzULfgEal12uWDVSs1CAyCrhdIR8Fz1wTWoAZoIPtnXL7H hI5Gs/xvtwgk+WUxyJhKgaBgrRSPkyTTOp9ih2OjwUWM3IgIQiWZtamyItFUl2qB CODkLqNLW11FXUs3Z45IhqH39A9lf2KmSJHPutGjiRpZJnIzvVu+CgiUMC630Fwj juphieYlK4WZLY3zXaWJhxICXx0hMfiWZcVCwRWsEPHtaE+YmMaAWwPsw4F5o1ml Fb6fdTCQYjAONlGTcw3qTgbc/8hxo3/CHRM= -----END CERTIFICATE-----Generated at Fri Nov 22 06:59:56 2024 by rpki-client on console-fra.rpki-client.org