$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/f49f0aa4-5b58-30cb-a1f3-d5e172e75f7c.roa File: f49f0aa4-5b58-30cb-a1f3-d5e172e75f7c.roa (raw, json) Hash identifier: p1hXdPjBW+3dE2VIfO7I6aAUCNZLIHJ6ajyR8+Q1hMY= Subject key identifier: 0E:A0:F6:00:10:1E:07:80:F8:E4:4B:55:60:E9:B0:FA:4A:28:74:A6 Certificate issuer: /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7 Certificate serial: 010D0C9F43285847BEF6D1C8990DB27EAE0FFE00 Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/f49f0aa4-5b58-30cb-a1f3-d5e172e75f7c.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 6315 IP address blocks: 2607:24c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f6:d1:c8:99:0d:b2:7e:ae:0f:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=485bbe85-0835-4b66-a0b6-ac9fc2c7961d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bf:74:f8:86:98:4a:d4:62:98:39:12:1c:e6: 3d:55:5f:1c:f1:27:e1:31:44:d7:f5:7d:8d:49:07: 9a:b7:a6:2e:8c:b7:10:68:46:91:44:4b:c2:07:3e: 92:3a:1f:a7:96:41:2c:ea:04:ba:97:5c:e9:7f:f0: e6:8b:80:36:65:51:11:2f:37:03:4a:d2:79:d4:99: 31:f0:a0:f7:38:70:89:c4:b1:31:77:6f:14:5a:de: 5f:03:b0:b7:2d:81:8f:3e:eb:54:69:75:36:fd:62: e9:db:0f:2a:bc:34:54:d6:d4:a7:89:80:1f:46:91: 5c:4a:da:c3:95:c9:04:95:66:d6:c7:07:40:98:c7: 7b:ee:39:54:03:15:70:5e:8f:05:d4:10:da:0e:c0: 01:67:2b:bd:bd:8f:ab:cd:56:d8:d1:2d:97:7b:57: 42:0a:2a:48:64:85:76:7d:54:53:34:cf:b1:3b:5e: e0:69:9c:c0:6a:63:25:71:fa:39:87:6e:2e:59:b1: a7:f6:56:2b:7f:e2:20:b2:c4:c9:20:70:d1:f2:c7: 55:01:9f:a7:02:57:2f:6a:df:e9:5c:12:fc:69:88: e4:bb:f3:99:c4:c8:aa:90:ef:0e:da:9e:02:65:8f: 9b:92:bf:38:9e:0a:c7:87:fc:d3:7e:f3:0e:4a:a1: 39:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A0:F6:00:10:1E:07:80:F8:E4:4B:55:60:E9:B0:FA:4A:28:74:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/f49f0aa4-5b58-30cb-a1f3-d5e172e75f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl X509v3 Authority Key Identifier: keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer sbgp-ipAddrBlock: critical IPv6: 2607:24c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:62:e1:9f:1b:f9:a9:c2:65:3a:b7:2d:16:46:82:5d:16:6c: 9b:a2:e7:45:d1:61:61:68:49:de:75:27:1b:28:0a:7d:d8:44: 41:c2:58:d1:79:b1:25:db:36:38:10:c2:ea:7d:18:4a:01:6e: 3b:3f:fc:a2:a9:b3:d9:a5:29:46:f5:a5:03:0a:12:81:8c:5d: 0a:11:fb:ce:ec:09:58:01:58:88:76:a9:7a:f4:da:ce:d0:bc: 38:e7:90:a2:3b:44:72:8e:62:0a:90:bb:7e:79:0a:78:e1:43: e3:2a:af:8d:5a:7a:9d:38:87:20:1e:58:c9:1c:93:1e:14:63: 6a:51:99:4a:2b:6f:ca:a4:ef:8a:11:6a:4d:59:80:cc:65:5f: 7e:3a:d9:19:14:ef:d7:6c:d1:96:5c:d3:ad:94:7d:da:b2:3c: 0a:e9:8a:90:f1:74:23:d9:3d:5a:c1:5e:f9:31:b0:05:e0:77: 5c:45:11:06:ab:7a:3f:ec:bc:97:db:56:fb:44:07:1e:ce:be: d4:f2:c0:5b:10:f3:17:97:68:1f:09:99:29:d5:b3:e6:98:52: 19:41:28:7a:f2:78:bc:6c:76:a2:64:f7:c9:bf:85:85:24:3e: 1b:04:61:c1:68:5a:d3:b1:d0:80:c7:ee:e8:58:5d:07:8d:f1: 5c:16:f2:0a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEe+9tHImQ2yfq4P/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGZlNzgwNGYtZjE2YS00Zjc4LTk5NzktNmE4ZDUwOTll NWU3MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk NDg1YmJlODUtMDgzNS00YjY2LWEwYjYtYWM5ZmMyYzc5NjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb90+IaYStRimDkSHOY9VV8c8SfhMUTX9X2N SQeat6YujLcQaEaRREvCBz6SOh+nlkEs6gS6l1zpf/Dmi4A2ZVERLzcDStJ51Jkx 8KD3OHCJxLExd28UWt5fA7C3LYGPPutUaXU2/WLp2w8qvDRU1tSniYAfRpFcStrD lckElWbWxwdAmMd77jlUAxVwXo8F1BDaDsABZyu9vY+rzVbY0S2Xe1dCCipIZIV2 fVRTNM+xO17gaZzAamMlcfo5h24uWbGn9lYrf+IgssTJIHDR8sdVAZ+nAlcvat/p XBL8aYjku/OZxMiqkO8O2p4CZY+bkr84ngrHh/zTfvMOSqE5zwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA6g9gAQHgeA+ORLVWDpsPpKKHSmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZmU3 ODA0Zi1mMTZhLTRmNzgtOTk3OS02YThkNTA5OWU1ZTcvZjQ5ZjBhYTQtNWI1OC0z MGNiLWExZjMtZDVlMTcyZTc1ZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGZlNzgwNGYtZjE2YS00Zjc4LTk5 NzktNmE4ZDUwOTllNWU3LzBmZTc4MDRmLWYxNmEtNGY3OC05OTc5LTZhOGQ1MDk5 ZTVlNy5jcmwwHwYDVR0jBBgwFoAU+VXAQ4RRLwbPOrS6kfJqw02k5GgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wZmU3ODA0Zi1mMTZhLTRmNzgtOTk3OS02YThk NTA5OWU1ZTcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgckwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAmYuGfG/mpwmU6ty0WRoJdFmyboudF0WFhaEnedScbKAp92ERBwljR ebEl2zY4EMLqfRhKAW47P/yiqbPZpSlG9aUDChKBjF0KEfvO7AlYAViIdql69NrO 0Lw455CiO0RyjmIKkLt+eQp44UPjKq+NWnqdOIcgHljJHJMeFGNqUZlKK2/KpO+K EWpNWYDMZV9+OtkZFO/XbNGWXNOtlH3asjwK6YqQ8XQj2T1awV75MbAF4HdcRREG q3o/7LyX21b7RAcezr7U8sBbEPMXl2gfCZkp1bPmmFIZQSh68ni8bHaiZPfJv4WF JD4bBGHBaFrTsdCAx+7oWF0HjfFcFvIK -----END CERTIFICATE-----Generated at Fri Nov 22 04:27:52 2024 by rpki-client on console-fra.rpki-client.org