$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3545d4d9-cdce-3a1f-8dff-1cfd7a0d20b0.roa File: 3545d4d9-cdce-3a1f-8dff-1cfd7a0d20b0.roa (raw, json) Hash identifier: v2GJt3DHGTUkUr3F2OdySUBaDYGi5Ug4f27+eQHCuCc= Subject key identifier: 34:28:5F:DA:ED:8E:9C:71:36:FD:C8:2B:33:C8:B1:6C:D4:16:DA:46 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584754E0DC09695C3ACFECF6FA80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3545d4d9-cdce-3a1f-8dff-1cfd7a0d20b0.roa Signing time: Wed 25 Sep 2024 13:00:41 +0000 ROA not before: Wed 25 Sep 2024 13:00:41 +0000 ROA not after: Tue 24 Dec 2024 14:00:41 +0000 asID: 203 IP address blocks: 2607:f028:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:54:e0:dc:09:69:5c:3a:cf:ec:f6:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 13:00:41 2024 GMT Not After : Dec 24 14:00:41 2024 GMT Subject: CN=1b454baf-8143-46be-9803-fe90db561c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:eb:8d:51:29:30:e9:11:96:cc:c6:e7:0c:7f: 70:4e:ee:90:48:05:8c:7f:62:8d:20:83:3b:95:22: 9c:6a:68:82:25:1e:6f:c1:49:e0:d8:85:af:34:5c: fe:c8:31:4f:cd:08:d5:ae:de:58:ca:19:9d:14:70: 1e:3b:a2:52:8e:dd:4c:85:63:a5:51:17:72:86:fa: 22:72:94:ab:93:3b:e1:76:c1:0d:34:12:51:c1:13: 54:9d:c4:f9:1d:17:8d:f2:38:f1:31:09:59:0b:91: 3c:a8:51:84:8c:cc:4f:46:c4:b9:ef:78:fb:3c:6f: 16:ab:db:97:b0:f2:59:85:c1:b6:35:b5:52:3c:c3: c0:e9:31:d0:d6:a3:d9:cd:5c:d2:8c:19:a8:2a:ea: 36:aa:e3:46:40:63:eb:ea:e9:83:90:5d:fd:a4:97: 56:bb:8f:05:9a:ff:1f:8d:34:4e:74:00:1a:80:84: c1:9a:3a:53:7f:ab:2c:0a:64:86:3b:58:3a:ff:d6: 89:c7:70:c1:66:a4:b4:16:22:c7:2f:7a:05:1d:eb: fc:83:dd:62:c3:b4:93:9a:f7:76:85:db:41:9a:4f: dc:a9:91:1e:1f:ef:b2:94:a7:3c:52:85:4e:22:75: da:ea:98:8a:f0:c9:a4:bb:cc:f9:54:a7:a2:15:1c: ca:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:28:5F:DA:ED:8E:9C:71:36:FD:C8:2B:33:C8:B1:6C:D4:16:DA:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3545d4d9-cdce-3a1f-8dff-1cfd7a0d20b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:1c:2d:9b:2b:99:b8:e8:49:e0:3f:cb:0c:bf:e2:52:08:a3: 22:1f:02:b7:ff:33:4f:13:cc:ae:99:64:b4:65:19:e8:9f:51: 4e:7f:8f:7e:4d:d5:da:47:1a:50:8b:57:cf:1d:02:66:62:b8: 73:66:9d:86:ba:ee:82:7a:bd:0f:a8:89:01:99:60:04:c1:37: 34:33:1c:b7:2f:f7:85:e0:c8:a0:44:05:fc:47:f7:08:57:a4: cc:8f:65:d0:76:78:5e:e9:12:d6:55:7e:4d:cb:4f:30:b6:04: 94:72:ee:72:32:58:4d:c6:3b:1e:81:f9:34:7a:a3:2c:35:9c: 65:d8:75:5d:20:b1:26:db:83:91:4a:33:1f:6d:2d:07:58:fa: bf:f3:3d:aa:1b:14:dc:51:c3:19:c0:90:72:8f:50:4c:0e:50: 64:22:b5:1a:cc:a2:82:95:dc:e5:7d:e1:d7:e6:4e:68:8f:88: 4a:06:ac:aa:73:4f:c6:22:bf:0a:a8:df:c5:95:6f:5a:e3:90: c1:4e:0e:13:a5:68:e1:ec:92:0c:4e:4c:64:2d:9d:fd:6e:86: d3:8a:25:bf:03:45:2d:a6:2d:22:f6:6c:da:46:d1:c0:52:be: 06:bb:13:16:f6:ef:c7:2c:c7:ec:93:41:d2:29:0c:38:63:b8: 11:f0:32:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdU4NwJaVw6z+z2+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk MWI0NTRiYWYtODE0My00NmJlLTk4MDMtZmU5MGRiNTYxYzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+uNUSkw6RGWzMbnDH9wTu6QSAWMf2KNIIM7 lSKcamiCJR5vwUng2IWvNFz+yDFPzQjVrt5YyhmdFHAeO6JSjt1MhWOlURdyhvoi cpSrkzvhdsENNBJRwRNUncT5HReN8jjxMQlZC5E8qFGEjMxPRsS573j7PG8Wq9uX sPJZhcG2NbVSPMPA6THQ1qPZzVzSjBmoKuo2quNGQGPr6umDkF39pJdWu48Fmv8f jTROdAAagITBmjpTf6ssCmSGO1g6/9aJx3DBZqS0FiLHL3oFHev8g91iw7STmvd2 hdtBmk/cqZEeH++ylKc8UoVOInXa6piK8Mmku8z5VKeiFRzKPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDQoX9rtjpxxNv3IKzPIsWzUFtpGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzU0NWQ0ZDktY2RjZS0z YTFmLThkZmYtMWNmZDdhMGQyMGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHYcLZsrmbjoSeA/ywy/4lIIoyIfArf/M08TzK6ZZLRlGeifUU5/ j35N1dpHGlCLV88dAmZiuHNmnYa67oJ6vQ+oiQGZYATBNzQzHLcv94XgyKBEBfxH 9whXpMyPZdB2eF7pEtZVfk3LTzC2BJRy7nIyWE3GOx6B+TR6oyw1nGXYdV0gsSbb g5FKMx9tLQdY+r/zPaobFNxRwxnAkHKPUEwOUGQitRrMooKV3OV94dfmTmiPiEoG rKpzT8Yivwqo38WVb1rjkMFODhOlaOHskgxOTGQtnf1uhtOKJb8DRS2mLSL2bNpG 0cBSvga7Exb278csx+yTQdIpDDhjuBHwMhE= -----END CERTIFICATE-----Generated at Sun Nov 24 21:00:38 2024 by rpki-client on console-fra.rpki-client.org