$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9c302c88-b997-38ac-a2de-72ea4684629a.roa File: 9c302c88-b997-38ac-a2de-72ea4684629a.roa (raw, json) Hash identifier: Yyz+cR2GorPBonwHTz14/GyVqDxgRhl2KZ2pc4qmCg4= Subject key identifier: 07:20:98:C2:B6:47:DB:E1:E5:78:BE:72:09:E2:6B:A0:3C:98:B6:B6 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285847EFEF805DD76E3C615DD77240 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9c302c88-b997-38ac-a2de-72ea4684629a.roa Signing time: Wed 20 Nov 2024 02:00:39 +0000 ROA not before: Wed 20 Nov 2024 02:00:39 +0000 ROA not after: Tue 18 Feb 2025 02:00:39 +0000 asID: 3360 IP address blocks: 2607:f028:41::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ef:ef:80:5d:d7:6e:3c:61:5d:d7:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 20 02:00:39 2024 GMT Not After : Feb 18 02:00:39 2025 GMT Subject: CN=e23810c6-58db-4263-af70-3ed965263cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c5:ab:0a:f7:4a:73:e2:fb:71:d2:3d:a5:5d: f0:1f:ad:92:89:a7:7b:1b:79:10:ee:86:d4:eb:e0: 21:64:2b:05:91:18:de:fb:e3:6c:aa:bb:00:59:38: 93:9c:32:1d:9c:8a:1e:30:6d:94:ff:8e:bf:8e:9d: 29:85:be:b8:64:d2:93:0c:23:d2:5d:40:00:c3:c3: 6d:23:60:d0:73:1a:67:0b:27:e8:ef:12:17:1e:7d: b3:ab:50:14:00:bc:f4:39:9e:5e:3c:3a:d5:b0:a8: 42:1d:35:b6:ee:9a:97:06:84:7e:fd:f2:d6:4a:5e: 76:be:bb:cb:62:8c:1f:c6:f6:ad:59:67:b3:28:d8: a2:1c:03:e1:3c:4a:98:b1:b3:2c:85:81:18:fd:8e: 89:fe:99:f1:fd:5e:db:36:0b:c3:1b:51:1f:0b:08: 31:50:1c:37:a0:24:3d:1e:2d:41:a3:f2:aa:f7:a8: a7:53:7e:1e:14:57:d0:e6:20:19:b9:ad:86:69:2d: 0f:ee:bb:6a:e6:b2:10:3b:ad:ec:ef:5b:43:8f:ec: 4b:f5:f3:e2:15:8b:16:04:fd:5e:14:0d:ef:55:7e: d3:10:5f:68:14:9d:f2:af:a5:d4:d2:af:40:9d:c5: a6:91:5b:d9:23:d0:63:bc:40:62:b6:e8:30:bb:5c: ac:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:20:98:C2:B6:47:DB:E1:E5:78:BE:72:09:E2:6B:A0:3C:98:B6:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9c302c88-b997-38ac-a2de-72ea4684629a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:41::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:c7:bd:bb:59:f3:60:a1:7f:7e:d0:5f:e7:dc:a0:d3:2d:7b: c8:1e:6f:89:f9:99:b9:a6:7c:db:ac:a5:a0:4b:b4:dd:03:fc: e6:8a:3a:76:ff:aa:ca:d7:6e:c5:5a:89:5c:a6:53:6c:3d:9b: 25:d4:7a:e4:7c:06:e4:86:be:37:fd:e4:63:a4:30:86:a6:24: 78:64:5a:55:a1:b1:32:fd:82:c9:57:c0:ee:5b:3a:f1:7f:df: 11:82:72:00:0e:6b:a9:3c:b1:b8:d1:7e:86:c7:c7:df:13:52: 84:23:1a:39:78:b9:79:6d:a0:4c:9e:aa:53:1d:1d:b6:64:e7: 99:9d:86:c2:d4:92:90:6e:82:1c:00:9c:c4:1f:2e:a9:47:68: c1:8d:fd:6f:31:cb:ab:20:76:75:98:59:48:84:de:fe:bf:fa: 2f:2a:4d:e2:b0:4e:31:ad:b6:fd:84:b5:5e:7c:78:2b:3b:4f: 55:15:45:e1:6a:ef:8c:e4:34:3d:47:82:ea:bc:06:e0:cb:a7: 99:39:53:e0:f9:e3:0d:d4:00:6f:b7:cd:fc:77:c1:8a:b5:d5: 4f:6f:30:cc:b5:ef:30:7d:9b:3b:5b:93:d8:b6:93:15:cd:78: 46:c4:f5:0a:df:2b:33:e9:c4:d5:32:e4:2a:58:a1:af:d9:d5: 5c:fc:57:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfv74Bd1248YV3XckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTEyMDAyMDAzOVoXDTI1MDIxODAyMDAzOVowLzEtMCsGA1UEAxMk ZTIzODEwYzYtNThkYi00MjYzLWFmNzAtM2VkOTY1MjYzY2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8WrCvdKc+L7cdI9pV3wH62Siad7G3kQ7obU 6+AhZCsFkRje++NsqrsAWTiTnDIdnIoeMG2U/46/jp0phb64ZNKTDCPSXUAAw8Nt I2DQcxpnCyfo7xIXHn2zq1AUALz0OZ5ePDrVsKhCHTW27pqXBoR+/fLWSl52vrvL YowfxvatWWezKNiiHAPhPEqYsbMshYEY/Y6J/pnx/V7bNgvDG1EfCwgxUBw3oCQ9 Hi1Bo/Kq96inU34eFFfQ5iAZua2GaS0P7rtq5rIQO63s71tDj+xL9fPiFYsWBP1e FA3vVX7TEF9oFJ3yr6XU0q9AncWmkVvZI9BjvEBitugwu1ysTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAcgmMK2R9vh5Xi+cgnia6A8mLa2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOWMzMDJjODgtYjk5Ny0z OGFjLWEyZGUtNzJlYTQ2ODQ2MjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKABB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHDHvbtZ82Chf37QX+fcoNMte8geb4n5mbmmfNuspaBLtN0D/OaK Onb/qsrXbsVaiVymU2w9myXUeuR8BuSGvjf95GOkMIamJHhkWlWhsTL9gslXwO5b OvF/3xGCcgAOa6k8sbjRfobHx98TUoQjGjl4uXltoEyeqlMdHbZk55mdhsLUkpBu ghwAnMQfLqlHaMGN/W8xy6sgdnWYWUiE3v6/+i8qTeKwTjGttv2EtV58eCs7T1UV ReFq74zkND1Hguq8BuDLp5k5U+D54w3UAG+3zfx3wYq11U9vMMy17zB9mztbk9i2 kxXNeEbE9QrfKzPpxNUy5CpYoa/Z1Vz8Vy8= -----END CERTIFICATE-----Generated at Mon Nov 25 03:34:12 2024 by rpki-client on console-fra.rpki-client.org