$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f3895e12-ce38-3ff6-888e-605799d193c7.roa File: f3895e12-ce38-3ff6-888e-605799d193c7.roa (raw, json) Hash identifier: YCJ+mBa4Z6zq0cFtjmOPjV4GYTk5sqp9XW2DJ0NWifk= Subject key identifier: A7:34:65:10:37:11:78:85:65:90:B1:C1:EC:F7:A5:2C:D7:78:5C:A9 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584754E0DEDA5EFDB5A5CCC3A980 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f3895e12-ce38-3ff6-888e-605799d193c7.roa Signing time: Wed 25 Sep 2024 13:00:41 +0000 ROA not before: Wed 25 Sep 2024 13:00:41 +0000 ROA not after: Tue 24 Dec 2024 14:00:41 +0000 asID: 3360 IP address blocks: 2607:f028:72::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:54:e0:de:da:5e:fd:b5:a5:cc:c3:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 13:00:41 2024 GMT Not After : Dec 24 14:00:41 2024 GMT Subject: CN=79c0f519-d311-48a5-87b4-7ba4ea07b766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b6:33:84:62:bc:a1:61:63:38:a4:44:b9:29: 27:3f:37:a5:a1:84:28:f1:bd:a8:f7:7f:7b:9c:9c: bd:90:60:6d:80:3a:33:89:e1:ee:f0:31:1e:86:0f: 76:22:3c:a4:a3:9d:ea:ca:d9:7d:cd:6c:b0:d4:32: f8:0d:56:dc:84:78:a3:38:f7:bc:9b:76:ad:3a:cf: ba:b1:75:19:22:d4:2f:42:81:34:2e:88:47:f0:67: af:92:df:be:bd:a0:46:10:9d:7f:d8:4f:30:03:7e: 20:6a:e9:f9:ed:3a:c3:b8:ae:15:b1:44:1d:34:a1: b9:27:cf:10:d4:f4:46:4e:e1:ab:62:ee:ed:d6:92: bf:47:59:9d:ea:78:f9:f4:a3:d2:9a:d4:06:65:e0: c6:0e:d1:39:e8:0d:8e:c9:23:34:11:02:bf:57:0d: ff:e5:ad:7d:10:1f:62:31:23:b6:43:c8:3a:23:66: 1b:5a:df:7f:c1:e2:75:fe:ea:cf:47:bd:7a:6e:9b: 82:71:49:fb:78:63:86:76:06:69:44:82:a2:b0:de: 52:33:9e:f4:3d:e0:15:71:79:72:4a:3c:d5:c8:38: 3f:55:cd:2b:ff:ff:80:fc:44:00:5d:d1:db:e7:77: 13:0d:c2:62:2d:cb:01:3c:88:52:ae:68:c1:7a:38: 43:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:34:65:10:37:11:78:85:65:90:B1:C1:EC:F7:A5:2C:D7:78:5C:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f3895e12-ce38-3ff6-888e-605799d193c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:72::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:07:c4:79:98:7d:c1:8d:c4:41:20:fd:6b:47:0b:13:a3:a5: a8:f5:e2:35:f3:e2:3c:41:9d:ed:07:d7:8e:f2:56:ad:89:fa: 68:1b:47:df:cb:fd:35:46:1b:a6:bc:1e:25:75:3d:0c:d7:98: 9e:e6:d6:2b:5d:d7:98:07:7b:ae:34:c8:87:32:49:85:98:e9: 55:91:80:79:01:8b:2c:69:98:08:41:16:72:8a:cb:74:5f:bb: d7:56:70:78:06:44:19:e2:47:df:ba:61:0c:f5:ef:6c:e3:65: 94:c2:4c:27:27:7e:1d:3e:1f:7a:56:10:76:43:ac:f1:f8:51: e3:63:59:6e:86:fe:83:1d:cf:21:90:28:48:5f:91:09:39:6d: 72:4b:f6:32:ae:72:f4:29:e6:6f:f9:9a:49:b6:b6:11:f1:e2: 34:ab:68:9d:fe:ac:bf:62:b9:ef:b4:79:2a:54:16:24:ee:7c: 06:6a:0b:21:ce:54:23:c6:c4:46:f2:15:43:d0:ad:94:4b:43: 96:0b:ad:36:13:08:13:4b:77:75:3b:48:3c:90:c7:05:dc:75: fe:12:2f:75:b5:08:80:fa:bf:48:be:22:f0:58:ba:12:c1:71: de:e4:7b:63:dd:df:3a:80:1e:08:1e:e6:20:07:ff:99:00:9a: b1:cb:3e:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdU4N7aXv21pczDqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk NzljMGY1MTktZDMxMS00OGE1LTg3YjQtN2JhNGVhMDdiNzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7YzhGK8oWFjOKREuSknPzeloYQo8b2o9397 nJy9kGBtgDozieHu8DEehg92Ijyko53qytl9zWyw1DL4DVbchHijOPe8m3atOs+6 sXUZItQvQoE0LohH8Gevkt++vaBGEJ1/2E8wA34gaun57TrDuK4VsUQdNKG5J88Q 1PRGTuGrYu7t1pK/R1md6nj59KPSmtQGZeDGDtE56A2OySM0EQK/Vw3/5a19EB9i MSO2Q8g6I2YbWt9/weJ1/urPR716bpuCcUn7eGOGdgZpRIKisN5SM570PeAVcXly SjzVyDg/Vc0r//+A/EQAXdHb53cTDcJiLcsBPIhSrmjBejhDyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKc0ZRA3EXiFZZCxwez3pSzXeFypMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjM4OTVlMTItY2UzOC0z ZmY2LTg4OGUtNjA1Nzk5ZDE5M2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKABy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC0HxHmYfcGNxEEg/WtHCxOjpaj14jXz4jxBne0H147yVq2J+mgb R9/L/TVGG6a8HiV1PQzXmJ7m1itd15gHe640yIcySYWY6VWRgHkBiyxpmAhBFnKK y3Rfu9dWcHgGRBniR9+6YQz172zjZZTCTCcnfh0+H3pWEHZDrPH4UeNjWW6G/oMd zyGQKEhfkQk5bXJL9jKucvQp5m/5mkm2thHx4jSraJ3+rL9iue+0eSpUFiTufAZq CyHOVCPGxEbyFUPQrZRLQ5YLrTYTCBNLd3U7SDyQxwXcdf4SL3W1CID6v0i+IvBY uhLBcd7ke2Pd3zqAHgge5iAH/5kAmrHLPnI= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:49 2024 by rpki-client on console-ams.rpki-client.org