$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/a4288eed-4f4e-30fd-b1d7-a516b085f2b0.roa File: a4288eed-4f4e-30fd-b1d7-a516b085f2b0.roa (raw, json) Hash identifier: qUbDkVuOjzXnvH4iwlO1OuwHOcMhiyPglb5ZbieJ6kE= Subject key identifier: D5:8D:FB:A9:8A:3C:45:CB:26:15:53:16:F1:77:EF:0A:67:C2:DC:53 Certificate issuer: /CN=0f9ce8be-7bbe-418b-b78e-42de894133a5 Certificate serial: 010D0C9F43285847872134BCB8B6A99DA1EFE340 Authority key identifier: CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/a4288eed-4f4e-30fd-b1d7-a516b085f2b0.roa Signing time: Sun 13 Oct 2024 13:00:42 +0000 ROA not before: Sun 13 Oct 2024 13:00:42 +0000 ROA not after: Sat 11 Jan 2025 14:00:42 +0000 asID: 394056 IP address blocks: 2607:3640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:87:21:34:bc:b8:b6:a9:9d:a1:ef:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9ce8be-7bbe-418b-b78e-42de894133a5 Validity Not Before: Oct 13 13:00:42 2024 GMT Not After : Jan 11 14:00:42 2025 GMT Subject: CN=7ae6e88f-29b9-4f35-b5c5-c8bd151fbe4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:31:c0:66:24:01:71:3a:c8:cb:5e:b1:8d:2a: 76:94:9d:e0:53:26:09:20:e4:13:b4:e2:ce:d9:d3: 5a:bb:19:fa:4e:0e:be:6a:bf:9e:40:13:3e:37:da: 18:22:11:18:b4:5a:f4:3f:bb:26:29:98:ac:c6:78: 80:cb:95:d0:73:0f:52:1b:74:1d:26:50:73:54:31: 8f:fb:fa:09:0c:c6:8f:51:d4:64:16:fd:e4:9a:2e: 7f:99:ff:37:a2:ba:18:c5:4f:a6:47:6d:f9:88:f5: a6:02:05:3d:22:33:c2:20:7a:7f:e0:f4:a8:c4:15: 44:35:8f:bd:e1:90:bb:db:22:d7:d3:33:d7:89:81: 91:9e:fd:49:15:28:9c:fc:97:9b:af:78:31:02:7e: 66:53:a7:4f:72:1a:d3:ee:eb:21:13:b9:38:34:4c: dd:91:9a:9e:d9:6b:f5:46:b2:f5:8c:a0:4a:b9:19: c9:c6:4e:55:07:bd:2d:c3:18:df:e1:29:c5:ae:d1: cb:4b:8e:c1:d5:79:de:a3:8a:ae:18:f4:59:71:89: 86:d0:4b:0d:1c:ba:14:e8:20:bd:f7:2e:aa:aa:75: 3d:b0:4c:d3:9b:b1:23:af:e2:ac:6c:35:13:ea:1b: 24:32:d3:82:39:71:58:69:ab:80:1d:b9:06:94:fe: 9e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8D:FB:A9:8A:3C:45:CB:26:15:53:16:F1:77:EF:0A:67:C2:DC:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/a4288eed-4f4e-30fd-b1d7-a516b085f2b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl X509v3 Authority Key Identifier: keyid:CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer sbgp-ipAddrBlock: critical IPv6: 2607:3640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:81:62:4e:42:54:2d:3d:1d:af:7b:a4:e9:6e:d2:83:94:8f: f6:85:89:e1:85:5a:66:ef:05:91:91:05:45:04:49:89:36:14: d0:fa:1b:0f:f7:ff:22:37:a1:7b:9d:74:68:b0:f9:23:b5:bd: 22:40:6c:bb:9f:78:ce:e6:6a:cc:dd:7c:fe:c7:0d:6f:c0:b4: 49:2d:d1:ef:c9:4d:fd:2b:ed:f1:c4:e3:bc:d8:de:a5:9d:d6: 2e:84:1b:29:eb:66:6a:94:4b:f1:df:89:0e:e9:52:fd:6a:01: 5f:a7:f1:6e:97:3f:5b:69:34:e5:0c:f9:39:df:85:fe:eb:74: 26:f0:de:00:c2:a8:8e:09:de:08:74:7d:09:ec:c8:0a:77:23: 19:f8:44:1c:7a:80:58:38:e0:1f:90:8f:03:7a:ef:8c:84:7d: f0:8f:6e:a6:ae:c3:57:99:47:6c:0f:25:36:88:16:a3:33:96: 1f:57:45:b3:c2:5d:d4:ee:59:82:57:e4:7c:97:9b:bd:16:02: f0:26:9a:6b:d3:99:91:1a:4f:4f:6d:91:8a:65:41:6f:3f:9b: a8:e6:9d:cc:32:24:c5:ef:63:f8:91:73:21:80:9c:c1:5a:0c: 5c:14:48:11:00:88:19:53:e9:a3:6f:9b:28:ba:bf:6b:f0:ad: c6:7c:bd:76 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeHITS8uLapnaHv40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY5Y2U4YmUtN2JiZS00MThiLWI3OGUtNDJkZTg5NDEz M2E1MB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk N2FlNmU4OGYtMjliOS00ZjM1LWI1YzUtYzhiZDE1MWZiZTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzHAZiQBcTrIy16xjSp2lJ3gUyYJIOQTtOLO 2dNauxn6Tg6+ar+eQBM+N9oYIhEYtFr0P7smKZisxniAy5XQcw9SG3QdJlBzVDGP +/oJDMaPUdRkFv3kmi5/mf83oroYxU+mR235iPWmAgU9IjPCIHp/4PSoxBVENY+9 4ZC72yLX0zPXiYGRnv1JFSic/Jebr3gxAn5mU6dPchrT7ushE7k4NEzdkZqe2Wv1 RrL1jKBKuRnJxk5VB70twxjf4SnFrtHLS47B1Xneo4quGPRZcYmG0EsNHLoU6CC9 9y6qqnU9sEzTm7Ejr+KsbDUT6hskMtOCOXFYaauAHbkGlP6ewQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNWN+6mKPEXLJhVTFvF37wpnwtxTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZjlj ZThiZS03YmJlLTQxOGItYjc4ZS00MmRlODk0MTMzYTUvYTQyODhlZWQtNGY0ZS0z MGZkLWIxZDctYTUxNmIwODVmMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGY5Y2U4YmUtN2JiZS00MThiLWI3 OGUtNDJkZTg5NDEzM2E1LzBmOWNlOGJlLTdiYmUtNDE4Yi1iNzhlLTQyZGU4OTQx MzNhNS5jcmwwHwYDVR0jBBgwFoAUyou/QT84PnG2tRXF0Ztn1tRgssYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZjljZThiZS03YmJlLTQxOGItYjc4ZS00MmRl ODk0MTMzYTUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgc2QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAQgWJOQlQtPR2ve6TpbtKDlI/2hYnhhVpm7wWRkQVFBEmJNhTQ+hsP 9/8iN6F7nXRosPkjtb0iQGy7n3jO5mrM3Xz+xw1vwLRJLdHvyU39K+3xxOO82N6l ndYuhBsp62ZqlEvx34kO6VL9agFfp/Fulz9baTTlDPk534X+63Qm8N4AwqiOCd4I dH0J7MgKdyMZ+EQceoBYOOAfkI8Deu+MhH3wj26mrsNXmUdsDyU2iBajM5YfV0Wz wl3U7lmCV+R8l5u9FgLwJppr05mRGk9PbZGKZUFvP5uo5p3MMiTF72P4kXMhgJzB WgxcFEgRAIgZU+mjb5sour9r8K3GfL12 -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:35 2024 by rpki-client on console-fra.rpki-client.org