$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/2123b838-49c4-3858-b38c-bc8e324cca24.roa File: 2123b838-49c4-3858-b38c-bc8e324cca24.roa (raw, json) Hash identifier: ETkqWbOj+wTbUlwEeQlnAlgwDcQsnNU561mrjgh7V5A= Subject key identifier: FB:46:C3:53:F6:DD:AC:AC:31:23:02:EA:B4:7C:AC:ED:1B:E8:42:4A Certificate issuer: /CN=15b30dd1-216d-4b82-87ee-44becb2d20c7 Certificate serial: 010D0C9F43285847D29F59D3A25D3122CCBA3E80 Authority key identifier: 4E:38:50:30:3F:AF:AD:89:2F:B5:EE:88:B0:DB:01:3C:20:C3:57:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/2123b838-49c4-3858-b38c-bc8e324cca24.roa Signing time: Sat 09 Nov 2024 14:00:40 +0000 ROA not before: Sat 09 Nov 2024 14:00:40 +0000 ROA not after: Fri 07 Feb 2025 14:00:40 +0000 asID: 32852 IP address blocks: 2607:5540::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/15b30dd1-216d-4b82-87ee-44becb2d20c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/15b30dd1-216d-4b82-87ee-44becb2d20c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d2:9f:59:d3:a2:5d:31:22:cc:ba:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15b30dd1-216d-4b82-87ee-44becb2d20c7 Validity Not Before: Nov 9 14:00:40 2024 GMT Not After : Feb 7 14:00:40 2025 GMT Subject: CN=f877ae10-3f19-4e09-ab0e-8b2fb3af76d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ee:2c:e4:29:53:a0:c7:1f:ba:02:0a:69:1a: 5b:42:71:64:c8:fa:a1:b3:ea:68:f5:dc:1b:28:91: 9b:64:f4:18:c2:13:64:0c:7a:fd:87:11:20:f6:86: 48:18:51:00:6f:65:36:c5:2b:7f:54:58:6c:d6:c9: 0d:16:3e:ea:8e:76:13:10:ab:61:5b:6f:e0:37:58: e7:62:af:b0:b9:8d:49:b0:be:a1:04:44:21:be:7f: b4:c6:74:26:97:01:98:f5:be:d7:54:f0:5a:0c:49: b3:94:fa:dd:14:9b:14:1b:fe:b5:43:30:66:3f:fa: dc:66:c8:ba:86:00:43:9c:f1:14:05:90:3d:d0:9b: 1e:88:88:05:36:49:d6:b0:92:ea:f0:13:c2:ee:1a: 6d:12:c7:03:a4:a3:15:0d:8b:22:b6:f2:e5:8a:c7: ca:71:40:22:2c:41:d2:09:d6:06:27:ab:4e:e1:50: c9:96:99:e3:49:c7:dc:59:98:30:7c:f0:5f:83:7f: cf:dd:00:71:d1:18:a8:93:e5:79:37:81:3d:07:8e: 9c:77:fa:95:5e:9e:2b:bc:0b:08:ee:b0:03:59:5a: 87:8a:87:bf:fc:c4:be:6f:f5:4d:18:2b:3f:fc:4e: e1:7a:4b:1a:34:f1:f5:2e:38:92:f1:d2:1a:8d:0f: 39:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:46:C3:53:F6:DD:AC:AC:31:23:02:EA:B4:7C:AC:ED:1B:E8:42:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/2123b838-49c4-3858-b38c-bc8e324cca24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/15b30dd1-216d-4b82-87ee-44becb2d20c7.crl X509v3 Authority Key Identifier: keyid:4E:38:50:30:3F:AF:AD:89:2F:B5:EE:88:B0:DB:01:3C:20:C3:57:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7.cer sbgp-ipAddrBlock: critical IPv6: 2607:5540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:4a:ef:90:06:77:3b:f3:a9:e6:83:d8:8a:fa:b8:45:86:40: ed:78:4f:96:44:f0:5b:03:14:d6:c7:e5:8f:f3:c6:b6:c4:da: 54:5d:6c:99:1f:50:af:45:8a:e6:90:79:44:7e:2b:c7:c2:b3: 81:c3:f8:1d:0f:0c:62:e8:ed:7e:a6:f3:b3:f2:02:c9:db:62: 7e:0a:64:32:fb:05:f7:e9:b1:ac:2f:32:dc:e1:f5:6c:9e:1e: 88:82:8b:62:e3:e3:e7:07:6c:b5:f7:8d:23:d8:a0:78:40:c8: a1:08:91:4e:53:2e:0e:b2:b6:48:50:5b:08:83:df:37:83:43: 73:0b:cc:ff:7b:d3:e2:2d:bb:ab:83:3d:b2:36:63:6f:d6:d6: 11:9d:ce:ee:7f:d8:c7:00:17:71:5c:8a:d8:22:52:a9:75:de: 03:d8:b1:3a:5e:32:2d:01:fb:13:22:6b:4a:14:5e:7e:49:31: 9d:99:9b:25:7c:6e:d3:63:2f:87:87:2d:3f:d9:59:ce:e9:40: d1:91:c3:de:7f:dd:fe:d6:da:20:fa:3d:82:6c:81:d2:2c:b6: d4:49:76:43:0a:71:07:fd:7d:d4:75:82:4c:55:1c:39:e7:3f: 6f:00:66:ef:86:95:91:75:71:a9:91:3d:2e:42:a4:4a:5f:06: e6:55:4b:32 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfSn1nTol0xIsy6PoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTViMzBkZDEtMjE2ZC00YjgyLTg3ZWUtNDRiZWNiMmQy MGM3MB4XDTI0MTEwOTE0MDA0MFoXDTI1MDIwNzE0MDA0MFowLzEtMCsGA1UEAxMk Zjg3N2FlMTAtM2YxOS00ZTA5LWFiMGUtOGIyZmIzYWY3NmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+4s5ClToMcfugIKaRpbQnFkyPqhs+po9dwb KJGbZPQYwhNkDHr9hxEg9oZIGFEAb2U2xSt/VFhs1skNFj7qjnYTEKthW2/gN1jn Yq+wuY1JsL6hBEQhvn+0xnQmlwGY9b7XVPBaDEmzlPrdFJsUG/61QzBmP/rcZsi6 hgBDnPEUBZA90JseiIgFNknWsJLq8BPC7hptEscDpKMVDYsitvLlisfKcUAiLEHS CdYGJ6tO4VDJlpnjScfcWZgwfPBfg3/P3QBx0Riok+V5N4E9B46cd/qVXp4rvAsI 7rADWVqHioe//MS+b/VNGCs//E7heksaNPH1LjiS8dIajQ85lQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPtGw1P23aysMSMC6rR8rO0b6EJKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNWIz MGRkMS0yMTZkLTRiODItODdlZS00NGJlY2IyZDIwYzcvMjEyM2I4MzgtNDljNC0z ODU4LWIzOGMtYmM4ZTMyNGNjYTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTViMzBkZDEtMjE2ZC00YjgyLTg3 ZWUtNDRiZWNiMmQyMGM3LzE1YjMwZGQxLTIxNmQtNGI4Mi04N2VlLTQ0YmVjYjJk MjBjNy5jcmwwHwYDVR0jBBgwFoAUTjhQMD+vrYkvte6IsNsBPCDDV/YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNWIzMGRkMS0yMTZkLTRiODItODdlZS00NGJl Y2IyZDIwYzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdVQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCfSu+QBnc786nmg9iK+rhFhkDteE+WRPBbAxTWx+WP88a2xNpUXWyZ H1CvRYrmkHlEfivHwrOBw/gdDwxi6O1+pvOz8gLJ22J+CmQy+wX36bGsLzLc4fVs nh6Igoti4+PnB2y1940j2KB4QMihCJFOUy4OsrZIUFsIg983g0NzC8z/e9PiLbur gz2yNmNv1tYRnc7uf9jHABdxXIrYIlKpdd4D2LE6XjItAfsTImtKFF5+STGdmZsl fG7TYy+Hhy0/2VnO6UDRkcPef93+1tog+j2CbIHSLLbUSXZDCnEH/X3UdYJMVRw5 5z9vAGbvhpWRdXGpkT0uQqRKXwbmVUsy -----END CERTIFICATE-----Generated at Thu Nov 21 21:49:09 2024 by rpki-client on console-ams.rpki-client.org