$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/9f0c18cc-5b35-3ce1-94ba-d1df388bff21.roa File: 9f0c18cc-5b35-3ce1-94ba-d1df388bff21.roa (raw, json) Hash identifier: 1MBKKGmEsmnwnKXfUEsDRv9TzqoJTKbu3PVcc7KzPWg= Subject key identifier: AD:DE:5D:73:23:0C:93:2F:F7:35:FE:D6:98:C3:86:D2:09:8E:04:CF Certificate issuer: /CN=68e273c1-e39f-464b-8c1f-b45c8df2b148 Certificate serial: 010D0C9F43285847B5314FA60846FE4930A69E80 Authority key identifier: 4D:2F:8B:7D:51:9D:D1:11:01:55:3B:73:1B:DB:9A:7A:BE:62:BF:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/9f0c18cc-5b35-3ce1-94ba-d1df388bff21.roa Signing time: Wed 30 Oct 2024 01:00:32 +0000 ROA not before: Wed 30 Oct 2024 01:00:32 +0000 ROA not after: Tue 28 Jan 2025 02:00:32 +0000 asID: 26886 IP address blocks: 2607:82c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/68e273c1-e39f-464b-8c1f-b45c8df2b148.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/68e273c1-e39f-464b-8c1f-b45c8df2b148.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b5:31:4f:a6:08:46:fe:49:30:a6:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68e273c1-e39f-464b-8c1f-b45c8df2b148 Validity Not Before: Oct 30 01:00:32 2024 GMT Not After : Jan 28 02:00:32 2025 GMT Subject: CN=c53138f8-ef25-4771-af1a-82b9dbdaec13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6f:ba:51:23:84:8c:cd:62:22:1b:97:8f:a6: 68:57:fd:a3:54:93:25:92:82:9a:fd:f6:2e:d6:28: 4b:ff:49:8c:61:00:e1:e3:e9:86:ff:b1:b4:ff:10: 12:99:41:a2:22:1a:23:dd:42:e1:19:75:a7:61:6c: 5e:3d:3e:70:e6:7c:16:ea:a7:13:04:af:27:04:74: 67:f2:d9:c5:40:b9:eb:d2:af:26:c2:61:14:90:4c: 34:cd:b3:67:28:03:cd:5c:b9:a9:89:94:2c:2f:cd: cf:e3:99:c9:34:7c:72:0c:3d:f2:6c:8d:c5:61:e6: bf:80:c0:0e:26:56:e1:b4:7b:55:8f:6d:38:0f:db: dd:e6:85:2b:5b:33:37:65:89:18:6d:18:d0:97:75: 7f:bc:3f:69:70:62:24:f6:6c:01:85:9b:2e:91:ad: 1a:8d:4d:de:7c:a2:00:9f:93:8a:51:82:5c:b6:ff: 82:4f:2b:70:8f:3e:c6:10:5f:f2:78:19:be:44:96: 5b:33:83:13:7a:62:56:ab:a4:ba:c4:2b:49:c8:dc: 8b:8e:f8:60:a5:b0:4f:50:d0:4c:cd:f6:8f:43:7a: d2:14:df:82:ca:a3:75:43:42:d2:f5:1f:a9:00:eb: 32:54:a4:81:cb:a6:7a:f0:4f:2c:e6:1c:85:56:fa: 34:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DE:5D:73:23:0C:93:2F:F7:35:FE:D6:98:C3:86:D2:09:8E:04:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/9f0c18cc-5b35-3ce1-94ba-d1df388bff21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/68e273c1-e39f-464b-8c1f-b45c8df2b148.crl X509v3 Authority Key Identifier: keyid:4D:2F:8B:7D:51:9D:D1:11:01:55:3B:73:1B:DB:9A:7A:BE:62:BF:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148.cer sbgp-ipAddrBlock: critical IPv6: 2607:82c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:40:07:70:7e:0e:69:44:41:6c:b0:b9:37:1d:c6:62:33:19: c7:f8:8b:5b:af:dc:98:3e:bc:ae:77:31:b4:c6:ec:bf:ab:cf: 03:90:77:47:b1:75:98:dc:ad:d5:44:67:97:04:47:c8:b7:cf: dd:06:da:08:40:03:df:90:f5:ce:88:c3:77:c5:bd:67:2a:6d: b8:29:9e:39:1b:29:f5:0b:a5:1b:2a:eb:5e:19:5d:4a:41:25: 95:be:4c:87:ad:eb:94:45:83:35:06:de:60:7b:12:01:60:28: 63:24:35:bd:ec:e5:b0:15:bb:6c:29:a4:8a:51:57:8a:4e:b0: cc:34:ed:d9:b1:36:70:fe:f9:b9:c2:75:32:84:4a:7c:05:b3: 9d:0b:0f:46:58:cd:0f:ff:57:00:39:8d:5a:21:9c:ac:5c:bb: e0:60:cc:28:ef:db:17:f8:ba:df:e0:81:20:28:c9:c9:3e:12: bf:0d:c9:55:3f:22:45:f7:84:be:e8:e0:7d:6c:a1:3b:3e:37: 14:35:14:9b:34:ca:82:73:af:cc:0d:f6:e0:00:bf:10:ce:4a: 05:e8:d2:fb:9e:85:93:9e:65:e9:3d:10:80:30:1f:5e:55:cb: 6d:f9:4e:9d:39:ff:a6:b0:cc:f7:55:0c:ab:85:7c:14:71:6a: ed:35:ff:29 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEe1MU+mCEb+STCmnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhlMjczYzEtZTM5Zi00NjRiLThjMWYtYjQ1YzhkZjJi MTQ4MB4XDTI0MTAzMDAxMDAzMloXDTI1MDEyODAyMDAzMlowLzEtMCsGA1UEAxMk YzUzMTM4ZjgtZWYyNS00NzcxLWFmMWEtODJiOWRiZGFlYzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2+6USOEjM1iIhuXj6ZoV/2jVJMlkoKa/fYu 1ihL/0mMYQDh4+mG/7G0/xASmUGiIhoj3ULhGXWnYWxePT5w5nwW6qcTBK8nBHRn 8tnFQLnr0q8mwmEUkEw0zbNnKAPNXLmpiZQsL83P45nJNHxyDD3ybI3FYea/gMAO JlbhtHtVj204D9vd5oUrWzM3ZYkYbRjQl3V/vD9pcGIk9mwBhZsuka0ajU3efKIA n5OKUYJctv+CTytwjz7GEF/yeBm+RJZbM4MTemJWq6S6xCtJyNyLjvhgpbBPUNBM zfaPQ3rSFN+CyqN1Q0LS9R+pAOsyVKSBy6Z68E8s5hyFVvo0vwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK3eXXMjDJMv9zX+1pjDhtIJjgTPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82OGUy NzNjMS1lMzlmLTQ2NGItOGMxZi1iNDVjOGRmMmIxNDgvOWYwYzE4Y2MtNWIzNS0z Y2UxLTk0YmEtZDFkZjM4OGJmZjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjhlMjczYzEtZTM5Zi00NjRiLThj MWYtYjQ1YzhkZjJiMTQ4LzY4ZTI3M2MxLWUzOWYtNDY0Yi04YzFmLWI0NWM4ZGYy YjE0OC5jcmwwHwYDVR0jBBgwFoAUTS+LfVGd0REBVTtzG9uaer5iv6UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82OGUyNzNjMS1lMzlmLTQ2NGItOGMxZi1iNDVj OGRmMmIxNDguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeCwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB1QAdwfg5pREFssLk3HcZiMxnH+Itbr9yYPryudzG0xuy/q88DkHdH sXWY3K3VRGeXBEfIt8/dBtoIQAPfkPXOiMN3xb1nKm24KZ45Gyn1C6UbKuteGV1K QSWVvkyHreuURYM1Bt5gexIBYChjJDW97OWwFbtsKaSKUVeKTrDMNO3ZsTZw/vm5 wnUyhEp8BbOdCw9GWM0P/1cAOY1aIZysXLvgYMwo79sX+Lrf4IEgKMnJPhK/DclV PyJF94S+6OB9bKE7PjcUNRSbNMqCc6/MDfbgAL8QzkoF6NL7noWTnmXpPRCAMB9e Vctt+U6dOf+msMz3VQyrhXwUcWrtNf8p -----END CERTIFICATE-----Generated at Thu Nov 21 19:16:40 2024 by rpki-client on console-fra.rpki-client.org