$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/daf96070-358c-3dc7-bf23-2e15b668b39e.roa File: daf96070-358c-3dc7-bf23-2e15b668b39e.roa (raw, json) Hash identifier: tn+uS5H7mSb+KPc1CbDKCtQNjgHk83xTh0wGVZY0p5E= Subject key identifier: C8:F1:52:8E:58:5E:6E:30:1D:7B:B7:8A:C5:4E:91:CB:3B:1F:65:91 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285847362B64F43CC8C975D54B4F80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/daf96070-358c-3dc7-bf23-2e15b668b39e.roa Signing time: Sat 14 Sep 2024 13:00:41 +0000 ROA not before: Sat 14 Sep 2024 13:00:41 +0000 ROA not after: Fri 13 Dec 2024 14:00:41 +0000 asID: 59253 IP address blocks: 2607:f5b5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:36:2b:64:f4:3c:c8:c9:75:d5:4b:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Sep 14 13:00:41 2024 GMT Not After : Dec 13 14:00:41 2024 GMT Subject: CN=ce08158e-e667-4e9d-b0c7-7e3894c8fd83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6e:5c:d8:5b:52:70:58:2c:6c:21:63:f9:de: 05:db:dc:73:15:54:25:45:8c:5a:4a:6c:43:f1:19: 21:89:bc:8a:2f:42:25:36:05:77:6e:55:64:a8:08: 0f:92:93:ef:8e:08:08:c4:7c:ed:23:6a:b9:85:64: 97:7d:a0:88:9b:c1:4d:c7:a0:c5:fd:5c:cf:b2:86: 0e:16:c9:64:da:f9:50:39:14:07:b9:57:a9:63:9e: ca:80:7f:5b:b3:ba:b9:d7:6c:9f:5e:39:f0:80:66: 36:11:be:1d:d6:82:86:d6:b1:d2:8a:f6:fe:bf:3b: 11:67:bb:2c:7e:6b:7e:72:cd:90:e6:76:5a:3f:9f: fb:70:97:99:c3:c6:f6:23:3c:47:b2:6f:48:e9:11: e4:1c:86:cd:2d:be:25:52:15:ac:02:2f:7d:90:92: e9:6a:c3:ff:cb:5a:4f:f8:9d:2d:af:30:10:ce:ba: f4:2e:d1:06:02:46:b4:80:fb:a6:e5:42:ac:36:ba: de:68:95:4d:28:85:4d:2e:81:f9:9e:01:33:97:7b: 3a:f5:67:f8:ca:b5:c2:13:7f:9e:c6:0f:5e:4a:f1: 8c:02:82:78:c6:c5:25:07:bb:30:f7:29:bd:2a:c8: c5:95:4a:38:c9:1a:79:a6:bf:d5:e6:f9:6f:cf:cb: 2e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F1:52:8E:58:5E:6E:30:1D:7B:B7:8A:C5:4E:91:CB:3B:1F:65:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/daf96070-358c-3dc7-bf23-2e15b668b39e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:c5:5e:e2:02:e3:70:19:cc:7e:a0:72:15:8a:2b:5b:f4:97: bb:20:62:a6:3b:0e:81:fa:fb:28:7d:03:af:ed:c6:9d:c1:30: 4d:d1:34:6f:21:7a:6b:b9:e8:bb:d5:00:26:e4:b5:92:ad:e4: ce:2f:d4:50:3e:d2:b1:1a:0f:44:23:7d:9b:4d:04:6e:48:3d: 8a:f4:c0:47:78:04:69:64:c7:e4:3b:2a:f5:ea:a4:ba:6f:32: 1e:fc:e9:f8:c4:d5:7e:f0:7f:ee:54:8d:54:5e:05:e0:35:c4: cb:a0:c4:e5:f6:1a:8e:07:6a:a5:a9:a2:00:e1:5c:00:c1:94: 42:87:0e:9c:85:da:30:7c:24:b8:6a:93:6d:8f:42:c3:09:63: c2:4c:ff:bb:ed:62:d6:5f:00:a8:54:88:68:4e:3c:0c:69:a0: af:02:46:cd:e2:db:fb:e0:e6:22:77:cd:5e:6f:15:95:02:83: 26:92:c5:9a:85:06:4d:f1:08:1e:52:19:10:2a:d9:d8:63:c4: b7:4b:4b:dd:82:83:da:73:a2:4d:6c:d4:2b:d7:1e:d6:92:ae: 51:e8:9c:1b:50:0a:de:6d:c9:dd:c7:a6:14:8f:a3:81:65:b9: 56:94:90:f4:cc:4f:98:06:d1:73:7b:c1:81:4a:2e:20:e7:20: cf:f6:4c:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc2K2T0PMjJddVLT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk Y2UwODE1OGUtZTY2Ny00ZTlkLWIwYzctN2UzODk0YzhmZDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgW5c2FtScFgsbCFj+d4F29xzFVQlRYxaSmxD 8RkhibyKL0IlNgV3blVkqAgPkpPvjggIxHztI2q5hWSXfaCIm8FNx6DF/VzPsoYO Fslk2vlQORQHuVepY57KgH9bs7q512yfXjnwgGY2Eb4d1oKG1rHSivb+vzsRZ7ss fmt+cs2Q5nZaP5/7cJeZw8b2IzxHsm9I6RHkHIbNLb4lUhWsAi99kJLpasP/y1pP +J0trzAQzrr0LtEGAka0gPum5UKsNrreaJVNKIVNLoH5ngEzl3s69Wf4yrXCE3+e xg9eSvGMAoJ4xsUlB7sw9ym9KsjFlUo4yRp5pr/V5vlvz8suRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMjxUo5YXm4wHXu3isVOkcs7H2WRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZGFmOTYwNzAtMzU4Yy0z ZGM3LWJmMjMtMmUxNWI2NjhiMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF3FXuIC43AZzH6gchWKK1v0l7sgYqY7DoH6+yh9A6/txp3BME3R NG8hemu56LvVACbktZKt5M4v1FA+0rEaD0QjfZtNBG5IPYr0wEd4BGlkx+Q7KvXq pLpvMh786fjE1X7wf+5UjVReBeA1xMugxOX2Go4HaqWpogDhXADBlEKHDpyF2jB8 JLhqk22PQsMJY8JM/7vtYtZfAKhUiGhOPAxpoK8CRs3i2/vg5iJ3zV5vFZUCgyaS xZqFBk3xCB5SGRAq2dhjxLdLS92Cg9pzok1s1CvXHtaSrlHonBtQCt5tyd3HphSP o4FluVaUkPTMT5gG0XN7wYFKLiDnIM/2TLA= -----END CERTIFICATE-----Generated at Mon Nov 25 13:41:07 2024 by rpki-client on console-fra.rpki-client.org