$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/4e3ac80f-ec70-375b-829a-2ce166ed5e3b.roa File: 4e3ac80f-ec70-375b-829a-2ce166ed5e3b.roa (raw, json) Hash identifier: YkZLkky/JI2lhV27vU2pZ0l+1O2qKU9iSZFwKxqXbT4= Subject key identifier: AB:24:63:DA:94:63:91:DF:6D:28:2C:21:A3:5F:25:7E:FE:A7:0C:5A Certificate issuer: /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Certificate serial: 010D0C9F43285847B6D4D3C08D69FEFB867D5980 Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/4e3ac80f-ec70-375b-829a-2ce166ed5e3b.roa Signing time: Wed 30 Oct 2024 15:05:53 +0000 ROA not before: Wed 30 Oct 2024 15:05:53 +0000 ROA not after: Tue 28 Jan 2025 16:05:53 +0000 asID: 46733 IP address blocks: 2602:f9f4:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b6:d4:d3:c0:8d:69:fe:fb:86:7d:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Validity Not Before: Oct 30 15:05:53 2024 GMT Not After : Jan 28 16:05:53 2025 GMT Subject: CN=96f39fd4-8a81-446a-8f72-903e6a03f81e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5a:c6:cb:fd:e1:2c:fb:50:d4:89:97:55:86: ed:c1:2e:9a:0c:a0:ba:1b:b7:a2:70:6f:90:2f:58: a4:79:d1:81:1c:25:e2:7a:b6:1f:d8:d4:44:81:16: 45:19:e9:87:04:08:77:9a:b2:36:02:63:cf:9e:2f: 68:87:af:3e:95:5e:e1:fc:88:43:4a:b2:eb:7e:9b: d6:92:d4:27:fc:84:b0:30:bc:fb:27:8f:b0:6c:17: da:a5:73:f0:00:39:ac:78:98:16:b5:d5:bb:34:20: a5:7b:45:97:c3:19:9c:57:f5:e0:ce:b5:b0:97:6f: 18:63:28:f5:c1:5c:d7:1d:51:18:d8:c3:6f:ae:0e: 52:ff:63:41:c3:48:29:6d:dd:31:81:ff:b9:3e:cd: 3d:1f:02:52:34:db:58:0a:69:5c:99:f4:ef:6c:b4: 30:37:f4:61:4d:ec:3f:92:88:0f:75:f2:cc:e6:f5: 30:ef:81:64:d9:27:4b:c4:65:99:b6:61:74:ff:92: 56:10:75:a9:c3:e8:2c:5a:2f:db:a0:9d:ea:2e:bf: e9:0d:b0:cb:65:e7:79:1a:08:b3:57:7a:01:09:9e: 08:99:96:b3:7c:28:5e:80:9c:ec:0c:95:e1:d0:7f: 9a:b5:f0:e5:69:b9:c8:ea:32:f4:34:bc:0b:54:e2: 5c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:24:63:DA:94:63:91:DF:6D:28:2C:21:A3:5F:25:7E:FE:A7:0C:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/4e3ac80f-ec70-375b-829a-2ce166ed5e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl X509v3 Authority Key Identifier: keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9f4:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:03:c2:fe:5b:b3:2a:4b:a3:e2:6d:00:d5:34:36:d1:e5:d6: 3f:d6:2d:e7:67:69:7d:31:8c:bf:3c:07:f2:00:e8:8c:2b:90: 2b:89:4c:f6:56:d8:98:2e:36:07:59:ea:f4:69:08:d2:ba:15: 94:bf:5c:43:13:c2:3a:50:13:6f:fd:33:df:92:93:2c:44:59: d5:a7:88:32:f9:f1:e7:17:d9:80:25:2c:09:ae:f4:bc:96:d6: 1e:05:98:7c:56:8a:f2:be:8d:64:4b:45:33:9f:31:4f:7d:fa: 57:b8:cd:88:cb:70:71:3b:d8:5e:2d:a9:a9:ad:6b:57:ba:a3: 77:b5:da:ac:ba:02:61:3f:b3:b4:17:ed:e6:60:4d:6a:17:31: a6:ef:25:0b:26:7e:fb:55:ab:4a:2e:46:15:eb:6e:54:c5:49: d6:30:d0:91:41:9e:8a:b0:e7:e7:60:a6:b4:22:24:97:17:f2: 26:5f:3a:07:c5:78:34:a6:78:d2:98:80:83:f5:2a:5e:67:fc: 80:21:dd:3d:17:e9:22:d2:c8:99:02:0f:50:cb:0a:c8:ac:83: bb:8d:8f:ba:ed:4f:03:95:0f:8c:ff:81:f5:de:8f:81:23:a4: 59:01:85:66:17:b7:a7:94:da:4a:56:1f:98:a0:5a:79:06:b3: cf:a7:e0:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe21NPAjWn++4Z9WYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMyYThkOTUtMDI5MC00MjE4LTliMDgtZDE1N2U1ZjEy N2Y5MB4XDTI0MTAzMDE1MDU1M1oXDTI1MDEyODE2MDU1M1owLzEtMCsGA1UEAxMk OTZmMzlmZDQtOGE4MS00NDZhLThmNzItOTAzZTZhMDNmODFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVrGy/3hLPtQ1ImXVYbtwS6aDKC6G7eicG+Q L1ikedGBHCXierYf2NREgRZFGemHBAh3mrI2AmPPni9oh68+lV7h/IhDSrLrfpvW ktQn/ISwMLz7J4+wbBfapXPwADmseJgWtdW7NCCle0WXwxmcV/XgzrWwl28YYyj1 wVzXHVEY2MNvrg5S/2NBw0gpbd0xgf+5Ps09HwJSNNtYCmlcmfTvbLQwN/RhTew/ kogPdfLM5vUw74Fk2SdLxGWZtmF0/5JWEHWpw+gsWi/boJ3qLr/pDbDLZed5Ggiz V3oBCZ4ImZazfChegJzsDJXh0H+atfDlabnI6jL0NLwLVOJcGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKskY9qUY5HfbSgsIaNfJX7+pwxaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJh OGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3ZTVmMTI3ZjkvNGUzYWM4MGYtZWM3MC0z NzViLTgyOWEtMmNlMTY2ZWQ1ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGMyYThkOTUtMDI5MC00MjE4LTli MDgtZDE1N2U1ZjEyN2Y5LzhjMmE4ZDk1LTAyOTAtNDIxOC05YjA4LWQxNTdlNWYx MjdmOS5jcmwwHwYDVR0jBBgwFoAU2RRqJQvMvb5Gl37hbpq11jKC6Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJhOGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3 ZTVmMTI3ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL59AAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFIDwv5bsypLo+JtANU0NtHl1j/WLednaX0xjL88B/IA6IwrkCuJ TPZW2JguNgdZ6vRpCNK6FZS/XEMTwjpQE2/9M9+SkyxEWdWniDL58ecX2YAlLAmu 9LyW1h4FmHxWivK+jWRLRTOfMU99+le4zYjLcHE72F4tqamta1e6o3e12qy6AmE/ s7QX7eZgTWoXMabvJQsmfvtVq0ouRhXrblTFSdYw0JFBnoqw5+dgprQiJJcX8iZf OgfFeDSmeNKYgIP1Kl5n/IAh3T0X6SLSyJkCD1DLCsisg7uNj7rtTwOVD4z/gfXe j4EjpFkBhWYXt6eU2kpWH5igWnkGs8+n4EY= -----END CERTIFICATE-----Generated at Thu Nov 21 17:30:56 2024 by rpki-client on console-fra.rpki-client.org