$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d5daf9f5-1db5-37fb-be60-626d8a02b645.roa File: d5daf9f5-1db5-37fb-be60-626d8a02b645.roa (raw, json) Hash identifier: ljNlIXrSnxPpcZER4rRPuc134+V/V1XtdiCM7cJC9Bw= Subject key identifier: FF:D1:B1:CA:0E:71:41:6A:7F:06:42:95:77:E6:0A:40:48:A3:96:4E Certificate issuer: /CN=d169cca5-b6c2-41f4-a92f-e74d5713d2c1 Certificate serial: 010D0C9F43285847BAC6B0157F4A7B7F703326A0 Authority key identifier: BD:39:CD:79:F4:8B:24:EF:8F:69:8D:DC:3F:98:CD:0C:AB:81:F8:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d5daf9f5-1db5-37fb-be60-626d8a02b645.roa Signing time: Fri 01 Nov 2024 01:00:30 +0000 ROA not before: Fri 01 Nov 2024 01:00:30 +0000 ROA not after: Thu 30 Jan 2025 02:00:30 +0000 asID: 395660 IP address blocks: 2620:133:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ba:c6:b0:15:7f:4a:7b:7f:70:33:26:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d169cca5-b6c2-41f4-a92f-e74d5713d2c1 Validity Not Before: Nov 1 01:00:30 2024 GMT Not After : Jan 30 02:00:30 2025 GMT Subject: CN=f2742e7f-4fff-4247-8e6c-c7bc5f76bfc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9b:6e:67:49:f3:a4:0b:f1:d8:b5:b2:24:29: d0:63:45:ef:c8:4e:62:5d:8c:0b:b5:a8:8d:af:a7: fe:a4:74:ed:0a:cb:2d:87:e8:ca:c0:85:8c:d0:cc: db:75:b7:1d:74:08:06:11:8b:95:7c:72:d5:28:95: 7e:23:cb:51:61:21:55:cc:69:8a:77:ea:23:c8:e6: db:0a:9a:be:85:bd:22:38:5b:a3:a7:88:fa:6f:44: 20:3d:1c:c4:e9:ce:8c:03:fa:2e:1e:f7:33:ee:16: ee:a8:19:08:88:e5:bd:f8:83:30:30:ef:47:ff:eb: f3:c9:eb:ce:b6:b8:6a:9d:8f:0a:d5:e0:92:11:95: f9:54:67:d0:4a:08:14:ee:90:50:63:19:ac:f2:46: 06:90:05:e0:4c:8c:2a:b5:6b:bc:e9:91:2e:61:67: f0:4a:bd:a0:b4:03:3b:8d:c8:d6:bb:11:54:55:d9: 31:85:85:8c:a4:f6:86:20:d8:f9:c5:0a:c3:ba:f8: 21:03:3d:a5:1e:cc:ab:fa:fa:5e:ea:90:d6:98:0c: ff:4d:dc:1d:48:b4:33:d3:54:0d:19:48:67:29:d5: f8:12:6a:2f:0c:42:ea:ef:03:6e:0c:77:66:fe:09: 94:5e:a6:1c:1a:4c:10:f8:26:0e:eb:49:f2:cc:e8: 24:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D1:B1:CA:0E:71:41:6A:7F:06:42:95:77:E6:0A:40:48:A3:96:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d5daf9f5-1db5-37fb-be60-626d8a02b645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.crl X509v3 Authority Key Identifier: keyid:BD:39:CD:79:F4:8B:24:EF:8F:69:8D:DC:3F:98:CD:0C:AB:81:F8:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.cer sbgp-ipAddrBlock: critical IPv6: 2620:133:b000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:62:44:e9:74:b3:57:4d:fe:1d:63:4a:79:2d:a3:d7:ea:e1: ce:f4:e3:19:93:0e:e7:a7:cd:3e:db:4e:ac:0a:68:d3:e4:84: 27:6f:20:99:5e:bb:a1:29:89:eb:fb:79:53:75:79:b9:d6:7c: 2c:a5:37:9c:40:b4:36:81:5d:56:3e:1a:5e:db:ca:60:a8:6a: 23:3e:2e:f5:1a:d7:ea:66:fd:94:ef:64:04:a5:15:41:da:69: 23:b6:5d:90:98:9e:8a:54:10:2f:fb:17:36:b3:f0:e4:e2:ba: 84:61:17:98:5d:36:9e:06:6e:68:9f:47:6e:d9:31:26:23:12: 14:35:ca:ac:00:b6:8c:38:84:35:f3:d4:f4:05:dc:10:76:11: 5a:2c:39:7c:7e:3b:57:88:84:6b:17:98:24:73:53:ef:87:46: 1c:c7:d2:01:7b:4e:49:ba:08:86:41:82:49:8d:29:15:50:92: 5a:06:d5:bc:09:24:f0:52:af:3c:31:87:6b:52:38:2a:18:29: 63:57:e3:00:a3:a1:eb:39:8b:80:cd:74:59:c9:3a:33:ae:7e: 25:ea:8b:ff:0b:50:33:d6:1a:f9:9f:c6:9d:14:3b:df:5c:a0: a3:11:c9:12:7c:b8:88:81:47:78:16:87:7c:d8:3c:a7:c3:4a: 89:b2:89:cb -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEe6xrAVf0p7f3AzJqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE2OWNjYTUtYjZjMi00MWY0LWE5MmYtZTc0ZDU3MTNk MmMxMB4XDTI0MTEwMTAxMDAzMFoXDTI1MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ZjI3NDJlN2YtNGZmZi00MjQ3LThlNmMtYzdiYzVmNzZiZmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZtuZ0nzpAvx2LWyJCnQY0XvyE5iXYwLtaiN r6f+pHTtCssth+jKwIWM0MzbdbcddAgGEYuVfHLVKJV+I8tRYSFVzGmKd+ojyObb Cpq+hb0iOFujp4j6b0QgPRzE6c6MA/ouHvcz7hbuqBkIiOW9+IMwMO9H/+vzyevO trhqnY8K1eCSEZX5VGfQSggU7pBQYxms8kYGkAXgTIwqtWu86ZEuYWfwSr2gtAM7 jcjWuxFUVdkxhYWMpPaGINj5xQrDuvghAz2lHsyr+vpe6pDWmAz/TdwdSLQz01QN GUhnKdX4EmovDELq7wNuDHdm/gmUXqYcGkwQ+CYO60nyzOgk9wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFP/RscoOcUFqfwZClXfmCkBIo5ZOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMTY5 Y2NhNS1iNmMyLTQxZjQtYTkyZi1lNzRkNTcxM2QyYzEvZDVkYWY5ZjUtMWRiNS0z N2ZiLWJlNjAtNjI2ZDhhMDJiNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDE2OWNjYTUtYjZjMi00MWY0LWE5 MmYtZTc0ZDU3MTNkMmMxL2QxNjljY2E1LWI2YzItNDFmNC1hOTJmLWU3NGQ1NzEz ZDJjMS5jcmwwHwYDVR0jBBgwFoAUvTnNefSLJO+PaY3cP5jNDKuB+JowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMTY5Y2NhNS1iNmMyLTQxZjQtYTkyZi1lNzRk NTcxM2QyYzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABM7Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAeWJE6XSzV03+HWNKeS2j1+rhzvTjGZMO56fNPttOrApo0+SEJ28g mV67oSmJ6/t5U3V5udZ8LKU3nEC0NoFdVj4aXtvKYKhqIz4u9RrX6mb9lO9kBKUV QdppI7ZdkJieilQQL/sXNrPw5OK6hGEXmF02ngZuaJ9HbtkxJiMSFDXKrAC2jDiE NfPU9AXcEHYRWiw5fH47V4iEaxeYJHNT74dGHMfSAXtOSboIhkGCSY0pFVCSWgbV vAkk8FKvPDGHa1I4KhgpY1fjAKOh6zmLgM10Wck6M65+JeqL/wtQM9Ya+Z/GnRQ7 31ygoxHJEny4iIFHeBaHfNg8p8NKibKJyw== -----END CERTIFICATE-----Generated at Thu Nov 21 19:16:41 2024 by rpki-client on console-fra.rpki-client.org