$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/f3fd2ff9-75b2-3f8b-92b4-789f2a419597.roa File: f3fd2ff9-75b2-3f8b-92b4-789f2a419597.roa (raw, json) Hash identifier: S/zf7nlXPXET1yGNezL7CcOed50vtPH5CbIyvPjEgOc= Subject key identifier: 4D:FE:F7:F9:EA:EC:6D:F7:FC:5C:2A:96:B0:BF:E4:0B:83:1A:D1:23 Certificate issuer: /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Certificate serial: 010D0C9F432858473D2606465BCB5F7435372880 Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/f3fd2ff9-75b2-3f8b-92b4-789f2a419597.roa Signing time: Tue 17 Sep 2024 01:00:31 +0000 ROA not before: Tue 17 Sep 2024 01:00:31 +0000 ROA not after: Mon 16 Dec 2024 02:00:31 +0000 asID: 271 IP address blocks: 2607:f8f0:c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Sep 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3d:26:06:46:5b:cb:5f:74:35:37:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Validity Not Before: Sep 17 01:00:31 2024 GMT Not After : Dec 16 02:00:31 2024 GMT Subject: CN=9ecbca4c-d472-4e1f-afea-7bd6ea59bc83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:52:ff:4d:ef:42:65:8b:89:02:b1:c5:c2:43: 97:7a:a0:9e:3b:9d:b8:0e:94:db:79:3f:ec:e7:19: 90:6d:b2:33:c6:8f:d2:84:88:43:86:63:dd:52:b4: ed:b9:63:2d:6a:60:0d:bc:08:6c:61:be:46:1f:d4: 14:b8:8a:b6:04:6a:b7:2f:3a:dd:8d:50:5e:da:fa: c1:00:8e:8a:84:74:65:35:59:54:f2:f8:fb:a5:40: b0:57:87:41:58:4c:61:bc:6e:e0:94:6c:e3:ae:21: 36:74:33:58:de:04:91:78:0e:2a:38:b6:c4:7c:43: fb:ce:8f:d9:c3:10:36:1d:10:86:3d:c3:04:d6:02: ab:2f:eb:b5:26:d5:4e:b0:85:d5:f5:d1:3e:cf:bc: 1a:c2:a2:89:62:bd:09:3e:39:4f:da:92:c5:0e:87: a7:ef:27:62:07:9a:85:5e:9d:be:91:30:53:9e:71: 91:f5:6c:ce:88:79:98:a5:93:ee:ce:80:a3:5e:4f: 4f:eb:8d:ff:03:ce:e2:2f:33:5a:c1:b8:f4:b5:d8: af:d9:ea:c5:d3:bd:f3:2a:ef:69:cd:a6:9d:e8:64: c9:be:e1:27:b5:71:e3:42:6d:f1:8e:66:5a:b5:c7: d9:e8:9a:77:27:5a:c1:d1:0b:98:7a:ec:47:04:65: d5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:FE:F7:F9:EA:EC:6D:F7:FC:5C:2A:96:B0:BF:E4:0B:83:1A:D1:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/f3fd2ff9-75b2-3f8b-92b4-789f2a419597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl X509v3 Authority Key Identifier: keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8f0:c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:42:c4:1d:f7:a7:c0:30:d3:ec:c1:04:d0:a4:6e:ee:ce:55: fa:69:ed:b4:cf:73:f0:62:b6:61:26:3f:24:c6:ca:cf:a2:b2: a9:29:6f:ab:9f:7e:a5:a3:17:46:93:65:ba:40:5a:97:44:17: 5f:58:42:7b:1b:11:54:83:9c:0d:c8:24:93:8e:53:e5:34:ed: c1:89:fa:63:f1:39:51:dd:32:23:42:a3:d0:23:e0:1d:7c:1a: 3a:cf:0d:31:46:23:ce:21:9a:40:ba:76:dd:36:6a:0a:bc:c1: 4a:ef:de:21:08:ba:9f:c6:7b:fd:7a:62:8e:c0:9d:bb:25:6d: cf:ea:fd:23:16:45:3e:f4:0e:24:c3:46:fd:46:54:9d:64:41: 67:b9:a0:35:f1:06:68:2c:32:25:0c:2c:bc:ae:ff:0b:ec:b9: 92:06:ae:9c:48:2d:42:33:44:0a:79:2c:4c:6d:15:ab:4e:0c: e4:58:e8:30:82:90:08:88:c7:44:64:61:0b:b5:4e:5d:4c:b4: 9b:6e:f8:43:d2:fc:c2:31:f0:2b:ee:f5:77:33:8c:be:59:2a: 29:2a:1c:fe:b1:6d:f7:a5:a6:89:d5:3e:c1:c6:e2:8a:39:c6: 35:9f:17:00:d1:10:17:e1:77:64:23:1f:25:f1:53:4f:a9:29: d0:04:e6:f3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc9JgZGW8tfdDU3KIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux OGNmMB4XDTI0MDkxNzAxMDAzMVoXDTI0MTIxNjAyMDAzMVowLzEtMCsGA1UEAxMk OWVjYmNhNGMtZDQ3Mi00ZTFmLWFmZWEtN2JkNmVhNTliYzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lL/Te9CZYuJArHFwkOXeqCeO524DpTbeT/s 5xmQbbIzxo/ShIhDhmPdUrTtuWMtamANvAhsYb5GH9QUuIq2BGq3LzrdjVBe2vrB AI6KhHRlNVlU8vj7pUCwV4dBWExhvG7glGzjriE2dDNY3gSReA4qOLbEfEP7zo/Z wxA2HRCGPcME1gKrL+u1JtVOsIXV9dE+z7wawqKJYr0JPjlP2pLFDoen7ydiB5qF Xp2+kTBTnnGR9WzOiHmYpZPuzoCjXk9P643/A87iLzNawbj0tdiv2erF073zKu9p zaad6GTJvuEntXHjQm3xjmZatcfZ6Jp3J1rB0QuYeuxHBGXV1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE3+9/nq7G33/FwqlrC/5AuDGtEjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvZjNmZDJmZjktNzViMi0z ZjhiLTkyYjQtNzg5ZjJhNDE5NTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5 MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf48AwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEJCxB33p8Aw0+zBBNCkbu7OVfpp7bTPc/BitmEmPyTGys+isqkp b6uffqWjF0aTZbpAWpdEF19YQnsbEVSDnA3IJJOOU+U07cGJ+mPxOVHdMiNCo9Aj 4B18GjrPDTFGI84hmkC6dt02agq8wUrv3iEIup/Ge/16Yo7Anbslbc/q/SMWRT70 DiTDRv1GVJ1kQWe5oDXxBmgsMiUMLLyu/wvsuZIGrpxILUIzRAp5LExtFatODORY 6DCCkAiIx0RkYQu1Tl1MtJtu+EPS/MIx8Cvu9XczjL5ZKikqHP6xbfelponVPsHG 4oo5xjWfFwDREBfhd2QjHyXxU0+pKdAE5vM= -----END CERTIFICATE-----