$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/d829b003-3d7f-36c9-a287-f6e66f824c8d.roa File: d829b003-3d7f-36c9-a287-f6e66f824c8d.roa (raw, json) Hash identifier: 9zb2PWaP664ZlJ70mE5B56BifNGyn5zuAlBIcp33NKo= Subject key identifier: BC:E2:DC:1E:27:0D:CE:D2:8E:3C:68:6C:96:31:6F:DB:0E:A8:F6:E8 Certificate issuer: /CN=1c5b9809-1c38-4760-b9bf-096829114292 Certificate serial: 010D0C9F43285847AF9BE7D5DB00F0A3D11D8B80 Authority key identifier: D6:43:1E:5E:EA:50:DB:7F:7F:D5:3B:12:3F:7C:9A:05:E5:DC:49:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/d829b003-3d7f-36c9-a287-f6e66f824c8d.roa Signing time: Mon 28 Oct 2024 01:00:32 +0000 ROA not before: Mon 28 Oct 2024 01:00:32 +0000 ROA not after: Sun 26 Jan 2025 02:00:32 +0000 asID: 32524 IP address blocks: 2604:dc80::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:af:9b:e7:d5:db:00:f0:a3:d1:1d:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5b9809-1c38-4760-b9bf-096829114292 Validity Not Before: Oct 28 01:00:32 2024 GMT Not After : Jan 26 02:00:32 2025 GMT Subject: CN=4a44769e-01a6-4781-bf5b-71c8b9cbe2c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:38:2f:ea:32:a7:4f:f3:a0:7a:99:96:d3:a9: 24:b6:a0:02:81:ec:ae:1b:37:bc:22:4e:f1:c5:8b: 69:bc:02:13:af:e1:a1:a5:00:9b:4b:98:0e:a2:fa: bb:21:ae:8e:95:62:f2:7d:1a:75:83:b5:72:63:37: 32:76:f8:b8:51:f1:c0:e0:f3:8f:ce:b0:19:f0:56: 05:97:40:61:db:e2:d5:e6:92:64:99:2d:9f:58:be: 43:55:1a:32:1d:5d:23:6c:be:49:67:e3:a2:b6:4a: 62:27:d6:58:a2:00:38:43:d7:40:70:b4:55:2a:21: 9c:17:f1:04:36:ad:cd:f3:38:5b:a6:59:3c:48:bb: fc:65:76:db:11:cd:d0:c1:a9:88:93:ce:2a:95:d5: 6a:6a:b3:de:64:21:b0:20:c2:0d:42:38:2e:0b:c0: 81:50:51:9e:a3:13:d4:99:35:16:00:03:c9:15:84: 44:e7:4e:ba:a2:17:1c:8b:c8:6c:eb:6c:e1:31:eb: e7:11:01:ea:11:3a:8d:11:61:eb:35:24:59:6e:d4: 88:83:92:3e:72:0e:8a:68:a3:3c:39:fd:fe:bf:b0: 73:24:29:37:73:c3:f2:65:6f:57:b8:60:0d:b2:2b: 42:1d:04:cd:35:15:58:a5:13:11:13:51:a8:1c:75: 04:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E2:DC:1E:27:0D:CE:D2:8E:3C:68:6C:96:31:6F:DB:0E:A8:F6:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/d829b003-3d7f-36c9-a287-f6e66f824c8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.crl X509v3 Authority Key Identifier: keyid:D6:43:1E:5E:EA:50:DB:7F:7F:D5:3B:12:3F:7C:9A:05:E5:DC:49:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer sbgp-ipAddrBlock: critical IPv6: 2604:dc80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:86:8e:64:a5:f0:b0:4f:11:3e:fd:94:73:37:60:b6:ac:a7: 21:ef:d2:c0:e7:de:b2:d3:4a:5e:db:e4:5a:de:90:0d:e0:c6: 78:8b:cc:35:f6:ab:f5:c6:c2:fe:3a:d6:e9:6c:cf:d9:b0:32: be:2f:6a:98:75:0b:a0:c7:d5:82:ba:d6:b0:89:47:23:61:5e: 4d:b9:ec:63:23:8a:7d:f8:1b:1a:43:91:76:7f:ba:9f:9e:23: f5:82:0f:a9:a3:83:00:a3:f4:01:be:78:22:13:4f:ad:c0:25: 27:8a:19:fb:66:50:67:d1:5b:a4:0d:a5:ea:5d:1d:6a:7b:ee: e0:7f:32:14:e9:16:60:75:21:b5:86:39:88:b4:83:b2:74:26: f1:9b:f5:55:bd:3c:ef:8d:9a:f8:18:2a:e9:19:ec:b3:8e:44: ee:4b:dd:5c:09:ce:49:05:63:28:8f:e7:d1:c2:73:2a:6f:aa: c9:c1:d9:36:a4:a3:08:d4:2e:ac:b8:1f:fb:3b:37:6a:9a:bb: b3:5f:25:95:60:46:b1:03:f1:f1:6c:b2:4a:d8:85:e1:45:be: 03:1d:77:d7:2d:41:c6:30:02:22:7c:b4:99:98:7b:9b:f4:9b: 7c:94:44:32:c5:69:b5:79:cd:b3:15:fc:56:1c:e0:f3:bf:1b: ec:c6:41:3a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEevm+fV2wDwo9Edi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1Yjk4MDktMWMzOC00NzYwLWI5YmYtMDk2ODI5MTE0 MjkyMB4XDTI0MTAyODAxMDAzMloXDTI1MDEyNjAyMDAzMlowLzEtMCsGA1UEAxMk NGE0NDc2OWUtMDFhNi00NzgxLWJmNWItNzFjOGI5Y2JlMmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDgv6jKnT/OgepmW06kktqACgeyuGze8Ik7x xYtpvAITr+GhpQCbS5gOovq7Ia6OlWLyfRp1g7VyYzcydvi4UfHA4POPzrAZ8FYF l0Bh2+LV5pJkmS2fWL5DVRoyHV0jbL5JZ+OitkpiJ9ZYogA4Q9dAcLRVKiGcF/EE Nq3N8zhbplk8SLv8ZXbbEc3QwamIk84qldVqarPeZCGwIMINQjguC8CBUFGeoxPU mTUWAAPJFYRE5066ohcci8hs62zhMevnEQHqETqNEWHrNSRZbtSIg5I+cg6KaKM8 Of3+v7BzJCk3c8PyZW9XuGANsitCHQTNNRVYpRMRE1GoHHUEtQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLzi3B4nDc7SjjxobJYxb9sOqPboMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYzVi OTgwOS0xYzM4LTQ3NjAtYjliZi0wOTY4MjkxMTQyOTIvZDgyOWIwMDMtM2Q3Zi0z NmM5LWEyODctZjZlNjZmODI0YzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWM1Yjk4MDktMWMzOC00NzYwLWI5 YmYtMDk2ODI5MTE0MjkyLzFjNWI5ODA5LTFjMzgtNDc2MC1iOWJmLTA5NjgyOTEx NDI5Mi5jcmwwHwYDVR0jBBgwFoAU1kMeXupQ239/1TsSP3yaBeXcSekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYzViOTgwOS0xYzM4LTQ3NjAtYjliZi0wOTY4 MjkxMTQyOTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTcgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBsho5kpfCwTxE+/ZRzN2C2rKch79LA596y00pe2+Ra3pAN4MZ4i8w1 9qv1xsL+OtbpbM/ZsDK+L2qYdQugx9WCutawiUcjYV5NuexjI4p9+BsaQ5F2f7qf niP1gg+po4MAo/QBvngiE0+twCUnihn7ZlBn0VukDaXqXR1qe+7gfzIU6RZgdSG1 hjmItIOydCbxm/VVvTzvjZr4GCrpGeyzjkTuS91cCc5JBWMoj+fRwnMqb6rJwdk2 pKMI1C6suB/7OzdqmruzXyWVYEaxA/HxbLJK2IXhRb4DHXfXLUHGMAIifLSZmHub 9Jt8lEQyxWm1ec2zFfxWHODzvxvsxkE6 -----END CERTIFICATE-----Generated at Fri Nov 22 21:09:45 2024 by rpki-client on console-fra.rpki-client.org