$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa File: 935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa (raw, json) Hash identifier: Mb1ouYQGS9e63oZsJ7xn/NdSKoPSpkVWg3+2zIwz3Dg= Subject key identifier: 24:1D:FB:F9:69:1B:DD:1F:39:85:30:C8:14:FB:45:69:3F:6C:F4:12 Certificate issuer: /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Certificate serial: 010D0C9F43285847CE6F3A06D254FB8ECEC1BD40 Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa Signing time: Fri 08 Nov 2024 02:00:27 +0000 ROA not before: Fri 08 Nov 2024 02:00:27 +0000 ROA not after: Thu 06 Feb 2025 02:00:27 +0000 asID: 33000 IP address blocks: 2605:fdc0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ce:6f:3a:06:d2:54:fb:8e:ce:c1:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Validity Not Before: Nov 8 02:00:27 2024 GMT Not After : Feb 6 02:00:27 2025 GMT Subject: CN=92c33320-0896-4e1c-8c85-9ca522b6a1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3d:13:d0:f9:52:df:4a:09:b0:04:44:95:ea: 00:46:76:e6:92:93:ba:2b:75:3e:8c:ce:59:3d:0b: 42:c9:63:a1:ee:54:49:b8:8f:6d:81:eb:83:f1:1b: e3:46:37:64:e8:ae:38:35:82:b2:3f:23:84:22:b9: 78:51:b5:a7:fc:e0:f0:fc:ee:0f:3d:6b:07:b1:ca: 84:41:43:b1:bf:2b:6f:f9:85:25:94:af:6a:56:fc: 24:f6:eb:05:08:25:e5:cf:d2:bd:df:e7:77:7d:ca: dd:e9:38:47:87:e3:b4:f0:3c:97:cc:e6:48:cb:42: 36:6a:5b:a4:3b:dc:ee:2a:99:2e:97:c0:44:4c:d4: 8c:8f:83:ba:22:84:1f:94:da:75:c2:ac:1a:09:eb: c3:75:1f:5d:59:b5:e9:bd:16:27:e6:84:34:96:04: 20:15:1a:61:a7:6f:04:7b:37:ae:ba:e1:94:37:96: 59:a5:9d:10:d2:b7:3a:e8:08:a5:f4:6e:b9:f4:24: fc:40:05:da:11:85:28:d3:07:45:77:e7:1b:08:6c: d5:09:e3:6d:78:1b:3f:5c:2c:16:57:85:33:5b:fa: ca:31:b9:72:98:67:c9:8b:6f:05:a6:78:e5:65:78: 02:bd:a8:58:44:49:46:ac:f0:64:7a:96:45:58:10: ae:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1D:FB:F9:69:1B:DD:1F:39:85:30:C8:14:FB:45:69:3F:6C:F4:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl X509v3 Authority Key Identifier: keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer sbgp-ipAddrBlock: critical IPv6: 2605:fdc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:f8:50:1a:d4:d9:bc:fd:72:88:18:c1:1b:b2:90:b5:7b:36: e1:e7:b2:77:87:82:8d:5b:80:32:67:de:b7:95:80:b0:af:2e: 6f:5b:02:35:f8:4d:7e:66:7c:ff:4a:7b:21:bc:34:8e:b6:37: 03:d8:d4:13:ba:22:90:03:c8:f6:53:01:56:22:6c:29:79:9f: 65:14:8b:cc:16:78:4f:e6:32:b0:b4:21:07:c6:27:a9:3f:25: 4a:0c:40:5b:64:e6:8c:14:4c:d0:63:6b:7b:40:dd:0b:5e:d0: 46:22:2c:39:8a:7b:58:e1:92:b9:b7:46:39:70:50:38:fd:d7: 42:6a:84:74:ed:b5:76:87:a7:23:55:0e:cc:17:a6:68:06:d0: 05:1b:67:bb:73:c1:47:50:5d:26:4e:6a:4e:14:85:7b:10:75: c6:a9:ca:82:28:e7:c1:54:b5:68:33:27:17:82:e2:1f:93:4a: d6:2c:c2:65:53:6c:fc:11:81:f4:60:66:30:22:9a:01:e6:1e: 47:e4:6f:68:35:cb:96:4a:d6:f7:02:71:a9:a8:6e:e8:2a:67: 9d:31:7d:6c:9d:32:f9:b4:b5:f4:1b:43:7a:aa:ad:51:a1:b7: d7:32:33:10:65:31:41:de:ef:90:27:e9:8e:6c:40:6f:04:27: d6:42:5c:ec -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfObzoG0lT7js7BvUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU2ZDJhMmUtOWFjNy00ZDI5LWJkMTUtNzU4NzRkNDlk ZjY2MB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk OTJjMzMzMjAtMDg5Ni00ZTFjLThjODUtOWNhNTIyYjZhMWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj0T0PlS30oJsAREleoARnbmkpO6K3U+jM5Z PQtCyWOh7lRJuI9tgeuD8RvjRjdk6K44NYKyPyOEIrl4UbWn/ODw/O4PPWsHscqE QUOxvytv+YUllK9qVvwk9usFCCXlz9K93+d3fcrd6ThHh+O08DyXzOZIy0I2aluk O9zuKpkul8BETNSMj4O6IoQflNp1wqwaCevDdR9dWbXpvRYn5oQ0lgQgFRphp28E ezeuuuGUN5ZZpZ0Q0rc66Ail9G659CT8QAXaEYUo0wdFd+cbCGzVCeNteBs/XCwW V4UzW/rKMblymGfJi28FpnjlZXgCvahYRElGrPBkepZFWBCuKwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCQd+/lpG90fOYUwyBT7RWk/bPQSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNTZk MmEyZS05YWM3LTRkMjktYmQxNS03NTg3NGQ0OWRmNjYvOTM1MzkzYTktY2FiOC0z MzRmLWFmZDMtMGVhZjNmZmNiNDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjU2ZDJhMmUtOWFjNy00ZDI5LWJk MTUtNzU4NzRkNDlkZjY2LzI1NmQyYTJlLTlhYzctNGQyOS1iZDE1LTc1ODc0ZDQ5 ZGY2Ni5jcmwwHwYDVR0jBBgwFoAU50wJluiEUMDP1YbVRi9w7tJXlQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yNTZkMmEyZS05YWM3LTRkMjktYmQxNS03NTg3 NGQ0OWRmNjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgX9wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBs+FAa1Nm8/XKIGMEbspC1ezbh57J3h4KNW4AyZ963lYCwry5vWwI1 +E1+Znz/SnshvDSOtjcD2NQTuiKQA8j2UwFWImwpeZ9lFIvMFnhP5jKwtCEHxiep PyVKDEBbZOaMFEzQY2t7QN0LXtBGIiw5intY4ZK5t0Y5cFA4/ddCaoR07bV2h6cj VQ7MF6ZoBtAFG2e7c8FHUF0mTmpOFIV7EHXGqcqCKOfBVLVoMycXguIfk0rWLMJl U2z8EYH0YGYwIpoB5h5H5G9oNcuWStb3AnGpqG7oKmedMX1snTL5tLX0G0N6qq1R obfXMjMQZTFB3u+QJ+mObEBvBCfWQlzs -----END CERTIFICATE-----Generated at Mon Nov 25 16:05:25 2024 by rpki-client on console-fra.rpki-client.org