$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa File: 0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa (raw, json) Hash identifier: PLBeqECqBoO8eSpiwH8newysakzMf5LMP1HJwDN+lnM= Subject key identifier: 38:C6:07:5D:D0:D6:48:8F:51:2D:34:D1:86:BA:77:2F:C2:4A:84:50 Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2 Certificate serial: 010D0C9F432858478CB6952EED3760417AA34900 Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa Signing time: Tue 15 Oct 2024 13:00:47 +0000 ROA not before: Tue 15 Oct 2024 13:00:47 +0000 ROA not after: Mon 13 Jan 2025 14:00:47 +0000 asID: 19782 IP address blocks: 2607:ac80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8c:b6:95:2e:ed:37:60:41:7a:a3:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2 Validity Not Before: Oct 15 13:00:47 2024 GMT Not After : Jan 13 14:00:47 2025 GMT Subject: CN=b5300e91-78ba-4565-a404-cbd13db45802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4b:a0:87:b2:a9:e5:b5:97:3b:50:6f:5b:9d: 47:dc:03:3c:2c:cc:19:fa:af:1c:50:af:83:ed:33: 36:37:e4:c2:1a:12:d4:14:67:e6:a6:e2:27:d5:39: d9:21:e4:4d:f6:66:fe:e0:10:60:6d:83:85:14:26: 33:19:95:ea:68:fe:f8:c5:f4:fb:b5:58:87:3b:a6: e6:af:a8:49:25:19:3e:61:f5:19:70:4a:d7:b7:a7: 16:67:83:21:f0:b8:c1:bd:4e:11:f5:5a:5e:b2:75: 52:ac:fa:c7:8f:28:30:07:1c:45:cb:c9:d7:ab:fb: da:47:84:f5:e2:6a:42:51:65:39:c1:0f:51:e0:37: bf:2a:86:db:d5:94:97:c4:b9:fa:84:f6:34:81:83: d0:3e:8d:30:bc:b0:4f:74:f3:43:ba:43:6b:58:93: 37:83:3a:0b:73:8f:b2:8f:0c:8f:f4:4a:42:bf:f2: 6f:ef:4a:ac:17:8c:9d:69:55:90:ab:82:71:40:d8: 47:6a:9f:3b:95:71:78:79:e9:31:5f:9c:63:b0:4c: d8:4e:9a:90:ae:45:50:22:18:ab:3e:dc:68:31:e6: 78:82:aa:a9:59:4d:9e:38:45:e3:25:6b:af:d7:2d: b8:35:fe:e0:f3:bd:41:a6:27:c0:9d:12:2a:95:7f: 54:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C6:07:5D:D0:D6:48:8F:51:2D:34:D1:86:BA:77:2F:C2:4A:84:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl X509v3 Authority Key Identifier: keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer sbgp-ipAddrBlock: critical IPv6: 2607:ac80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:81:5f:7a:85:3e:fc:f0:3d:3c:19:b3:94:57:4e:da:06:7c: 5e:6b:88:7d:94:8a:9e:b9:eb:a1:0e:91:ea:b9:5d:8c:1e:64: ba:77:3c:02:5b:b2:52:a2:7b:92:4b:41:95:7c:cd:c8:99:dd: aa:2a:a3:35:96:0d:af:f7:1f:81:84:06:7f:95:a2:7b:7e:a1: 62:95:69:a4:d3:36:1f:2b:15:7b:a4:32:9c:36:55:6d:12:06: 04:39:c9:e9:83:c3:66:63:15:c5:a6:2d:13:28:99:ca:0f:7c: 16:49:fa:e2:fd:49:ca:18:9c:1f:41:b7:be:26:07:77:9f:5c: 4f:5b:6b:2f:1c:f6:6a:70:66:aa:80:07:7b:ce:ef:04:b7:6f: 7a:bf:51:d0:11:d7:a8:95:92:12:7c:24:b1:ee:a3:98:2c:db: 64:ac:3d:9b:02:f9:69:5f:29:59:b6:f9:0d:e1:23:d0:b2:05: bd:6b:ef:bb:a7:d5:89:7f:b0:d9:9a:41:22:fa:58:21:69:d6: 07:70:ed:f7:88:af:9d:07:5e:a5:72:da:67:ac:da:f0:17:d2: 44:7b:e0:b7:40:e7:2e:03:79:5d:68:34:f2:cd:28:1d:76:0a: 8b:e8:3c:27:04:79:8c:1e:0b:4a:c9:00:95:6f:21:e2:16:a7: 44:3c:a4:e5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeMtpUu7TdgQXqjSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz M2UyMB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk YjUzMDBlOTEtNzhiYS00NTY1LWE0MDQtY2JkMTNkYjQ1ODAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUugh7Kp5bWXO1BvW51H3AM8LMwZ+q8cUK+D 7TM2N+TCGhLUFGfmpuIn1TnZIeRN9mb+4BBgbYOFFCYzGZXqaP74xfT7tViHO6bm r6hJJRk+YfUZcErXt6cWZ4Mh8LjBvU4R9VpesnVSrPrHjygwBxxFy8nXq/vaR4T1 4mpCUWU5wQ9R4De/Kobb1ZSXxLn6hPY0gYPQPo0wvLBPdPNDukNrWJM3gzoLc4+y jwyP9EpCv/Jv70qsF4ydaVWQq4JxQNhHap87lXF4eekxX5xjsEzYTpqQrkVQIhir PtxoMeZ4gqqpWU2eOEXjJWuv1y24Nf7g871BpifAnRIqlX9UlQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDjGB13Q1kiPUS000Ya6dy/CSoRQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvMGQzNmI5MGMtM2VlNS0z YjRkLThhODgtNGE1OGI3MDY4ZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4 MmIyYjMzZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgesgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB1gV96hT788D08GbOUV07aBnxea4h9lIqeueuhDpHquV2MHmS6dzwC W7JSonuSS0GVfM3Imd2qKqM1lg2v9x+BhAZ/laJ7fqFilWmk0zYfKxV7pDKcNlVt EgYEOcnpg8NmYxXFpi0TKJnKD3wWSfri/UnKGJwfQbe+Jgd3n1xPW2svHPZqcGaq gAd7zu8Et296v1HQEdeolZISfCSx7qOYLNtkrD2bAvlpXylZtvkN4SPQsgW9a++7 p9WJf7DZmkEi+lghadYHcO33iK+dB16lctpnrNrwF9JEe+C3QOcuA3ldaDTyzSgd dgqL6DwnBHmMHgtKyQCVbyHiFqdEPKTl -----END CERTIFICATE-----Generated at Fri Nov 22 07:01:53 2024 by rpki-client on console-fra.rpki-client.org