$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/b27b5fc5-f00a-34aa-bb4a-7a248aa6e187.roa File: b27b5fc5-f00a-34aa-bb4a-7a248aa6e187.roa (raw, json) Hash identifier: qJgrz9GMR7a2zPrS1ETCk8rG+3FiWPjnGrLB3F7GcTU= Subject key identifier: A3:ED:D5:E4:AF:47:66:36:66:1A:91:DE:6C:7B:D9:3E:D8:A0:11:82 Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2 Certificate serial: 010D0C9F432858478CB6951E1F81E1CB34B17B80 Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/b27b5fc5-f00a-34aa-bb4a-7a248aa6e187.roa Signing time: Tue 15 Oct 2024 13:00:47 +0000 ROA not before: Tue 15 Oct 2024 13:00:47 +0000 ROA not after: Mon 13 Jan 2025 14:00:47 +0000 asID: 397501 IP address blocks: 2607:ac80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8c:b6:95:1e:1f:81:e1:cb:34:b1:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2 Validity Not Before: Oct 15 13:00:47 2024 GMT Not After : Jan 13 14:00:47 2025 GMT Subject: CN=cc4325bc-a3b0-4f50-8186-82b3baff079e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:29:e4:da:64:14:17:af:00:cc:44:28:7a:44: 6e:85:19:3e:c1:23:45:d3:cb:98:b9:9f:d9:55:d2: 8d:55:b2:a6:d6:85:42:19:7c:2c:79:35:b6:ee:e9: ea:1f:2e:3e:ad:a2:7c:34:32:ac:06:da:90:73:4e: 11:7d:ce:81:cf:8e:14:10:0d:f6:55:16:68:06:c1: f1:87:b4:a0:95:7e:3e:b0:f5:1b:80:e9:d4:13:29: 6e:3e:9b:f4:87:77:9d:92:85:35:22:d7:05:b3:cd: 0e:0e:c0:11:f4:f4:f4:57:da:a7:da:d6:cd:a0:23: a6:46:5a:b0:2d:1f:63:e3:ce:c7:b9:e8:f8:de:e5: 4e:17:0c:78:b9:07:bf:33:ee:5c:65:c7:18:f9:b5: d2:7b:5e:82:e9:36:8e:f9:df:71:66:e5:4f:fc:c2: 4c:3f:93:dd:68:0a:8f:be:fd:8b:d9:ba:b6:2b:bf: ed:32:53:49:bc:f3:75:67:25:05:33:66:0c:9a:2d: 91:e8:c9:57:a4:c3:f8:4d:7f:58:1b:11:58:2e:ae: de:03:a5:32:be:1c:bd:71:8f:e4:3e:a1:b1:69:76: d4:5b:ed:45:39:2d:87:d8:e2:95:e3:58:29:86:59: 12:bd:01:f9:27:cb:e1:15:e0:de:5a:f1:0b:22:6c: 06:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:ED:D5:E4:AF:47:66:36:66:1A:91:DE:6C:7B:D9:3E:D8:A0:11:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/b27b5fc5-f00a-34aa-bb4a-7a248aa6e187.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl X509v3 Authority Key Identifier: keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer sbgp-ipAddrBlock: critical IPv6: 2607:ac80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:f7:43:86:70:f0:50:d5:21:44:11:a1:58:33:80:34:92:da: 72:62:4d:20:46:6b:93:57:19:00:04:ed:dd:90:5d:02:24:03: b1:c0:33:bb:4e:f8:ad:36:d4:11:14:bb:ba:87:42:52:b3:07: a4:7d:6e:31:4f:1e:ac:c2:18:8b:fc:00:56:d1:44:68:31:20: 7c:77:c5:e2:af:a4:e8:3f:74:8f:fe:67:2f:df:01:06:36:ef: 50:23:84:7b:05:1f:a0:9d:f4:d3:6e:21:05:38:87:74:b4:f6: bf:93:94:af:66:82:cd:3d:fe:1e:b4:3d:0d:10:0a:d4:07:2d: ab:54:c4:96:44:52:80:80:96:01:a0:36:8d:ca:de:5d:f5:f8: d9:23:7a:09:df:6c:5e:e4:8c:aa:28:f8:27:99:42:4e:8e:ef: 98:9b:ba:ef:1d:3f:e0:3c:21:3d:83:df:4b:07:28:f8:b9:01: a1:57:6f:3f:ec:f5:a1:6d:da:c7:d5:06:79:78:ae:74:a7:cd: 57:7e:36:49:07:44:80:44:48:4e:82:af:6b:bc:63:fd:f9:ea: cf:5e:6a:62:95:40:71:69:31:2c:62:84:c1:6a:8f:ea:ff:e1: fc:dc:ba:11:ef:72:48:77:8c:b8:4a:47:3f:50:ef:0a:e3:76: e3:05:03:b3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeMtpUeH4HhyzSxe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz M2UyMB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk Y2M0MzI1YmMtYTNiMC00ZjUwLTgxODYtODJiM2JhZmYwNzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCnk2mQUF68AzEQoekRuhRk+wSNF08uYuZ/Z VdKNVbKm1oVCGXwseTW27unqHy4+raJ8NDKsBtqQc04Rfc6Bz44UEA32VRZoBsHx h7SglX4+sPUbgOnUEyluPpv0h3edkoU1ItcFs80ODsAR9PT0V9qn2tbNoCOmRlqw LR9j487Huej43uVOFwx4uQe/M+5cZccY+bXSe16C6TaO+d9xZuVP/MJMP5PdaAqP vv2L2bq2K7/tMlNJvPN1ZyUFM2YMmi2R6MlXpMP4TX9YGxFYLq7eA6Uyvhy9cY/k PqGxaXbUW+1FOS2H2OKV41gphlkSvQH5J8vhFeDeWvELImwG8wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKPt1eSvR2Y2ZhqR3mx72T7YoBGCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvYjI3YjVmYzUtZjAwYS0z NGFhLWJiNGEtN2EyNDhhYTZlMTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4 MmIyYjMzZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgesgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBN90OGcPBQ1SFEEaFYM4A0ktpyYk0gRmuTVxkABO3dkF0CJAOxwDO7 TvitNtQRFLu6h0JSswekfW4xTx6swhiL/ABW0URoMSB8d8Xir6ToP3SP/mcv3wEG Nu9QI4R7BR+gnfTTbiEFOId0tPa/k5SvZoLNPf4etD0NEArUBy2rVMSWRFKAgJYB oDaNyt5d9fjZI3oJ32xe5IyqKPgnmUJOju+Ym7rvHT/gPCE9g99LByj4uQGhV28/ 7PWhbdrH1QZ5eK50p81XfjZJB0SAREhOgq9rvGP9+erPXmpilUBxaTEsYoTBao/q /+H83LoR73JId4y4Skc/UO8K43bjBQOz -----END CERTIFICATE-----Generated at Fri Nov 22 21:09:49 2024 by rpki-client on console-fra.rpki-client.org