$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/c8a7e846-09f2-3189-8880-b661bfde1d4d.roa File: c8a7e846-09f2-3189-8880-b661bfde1d4d.roa (raw, json) Hash identifier: A38g7OU21IcbFLGL9pZLSpYV8l810xZlIaHKh4dnsVw= Subject key identifier: 89:3C:71:A1:B4:40:B1:BD:A1:30:FE:A9:6A:15:F8:C4:17:EB:84:29 Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2 Certificate serial: 010D0C9F432858478CB694FB69FD84E16976B380 Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/c8a7e846-09f2-3189-8880-b661bfde1d4d.roa Signing time: Tue 15 Oct 2024 13:00:47 +0000 ROA not before: Tue 15 Oct 2024 13:00:47 +0000 ROA not after: Mon 13 Jan 2025 14:00:47 +0000 asID: 397511 IP address blocks: 2607:ac80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8c:b6:94:fb:69:fd:84:e1:69:76:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2 Validity Not Before: Oct 15 13:00:47 2024 GMT Not After : Jan 13 14:00:47 2025 GMT Subject: CN=ca04c85d-5812-418f-b9b4-315c35e3a92f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6d:78:bf:29:7c:c5:8b:10:2e:65:3d:d7:b2: f5:ef:2b:60:77:a1:2e:d2:d8:9e:17:66:b5:bd:6d: 29:89:70:f9:63:dc:60:c7:14:53:e9:e4:4e:bf:a6: 4b:00:24:61:4a:8d:7b:a8:52:bd:5d:66:38:60:23: 95:91:54:27:b9:c0:79:c5:74:29:c1:2e:35:10:ef: 61:1e:e3:8f:7c:74:7f:e6:59:2a:64:d0:65:45:cc: d5:35:74:50:80:84:ce:da:71:ca:99:cf:b3:bd:be: 58:0b:32:1a:ee:3a:53:9a:fc:c0:f8:fe:da:a3:44: f1:f4:8a:c7:28:93:52:91:03:23:30:c1:5a:b5:87: 76:e8:32:f0:a2:6b:13:f4:c2:23:d3:d3:28:38:ff: 2f:c0:a7:ca:75:10:bb:5e:d8:3b:1e:64:8e:9e:d2: c9:f9:8f:10:93:80:0d:2d:c5:96:71:c3:1e:1e:1c: 2d:63:47:93:ba:8a:ae:98:f5:75:62:1b:67:7a:09: 02:87:12:75:6c:5e:ff:19:5e:06:6f:da:48:4b:a1: 98:7c:28:1b:8b:e9:13:58:ed:27:aa:0a:f4:bb:76: 98:ed:5a:57:ce:ab:7c:a9:c9:b2:aa:07:e1:a0:37: a9:a6:40:5d:2b:57:ee:97:30:2b:a7:ed:e4:99:7e: 86:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3C:71:A1:B4:40:B1:BD:A1:30:FE:A9:6A:15:F8:C4:17:EB:84:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/c8a7e846-09f2-3189-8880-b661bfde1d4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl X509v3 Authority Key Identifier: keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer sbgp-ipAddrBlock: critical IPv6: 2607:ac80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:7b:3d:5c:b2:e3:33:89:35:44:1f:5d:20:2b:85:9c:4a:5f: 5b:a0:ca:16:3e:1e:fd:d0:af:45:c8:6e:fa:51:29:42:ec:78: 70:63:d6:9d:12:de:6a:cf:6b:08:f6:88:5c:e3:10:bc:bf:42: 8f:82:2f:4d:6d:2d:8d:ce:b8:23:01:37:a0:0a:70:52:d7:e7: 7a:2f:6b:d0:a2:d9:d3:29:c6:d6:43:eb:c1:c2:50:f9:c1:c5: 18:e4:8d:ff:34:b5:7b:bb:86:1e:26:2f:f1:86:34:53:f3:95: cc:7d:7c:46:0f:ef:4b:0b:da:e1:a2:da:75:ac:42:34:f2:21: a9:7b:84:f9:08:2d:90:cf:ad:0f:4e:fe:65:91:71:c7:72:35: 51:81:d4:7d:ff:eb:5e:62:89:03:66:34:80:00:dd:6b:ce:d3: 66:a0:1a:df:76:e5:44:3f:6d:8a:cf:cf:8f:68:d1:92:c1:d2: 0c:cc:92:0c:7d:3a:78:de:d8:68:86:66:fa:ee:8f:d1:cd:b0: da:3c:02:80:c9:cf:9d:9f:40:da:b7:f6:d5:6e:9a:ba:c1:3c: 91:30:bb:ae:b2:7d:29:10:8f:c3:34:b4:3e:90:a9:d6:7f:9e: 05:40:a8:1d:de:f5:90:8f:00:71:89:a0:95:10:b7:d9:78:ac: dd:1c:a4:f7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeMtpT7af2E4Wl2s4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz M2UyMB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk Y2EwNGM4NWQtNTgxMi00MThmLWI5YjQtMzE1YzM1ZTNhOTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgG14vyl8xYsQLmU917L17ytgd6Eu0tieF2a1 vW0piXD5Y9xgxxRT6eROv6ZLACRhSo17qFK9XWY4YCOVkVQnucB5xXQpwS41EO9h HuOPfHR/5lkqZNBlRczVNXRQgITO2nHKmc+zvb5YCzIa7jpTmvzA+P7ao0Tx9IrH KJNSkQMjMMFatYd26DLwomsT9MIj09MoOP8vwKfKdRC7Xtg7HmSOntLJ+Y8Qk4AN LcWWccMeHhwtY0eTuoqumPV1YhtnegkChxJ1bF7/GV4Gb9pIS6GYfCgbi+kTWO0n qgr0u3aY7VpXzqt8qcmyqgfhoDeppkBdK1fulzArp+3kmX6GkwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIk8caG0QLG9oTD+qWoV+MQX64QpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvYzhhN2U4NDYtMDlmMi0z MTg5LTg4ODAtYjY2MWJmZGUxZDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4 MmIyYjMzZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgesgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAbez1csuMziTVEH10gK4WcSl9boMoWPh790K9FyG76USlC7HhwY9ad Et5qz2sI9ohc4xC8v0KPgi9NbS2NzrgjATegCnBS1+d6L2vQotnTKcbWQ+vBwlD5 wcUY5I3/NLV7u4YeJi/xhjRT85XMfXxGD+9LC9rhotp1rEI08iGpe4T5CC2Qz60P Tv5lkXHHcjVRgdR9/+teYokDZjSAAN1rztNmoBrfduVEP22Kz8+PaNGSwdIMzJIM fTp43thohmb67o/RzbDaPAKAyc+dn0Dat/bVbpq6wTyRMLuusn0pEI/DNLQ+kKnW f54FQKgd3vWQjwBxiaCVELfZeKzdHKT3 -----END CERTIFICATE-----Generated at Fri Nov 22 07:01:53 2024 by rpki-client on console-fra.rpki-client.org