$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/e234c5cf-6ad7-350b-9018-aeef40195ca6.roa File: e234c5cf-6ad7-350b-9018-aeef40195ca6.roa (raw, json) Hash identifier: zlb+jVAd0mlVp1cEqZDpD6eJnXh5LGWw3MygcGw8oSs= Subject key identifier: 94:D9:DB:F5:B3:31:B0:14:8E:CA:0B:00:69:52:66:5C:30:A8:3B:72 Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2 Certificate serial: 010D0C9F432858478CB694E6D3E88BCE62BC0200 Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/e234c5cf-6ad7-350b-9018-aeef40195ca6.roa Signing time: Tue 15 Oct 2024 13:00:47 +0000 ROA not before: Tue 15 Oct 2024 13:00:47 +0000 ROA not after: Mon 13 Jan 2025 14:00:47 +0000 asID: 17 IP address blocks: 2607:ac80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8c:b6:94:e6:d3:e8:8b:ce:62:bc:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2 Validity Not Before: Oct 15 13:00:47 2024 GMT Not After : Jan 13 14:00:47 2025 GMT Subject: CN=11735642-5c5f-45e2-99cb-5d512e5de38d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bc:65:bf:b1:bd:c9:2b:61:05:07:9b:60:5f: 63:87:01:85:a6:20:39:ed:69:5a:61:b0:a8:7b:e3: 05:37:27:1e:e7:1b:94:65:fb:54:06:b7:ef:4b:5b: f1:5d:19:a8:24:05:c0:c2:b9:28:a4:58:1b:7d:65: 57:36:1d:c5:8b:a9:8e:1e:88:79:b0:67:c6:0f:a1: 4b:7d:28:88:18:b6:58:49:c3:04:3d:fe:2a:39:60: 7a:e5:d2:cf:10:ba:c6:7f:e5:dc:db:f5:5b:53:ca: 96:29:ec:ee:d7:d4:4c:0a:2b:1d:b4:a1:7f:16:27: 13:91:81:93:06:87:bc:43:42:41:32:2f:57:87:2b: 48:fa:6f:6f:82:99:07:0a:95:18:dd:c5:5d:20:13: 90:4d:a5:4b:00:04:80:71:43:21:e0:d1:58:08:71: b7:7f:3d:5c:e6:c5:2d:5b:50:bc:48:ff:2b:b4:e9: 1b:2d:f4:78:b4:9e:21:61:8f:d3:2f:51:0a:2a:87: 50:8c:27:63:d6:bf:92:b0:20:38:6c:5f:6e:b6:60: 5a:48:47:2a:5a:23:04:4e:dd:67:27:11:ca:6c:58: 17:25:70:28:ed:4d:ef:94:f2:56:79:fd:b9:90:c8: 40:df:b8:5c:d6:cc:62:48:0a:3d:d9:f8:7b:49:44: 0b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D9:DB:F5:B3:31:B0:14:8E:CA:0B:00:69:52:66:5C:30:A8:3B:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/e234c5cf-6ad7-350b-9018-aeef40195ca6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl X509v3 Authority Key Identifier: keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer sbgp-ipAddrBlock: critical IPv6: 2607:ac80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:0f:91:0f:67:11:c2:1b:d9:49:ab:dc:78:f9:5c:68:8e:ce: 26:d1:07:45:ee:05:5f:c7:7e:02:9c:85:3d:74:51:77:21:7a: df:f5:49:b2:1c:62:b2:60:fc:24:7a:33:51:74:d7:10:d1:ae: 85:f8:b8:d4:66:c1:19:12:27:a7:90:5b:be:e2:83:31:1f:d7: e6:41:0f:df:23:5e:3f:03:52:cd:ab:a3:19:bd:15:c0:b3:8f: 9b:55:d8:f6:d2:f4:76:55:75:ef:14:b2:4b:23:df:af:0a:f8: fc:d2:e3:80:cb:d9:a1:20:af:d0:33:70:3a:83:b7:e0:31:ac: 30:1c:88:ba:d8:db:57:f3:ba:85:9b:60:5c:2c:be:3a:fe:09: 15:13:cc:c8:c6:29:5e:f2:80:93:e4:dd:b4:17:3d:31:dd:7d: 62:e5:de:65:3e:73:53:ee:3f:89:bd:d4:20:47:65:4b:1c:59: 71:e3:26:0b:a4:92:e6:1a:3d:60:1c:de:c3:50:4b:eb:e7:95: 86:9c:78:56:09:ed:0d:e3:71:2d:22:3d:d1:dd:75:55:46:32: c9:b4:c1:f2:c5:6d:43:0b:92:ec:17:2f:8c:aa:82:4a:5a:2e: 20:0d:a0:7f:2b:ba:d1:1f:15:93:e0:12:f0:a8:ee:69:ec:d5: 47:4f:7b:62 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeMtpTm0+iLzmK8AgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz M2UyMB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk MTE3MzU2NDItNWM1Zi00NWUyLTk5Y2ItNWQ1MTJlNWRlMzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bxlv7G9ySthBQebYF9jhwGFpiA57WlaYbCo e+MFNyce5xuUZftUBrfvS1vxXRmoJAXAwrkopFgbfWVXNh3Fi6mOHoh5sGfGD6FL fSiIGLZYScMEPf4qOWB65dLPELrGf+Xc2/VbU8qWKezu19RMCisdtKF/FicTkYGT Boe8Q0JBMi9XhytI+m9vgpkHCpUY3cVdIBOQTaVLAASAcUMh4NFYCHG3fz1c5sUt W1C8SP8rtOkbLfR4tJ4hYY/TL1EKKodQjCdj1r+SsCA4bF9utmBaSEcqWiMETt1n JxHKbFgXJXAo7U3vlPJWef25kMhA37hc1sxiSAo92fh7SUQLCwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJTZ2/WzMbAUjsoLAGlSZlwwqDtyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvZTIzNGM1Y2YtNmFkNy0z NTBiLTkwMTgtYWVlZjQwMTk1Y2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4 MmIyYjMzZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgesgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBcD5EPZxHCG9lJq9x4+Vxojs4m0QdF7gVfx34CnIU9dFF3IXrf9Umy HGKyYPwkejNRdNcQ0a6F+LjUZsEZEienkFu+4oMxH9fmQQ/fI14/A1LNq6MZvRXA s4+bVdj20vR2VXXvFLJLI9+vCvj80uOAy9mhIK/QM3A6g7fgMawwHIi62NtX87qF m2BcLL46/gkVE8zIxile8oCT5N20Fz0x3X1i5d5lPnNT7j+JvdQgR2VLHFlx4yYL pJLmGj1gHN7DUEvr55WGnHhWCe0N43EtIj3R3XVVRjLJtMHyxW1DC5LsFy+MqoJK Wi4gDaB/K7rRHxWT4BLwqO5p7NVHT3ti -----END CERTIFICATE-----Generated at Fri Nov 22 08:06:27 2024 by rpki-client on console-ams.rpki-client.org