$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/7c0cede4-8012-3c79-9d4f-59f194f7d629.roa File: 7c0cede4-8012-3c79-9d4f-59f194f7d629.roa (raw, json) Hash identifier: 0P8U1dAwwD+nawqyKIcjXxAPjxZLKnnJC7OfhJZKdE0= Subject key identifier: 66:BA:B0:03:60:51:E6:44:47:C8:8B:B0:15:97:75:DA:FC:26:5C:BF Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Certificate serial: 010D0C9F43285847BEF6D5DD3C2BF51CEE5E7E80 Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/7c0cede4-8012-3c79-9d4f-59f194f7d629.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 11810 IP address blocks: 2620:98:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f6:d5:dd:3c:2b:f5:1c:ee:5e:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=418ce7f8-457b-4fbe-9335-e38039624a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:81:3b:c6:c9:9e:ac:3e:98:c4:80:5a:ed:88: ea:07:d0:ec:0a:b9:c1:eb:0e:7e:58:ba:f1:5e:5e: 3f:46:c0:72:99:a2:37:e0:04:07:0e:e6:7b:0b:5b: c9:f9:45:d7:5c:65:83:2a:59:d2:77:90:03:9f:80: 95:af:fd:15:17:e1:6b:14:1d:e1:4b:70:dd:13:ca: de:5f:d3:97:90:6a:79:c0:61:32:03:7d:a4:a6:21: c5:a9:bb:a2:e5:90:a9:d7:f5:75:f9:ab:e1:0d:72: fa:7b:fd:98:27:ea:86:3c:a4:0a:35:0c:f0:04:ae: 60:47:9c:1a:d8:c3:9f:1d:8d:87:fb:dd:b5:cc:5f: 1c:82:28:2a:63:0e:26:1a:11:c1:fe:92:da:f1:8f: b8:b2:03:67:ca:b4:ce:79:57:9e:ca:5a:64:aa:81: fc:e6:73:8b:3a:0e:42:e1:0c:7d:2a:16:b3:f7:fc: ad:7a:5b:1e:60:b4:22:fa:94:d6:81:e5:e5:77:76: 99:fc:74:f3:5b:b0:ff:e6:e9:fc:0a:79:f2:2c:c8: 25:18:0a:a0:9c:8e:98:8c:93:79:f4:23:6f:e9:26: 1d:a1:b4:07:75:cb:81:1d:97:17:36:83:fa:3c:03: d7:be:e7:2c:c5:cc:eb:e7:f2:14:8a:b3:63:d3:7f: fc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:BA:B0:03:60:51:E6:44:47:C8:8B:B0:15:97:75:DA:FC:26:5C:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/7c0cede4-8012-3c79-9d4f-59f194f7d629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl X509v3 Authority Key Identifier: keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer sbgp-ipAddrBlock: critical IPv6: 2620:98:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b8:3d:d7:0a:0b:fd:21:90:a2:39:d2:c3:78:0f:2c:12:2b: 3a:95:65:da:7d:44:a1:9e:c8:b6:e0:9a:14:b6:e9:93:80:aa: c9:ce:f0:06:53:b9:a9:42:3d:0c:2d:70:6d:2f:85:36:df:ba: 6f:5c:c5:dd:b0:ea:73:ac:48:84:c4:d1:4a:17:24:89:ed:29: 96:82:45:2b:1f:99:b1:91:a6:c5:9d:37:4c:08:67:52:a6:79: 0e:1f:49:0e:ab:a8:54:84:49:ee:a9:bd:11:66:44:98:a5:c0: 4c:bf:a9:92:cb:81:d2:39:91:f9:db:54:6b:40:5f:f5:40:17: 9c:95:a5:2a:b5:63:c3:a9:c2:9e:a5:13:70:8c:52:14:5f:ea: 0a:46:08:36:94:82:3d:13:6b:4d:70:38:0a:11:88:7b:d2:a5: d5:7e:73:94:cc:20:3c:dd:20:d6:fc:53:99:d0:05:de:ad:6f: 4f:4f:48:d7:7e:c8:57:0d:82:24:36:36:b9:e2:ba:e6:1c:29: 4f:a5:93:36:b8:47:0d:2e:8f:fe:00:a0:34:a2:e3:27:6d:b6: 61:51:41:4d:7f:93:f9:e6:4d:33:53:59:ce:7b:13:b9:af:e0: 47:34:e6:50:b1:8d:d5:07:06:ac:f5:c5:0d:4b:ea:0a:af:6d: 73:bd:ac:5b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe+9tXdPCv1HO5efoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw NGRhMB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk NDE4Y2U3ZjgtNDU3Yi00ZmJlLTkzMzUtZTM4MDM5NjI0YTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIE7xsmerD6YxIBa7YjqB9DsCrnB6w5+WLrx Xl4/RsBymaI34AQHDuZ7C1vJ+UXXXGWDKlnSd5ADn4CVr/0VF+FrFB3hS3DdE8re X9OXkGp5wGEyA32kpiHFqbui5ZCp1/V1+avhDXL6e/2YJ+qGPKQKNQzwBK5gR5wa 2MOfHY2H+921zF8cgigqYw4mGhHB/pLa8Y+4sgNnyrTOeVeeylpkqoH85nOLOg5C 4Qx9Khaz9/ytelseYLQi+pTWgeXld3aZ/HTzW7D/5un8CnnyLMglGAqgnI6YjJN5 9CNv6SYdobQHdcuBHZcXNoP6PAPXvucsxczr5/IUirNj03/8sQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGa6sANgUeZER8iLsBWXddr8Jly/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4 YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvN2MwY2VkZTQtODAxMi0z Yzc5LTlkNGYtNTlmMTk0ZjdkNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4 ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1 MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh NWE1NTA0ZGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAmMAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHC4PdcKC/0hkKI50sN4DywSKzqVZdp9RKGeyLbgmhS26ZOAqsnO 8AZTualCPQwtcG0vhTbfum9cxd2w6nOsSITE0UoXJIntKZaCRSsfmbGRpsWdN0wI Z1KmeQ4fSQ6rqFSESe6pvRFmRJilwEy/qZLLgdI5kfnbVGtAX/VAF5yVpSq1Y8Op wp6lE3CMUhRf6gpGCDaUgj0Ta01wOAoRiHvSpdV+c5TMIDzdINb8U5nQBd6tb09P SNd+yFcNgiQ2NrniuuYcKU+lkza4Rw0uj/4AoDSi4ydttmFRQU1/k/nmTTNTWc57 E7mv4Ec05lCxjdUHBqz1xQ1L6gqvbXO9rFs= -----END CERTIFICATE-----Generated at Fri Nov 22 08:06:28 2024 by rpki-client on console-ams.rpki-client.org