$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/dede31bf-e82b-3380-8794-1fc710158b40.roa File: dede31bf-e82b-3380-8794-1fc710158b40.roa (raw, json) Hash identifier: B0wZTjPmgpY4wrYc0CeJgSH1PtUWu9Ptf9C+KWY10Mg= Subject key identifier: 57:AB:C1:B2:6D:C8:65:04:C3:60:C3:77:FA:84:66:EF:62:D4:77:29 Certificate issuer: /CN=af8fc859-9134-44b2-9e4c-267a8d2386da Certificate serial: 010D0C9F43285847BEF6C6652A4916D94DB61E80 Authority key identifier: E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/dede31bf-e82b-3380-8794-1fc710158b40.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 32242 IP address blocks: 2620:48:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f6:c6:65:2a:49:16:d9:4d:b6:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af8fc859-9134-44b2-9e4c-267a8d2386da Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=3592a804-02bd-45db-afa3-43d7571b26f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1a:54:4a:7e:5a:b9:6d:99:f4:3b:7f:21:c5: 7e:ff:1c:de:df:9d:cd:32:9f:bc:90:4c:9f:ae:0e: 69:0c:de:0c:2d:c2:2a:6c:1a:51:a6:4e:52:02:3e: ea:c3:a3:3a:29:9d:24:f3:5b:49:b7:c4:b4:e5:04: 8a:90:3d:31:78:5f:d8:d8:ef:39:67:50:d0:02:85: f2:cb:ce:da:6d:bb:75:88:32:b4:ff:f6:90:d7:e3: 1f:04:bd:22:44:c2:5f:0b:24:9a:94:b1:a3:18:ef: c7:4d:e8:66:a4:9b:85:d5:12:e2:d9:4e:69:31:5e: b6:94:f5:69:be:84:48:c9:95:f0:80:06:be:97:e1: da:bb:4f:0f:2a:d4:1b:2d:d3:78:d8:b3:1d:a0:28: 10:80:f2:c7:03:33:ec:f3:9c:f4:13:e6:91:59:b8: 6c:39:44:58:d8:b1:06:13:00:aa:71:c0:6c:95:29: 5e:a9:c8:85:26:57:31:37:35:b4:45:e9:dc:cb:dd: 5d:43:a5:cf:f0:a8:2b:92:69:35:5d:e0:b7:ee:88: 11:b4:b0:5c:b7:c2:4c:cc:f7:19:36:29:84:bf:9e: 43:9b:cd:af:95:de:73:2a:c1:00:40:81:e7:fa:6a: 9a:6c:6d:76:7b:4a:d5:91:e2:c1:fa:16:59:e2:71: 48:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AB:C1:B2:6D:C8:65:04:C3:60:C3:77:FA:84:66:EF:62:D4:77:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/dede31bf-e82b-3380-8794-1fc710158b40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl X509v3 Authority Key Identifier: keyid:E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer sbgp-ipAddrBlock: critical IPv6: 2620:48:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:85:9b:05:d3:11:78:9e:aa:7c:db:3b:da:1a:1e:02:5a:95: 92:1d:38:0a:ea:72:4f:36:98:dc:10:94:d1:7a:1d:24:a5:2d: 21:64:9c:cd:20:00:f4:fd:18:a2:b7:6b:c2:dc:fc:0f:19:07: be:69:88:a0:50:0e:7d:6d:df:c3:fe:d9:54:46:8f:86:97:a6: 98:ba:70:1e:fd:26:7f:a6:2e:5f:f4:bf:ae:2a:1b:0c:f9:47: 3d:e0:9a:a1:1b:f3:19:de:09:0b:f9:4e:fd:65:92:e5:7b:a1: dc:47:fd:fa:b8:e1:ae:1c:ca:29:61:bf:55:1b:a7:5f:85:3e: 2a:97:c5:75:ce:db:90:53:b3:b6:e6:9c:90:71:88:83:f5:7e: 80:9c:dc:d1:3c:d0:c6:e0:d2:02:0c:22:95:a0:8a:1d:8f:fa: 11:d7:11:68:ce:ed:eb:36:b3:a5:86:f7:a9:d6:d9:28:90:32: 0e:00:c4:4b:37:91:cd:63:d8:ef:91:68:dd:f3:54:eb:76:91: 26:60:87:ff:8a:93:d4:b9:f8:f3:5b:9d:11:f1:38:c3:32:67: 10:4d:5c:47:dc:1b:d0:22:24:07:1c:b6:63:9b:c6:1e:8e:73: b6:d1:04:c3:08:fd:0f:7b:5b:df:6a:f4:1d:58:b2:b4:0a:6e: 2b:3a:9a:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe+9sZlKkkW2U22HoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY4ZmM4NTktOTEzNC00NGIyLTllNGMtMjY3YThkMjM4 NmRhMB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk MzU5MmE4MDQtMDJiZC00NWRiLWFmYTMtNDNkNzU3MWIyNmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxpUSn5auW2Z9Dt/IcV+/xze353NMp+8kEyf rg5pDN4MLcIqbBpRpk5SAj7qw6M6KZ0k81tJt8S05QSKkD0xeF/Y2O85Z1DQAoXy y87abbt1iDK0//aQ1+MfBL0iRMJfCySalLGjGO/HTehmpJuF1RLi2U5pMV62lPVp voRIyZXwgAa+l+Hau08PKtQbLdN42LMdoCgQgPLHAzPs85z0E+aRWbhsOURY2LEG EwCqccBslSleqciFJlcxNzW0Rency91dQ6XP8Kgrkmk1XeC37ogRtLBct8JMzPcZ NimEv55Dm82vld5zKsEAQIHn+mqabG12e0rVkeLB+hZZ4nFIuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFerwbJtyGUEw2DDd/qEZu9i1HcpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZjhm Yzg1OS05MTM0LTQ0YjItOWU0Yy0yNjdhOGQyMzg2ZGEvZGVkZTMxYmYtZTgyYi0z MzgwLTg3OTQtMWZjNzEwMTU4YjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWY4ZmM4NTktOTEzNC00NGIyLTll NGMtMjY3YThkMjM4NmRhL2FmOGZjODU5LTkxMzQtNDRiMi05ZTRjLTI2N2E4ZDIz ODZkYS5jcmwwHwYDVR0jBBgwFoAU5bpWqY0HiITS6GUxi1a3vPiL62AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hZjhmYzg1OS05MTM0LTQ0YjItOWU0Yy0yNjdh OGQyMzg2ZGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAASKAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFSFmwXTEXieqnzbO9oaHgJalZIdOArqck82mNwQlNF6HSSlLSFk nM0gAPT9GKK3a8Lc/A8ZB75piKBQDn1t38P+2VRGj4aXppi6cB79Jn+mLl/0v64q Gwz5Rz3gmqEb8xneCQv5Tv1lkuV7odxH/fq44a4cyilhv1Ubp1+FPiqXxXXO25BT s7bmnJBxiIP1foCc3NE80Mbg0gIMIpWgih2P+hHXEWjO7es2s6WG96nW2SiQMg4A xEs3kc1j2O+RaN3zVOt2kSZgh/+Kk9S5+PNbnRHxOMMyZxBNXEfcG9AiJAcctmOb xh6Oc7bRBMMI/Q97W99q9B1YsrQKbis6mkc= -----END CERTIFICATE-----Generated at Fri Nov 22 21:10:15 2024 by rpki-client on console-fra.rpki-client.org