$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/0e96be0b-7a3f-33aa-902c-3e77d58f2fe3.roa File: 0e96be0b-7a3f-33aa-902c-3e77d58f2fe3.roa (raw, json) Hash identifier: tQSCOLaNhuyDch0NSnw97yk+6PwTvuIWSZ1eE8U8EsE= Subject key identifier: 10:98:F8:CE:4A:79:2C:F2:A9:2C:24:22:FA:36:D0:34:45:37:7C:7F Certificate issuer: /CN=c98136f0-3efc-4dfb-a3fe-596d9a8df01a Certificate serial: 010D0C9F43285847CFD4A56DC1282119F525C3EC Authority key identifier: F9:A6:75:02:28:D4:3A:8D:33:46:9E:1C:BC:95:0E:36:D7:3B:3E:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/0e96be0b-7a3f-33aa-902c-3e77d58f2fe3.roa Signing time: Fri 08 Nov 2024 14:00:39 +0000 ROA not before: Fri 08 Nov 2024 14:00:39 +0000 ROA not after: Thu 06 Feb 2025 14:00:39 +0000 asID: 31898 IP address blocks: 2620:11b:9000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:cf:d4:a5:6d:c1:28:21:19:f5:25:c3:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98136f0-3efc-4dfb-a3fe-596d9a8df01a Validity Not Before: Nov 8 14:00:39 2024 GMT Not After : Feb 6 14:00:39 2025 GMT Subject: CN=4638e279-e06b-4769-be71-0d9e6f425934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c5:36:43:61:b9:f3:9d:87:42:b2:53:8c:ce: 7b:43:7b:e5:fb:40:a7:2c:42:d8:96:f7:b3:7b:21: 65:3d:9e:48:ca:45:30:61:c7:5b:cf:92:37:d9:b5: 33:1c:3d:77:0e:ec:d4:36:b9:22:97:a6:89:a2:59: 8f:5c:64:3d:65:25:ea:37:e7:10:17:5f:28:e0:2b: 93:5c:ad:af:26:5d:b6:6d:e6:51:b8:d1:5c:02:f8: 76:2a:22:91:1f:24:7a:9c:7d:04:1d:ae:29:f3:cc: de:d0:5a:2d:60:1b:3e:29:b8:1c:64:42:9e:2e:46: 14:60:77:d4:12:9d:93:33:5a:52:db:ca:4d:cf:16: 48:0e:fc:6c:99:27:c6:b5:2d:81:77:24:65:30:b9: a1:d6:84:e1:43:c4:26:bd:67:27:b0:ed:0c:79:f4: c7:bc:fd:1e:d1:60:8d:75:51:dd:30:a6:07:dd:9c: e7:10:f2:3b:41:69:c2:85:24:06:11:b4:6e:6c:3e: 8b:2b:17:a4:17:e0:17:b0:d5:0a:a7:ea:a7:5b:63: 4d:a6:75:36:53:20:d9:54:eb:10:72:bc:13:d4:5b: 85:a0:6f:cf:4f:95:b3:13:73:31:c1:d9:d7:e2:bc: 74:1e:08:67:12:33:a4:b7:36:6b:14:9f:e3:eb:f1: a7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:98:F8:CE:4A:79:2C:F2:A9:2C:24:22:FA:36:D0:34:45:37:7C:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/0e96be0b-7a3f-33aa-902c-3e77d58f2fe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.crl X509v3 Authority Key Identifier: keyid:F9:A6:75:02:28:D4:3A:8D:33:46:9E:1C:BC:95:0E:36:D7:3B:3E:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer sbgp-ipAddrBlock: critical IPv6: 2620:11b:9000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:fe:c5:5f:ad:56:57:96:1a:ba:e0:a4:34:3f:e8:70:c0:45: d0:88:99:55:47:d8:3a:d6:dd:01:14:94:94:89:88:f0:8b:bc: fb:cf:d2:00:61:1c:18:ef:fd:4b:c4:45:12:52:56:7d:dd:df: 31:4c:d6:c7:10:c0:c6:98:c9:b9:02:8d:6b:0d:27:02:05:64: 8e:91:36:54:82:6b:43:6f:76:07:b0:81:8b:3b:09:04:a3:2a: a7:9e:6d:79:8d:1c:fa:ba:eb:38:bf:60:06:89:a5:4b:1b:f3: 35:de:0d:cd:5c:e3:4c:9b:4a:d6:f6:e9:87:5a:8a:9d:f9:35: 3d:dc:d7:64:f5:8d:f8:e1:8b:8d:26:8f:8a:91:d4:44:0f:6d: ec:37:12:3e:72:18:3f:41:35:9c:58:ba:5b:98:17:06:68:01: 13:dc:eb:0d:78:16:8f:64:4c:70:42:5a:4e:66:af:3b:e1:d5: 29:08:6c:1b:86:12:19:6a:41:28:e2:fb:97:12:9f:d1:7d:11: 79:a4:20:df:8d:f3:73:9c:fb:e2:dc:6d:b9:73:ed:2f:0c:49: 42:39:8b:6f:1f:b0:ac:6d:0f:ff:fa:88:3a:3d:cc:aa:d4:31: 89:34:67:60:81:21:5a:3a:93:1b:54:97:2a:c3:22:ea:07:d0: cc:d4:83:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfP1KVtwSghGfUlw+wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk4MTM2ZjAtM2VmYy00ZGZiLWEzZmUtNTk2ZDlhOGRm MDFhMB4XDTI0MTEwODE0MDAzOVoXDTI1MDIwNjE0MDAzOVowLzEtMCsGA1UEAxMk NDYzOGUyNzktZTA2Yi00NzY5LWJlNzEtMGQ5ZTZmNDI1OTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsU2Q2G5852HQrJTjM57Q3vl+0CnLELYlvez eyFlPZ5IykUwYcdbz5I32bUzHD13DuzUNrkil6aJolmPXGQ9ZSXqN+cQF18o4CuT XK2vJl22beZRuNFcAvh2KiKRHyR6nH0EHa4p88ze0FotYBs+KbgcZEKeLkYUYHfU Ep2TM1pS28pNzxZIDvxsmSfGtS2BdyRlMLmh1oThQ8QmvWcnsO0MefTHvP0e0WCN dVHdMKYH3ZznEPI7QWnChSQGEbRubD6LKxekF+AXsNUKp+qnW2NNpnU2UyDZVOsQ crwT1FuFoG/PT5WzE3MxwdnX4rx0HghnEjOktzZrFJ/j6/GnawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBCY+M5KeSzyqSwkIvo20DRFN3x/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTgx MzZmMC0zZWZjLTRkZmItYTNmZS01OTZkOWE4ZGYwMWEvMGU5NmJlMGItN2EzZi0z M2FhLTkwMmMtM2U3N2Q1OGYyZmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzk4MTM2ZjAtM2VmYy00ZGZiLWEz ZmUtNTk2ZDlhOGRmMDFhL2M5ODEzNmYwLTNlZmMtNGRmYi1hM2ZlLTU5NmQ5YThk ZjAxYS5jcmwwHwYDVR0jBBgwFoAU+aZ1AijUOo0zRp4cvJUONtc7Pn0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTgxMzZmMC0zZWZjLTRkZmItYTNmZS01OTZk OWE4ZGYwMWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABG5AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAf+xV+tVleWGrrgpDQ/6HDARdCImVVH2DrW3QEUlJSJiPCLvPvP 0gBhHBjv/UvERRJSVn3d3zFM1scQwMaYybkCjWsNJwIFZI6RNlSCa0NvdgewgYs7 CQSjKqeebXmNHPq66zi/YAaJpUsb8zXeDc1c40ybStb26Ydaip35NT3c12T1jfjh i40mj4qR1EQPbew3Ej5yGD9BNZxYuluYFwZoARPc6w14Fo9kTHBCWk5mrzvh1SkI bBuGEhlqQSji+5cSn9F9EXmkIN+N83Oc++Lcbblz7S8MSUI5i28fsKxtD//6iDo9 zKrUMYk0Z2CBIVo6kxtUlyrDIuoH0MzUg4o= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:10 2024 by rpki-client on console-fra.rpki-client.org