$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/30ceb0d6-909a-396b-9517-48e7b2b06a13.roa File: 30ceb0d6-909a-396b-9517-48e7b2b06a13.roa (raw, json) Hash identifier: dFJGmVoYVXuWyHyNnlzjJMtYeCgLQQ5ULsnKwirUFw4= Subject key identifier: 71:D5:B1:B5:F3:C4:D3:75:2A:5E:A0:12:15:23:2C:23:EA:53:9C:C7 Certificate issuer: /CN=dd3e6032-a6af-4662-8b07-848eeecc3995 Certificate serial: 010D0C9F43285847D99A0ADA89AD2A3C737DD980 Authority key identifier: 67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/30ceb0d6-909a-396b-9517-48e7b2b06a13.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 965 IP address blocks: 2602:faa9::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:9a:0a:da:89:ad:2a:3c:73:7d:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd3e6032-a6af-4662-8b07-848eeecc3995 Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=2d78c660-468a-4515-888a-ff4830274e4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7b:a4:0d:71:21:40:b6:87:bb:04:a6:f9:b5: 90:8a:55:56:0e:1c:cd:49:24:fb:5c:24:15:bf:01: 2c:6e:38:8e:19:32:76:80:9b:8f:6b:f9:2b:4d:f8: a9:9c:56:31:8a:26:27:2b:50:48:49:49:80:09:5b: 23:ed:c6:6f:45:b7:c1:9e:49:20:38:d5:09:6b:4b: 97:f9:d2:86:12:07:eb:75:02:e5:27:96:d8:88:dd: b6:f2:57:13:b4:00:46:99:28:cb:3e:d3:19:b0:66: a8:50:99:32:bc:ea:e9:50:4c:93:47:95:63:93:58: d3:60:37:b0:c7:97:3a:48:bf:ff:33:e8:c3:c6:72: a1:f7:12:fa:3f:00:5b:20:25:7a:b2:0d:e4:55:6c: d9:c1:6f:1e:59:7c:0d:5c:1e:6f:17:bb:85:eb:8d: 6e:39:8c:88:c2:57:b2:91:75:21:90:38:18:75:a9: a0:53:e2:7e:21:9a:d8:c7:b5:d6:1e:11:bb:b7:31: cb:e9:a9:ee:44:dc:96:9e:a4:77:0e:9e:52:83:a0: 4e:45:9e:4a:be:4e:2a:e8:a9:84:22:b0:2e:0c:fb: b5:2a:01:a8:b2:e8:a6:86:5b:dd:59:c6:9e:55:a8: 38:e7:1a:9b:53:61:6e:13:f0:67:39:70:02:22:af: 70:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D5:B1:B5:F3:C4:D3:75:2A:5E:A0:12:15:23:2C:23:EA:53:9C:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/30ceb0d6-909a-396b-9517-48e7b2b06a13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl X509v3 Authority Key Identifier: keyid:67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer sbgp-ipAddrBlock: critical IPv6: 2602:faa9::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:dd:6d:f7:94:f6:fb:e5:de:61:91:39:d9:13:e2:39:5a:db: d4:ba:bc:93:79:8b:38:63:4d:51:45:35:ae:67:92:40:13:76: 65:fa:12:1c:f8:39:ab:53:2e:45:c7:c5:45:a5:d7:e1:1f:03: ed:a7:6e:0b:d0:4a:7b:3a:8f:dd:8c:19:a3:11:2f:9e:8f:47: e5:b1:4d:79:cf:91:93:b2:ea:be:bc:c4:ab:a7:71:3a:f1:ec: 70:e5:20:e7:f2:db:e8:1a:99:d7:42:09:45:1a:7f:fd:e0:88: 04:97:e7:04:d1:4b:e9:dc:d4:67:06:43:7f:9c:87:0c:8f:6e: 9a:1b:38:85:14:72:9f:af:4f:d3:d5:7a:72:63:12:65:7b:09: 42:a3:1c:fe:01:fb:17:61:fa:ad:da:79:ff:e3:5a:e4:1b:03: 68:7a:6a:c6:ea:95:e3:db:7a:85:b3:3f:5c:93:3e:99:a7:c9: 9e:78:9c:d9:7c:8e:0b:a8:f7:53:c6:c2:98:78:b1:96:2c:c3: a1:ee:4d:6f:4b:b2:27:1b:1c:e5:f4:f1:48:8b:6c:57:97:3b: 7b:72:53:87:e9:b1:7c:a0:2f:85:6b:72:47:f4:34:83:e5:8c: 58:52:5e:e6:95:1b:71:a1:06:95:90:5a:d0:bd:1d:0b:c6:0c: f7:28:7d:b2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfZmgraia0qPHN92YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQzZTYwMzItYTZhZi00NjYyLThiMDctODQ4ZWVlY2Mz OTk1MB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk MmQ3OGM2NjAtNDY4YS00NTE1LTg4OGEtZmY0ODMwMjc0ZTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXukDXEhQLaHuwSm+bWQilVWDhzNSST7XCQV vwEsbjiOGTJ2gJuPa/krTfipnFYxiiYnK1BISUmACVsj7cZvRbfBnkkgONUJa0uX +dKGEgfrdQLlJ5bYiN228lcTtABGmSjLPtMZsGaoUJkyvOrpUEyTR5Vjk1jTYDew x5c6SL//M+jDxnKh9xL6PwBbICV6sg3kVWzZwW8eWXwNXB5vF7uF641uOYyIwley kXUhkDgYdamgU+J+IZrYx7XWHhG7tzHL6anuRNyWnqR3Dp5Sg6BORZ5Kvk4q6KmE IrAuDPu1KgGosuimhlvdWcaeVag45xqbU2FuE/BnOXACIq9wSQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHHVsbXzxNN1Kl6gEhUjLCPqU5zHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZDNl NjAzMi1hNmFmLTQ2NjItOGIwNy04NDhlZWVjYzM5OTUvMzBjZWIwZDYtOTA5YS0z OTZiLTk1MTctNDhlN2IyYjA2YTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGQzZTYwMzItYTZhZi00NjYyLThi MDctODQ4ZWVlY2MzOTk1L2RkM2U2MDMyLWE2YWYtNDY2Mi04YjA3LTg0OGVlZWNj Mzk5NS5jcmwwHwYDVR0jBBgwFoAUZwW65gzm7LpptisX60L/L29OAi0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZDNlNjAzMi1hNmFmLTQ2NjItOGIwNy04NDhl ZWVjYzM5OTUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL6qTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBi3W33lPb75d5hkTnZE+I5WtvUuryTeYs4Y01RRTWuZ5JAE3Zl+hIc +DmrUy5Fx8VFpdfhHwPtp24L0Ep7Oo/djBmjES+ej0flsU15z5GTsuq+vMSrp3E6 8exw5SDn8tvoGpnXQglFGn/94IgEl+cE0Uvp3NRnBkN/nIcMj26aGziFFHKfr0/T 1XpyYxJlewlCoxz+AfsXYfqt2nn/41rkGwNoemrG6pXj23qFsz9ckz6Zp8meeJzZ fI4LqPdTxsKYeLGWLMOh7k1vS7InGxzl9PFIi2xXlzt7clOH6bF8oC+Fa3JH9DSD 5YxYUl7mlRtxoQaVkFrQvR0Lxgz3KH2y -----END CERTIFICATE-----Generated at Fri Nov 22 16:01:59 2024 by rpki-client on console-fra.rpki-client.org