$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/1aa1c3e9-41e8-3676-849a-c74654b10751.roa File: 1aa1c3e9-41e8-3676-849a-c74654b10751.roa (raw, json) Hash identifier: wkFkpDYFsFohYicMvucVmsKIUCvxVSIn+9btn1tYjh4= Subject key identifier: 6C:DD:2D:1B:ED:FB:6A:FB:AE:92:A3:77:AE:26:70:A4:FF:9F:F7:5A Certificate issuer: /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Certificate serial: 010D0C9F43285847A5D6ACFAFC2089A83E331E80 Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/1aa1c3e9-41e8-3676-849a-c74654b10751.roa Signing time: Thu 24 Oct 2024 13:00:42 +0000 ROA not before: Thu 24 Oct 2024 13:00:42 +0000 ROA not after: Wed 22 Jan 2025 14:00:42 +0000 asID: 25664 IP address blocks: 2607:cc80:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a5:d6:ac:fa:fc:20:89:a8:3e:33:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Validity Not Before: Oct 24 13:00:42 2024 GMT Not After : Jan 22 14:00:42 2025 GMT Subject: CN=1eb244d1-9af2-4fe1-8165-bfba38616169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:32:cf:5c:11:11:35:67:2c:24:a3:52:86:ec: 00:ea:34:c5:86:db:df:d4:30:41:51:f3:e5:fa:0d: d4:10:92:5e:36:2c:46:2b:1a:cc:57:e4:e2:7f:50: 0c:fb:4a:98:e9:0a:00:3d:9c:25:98:48:75:de:9a: 59:99:b9:ea:a0:ad:53:f5:94:f0:11:aa:b2:c5:a7: 72:11:3c:96:24:a6:92:77:34:7a:f8:a5:f4:d6:7a: 8f:e2:41:e7:fd:88:a9:1f:e2:3e:63:71:7b:2d:a0: 59:9c:82:b5:c2:d2:6d:13:d8:5b:3e:71:2b:98:37: 16:48:b9:65:d7:24:9e:7d:8a:b1:3b:cf:61:25:77: 4e:5d:ff:9d:fe:e4:9d:8a:f2:9d:ce:92:ea:92:07: 11:1b:5e:19:3c:8b:b1:f9:eb:c3:49:ee:8b:60:a4: 39:03:d2:f4:52:5c:98:cf:f4:d7:2c:1a:c6:55:89: 6c:3c:a1:f2:5c:d6:92:88:d0:c8:2c:b7:12:1d:74: e1:0f:5b:ff:48:97:a7:1e:54:69:e1:81:dd:2a:fe: e1:ed:40:94:9d:06:97:e8:7d:e2:f9:13:58:5e:b1: e3:1c:36:8a:78:02:cc:a8:38:32:29:ea:9d:84:6f: ab:84:fa:1a:d2:fa:bf:7d:99:a3:53:82:6f:63:ed: 93:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:DD:2D:1B:ED:FB:6A:FB:AE:92:A3:77:AE:26:70:A4:FF:9F:F7:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/1aa1c3e9-41e8-3676-849a-c74654b10751.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl X509v3 Authority Key Identifier: keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer sbgp-ipAddrBlock: critical IPv6: 2607:cc80:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:9e:c7:51:b1:e7:1b:39:21:62:8f:a9:bd:9c:46:5d:c6:32: 78:1f:16:06:ca:d0:1c:7f:46:22:f0:da:af:4b:3a:a2:aa:f3: a1:ed:36:d8:70:e5:99:99:2e:f9:8f:59:c5:d3:15:57:36:dc: 53:ce:7c:1f:74:18:26:2c:13:90:07:7f:33:62:0e:89:31:7a: d0:e3:bf:ce:1c:c0:65:fa:16:2d:eb:6a:42:1a:1a:25:c2:4e: c5:41:5d:1c:03:aa:c7:18:16:62:9f:f2:8f:7d:63:59:2c:9f: 3e:63:08:90:7c:60:87:5e:52:05:86:0a:b6:db:47:69:d2:cd: 33:d4:23:bf:57:31:be:4a:39:cf:48:c6:f3:bd:a5:69:90:6a: d5:f4:49:43:10:9c:95:d3:7b:51:7a:67:6f:27:6d:5a:dc:ed: 1c:64:09:bc:9a:bd:12:1c:61:47:fa:6e:6a:e8:11:58:7b:24: 3f:4a:3f:7f:67:29:96:f8:8f:e4:a2:8b:eb:01:12:64:c4:f0: b6:53:25:48:e2:51:42:3e:49:87:2d:2a:2f:27:26:27:cb:0b: 22:c5:53:41:bf:ce:80:61:0c:30:b8:eb:75:b0:cc:c8:ab:4a: e5:c7:f4:35:3a:5e:1e:5d:48:44:c4:e8:b6:8f:23:d3:84:9c: 83:f6:b0:92 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEel1qz6/CCJqD4zHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE1ZDNmZGItN2MyZC00MzkwLWE3MmYtZmE0NmYwMmY0 MDc4MB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk MWViMjQ0ZDEtOWFmMi00ZmUxLTgxNjUtYmZiYTM4NjE2MTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszLPXBERNWcsJKNShuwA6jTFhtvf1DBBUfPl +g3UEJJeNixGKxrMV+Tif1AM+0qY6QoAPZwlmEh13ppZmbnqoK1T9ZTwEaqyxady ETyWJKaSdzR6+KX01nqP4kHn/YipH+I+Y3F7LaBZnIK1wtJtE9hbPnErmDcWSLll 1ySefYqxO89hJXdOXf+d/uSdivKdzpLqkgcRG14ZPIux+evDSe6LYKQ5A9L0UlyY z/TXLBrGVYlsPKHyXNaSiNDILLcSHXThD1v/SJenHlRp4YHdKv7h7UCUnQaX6H3i +RNYXrHjHDaKeALMqDgyKeqdhG+rhPoa0vq/fZmjU4JvY+2TnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGzdLRvt+2r7rpKjd64mcKT/n/daMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTVk M2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2ZjAyZjQwNzgvMWFhMWMzZTktNDFlOC0z Njc2LTg0OWEtYzc0NjU0YjEwNzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE1ZDNmZGItN2MyZC00MzkwLWE3 MmYtZmE0NmYwMmY0MDc4L2UxNWQzZmRiLTdjMmQtNDM5MC1hNzJmLWZhNDZmMDJm NDA3OC5jcmwwHwYDVR0jBBgwFoAUEMqrDaYVw2cS3TXs0nMj95zDq7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMTVkM2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2 ZjAyZjQwNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfMgEAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJmex1Gx5xs5IWKPqb2cRl3GMngfFgbK0Bx/RiLw2q9LOqKq86Ht Nthw5ZmZLvmPWcXTFVc23FPOfB90GCYsE5AHfzNiDokxetDjv84cwGX6Fi3rakIa GiXCTsVBXRwDqscYFmKf8o99Y1ksnz5jCJB8YIdeUgWGCrbbR2nSzTPUI79XMb5K Oc9IxvO9pWmQatX0SUMQnJXTe1F6Z28nbVrc7RxkCbyavRIcYUf6bmroEVh7JD9K P39nKZb4j+Sii+sBEmTE8LZTJUjiUUI+SYctKi8nJifLCyLFU0G/zoBhDDC463Ww zMirSuXH9DU6Xh5dSETE6LaPI9OEnIP2sJI= -----END CERTIFICATE-----Generated at Mon Nov 25 16:31:12 2024 by rpki-client on console-ams.rpki-client.org