$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa File: 3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa (raw, json) Hash identifier: 53kcDLKVDUkLQSw4Fpz6eyXuAyglCM+RTNetxJc5L9s= Subject key identifier: D5:67:31:CA:2A:B2:5F:A7:62:D6:EA:1C:27:88:61:C7:7B:B4:C5:84 Certificate issuer: /CN=32e58881-6422-4e0d-9578-7c256d9f70bc Certificate serial: 010D0C9F43285847FFC986A4D8FF7559F18F62C0 Authority key identifier: F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa Signing time: Mon 25 Nov 2024 18:17:08 +0000 ROA not before: Mon 25 Nov 2024 18:17:08 +0000 ROA not after: Sun 23 Feb 2025 18:17:08 +0000 asID: 398191 IP address blocks: 2607:c7c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ff:c9:86:a4:d8:ff:75:59:f1:8f:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e58881-6422-4e0d-9578-7c256d9f70bc Validity Not Before: Nov 25 18:17:08 2024 GMT Not After : Feb 23 18:17:08 2025 GMT Subject: CN=6eafdc01-4285-4814-9031-0d6b6c03b71a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b9:5e:63:d2:22:fd:bf:d3:d5:48:6e:d8:50: 78:b6:96:30:e5:d3:38:ff:ab:45:9b:fb:5a:a2:4d: fe:31:10:62:2b:14:f6:27:4d:8d:44:55:d0:a6:bd: 00:59:46:7e:59:aa:b9:44:25:cb:54:9a:e3:c7:fa: 1a:c3:ab:df:52:22:2d:18:e2:08:d3:8e:43:cb:d3: 9a:a7:c4:bf:3c:5d:eb:70:60:62:13:cb:52:29:18: b4:0e:c9:a0:4b:e1:15:8d:6d:65:ec:c9:d3:fa:dd: 94:3b:fd:ed:99:62:ee:cb:cc:1c:04:4b:61:2e:2d: 8a:17:29:b7:c3:6a:51:a6:83:b8:a0:11:04:80:ec: ac:1f:13:ae:57:db:87:c8:60:37:0a:e2:c7:f3:b6: 93:5f:8f:68:b2:c2:a4:0d:2d:37:e5:4b:13:c2:41: 87:e0:61:82:fc:e6:4f:04:a4:85:83:b7:7b:05:bd: b0:be:63:e6:09:f0:63:b3:d6:1b:43:b3:c1:3a:59: 82:48:2e:a1:26:a4:cc:19:c5:b4:a3:9c:79:2a:de: 06:84:f3:9c:4a:64:9a:de:d3:f5:64:39:ee:3d:79: c0:f3:ad:b0:3e:b2:98:8d:c1:3c:92:a5:4a:41:9c: 03:36:a4:a1:69:17:c5:14:7c:81:f7:02:74:76:6f: 6c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:67:31:CA:2A:B2:5F:A7:62:D6:EA:1C:27:88:61:C7:7B:B4:C5:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl X509v3 Authority Key Identifier: keyid:F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer sbgp-ipAddrBlock: critical IPv6: 2607:c7c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:7b:66:b5:2f:c0:3f:0e:4f:44:02:89:65:e8:49:c2:77:bc: 0c:41:4b:35:76:e9:56:90:98:00:98:cd:d3:1c:ac:44:5e:2b: 8a:ae:8a:cd:5f:54:9d:db:8a:39:23:ab:6a:6b:5a:eb:fa:14: 1c:f1:8a:51:29:bc:e2:37:f5:98:df:11:cd:d1:d2:25:74:09: 47:5f:44:68:56:5c:3e:33:5d:b4:79:9e:60:23:52:4b:2b:4f: 41:20:3d:7e:de:72:df:13:15:d5:67:d2:44:64:fc:cd:03:07: 3b:0e:d9:98:72:80:a1:af:de:e6:a9:f4:8c:4b:74:f2:04:26: fa:51:53:04:2d:31:a6:7a:00:9e:67:38:0c:db:f5:31:60:c5: ae:dd:27:7b:26:76:dd:2e:8d:da:b2:89:7f:21:e3:02:79:d8: 9a:df:71:fd:1f:0e:95:f2:4b:0b:f7:10:6a:47:98:2e:5a:22: 97:41:a6:2d:f0:cc:2f:f0:dd:31:36:d6:bc:0d:f0:16:0a:cd: 6d:73:56:f3:02:18:2b:25:ce:de:27:99:a0:b9:07:5a:54:37: 43:5c:25:14:46:da:80:d8:9f:2e:3e:c1:63:80:60:58:b4:14: 2a:94:13:03:a4:d9:eb:ee:be:d7:cf:7d:dd:2a:a7:f9:3a:26: 4b:aa:1c:30 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEf/yYak2P91WfGPYsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlNTg4ODEtNjQyMi00ZTBkLTk1NzgtN2MyNTZkOWY3 MGJjMB4XDTI0MTEyNTE4MTcwOFoXDTI1MDIyMzE4MTcwOFowLzEtMCsGA1UEAxMk NmVhZmRjMDEtNDI4NS00ODE0LTkwMzEtMGQ2YjZjMDNiNzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLleY9Ii/b/T1Uhu2FB4tpYw5dM4/6tFm/ta ok3+MRBiKxT2J02NRFXQpr0AWUZ+Waq5RCXLVJrjx/oaw6vfUiItGOII045Dy9Oa p8S/PF3rcGBiE8tSKRi0DsmgS+EVjW1l7MnT+t2UO/3tmWLuy8wcBEthLi2KFym3 w2pRpoO4oBEEgOysHxOuV9uHyGA3CuLH87aTX49ossKkDS035UsTwkGH4GGC/OZP BKSFg7d7Bb2wvmPmCfBjs9YbQ7PBOlmCSC6hJqTMGcW0o5x5Kt4GhPOcSmSa3tP1 ZDnuPXnA862wPrKYjcE8kqVKQZwDNqShaRfFFHyB9wJ0dm9s0wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNVnMcoqsl+nYtbqHCeIYcd7tMWEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMmU1 ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1NmQ5ZjcwYmMvM2E2ZTc1YTEtYzljMS0z Y2U4LTg3MDktNjc1OGNmYTFlYWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzJlNTg4ODEtNjQyMi00ZTBkLTk1 NzgtN2MyNTZkOWY3MGJjLzMyZTU4ODgxLTY0MjItNGUwZC05NTc4LTdjMjU2ZDlm NzBiYy5jcmwwHwYDVR0jBBgwFoAU83rr+TDV35aceSJR1H1McDXM7c8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMmU1ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1 NmQ5ZjcwYmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfHwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBhe2a1L8A/Dk9EAoll6EnCd7wMQUs1dulWkJgAmM3THKxEXiuKrorN X1Sd24o5I6tqa1rr+hQc8YpRKbziN/WY3xHN0dIldAlHX0RoVlw+M120eZ5gI1JL K09BID1+3nLfExXVZ9JEZPzNAwc7DtmYcoChr97mqfSMS3TyBCb6UVMELTGmegCe ZzgM2/UxYMWu3Sd7JnbdLo3asol/IeMCedia33H9Hw6V8ksL9xBqR5guWiKXQaYt 8Mwv8N0xNta8DfAWCs1tc1bzAhgrJc7eJ5mguQdaVDdDXCUURtqA2J8uPsFjgGBY tBQqlBMDpNnr7r7Xz33dKqf5OiZLqhww -----END CERTIFICATE-----Generated at Fri Dec 27 23:45:11 2024 by rpki-client on console-fra.rpki-client.org