$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa File: 2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa (raw, json) Hash identifier: nX0SOJ3u/t/t46AYWGBGhNvdmgH0RjMbWFWLCEFeuqQ= Subject key identifier: 91:55:4C:FC:33:99:39:49:8D:42:4A:A7:90:FE:74:67:55:2B:95:D7 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F432858480256AF0F613B727EA93A21C0 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa Signing time: Tue 26 Nov 2024 16:13:10 +0000 ROA not before: Tue 26 Nov 2024 16:13:10 +0000 ROA not after: Mon 24 Feb 2025 16:13:10 +0000 asID: 46687 IP address blocks: 2606:e280::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:02:56:af:0f:61:3b:72:7e:a9:3a:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Nov 26 16:13:10 2024 GMT Not After : Feb 24 16:13:10 2025 GMT Subject: CN=7e49de41-72c2-41bd-943f-3146cad5c4e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:43:74:82:eb:d4:3c:04:67:cd:46:4a:de:9e: 68:0e:11:f2:66:d7:8f:bc:d2:d6:02:3e:13:4e:26: 07:f1:26:bf:89:5c:63:ee:f0:e2:66:16:8e:77:ec: a3:74:54:03:a6:08:3b:f0:1c:8a:ee:44:ac:bf:8e: 67:5b:38:47:f3:03:15:46:ca:d8:af:19:df:30:a6: f3:99:45:1e:91:f8:48:b2:27:4f:d5:66:d0:53:79: 48:be:06:04:72:17:89:4b:4f:c0:59:a6:7d:31:54: 56:00:6e:0d:74:92:97:91:63:9e:75:e3:ca:60:f9: 79:ea:f0:84:b5:bf:3d:86:b8:b7:e6:ba:35:c8:15: 28:e3:01:1e:33:7d:d5:15:7a:18:8e:31:6a:fc:ce: eb:ab:1b:8a:05:8c:fa:90:56:33:57:01:8b:98:63: 07:30:aa:2e:0d:06:f1:0d:42:e2:24:90:92:c4:33: 98:6b:10:cc:84:2f:c4:c9:f0:89:54:7a:8f:be:f9: 63:af:7c:d5:ac:4e:a7:5a:77:2a:7b:36:38:3b:0a: d2:4d:80:ea:20:c1:e0:e6:98:98:35:73:c0:4b:47: bb:3e:cc:d3:c3:75:20:ac:67:0a:ce:ff:af:f3:bc: af:a9:6e:83:53:e4:a8:d5:9a:30:9b:ca:96:cf:ad: 86:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:55:4C:FC:33:99:39:49:8D:42:4A:A7:90:FE:74:67:55:2B:95:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv6: 2606:e280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ad:74:95:f6:6e:28:6a:bd:00:8a:97:8d:08:2a:21:5c:9b: c6:13:52:e8:5c:56:3b:16:de:73:40:36:74:ed:97:46:be:c4: 82:d2:b2:8a:8f:13:f0:f1:50:2d:3f:e0:c7:6e:eb:7f:ab:a5: 8b:35:71:30:9b:c5:c7:5a:e0:32:2a:04:7d:a0:49:d0:48:15: 58:3e:dd:dd:04:0e:39:9e:51:a7:7f:ef:7d:7d:48:d8:ab:f3: ca:79:f0:cf:7c:fb:e6:40:9e:d5:2b:72:23:71:24:ea:a6:d3: f5:36:81:af:6f:9d:07:9e:a6:0a:dd:af:66:e0:58:e2:03:c5: 52:64:74:fa:e8:ec:6f:7e:77:bb:5a:81:e5:22:86:0d:cc:78: ce:17:ef:c1:a6:8b:6a:d4:e3:cf:e8:54:da:1f:f4:eb:77:44: 02:85:a9:bd:c9:bf:af:40:b8:2a:25:7d:00:96:7b:41:e9:5f: 8f:4a:ea:97:c9:18:d9:b0:44:41:0f:3d:6d:57:d5:5a:33:a0: cf:e8:69:bc:0e:5a:5e:c6:3a:3b:c2:77:26:53:02:3a:a5:39: 47:0a:3d:48:c4:eb:00:b0:be:7c:f9:f0:0e:a1:7f:9b:74:b6: 9d:22:2f:76:03:a5:b2:5f:01:b5:a6:27:e3:30:c4:ae:a8:8a: 86:8d:8c:83 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgCVq8PYTtyfqk6IcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI0MTEyNjE2MTMxMFoXDTI1MDIyNDE2MTMxMFowLzEtMCsGA1UEAxMk N2U0OWRlNDEtNzJjMi00MWJkLTk0M2YtMzE0NmNhZDVjNGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEN0guvUPARnzUZK3p5oDhHyZtePvNLWAj4T TiYH8Sa/iVxj7vDiZhaOd+yjdFQDpgg78ByK7kSsv45nWzhH8wMVRsrYrxnfMKbz mUUekfhIsidP1WbQU3lIvgYEcheJS0/AWaZ9MVRWAG4NdJKXkWOedePKYPl56vCE tb89hri35ro1yBUo4wEeM33VFXoYjjFq/M7rqxuKBYz6kFYzVwGLmGMHMKouDQbx DULiJJCSxDOYaxDMhC/EyfCJVHqPvvljr3zVrE6nWncqezY4OwrSTYDqIMHg5piY NXPAS0e7PszTw3UgrGcKzv+v87yvqW6DU+So1Zowm8qWz62GwwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJFVTPwzmTlJjUJKp5D+dGdVK5XXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvMjIxOWE1ZGQtZDY4NS0z ZTVmLWFkYTMtYTNlN2EwNWYyODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbigDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA2rXSV9m4oar0AipeNCCohXJvGE1LoXFY7Ft5zQDZ07ZdGvsSC0rKK jxPw8VAtP+DHbut/q6WLNXEwm8XHWuAyKgR9oEnQSBVYPt3dBA45nlGnf+99fUjY q/PKefDPfPvmQJ7VK3IjcSTqptP1NoGvb50HnqYK3a9m4FjiA8VSZHT66Oxvfne7 WoHlIoYNzHjOF+/Bpotq1OPP6FTaH/Trd0QCham9yb+vQLgqJX0AlntB6V+PSuqX yRjZsERBDz1tV9VaM6DP6Gm8Dlpexjo7wncmUwI6pTlHCj1IxOsAsL58+fAOoX+b dLadIi92A6WyXwG1pifjMMSuqIqGjYyD -----END CERTIFICATE-----Generated at Fri Dec 27 23:45:12 2024 by rpki-client on console-fra.rpki-client.org