$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ffda54e-d63d-3408-9033-3e53fbdbe9a0.roa File: 5ffda54e-d63d-3408-9033-3e53fbdbe9a0.roa (raw, json) Hash identifier: dLMl/BlKseQemT0K8024go3bt/X+aPrs+8Vs8TkkLnY= Subject key identifier: A1:15:7B:18:FE:01:97:ED:38:8A:57:B9:77:B1:E3:C5:F5:F8:8B:19 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B6D4DCC393C32A73C5E80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ffda54e-d63d-3408-9033-3e53fbdbe9a0.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 32381 IP address blocks: 2001:4860:1025::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:6d:4d:cc:39:3c:32:a7:3c:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=36e7b5a9-2795-4010-80a4-04e777cf5fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:87:32:ff:ba:df:4d:bc:31:a9:a9:c1:9b:32: 4b:c3:80:b6:b0:7a:ba:f5:41:b9:2e:14:7e:ba:4f: f3:47:bf:d7:62:2e:13:ab:ab:6d:63:ab:3e:84:6c: 50:01:89:57:6a:a6:b3:fd:2e:71:47:69:67:eb:4a: 08:59:0b:e0:16:42:61:a3:be:fa:2c:fd:16:72:1c: 30:3f:44:c9:8a:49:5c:87:27:54:85:d9:0b:24:8c: 43:5a:16:bd:b9:68:2a:fa:28:ab:bd:4c:d8:9c:a6: c6:11:27:a1:b0:88:0b:29:19:32:ff:3c:0b:02:29: 9a:00:ba:c7:77:00:17:8d:6a:e8:6c:52:c5:8a:ce: 94:e6:fe:be:eb:5d:df:cb:b0:87:2b:fd:af:0f:1a: 95:d1:21:77:d4:86:71:71:f0:b5:f5:de:3f:60:80: 04:40:d2:e3:a7:82:a6:87:ea:00:c9:05:48:92:99: 75:af:92:53:1a:1d:fa:99:29:2e:b5:a7:1b:e5:f1: 31:01:a7:af:c2:77:b7:0b:b3:8c:1d:90:5e:60:9c: 92:a1:bf:b7:a8:01:74:37:57:1d:d4:54:e2:e5:0e: f4:6b:eb:8d:1a:0f:20:a8:0c:ee:e9:38:bb:7c:fe: 24:3e:dc:d8:20:2b:b0:78:8f:00:77:e0:d7:d1:1d: a2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:15:7B:18:FE:01:97:ED:38:8A:57:B9:77:B1:E3:C5:F5:F8:8B:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ffda54e-d63d-3408-9033-3e53fbdbe9a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:1025::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:6f:2d:0f:33:54:37:d7:03:d5:ad:8f:ac:87:9f:95:cc:3d: 20:51:02:92:c5:c4:67:44:07:96:e9:be:a6:e6:1b:a0:e9:af: 06:3b:7d:70:19:b6:9d:82:9b:c0:fb:86:ed:98:00:6e:cb:1a: 93:67:ee:ed:a9:73:c2:f8:d4:a0:ed:1a:4a:ed:bb:5e:e5:4a: 5f:27:81:81:73:63:b0:1e:fb:c1:16:46:5b:d4:6e:7b:66:9a: 33:20:9b:5b:9e:55:ed:33:62:ef:e7:01:57:ff:d4:12:2f:4f: 22:41:56:59:6a:38:f2:ec:68:e0:f8:59:9e:65:c1:c3:ab:44: 6b:0e:7c:9f:73:ca:30:fa:85:90:02:ba:f8:2a:b6:7e:90:fb: 24:6e:f2:de:55:f6:67:9f:cd:8a:48:66:e5:39:7c:1d:a9:b3: ad:76:fc:2e:cb:83:3f:1d:4f:b4:78:58:04:37:17:20:fa:15: a6:31:e6:8d:3a:b1:38:cf:a7:c9:b7:a7:e1:e9:dd:99:37:43: 42:b4:05:fc:eb:20:2a:0d:40:22:e8:6d:61:0c:f2:c5:e9:f5: 40:07:98:48:0e:d6:6b:2d:cf:3a:04:3f:0c:f2:9c:f6:1b:c6: fe:c4:cc:70:8e:3c:84:2c:ed:01:70:80:ac:55:aa:fb:28:65: 2e:7d:10:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfmK21NzDk8Mqc8XoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk MzZlN2I1YTktMjc5NS00MDEwLTgwYTQtMDRlNzc3Y2Y1ZmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYcy/7rfTbwxqanBmzJLw4C2sHq69UG5LhR+ uk/zR7/XYi4Tq6ttY6s+hGxQAYlXaqaz/S5xR2ln60oIWQvgFkJho776LP0Wchww P0TJiklchydUhdkLJIxDWha9uWgq+iirvUzYnKbGESehsIgLKRky/zwLAimaALrH dwAXjWrobFLFis6U5v6+613fy7CHK/2vDxqV0SF31IZxcfC19d4/YIAEQNLjp4Km h+oAyQVIkpl1r5JTGh36mSkutacb5fExAaevwne3C7OMHZBeYJySob+3qAF0N1cd 1FTi5Q70a+uNGg8gqAzu6Ti7fP4kPtzYICuweI8Ad+DX0R2iQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKEVexj+AZftOIpXuXex48X1+IsZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWZmZGE1NGUtZDYzZC0z NDA4LTkwMzMtM2U1M2ZiZGJlOWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYBAl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIZvLQ8zVDfXA9Wtj6yHn5XMPSBRApLFxGdEB5bpvqbmG6DprwY7 fXAZtp2Cm8D7hu2YAG7LGpNn7u2pc8L41KDtGkrtu17lSl8ngYFzY7Ae+8EWRlvU bntmmjMgm1ueVe0zYu/nAVf/1BIvTyJBVllqOPLsaOD4WZ5lwcOrRGsOfJ9zyjD6 hZACuvgqtn6Q+yRu8t5V9mefzYpIZuU5fB2ps612/C7Lgz8dT7R4WAQ3FyD6FaYx 5o06sTjPp8m3p+Hp3Zk3Q0K0BfzrICoNQCLobWEM8sXp9UAHmEgO1mstzzoEPwzy nPYbxv7EzHCOPIQs7QFwgKxVqvsoZS59ELE= -----END CERTIFICATE-----Generated at Fri Nov 22 04:31:04 2024 by rpki-client on console-fra.rpki-client.org