$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7253783d-7f55-32b9-a22d-7d952f8e056c.roa File: 7253783d-7f55-32b9-a22d-7d952f8e056c.roa (raw, json) Hash identifier: NXeZkG8BaCULC9b77LAnUJnNXiygr+gaNeACdAxx18s= Subject key identifier: 59:EC:F3:1E:C8:08:C6:E5:0B:75:22:A0:34:8B:E7:E9:D0:A7:B8:53 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B6CA30E6BAFC678652180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7253783d-7f55-32b9-a22d-7d952f8e056c.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 2607:f8b0:4002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:6c:a3:0e:6b:af:c6:78:65:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=7e2d9517-d6e1-4f3d-b44b-ba911d8390b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:42:6f:53:d6:33:d4:b4:da:1a:a3:ca:06:10: 8a:40:f1:10:7b:b9:91:19:d0:9c:82:57:42:c5:71: 55:b1:49:bd:1c:b3:c0:00:4a:8f:98:b6:17:37:d1: 72:ed:d3:16:21:90:45:b5:ce:92:c3:17:29:e6:41: d4:e2:8d:13:1e:ff:b7:ed:84:ab:2d:23:bd:f7:ba: 4a:52:02:64:d0:a4:c2:2b:e1:92:2a:4b:9c:33:7d: e8:cc:5d:8b:e0:df:35:22:bc:5e:4b:0b:e1:90:0a: bc:68:39:7a:58:3b:3e:fa:a7:90:4e:8d:ba:d3:83: 98:5c:96:46:b8:1d:fd:03:12:f8:56:3d:37:87:3f: 91:ad:2f:03:3d:a7:30:20:06:39:6a:71:a6:22:f7: 3b:51:d6:20:b1:65:b3:b7:a6:e5:48:b3:78:d4:a2: 82:53:99:55:cb:6b:41:3a:d2:a4:a8:32:19:b8:fd: 70:39:5f:75:4c:26:8f:a3:fa:87:1f:6f:1d:1d:03: b6:3c:61:eb:69:22:5b:4e:60:86:57:11:bc:55:93: 9b:36:82:0b:6c:63:37:a3:70:92:b6:3a:22:89:6d: 86:1a:2d:0a:61:ae:f0:c8:8f:5b:cc:1c:74:51:db: a5:de:53:dd:da:c4:bc:54:0d:66:14:73:b4:12:f8: 8c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:EC:F3:1E:C8:08:C6:E5:0B:75:22:A0:34:8B:E7:E9:D0:A7:B8:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7253783d-7f55-32b9-a22d-7d952f8e056c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4002::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:09:13:28:e6:81:35:cc:a5:4c:23:df:f6:4f:ef:c9:da:af: 30:64:41:92:91:f0:00:5f:ff:75:a4:81:cf:b4:bf:c0:ff:5b: 57:90:c2:01:95:f5:68:96:bf:b0:9d:68:8c:12:cf:be:be:f7: 25:f8:66:10:74:be:64:bb:02:78:58:42:4c:a0:65:d6:22:10: 2b:17:79:8a:ae:b3:c6:6b:49:99:82:4a:cf:85:07:43:b4:a4: d9:04:65:c0:1d:83:c6:20:5a:d3:ae:be:0e:0d:24:16:d6:36: f3:88:8b:b8:75:bd:52:43:2c:c8:29:d5:d1:12:84:bf:1b:54: 66:19:c3:29:14:2d:5e:cd:63:53:9c:dc:1d:80:75:a0:a0:f4: 0f:7e:26:49:3f:37:91:01:66:b5:31:d1:73:64:3f:44:bc:82: 61:1c:9e:fb:ce:54:bf:6a:4f:4e:02:27:04:fd:1d:2a:4c:87: 9e:1b:db:d3:6d:e0:ee:01:b0:e9:d2:31:a1:17:7a:6e:87:4c: ef:e9:04:c7:1d:a3:77:f7:c5:bf:6e:79:4d:ec:99:1b:fd:d8: 89:28:ce:67:2c:87:e2:7c:47:dc:85:43:5f:9b:35:c7:d8:08: d3:d0:45:a5:46:be:a7:8e:8a:e5:3e:4f:7d:d4:04:ec:2e:b5: ec:54:ac:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfmK2yjDmuvxnhlIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk N2UyZDk1MTctZDZlMS00ZjNkLWI0NGItYmE5MTFkODM5MGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUJvU9Yz1LTaGqPKBhCKQPEQe7mRGdCcgldC xXFVsUm9HLPAAEqPmLYXN9Fy7dMWIZBFtc6Swxcp5kHU4o0THv+37YSrLSO997pK UgJk0KTCK+GSKkucM33ozF2L4N81IrxeSwvhkAq8aDl6WDs++qeQTo2604OYXJZG uB39AxL4Vj03hz+RrS8DPacwIAY5anGmIvc7UdYgsWWzt6blSLN41KKCU5lVy2tB OtKkqDIZuP1wOV91TCaPo/qHH28dHQO2PGHraSJbTmCGVxG8VZObNoILbGM3o3CS tjoiiW2GGi0KYa7wyI9bzBx0Udul3lPd2sS8VA1mFHO0EviMfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFns8x7ICMblC3UioDSL5+nQp7hTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzI1Mzc4M2QtN2Y1NS0z MmI5LWEyMmQtN2Q5NTJmOGUwNTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJYJEyjmgTXMpUwj3/ZP78narzBkQZKR8ABf/3Wkgc+0v8D/W1eQ wgGV9WiWv7CdaIwSz76+9yX4ZhB0vmS7AnhYQkygZdYiECsXeYqus8ZrSZmCSs+F B0O0pNkEZcAdg8YgWtOuvg4NJBbWNvOIi7h1vVJDLMgp1dEShL8bVGYZwykULV7N Y1Oc3B2AdaCg9A9+Jkk/N5EBZrUx0XNkP0S8gmEcnvvOVL9qT04CJwT9HSpMh54b 29Nt4O4BsOnSMaEXem6HTO/pBMcdo3f3xb9ueU3smRv92Ikozmcsh+J8R9yFQ1+b NcfYCNPQRaVGvqeOiuU+T33UBOwutexUrFU= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:56 2024 by rpki-client on console-ams.rpki-client.org