$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9cf7850d-5a61-3ceb-86f8-0be244f76344.roa File: 9cf7850d-5a61-3ceb-86f8-0be244f76344.roa (raw, json) Hash identifier: YCBPfVUjDuGN+jZ0xeUin55TRNl93vzcksOKKuGhVL0= Subject key identifier: AB:A5:B6:11:35:36:6E:20:61:94:EE:5B:CC:DB:26:22:F5:59:07:75 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B6D85AA79BC31E5B7C280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9cf7850d-5a61-3ceb-86f8-0be244f76344.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 2607:f8b0:400b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:6d:85:aa:79:bc:31:e5:b7:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=c15d2304-f21b-4cd0-8fa0-7bee1e563a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d4:8e:da:48:99:6f:7c:f8:5d:3a:a0:52:f8: cf:9d:e9:02:1c:ca:ae:e1:75:9f:4f:5d:55:74:fb: 6b:2f:e1:d6:02:22:62:3a:57:b9:7e:6a:90:42:1f: 83:48:d5:d2:ba:19:b7:20:a4:06:63:45:01:88:03: d9:3e:e3:3b:ab:3a:b4:1c:8c:8e:46:16:08:6d:7a: 95:c7:ce:93:bb:5f:25:2a:c7:79:a6:7f:7d:a4:bc: 13:20:d1:b2:19:ab:21:d5:4f:20:51:67:fd:be:6d: a9:89:c9:3c:44:63:08:1f:3f:9d:d1:fe:9f:ae:65: a8:65:79:26:02:0b:08:60:30:2a:b3:b2:0e:36:21: 06:9e:34:13:dd:3d:76:12:eb:51:1c:a4:1b:35:24: 98:7e:9b:81:10:34:18:82:75:b2:22:14:d8:a7:4c: 11:c6:e9:30:63:aa:e7:f7:ab:f6:1b:1f:ca:71:3c: 73:38:d9:b2:01:27:58:0f:8a:60:b0:50:4a:e9:1d: fe:24:27:a6:13:87:15:56:76:09:3c:a9:31:ca:9e: b5:cf:e9:1e:26:30:d7:b6:27:8d:50:ae:e2:7c:46: b7:3a:5c:d2:94:18:f4:cd:be:69:02:43:5f:83:7f: 3e:31:ac:3a:f9:fa:5c:93:da:36:c8:2c:5c:e3:ba: d3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A5:B6:11:35:36:6E:20:61:94:EE:5B:CC:DB:26:22:F5:59:07:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9cf7850d-5a61-3ceb-86f8-0be244f76344.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:400b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:50:00:5a:2f:9f:22:af:5b:3d:f7:cd:b4:2c:7c:1c:c5:ea: 32:62:f9:15:ba:4d:c6:6a:fb:a5:8b:04:4d:a8:83:4b:a9:2b: 5e:8c:4e:73:3c:33:7b:b2:44:4d:6d:9d:2d:ec:74:0d:f8:ac: 24:e2:4b:7b:7b:e7:1e:97:d2:57:c6:82:ff:61:72:a0:88:42: 13:bd:0c:2c:4a:e5:75:10:f8:a2:e3:de:de:b6:f1:0d:5f:aa: 0b:33:7f:0e:99:e0:78:1b:e0:a1:c8:1a:2b:e6:61:09:9b:23: 7c:d6:57:5e:b1:d7:da:1d:01:13:2d:dc:dc:3b:99:67:f5:2f: cd:32:ec:45:6c:26:f6:47:f1:d6:d0:be:d2:44:ab:63:44:f5: 83:23:9d:24:aa:33:9e:87:30:99:97:6c:24:34:e1:78:7c:56: 37:26:51:af:7c:40:24:d0:0f:29:b6:6b:2c:6d:3e:0c:0b:1f: e3:8e:d9:d7:78:90:a1:4b:67:5d:ed:c0:94:ae:f0:f4:b2:e0: b2:14:c2:cd:23:76:ca:d3:a6:58:db:c2:75:03:cd:b9:0e:d6: d3:01:a8:de:d2:36:95:f8:e0:c8:48:1a:e0:de:50:d8:9e:92: a7:f0:21:42:d4:e6:a1:5a:67:7e:65:7b:e0:b1:fe:63:32:3a: 96:50:b7:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfmK22Fqnm8MeW3woAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk YzE1ZDIzMDQtZjIxYi00Y2QwLThmYTAtN2JlZTFlNTYzYTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstSO2kiZb3z4XTqgUvjPnekCHMqu4XWfT11V dPtrL+HWAiJiOle5fmqQQh+DSNXSuhm3IKQGY0UBiAPZPuM7qzq0HIyORhYIbXqV x86Tu18lKsd5pn99pLwTINGyGash1U8gUWf9vm2pick8RGMIHz+d0f6frmWoZXkm AgsIYDAqs7IONiEGnjQT3T12EutRHKQbNSSYfpuBEDQYgnWyIhTYp0wRxukwY6rn 96v2Gx/KcTxzONmyASdYD4pgsFBK6R3+JCemE4cVVnYJPKkxyp61z+keJjDXtieN UK7ifEa3OlzSlBj0zb5pAkNfg38+Maw6+fpck9o2yCxc47rTLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKulthE1Nm4gYZTuW8zbJiL1WQd1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWNmNzg1MGQtNWE2MS0z Y2ViLTg2ZjgtMGJlMjQ0Zjc2MzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ1QAFovnyKvWz33zbQsfBzF6jJi+RW6TcZq+6WLBE2og0upK16M TnM8M3uyRE1tnS3sdA34rCTiS3t75x6X0lfGgv9hcqCIQhO9DCxK5XUQ+KLj3t62 8Q1fqgszfw6Z4Hgb4KHIGivmYQmbI3zWV16x19odARMt3Nw7mWf1L80y7EVsJvZH 8dbQvtJEq2NE9YMjnSSqM56HMJmXbCQ04Xh8VjcmUa98QCTQDym2ayxtPgwLH+OO 2dd4kKFLZ13twJSu8PSy4LIUws0jdsrTpljbwnUDzbkO1tMBqN7SNpX44MhIGuDe UNiekqfwIULU5qFaZ35le+Cx/mMyOpZQtwo= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:19 2024 by rpki-client on console-fra.rpki-client.org