$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/df71ebf9-f641-3f00-b880-4b494a56937e.roa File: df71ebf9-f641-3f00-b880-4b494a56937e.roa (raw, json) Hash identifier: n3pYJbOcdrWdNIpItxY3Nuht9zacCGRCIT+e/YM1+EU= Subject key identifier: BA:20:68:53:2D:39:1F:08:B5:71:EB:A6:34:36:3E:43:3E:CD:E4:CD Certificate issuer: /CN=84071564-b087-4d9c-88d0-6fa5a30617a3 Certificate serial: 010D0C9F432858478F8122EEE14CAE627DEE54C0 Authority key identifier: 83:51:B7:FD:D5:53:2D:4E:D1:C9:ED:AF:24:F1:9E:41:2D:7E:15:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/df71ebf9-f641-3f00-b880-4b494a56937e.roa Signing time: Wed 16 Oct 2024 13:00:43 +0000 ROA not before: Wed 16 Oct 2024 13:00:43 +0000 ROA not after: Tue 14 Jan 2025 14:00:43 +0000 asID: 16717 IP address blocks: 2607:d580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8f:81:22:ee:e1:4c:ae:62:7d:ee:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84071564-b087-4d9c-88d0-6fa5a30617a3 Validity Not Before: Oct 16 13:00:43 2024 GMT Not After : Jan 14 14:00:43 2025 GMT Subject: CN=a3cf15af-acd2-41a2-accd-d282a64e81ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f9:a7:b7:5f:9e:17:ba:cb:15:6e:4b:fb:72: b8:1a:76:0b:6a:03:73:c0:73:2d:fd:87:4e:56:62: 59:7b:df:f9:e8:9b:f0:de:c4:08:d6:d9:3c:b9:d9: 2a:b4:fc:a4:fd:ba:84:18:99:7b:f8:99:51:52:c3: 23:84:90:57:5c:83:02:b4:2e:97:1e:2a:40:fc:e7: de:58:b3:52:13:59:6a:59:b9:5d:79:94:e8:19:f6: 8a:c2:f7:a5:4f:87:7b:d4:0d:63:5e:a8:ac:16:c6: 41:cd:7a:89:be:28:f1:11:ef:47:11:a0:f6:00:ab: d4:aa:5b:63:09:d3:66:09:3f:6a:42:ac:4d:03:37: 85:6c:8f:b9:c7:5c:17:d8:e4:91:90:2e:99:6f:cd: 07:bf:0c:33:6e:00:53:60:85:27:70:14:bb:74:be: 74:6c:41:3e:a3:73:4d:7b:e5:cb:17:69:bd:0b:52: 3c:9f:98:f9:49:03:eb:8b:ca:d0:57:47:19:9e:60: a1:bb:52:96:e3:95:c1:07:40:be:e1:51:71:db:2d: 37:74:e3:bb:8b:39:18:20:46:10:12:05:26:b6:74: 57:0d:d1:f4:1c:47:c1:64:1c:fe:1b:93:0c:e2:69: 46:72:f3:e2:c3:76:c6:2b:3c:09:bf:7a:a6:35:05: c3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:20:68:53:2D:39:1F:08:B5:71:EB:A6:34:36:3E:43:3E:CD:E4:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/df71ebf9-f641-3f00-b880-4b494a56937e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.crl X509v3 Authority Key Identifier: keyid:83:51:B7:FD:D5:53:2D:4E:D1:C9:ED:AF:24:F1:9E:41:2D:7E:15:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer sbgp-ipAddrBlock: critical IPv6: 2607:d580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:16:f1:e4:58:c8:43:b3:83:c1:af:33:66:79:03:26:3b:48: 25:73:b0:74:ee:f0:8b:e5:9b:db:3d:3f:79:87:3e:46:24:72: e1:bb:87:ee:ec:04:3f:e7:19:6a:3e:3c:41:53:3b:67:13:18: 61:2a:79:5f:e5:44:c2:bc:cd:84:a5:9f:36:06:ab:17:b3:a5: ba:57:56:ce:0f:28:ca:26:6c:12:e9:73:e4:f9:1f:c9:ce:c3: 78:07:b3:ff:e2:7a:26:36:a2:80:89:fc:65:3d:17:e8:7a:97: 78:a8:3e:b3:8d:21:2e:63:0f:26:f7:d6:c9:75:37:79:9a:2a: a6:7d:24:94:44:79:12:04:cd:71:b9:4d:1a:bb:e7:23:85:1d: 8e:a9:53:a0:27:87:75:fe:ab:14:e8:85:c3:87:06:6d:99:c1: 8a:02:8d:35:c0:35:9f:87:80:cf:83:43:cc:cc:34:d8:f1:d4: 17:59:e6:8e:ea:a4:f8:43:04:55:00:1c:9f:d3:d1:cd:6e:31: b2:b9:67:1f:7e:6a:12:08:5a:5f:f5:2b:dd:65:59:db:15:d6: b8:9e:e7:8a:02:c5:fd:fe:3e:28:a8:fa:1f:0f:a8:82:c1:64: af:6e:18:2f:5d:e7:44:42:e3:a6:ad:15:8d:b7:c0:e0:33:f5: 70:9a:a1:3c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEePgSLu4UyuYn3uVMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQwNzE1NjQtYjA4Ny00ZDljLTg4ZDAtNmZhNWEzMDYx N2EzMB4XDTI0MTAxNjEzMDA0M1oXDTI1MDExNDE0MDA0M1owLzEtMCsGA1UEAxMk YTNjZjE1YWYtYWNkMi00MWEyLWFjY2QtZDI4MmE2NGU4MWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/mnt1+eF7rLFW5L+3K4GnYLagNzwHMt/YdO VmJZe9/56Jvw3sQI1tk8udkqtPyk/bqEGJl7+JlRUsMjhJBXXIMCtC6XHipA/Ofe WLNSE1lqWbldeZToGfaKwvelT4d71A1jXqisFsZBzXqJvijxEe9HEaD2AKvUqltj CdNmCT9qQqxNAzeFbI+5x1wX2OSRkC6Zb80HvwwzbgBTYIUncBS7dL50bEE+o3NN e+XLF2m9C1I8n5j5SQPri8rQV0cZnmChu1KW45XBB0C+4VFx2y03dOO7izkYIEYQ EgUmtnRXDdH0HEfBZBz+G5MM4mlGcvPiw3bGKzwJv3qmNQXDiQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLogaFMtOR8ItXHrpjQ2PkM+zeTNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NDA3 MTU2NC1iMDg3LTRkOWMtODhkMC02ZmE1YTMwNjE3YTMvZGY3MWViZjktZjY0MS0z ZjAwLWI4ODAtNGI0OTRhNTY5MzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODQwNzE1NjQtYjA4Ny00ZDljLTg4 ZDAtNmZhNWEzMDYxN2EzLzg0MDcxNTY0LWIwODctNGQ5Yy04OGQwLTZmYTVhMzA2 MTdhMy5jcmwwHwYDVR0jBBgwFoAUg1G3/dVTLU7Rye2vJPGeQS1+FaswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NDA3MTU2NC1iMDg3LTRkOWMtODhkMC02ZmE1 YTMwNjE3YTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfVgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA6FvHkWMhDs4PBrzNmeQMmO0glc7B07vCL5ZvbPT95hz5GJHLhu4fu 7AQ/5xlqPjxBUztnExhhKnlf5UTCvM2EpZ82BqsXs6W6V1bODyjKJmwS6XPk+R/J zsN4B7P/4nomNqKAifxlPRfoepd4qD6zjSEuYw8m99bJdTd5miqmfSSURHkSBM1x uU0au+cjhR2OqVOgJ4d1/qsU6IXDhwZtmcGKAo01wDWfh4DPg0PMzDTY8dQXWeaO 6qT4QwRVAByf09HNbjGyuWcffmoSCFpf9SvdZVnbFda4nueKAsX9/j4oqPofD6iC wWSvbhgvXedEQuOmrRWNt8DgM/VwmqE8 -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:33 2024 by rpki-client on console-fra.rpki-client.org