$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/c79fa6a2-7d36-310a-b63c-928c510a3373.roa File: c79fa6a2-7d36-310a-b63c-928c510a3373.roa (raw, json) Hash identifier: IH1WXlXO1pML/LV27whHvRZE2CbUJUOuk8WZasUHOOA= Subject key identifier: D6:21:03:C6:A5:7A:EC:81:B4:FD:3E:75:50:2A:7A:EF:98:84:23:81 Certificate issuer: /CN=d07e8c75-75e4-464c-88c0-0f8c6d8757a3 Certificate serial: 010D0C9F432858472405C5E72427B8A4DF1B9800 Authority key identifier: 02:3C:07:48:66:03:0F:40:20:F6:04:78:A6:7F:59:28:14:C8:F4:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/c79fa6a2-7d36-310a-b63c-928c510a3373.roa Signing time: Sun 08 Sep 2024 01:00:31 +0000 ROA not before: Sun 08 Sep 2024 01:00:31 +0000 ROA not after: Sat 07 Dec 2024 02:00:31 +0000 asID: 11708 IP address blocks: 2605:b080::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:24:05:c5:e7:24:27:b8:a4:df:1b:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d07e8c75-75e4-464c-88c0-0f8c6d8757a3 Validity Not Before: Sep 8 01:00:31 2024 GMT Not After : Dec 7 02:00:31 2024 GMT Subject: CN=8b15584a-40e7-443d-bccf-efd50b98254d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4a:74:97:55:2a:a5:dc:37:48:92:8f:2f:80: 5d:56:9c:dc:65:30:19:08:cd:ac:44:11:af:91:2d: e0:c2:be:b1:f8:81:f3:cd:08:ed:0a:d9:b7:15:31: 13:8c:9c:ca:a8:04:a4:01:c2:70:8d:f4:32:13:f9: 11:b7:96:57:e2:fd:a7:22:10:de:ac:3e:22:5f:cd: 7e:8a:65:39:2d:04:c2:46:6d:18:50:27:86:cb:8f: f6:58:fa:c1:5d:b6:07:36:dd:7a:ae:04:03:21:a4: fd:e4:8e:01:25:fd:e9:55:6b:97:48:1f:b8:d0:1e: 02:ff:ad:01:d3:9e:ea:1e:8f:a6:c7:97:2e:6f:61: 69:15:a9:33:7b:48:72:ca:59:43:70:f9:07:ed:d6: c2:3e:15:cf:e0:94:c7:56:85:f8:d0:a3:42:2c:f8: ca:07:83:78:92:b2:19:7f:c2:8f:c9:ba:56:e4:22: 68:1c:72:84:01:e2:ad:25:87:aa:16:2c:f2:f1:ee: c6:98:15:68:e8:98:d8:3e:bc:7c:6c:e4:2f:ac:c8: 59:2f:50:6b:46:5d:1e:ac:8b:87:04:68:81:bf:1b: 2a:56:12:fe:3a:8f:94:71:37:9a:00:25:0c:42:68: 32:de:1d:70:d5:64:2f:4b:08:b8:98:59:3a:c3:e4: 98:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:21:03:C6:A5:7A:EC:81:B4:FD:3E:75:50:2A:7A:EF:98:84:23:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/c79fa6a2-7d36-310a-b63c-928c510a3373.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.crl X509v3 Authority Key Identifier: keyid:02:3C:07:48:66:03:0F:40:20:F6:04:78:A6:7F:59:28:14:C8:F4:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer sbgp-ipAddrBlock: critical IPv6: 2605:b080::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:7e:8e:8e:47:a1:60:53:5b:68:c2:56:d9:23:3a:b7:f6:87: 41:00:e3:b8:6e:e0:e9:cd:b2:95:fb:41:f3:a8:19:2c:a9:a8: 32:86:ba:bd:55:c9:da:ad:5a:8d:73:d1:10:9b:d5:99:6f:dd: 41:28:83:0e:47:be:30:11:cb:20:15:73:63:46:59:9c:a0:a6: 3f:b0:bf:ad:d9:05:b8:30:78:aa:0e:c8:5e:03:35:1e:9b:27: cb:50:99:8a:15:b8:12:ba:e3:9e:64:59:a3:65:1d:a0:83:a0: c6:aa:96:f5:a0:13:53:35:04:db:9e:a6:1b:94:b6:54:3e:be: 6b:ba:01:17:eb:c8:85:3b:e5:f4:f2:60:82:47:da:ed:d3:a0: db:7a:22:b0:85:78:c9:76:90:28:cb:92:9d:80:ea:40:d6:0c: 21:05:3d:b1:19:9e:12:15:75:be:19:6f:0b:6f:d4:33:ed:00: 87:91:db:2f:e0:10:f4:0c:ba:20:20:8c:2d:09:40:66:c9:92: ea:6b:35:b4:31:a7:da:d3:fa:e8:a1:1c:da:e0:dc:a6:72:68: c5:da:5f:88:6d:3c:38:30:60:d2:f9:27:99:57:ed:1e:11:b5: 8a:23:65:f0:ae:9c:4f:9e:a4:a2:03:92:0f:98:d3:ca:61:7b: be:e7:14:80 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEckBcXnJCe4pN8bmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDA3ZThjNzUtNzVlNC00NjRjLTg4YzAtMGY4YzZkODc1 N2EzMB4XDTI0MDkwODAxMDAzMVoXDTI0MTIwNzAyMDAzMVowLzEtMCsGA1UEAxMk OGIxNTU4NGEtNDBlNy00NDNkLWJjY2YtZWZkNTBiOTgyNTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Up0l1Uqpdw3SJKPL4BdVpzcZTAZCM2sRBGv kS3gwr6x+IHzzQjtCtm3FTETjJzKqASkAcJwjfQyE/kRt5ZX4v2nIhDerD4iX81+ imU5LQTCRm0YUCeGy4/2WPrBXbYHNt16rgQDIaT95I4BJf3pVWuXSB+40B4C/60B 057qHo+mx5cub2FpFakze0hyyllDcPkH7dbCPhXP4JTHVoX40KNCLPjKB4N4krIZ f8KPybpW5CJoHHKEAeKtJYeqFizy8e7GmBVo6JjYPrx8bOQvrMhZL1BrRl0erIuH BGiBvxsqVhL+Oo+UcTeaACUMQmgy3h1w1WQvSwi4mFk6w+SYywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNYhA8aleuyBtP0+dVAqeu+YhCOBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDdl OGM3NS03NWU0LTQ2NGMtODhjMC0wZjhjNmQ4NzU3YTMvYzc5ZmE2YTItN2QzNi0z MTBhLWI2M2MtOTI4YzUxMGEzMzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDA3ZThjNzUtNzVlNC00NjRjLTg4 YzAtMGY4YzZkODc1N2EzL2QwN2U4Yzc1LTc1ZTQtNDY0Yy04OGMwLTBmOGM2ZDg3 NTdhMy5jcmwwHwYDVR0jBBgwFoAUAjwHSGYDD0Ag9gR4pn9ZKBTI9OgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDdlOGM3NS03NWU0LTQ2NGMtODhjMC0wZjhj NmQ4NzU3YTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWwgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBlfo6OR6FgU1towlbZIzq39odBAOO4buDpzbKV+0HzqBksqagyhrq9 VcnarVqNc9EQm9WZb91BKIMOR74wEcsgFXNjRlmcoKY/sL+t2QW4MHiqDsheAzUe myfLUJmKFbgSuuOeZFmjZR2gg6DGqpb1oBNTNQTbnqYblLZUPr5rugEX68iFO+X0 8mCCR9rt06DbeiKwhXjJdpAoy5KdgOpA1gwhBT2xGZ4SFXW+GW8Lb9Qz7QCHkdsv 4BD0DLogIIwtCUBmyZLqazW0Mafa0/rooRza4NymcmjF2l+IbTw4MGDS+SeZV+0e EbWKI2XwrpxPnqSiA5IPmNPKYXu+5xSA -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:50 2024 by rpki-client on console-fra.rpki-client.org