$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/1510cd77-c0b2-3a56-be16-d2f8e4894b04.roa File: 1510cd77-c0b2-3a56-be16-d2f8e4894b04.roa (raw, json) Hash identifier: hc/3MFnES0rlJYRUeQFzRsNMl9HANn1SNZ5XFEVGHdg= Subject key identifier: 81:B3:05:1F:5A:9E:EF:2B:E1:F5:55:14:BF:B1:24:AD:10:04:47:05 Certificate issuer: /CN=e42a3de7-584f-4010-acae-b7935ed3f602 Certificate serial: 010D0C9F4328584784566E179993ADBBE5086980 Authority key identifier: D0:4B:20:55:92:9C:EB:76:E4:1F:6A:75:74:2A:D9:ED:93:2E:F6:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/1510cd77-c0b2-3a56-be16-d2f8e4894b04.roa Signing time: Sat 12 Oct 2024 13:00:42 +0000 ROA not before: Sat 12 Oct 2024 13:00:42 +0000 ROA not after: Fri 10 Jan 2025 14:00:42 +0000 asID: 0 IP address blocks: 2001:504:2d::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/e42a3de7-584f-4010-acae-b7935ed3f602.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/e42a3de7-584f-4010-acae-b7935ed3f602.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:84:56:6e:17:99:93:ad:bb:e5:08:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e42a3de7-584f-4010-acae-b7935ed3f602 Validity Not Before: Oct 12 13:00:42 2024 GMT Not After : Jan 10 14:00:42 2025 GMT Subject: CN=bb1bc693-51b8-4819-9491-095cc1731e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e2:33:14:45:39:54:89:d9:06:94:02:dd:d5: ea:47:b7:33:ff:88:06:b0:84:1b:a1:4c:04:5d:b3: 3a:23:9c:7c:24:b7:d0:2e:be:5c:22:72:5d:a1:82: 52:a8:34:24:f6:2c:84:f4:92:a7:f2:bc:03:c4:66: fe:a7:e1:c9:9b:4e:68:5c:36:fd:58:3b:90:5b:0b: 70:ec:5d:44:8d:40:68:fa:db:35:6c:b0:b2:f8:7f: b2:1b:ed:dd:27:67:b6:40:2d:c6:49:44:1d:95:53: 48:21:81:8a:74:62:6f:70:91:e5:89:c6:8f:77:3c: 1f:f8:b0:40:4a:b5:24:9e:db:35:a3:81:5f:d5:fb: a8:e4:0e:c1:3d:2e:07:50:2f:68:01:e0:0f:19:3d: 8c:83:b4:c2:87:f7:8f:51:31:8a:8a:97:7b:49:b0: bf:d4:81:5d:64:25:5c:b9:1e:99:5d:20:a0:48:b6: 7e:06:9d:63:c6:8e:78:82:a4:c6:b0:62:6c:14:ce: 9e:c5:c4:82:46:ca:38:dc:8e:6f:64:45:87:37:d5: 92:22:ea:a0:9b:f3:b0:b9:16:7b:01:f9:eb:e3:db: 79:79:08:d7:08:98:81:33:8a:de:5a:b6:aa:51:4f: a4:bf:5a:23:ec:a3:66:0b:9d:e1:32:e8:ba:2e:e8: 66:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B3:05:1F:5A:9E:EF:2B:E1:F5:55:14:BF:B1:24:AD:10:04:47:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/1510cd77-c0b2-3a56-be16-d2f8e4894b04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602/e42a3de7-584f-4010-acae-b7935ed3f602.crl X509v3 Authority Key Identifier: keyid:D0:4B:20:55:92:9C:EB:76:E4:1F:6A:75:74:2A:D9:ED:93:2E:F6:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e42a3de7-584f-4010-acae-b7935ed3f602.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:2d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:07:94:61:96:a3:7b:8b:8c:6a:f1:5a:4e:2b:f3:0d:e4:b2: e4:5f:74:3e:83:50:7c:74:4a:ee:61:88:2e:f2:84:a7:11:95: 79:51:03:4b:3f:bc:f3:fd:84:0c:1f:2d:e4:1a:2a:9a:66:36: 83:d9:54:f1:81:c1:f5:ca:d8:10:d0:51:6f:01:4f:72:69:13: af:9e:4e:47:63:4e:12:9d:bd:06:8c:b8:5d:bf:a7:84:2c:d8: 1f:f9:51:cb:04:59:39:71:5e:42:20:07:92:84:11:5e:63:a1: 14:07:87:09:4f:51:b4:64:99:af:f7:95:11:c2:5d:9f:b0:e8: 99:88:c4:d7:7f:77:97:33:df:bd:44:c9:6c:52:ad:94:2d:b1: 95:d8:1c:f3:6d:d0:5a:96:db:31:fc:06:86:fd:8c:20:f6:74: 2c:39:e4:69:c1:0c:a7:9b:d8:ea:8a:c0:8e:7f:23:d1:36:12: 19:e8:df:a3:22:8b:6f:a9:d5:8d:de:68:23:7f:c2:20:e4:72: e5:a2:88:eb:cf:cb:e4:f1:14:58:ed:6e:98:bc:bd:19:75:f2: 5a:d7:94:14:18:9e:84:47:ef:3a:76:ad:ba:37:64:a3:65:c0: bd:cf:f5:d7:79:15:07:33:89:8a:f7:b4:57:ba:49:5b:89:b0: ca:90:eb:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeEVm4XmZOtu+UIaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQyYTNkZTctNTg0Zi00MDEwLWFjYWUtYjc5MzVlZDNm NjAyMB4XDTI0MTAxMjEzMDA0MloXDTI1MDExMDE0MDA0MlowLzEtMCsGA1UEAxMk YmIxYmM2OTMtNTFiOC00ODE5LTk0OTEtMDk1Y2MxNzMxZTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeIzFEU5VInZBpQC3dXqR7cz/4gGsIQboUwE XbM6I5x8JLfQLr5cInJdoYJSqDQk9iyE9JKn8rwDxGb+p+HJm05oXDb9WDuQWwtw 7F1EjUBo+ts1bLCy+H+yG+3dJ2e2QC3GSUQdlVNIIYGKdGJvcJHlicaPdzwf+LBA SrUknts1o4Ff1fuo5A7BPS4HUC9oAeAPGT2Mg7TCh/ePUTGKipd7SbC/1IFdZCVc uR6ZXSCgSLZ+Bp1jxo54gqTGsGJsFM6excSCRso43I5vZEWHN9WSIuqgm/OwuRZ7 Afnr49t5eQjXCJiBM4reWraqUU+kv1oj7KNmC53hMui6Luhm4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIGzBR9anu8r4fVVFL+xJK0QBEcFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNDJh M2RlNy01ODRmLTQwMTAtYWNhZS1iNzkzNWVkM2Y2MDIvMTUxMGNkNzctYzBiMi0z YTU2LWJlMTYtZDJmOGU0ODk0YjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTQyYTNkZTctNTg0Zi00MDEwLWFj YWUtYjc5MzVlZDNmNjAyL2U0MmEzZGU3LTU4NGYtNDAxMC1hY2FlLWI3OTM1ZWQz ZjYwMi5jcmwwHwYDVR0jBBgwFoAU0EsgVZKc63bkH2p1dCrZ7ZMu9pswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNDJhM2RlNy01ODRmLTQwMTAtYWNhZS1iNzkz NWVkM2Y2MDIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAAt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFYHlGGWo3uLjGrxWk4r8w3ksuRfdD6DUHx0Su5hiC7yhKcRlXlR A0s/vPP9hAwfLeQaKppmNoPZVPGBwfXK2BDQUW8BT3JpE6+eTkdjThKdvQaMuF2/ p4Qs2B/5UcsEWTlxXkIgB5KEEV5joRQHhwlPUbRkma/3lRHCXZ+w6JmIxNd/d5cz 371EyWxSrZQtsZXYHPNt0FqW2zH8Bob9jCD2dCw55GnBDKeb2OqKwI5/I9E2Ehno 36Mii2+p1Y3eaCN/wiDkcuWiiOvPy+TxFFjtbpi8vRl18lrXlBQYnoRH7zp2rbo3 ZKNlwL3P9dd5FQcziYr3tFe6SVuJsMqQ6xE= -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:52 2024 by rpki-client on console-fra.rpki-client.org