$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/5428d42d-558a-338c-82fc-177b5601c82e.roa File: 5428d42d-558a-338c-82fc-177b5601c82e.roa (raw, json) Hash identifier: sGrmkNS4LnT65Kv5sEra0Oze3saVZE/FhmxHzoOr9As= Subject key identifier: E2:E9:B8:AD:AD:0C:99:50:D9:92:F2:F3:25:F3:A7:99:2E:DB:EE:F8 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F432858477EC10B0E6D4D6F562D38C780 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/5428d42d-558a-338c-82fc-177b5601c82e.roa Signing time: Thu 10 Oct 2024 13:00:41 +0000 ROA not before: Thu 10 Oct 2024 13:00:41 +0000 ROA not after: Wed 08 Jan 2025 14:00:41 +0000 asID: 15092 IP address blocks: 2620:125:b000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7e:c1:0b:0e:6d:4d:6f:56:2d:38:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Oct 10 13:00:41 2024 GMT Not After : Jan 8 14:00:41 2025 GMT Subject: CN=44a388bd-95cc-418d-bcbc-2010ffa56263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:47:74:d6:57:da:6f:3b:59:e7:ab:ef:7b:80: de:2c:5d:ae:dc:b6:68:73:43:70:a2:c7:75:73:76: 8d:a4:bc:d2:bb:29:5d:0e:b1:ab:e1:7b:74:55:34: 79:6d:13:7f:d3:c2:c0:13:bf:98:af:26:3f:c2:8e: 9b:00:1c:79:a7:14:ba:74:62:02:0b:e1:33:09:53: 55:e8:6b:e3:e9:c9:93:98:32:de:89:9c:77:ff:29: e6:12:bd:9a:ce:68:51:29:f3:a4:cd:20:f1:c4:78: e9:29:0e:d4:5f:7c:cb:0b:d0:99:cf:c8:30:53:d5: eb:e5:5a:13:dd:a0:d6:28:96:6f:f6:05:9d:64:be: 90:d1:d6:77:4c:3c:65:24:86:cf:0c:22:4d:0a:e4: 41:0f:b2:85:99:11:35:da:f9:7f:72:de:b9:83:22: 78:7f:d1:e1:42:98:e2:09:32:02:01:a4:85:fd:63: c4:e1:32:e7:3e:97:22:a6:09:a7:58:7a:56:6f:6a: ef:f7:82:74:1e:17:57:4e:10:98:56:66:56:89:2b: 5b:7f:74:a4:a6:34:51:5e:8b:ea:75:87:36:6f:72: 95:fd:3c:1c:3c:f7:af:e1:01:98:ff:52:bf:c7:c7: 9b:12:17:2d:e2:c2:67:d8:f8:43:02:ff:5a:d0:30: 6b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E9:B8:AD:AD:0C:99:50:D9:92:F2:F3:25:F3:A7:99:2E:DB:EE:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/5428d42d-558a-338c-82fc-177b5601c82e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv6: 2620:125:b000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:e7:dc:c5:a0:e3:9a:62:70:8e:a7:a3:44:2c:cd:1a:02:f4: 44:72:eb:bc:2d:9d:38:cc:d8:c6:96:de:5b:66:89:8c:c4:c5: 52:03:66:ca:63:d0:b3:9b:ce:58:4b:a6:5c:5e:7d:96:61:96: 76:bc:c4:7f:f3:07:dd:08:25:48:4e:46:63:a0:78:70:1d:14: 71:3b:8c:4a:16:a5:b6:65:a7:06:ad:06:00:98:2d:58:2c:94: 2d:bc:3b:ae:b3:f4:29:4e:e3:0e:2c:54:0b:f9:ce:0d:cd:98: 0f:81:86:90:47:7b:c8:7b:f1:32:83:e7:9a:b2:f4:29:7f:d4: fd:a8:16:0d:b5:5a:e4:d9:05:e9:02:99:0d:df:01:e5:42:32: 95:f1:b7:f4:a5:66:84:0a:92:88:28:d3:60:98:51:ad:0f:cc: 43:b4:42:b8:e1:f4:bc:ef:aa:df:58:d9:3c:62:a9:47:0e:1d: ff:81:bb:09:97:f0:37:32:45:53:21:9e:c7:0a:cc:e3:36:9c: aa:f5:3d:98:e1:6c:53:e4:b6:cc:60:d1:bd:5b:94:4b:14:4f: 74:64:2a:aa:9b:5f:39:d6:48:67:3d:0d:8e:32:aa:69:ce:ae: c0:00:68:e9:9e:84:8e:21:b0:ef:a5:4e:4a:db:40:16:77:af: 0d:b1:30:35 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEd+wQsObU1vVi04x4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI0MTAxMDEzMDA0MVoXDTI1MDEwODE0MDA0MVowLzEtMCsGA1UEAxMk NDRhMzg4YmQtOTVjYy00MThkLWJjYmMtMjAxMGZmYTU2MjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokd01lfabztZ56vve4DeLF2u3LZoc0Nwosd1 c3aNpLzSuyldDrGr4Xt0VTR5bRN/08LAE7+YryY/wo6bABx5pxS6dGICC+EzCVNV 6Gvj6cmTmDLeiZx3/ynmEr2azmhRKfOkzSDxxHjpKQ7UX3zLC9CZz8gwU9Xr5VoT 3aDWKJZv9gWdZL6Q0dZ3TDxlJIbPDCJNCuRBD7KFmRE12vl/ct65gyJ4f9HhQpji CTICAaSF/WPE4TLnPpcipgmnWHpWb2rv94J0HhdXThCYVmZWiStbf3SkpjRRXovq dYc2b3KV/TwcPPev4QGY/1K/x8ebEhct4sJn2PhDAv9a0DBrgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOLpuK2tDJlQ2ZLy8yXzp5ku2+74MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvNTQyOGQ0MmQtNTU4YS0z MzhjLTgyZmMtMTc3YjU2MDFjODJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABJbAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAzn3MWg45picI6no0QszRoC9ERy67wtnTjM2MaW3ltmiYzExVID Zspj0LObzlhLplxefZZhlna8xH/zB90IJUhORmOgeHAdFHE7jEoWpbZlpwatBgCY LVgslC28O66z9ClO4w4sVAv5zg3NmA+BhpBHe8h78TKD55qy9Cl/1P2oFg21WuTZ BekCmQ3fAeVCMpXxt/SlZoQKkogo02CYUa0PzEO0Qrjh9Lzvqt9Y2TxiqUcOHf+B uwmX8DcyRVMhnscKzOM2nKr1PZjhbFPktsxg0b1blEsUT3RkKqqbXznWSGc9DY4y qmnOrsAAaOmehI4hsO+lTkrbQBZ3rw2xMDU= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:05 2024 by rpki-client on console-ams.rpki-client.org