$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/11a3ab94-5d8b-3054-a04e-5359f29c7f40.roa File: 11a3ab94-5d8b-3054-a04e-5359f29c7f40.roa (raw, json) Hash identifier: PAAB+nyiLd+68PdLWhkERmDGg5nGTGhWESBVYS9t2pY= Subject key identifier: 9A:EC:33:91:DC:D6:47:57:BA:64:A5:6F:52:78:7E:A2:97:11:EF:97 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847B696CAF4220B17DDF40268F0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/11a3ab94-5d8b-3054-a04e-5359f29c7f40.roa Signing time: Wed 30 Oct 2024 13:00:40 +0000 ROA not before: Wed 30 Oct 2024 13:00:40 +0000 ROA not after: Tue 28 Jan 2025 14:00:40 +0000 asID: 25485 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b6:96:ca:f4:22:0b:17:dd:f4:02:68:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 30 13:00:40 2024 GMT Not After : Jan 28 14:00:40 2025 GMT Subject: CN=7f161fd6-8fcb-412e-9d77-9e6227dbe246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:05:be:c0:ef:85:00:84:7c:26:df:1e:2a:fe: 6b:85:7f:7a:4e:8c:8c:b9:38:24:06:92:a6:8d:7c: 75:eb:c4:fa:0e:50:c2:94:b2:4c:89:ac:fa:25:b3: aa:6d:37:23:8c:dc:af:85:53:8b:9b:11:d4:c7:97: b5:b8:f0:fb:ac:10:f9:2a:c1:12:d9:cb:ce:ad:47: 22:5b:6f:87:6c:cc:34:ed:1d:d9:69:59:12:51:4b: 6b:75:b2:5d:a9:65:32:53:3d:31:88:2a:32:66:8e: 6d:d4:a1:cd:89:b5:1b:f8:9d:ee:95:37:40:90:6f: 98:1c:0c:53:b3:e2:b8:9a:7c:2a:6f:f8:51:5a:b3: 63:2e:78:68:97:25:26:ae:bf:65:a6:44:f6:ee:6a: 3d:64:29:4b:5c:c1:7f:b4:8d:ea:60:b8:e0:ea:94: d1:a1:be:5c:ed:84:c2:a4:dd:68:92:7f:18:ce:a4: 76:1c:06:9f:f5:88:12:38:ca:33:2b:fb:d8:9b:3e: 75:3a:74:f1:78:9e:79:20:21:c3:62:5d:e7:ec:63: 94:ed:fb:7c:2d:22:73:c9:f8:09:9b:5d:2f:f1:78: d5:9b:77:c2:ca:95:2c:31:6d:1b:56:7b:05:ac:62: 3c:43:fd:06:33:ec:c6:c3:ce:af:b6:ce:46:e8:a9: 78:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EC:33:91:DC:D6:47:57:BA:64:A5:6F:52:78:7E:A2:97:11:EF:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/11a3ab94-5d8b-3054-a04e-5359f29c7f40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:23:f0:ac:2e:f3:cb:f4:6a:00:19:f7:f1:7a:29:e6:17:03: 54:ab:8d:69:10:69:52:e7:32:68:da:b3:c7:bc:c4:8c:66:f6: ca:dd:97:b8:03:f0:84:5d:64:da:56:29:1e:d3:e4:9a:84:48: a4:ab:94:74:c0:ac:2a:5a:78:a7:28:65:76:e8:56:69:ae:2a: f7:40:8b:eb:b3:6f:80:a2:6f:81:ea:90:60:04:ec:5b:5e:61: 2e:14:be:c4:b3:28:58:86:aa:ae:87:fd:98:3a:46:45:f2:7c: 7e:ff:b6:8e:c3:8a:7a:f9:ec:85:61:26:e9:4a:f9:ac:00:32: 65:71:2c:ab:32:70:22:94:fe:66:62:21:1d:2a:21:03:36:cd: 77:68:bb:3c:e0:d4:f2:18:9f:82:69:d9:4b:16:28:7d:38:82: e1:e9:54:2a:62:01:b0:e7:f2:ea:43:0e:08:b7:86:2a:19:5b: 44:24:90:11:0c:63:ca:87:a0:1f:bf:03:7a:cb:6c:55:43:11: bb:c3:f6:5a:9b:c1:f4:1c:88:5d:f5:ef:96:12:60:43:7f:68: 1b:53:1f:72:90:4c:9b:09:91:3b:04:b5:d3:3b:5b:45:9e:9f: d3:06:30:d6:05:11:fa:cf:b6:e6:7c:1a:a3:30:37:9a:e9:e9: cd:02:d7:53 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEe2lsr0IgsX3fQCaPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTAzMDEzMDA0MFoXDTI1MDEyODE0MDA0MFowLzEtMCsGA1UEAxMk N2YxNjFmZDYtOGZjYi00MTJlLTlkNzctOWU2MjI3ZGJlMjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/wW+wO+FAIR8Jt8eKv5rhX96ToyMuTgkBpKm jXx168T6DlDClLJMiaz6JbOqbTcjjNyvhVOLmxHUx5e1uPD7rBD5KsES2cvOrUci W2+HbMw07R3ZaVkSUUtrdbJdqWUyUz0xiCoyZo5t1KHNibUb+J3ulTdAkG+YHAxT s+K4mnwqb/hRWrNjLnholyUmrr9lpkT27mo9ZClLXMF/tI3qYLjg6pTRob5c7YTC pN1okn8YzqR2HAaf9YgSOMozK/vYmz51OnTxeJ55ICHDYl3n7GOU7ft8LSJzyfgJ m10v8XjVm3fCypUsMW0bVnsFrGI8Q/0GM+zGw86vts5G6Kl4tQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJrsM5Hc1kdXumSlb1J4fqKXEe+XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTFhM2FiOTQtNWQ4Yi0z MDU0LWEwNGUtNTM1OWYyOWM3ZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAXI/CsLvPL9GoAGffxeinmFwNUq41pEGlS5zJo 2rPHvMSMZvbK3Ze4A/CEXWTaVike0+SahEikq5R0wKwqWninKGV26FZprir3QIvr s2+Aom+B6pBgBOxbXmEuFL7EsyhYhqquh/2YOkZF8nx+/7aOw4p6+eyFYSbpSvms ADJlcSyrMnAilP5mYiEdKiEDNs13aLs84NTyGJ+CadlLFih9OILh6VQqYgGw5/Lq Qw4It4YqGVtEJJARDGPKh6AfvwN6y2xVQxG7w/Zam8H0HIhd9e+WEmBDf2gbUx9y kEybCZE7BLXTO1tFnp/TBjDWBRH6z7bmfBqjMDea6enNAtdT -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:30 2024 by rpki-client on console-fra.rpki-client.org