$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/130e487e-4d88-3bee-9426-6e3ea9703dfb.roa File: 130e487e-4d88-3bee-9426-6e3ea9703dfb.roa (raw, json) Hash identifier: QfvwoX3kdBb9i5J1G8iLNoerZM+d6jQzfC6w2zwbLdw= Subject key identifier: D9:76:C1:C3:4D:B2:E2:8D:B8:AC:D0:18:88:8C:38:9B:F2:E5:65:02 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858471775C9680FE4BF9E23817E40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/130e487e-4d88-3bee-9426-6e3ea9703dfb.roa Signing time: Tue 03 Sep 2024 13:00:42 +0000 ROA not before: Tue 03 Sep 2024 13:00:42 +0000 ROA not after: Mon 02 Dec 2024 14:00:42 +0000 asID: 7342 IP address blocks: 2620:74:3a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:17:75:c9:68:0f:e4:bf:9e:23:81:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 3 13:00:42 2024 GMT Not After : Dec 2 14:00:42 2024 GMT Subject: CN=762a9859-d00a-4a43-ada0-c69250f084a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7e:0f:a1:85:bd:73:06:d2:9d:98:3a:60:db: 4a:dc:cb:ae:48:93:33:ee:76:51:c3:49:43:3e:96: 3e:a7:55:47:8f:18:44:17:d3:89:ce:65:f6:a1:da: cc:1c:1d:ae:13:23:4d:e2:0c:d0:83:95:5f:45:d9: bf:72:de:8b:d3:b8:01:37:43:52:a3:54:be:8a:14: 53:ad:80:39:a2:d4:e6:21:35:eb:6d:62:51:24:77: c7:c0:13:c9:32:e8:35:40:33:d7:a9:6d:16:c0:e3: 4b:ea:cc:f5:02:e0:df:fe:78:64:2b:01:4f:49:8b: e4:34:e0:70:a0:27:a1:51:57:3d:32:d3:ce:55:84: 68:0b:01:fa:1d:c4:2b:b1:62:ea:47:bc:c0:76:9e: 42:d2:79:98:05:b8:bb:4a:3f:83:27:3a:b8:23:cb: 9d:b3:b4:51:aa:b2:d4:1f:39:f0:37:b3:36:c0:d1: d3:28:6c:ae:89:92:ee:40:85:05:cb:a6:65:ee:d0: b9:62:f8:98:29:a3:24:92:1d:d0:06:56:58:06:db: be:61:e9:c9:3b:5b:66:e0:61:c2:d4:d1:94:04:e0: a7:75:f4:9e:76:81:db:52:c6:6a:38:3a:5b:a3:34: da:72:7c:0d:9d:aa:cd:0e:41:54:f8:1b:2a:59:38: 58:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:76:C1:C3:4D:B2:E2:8D:B8:AC:D0:18:88:8C:38:9B:F2:E5:65:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/130e487e-4d88-3bee-9426-6e3ea9703dfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:3a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:cc:d9:8a:13:a0:6b:9e:d2:5a:5c:b0:5f:2d:a6:ce:1d:e4: 32:15:76:f2:d8:31:20:0a:14:4b:fc:96:5e:8e:61:ff:26:0a: a3:b2:ed:00:39:38:88:aa:c4:fc:2e:b0:f2:88:1b:7a:1b:ae: bf:e2:b9:69:73:12:d9:cf:22:dd:23:51:b2:f8:c0:4a:de:4f: 33:f6:22:f2:0d:e8:b9:ab:58:8a:7f:20:5b:36:ce:f1:5d:1b: 60:c8:8e:63:2d:fb:b5:af:25:63:f4:d6:27:f8:4b:7e:91:95: 2e:ac:9f:97:e1:64:16:84:b0:13:e4:0e:a1:bd:a0:78:b2:7a: 61:e3:e1:ff:da:bd:1a:1d:4d:d1:ea:6b:06:18:80:6c:94:ae: 59:86:8f:fe:5b:cb:ff:db:63:4c:25:e8:1e:6b:46:46:e2:3e: 5f:31:82:fe:a0:cd:cd:4c:6e:8d:55:a4:36:b4:0e:93:22:3a: 2c:e0:00:be:76:72:4b:94:64:06:1c:d0:d7:75:0d:d6:3b:5d: ac:15:f6:73:56:5b:e0:85:3d:b3:07:9c:dd:e0:1c:77:cc:e7: a2:87:2c:2f:f8:9b:ba:c2:67:8e:a9:1b:8d:7f:1e:2e:2e:81: 30:1a:cb:86:39:d4:eb:35:85:e0:fa:85:be:0d:51:de:97:0a: 82:3d:a6:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEcXdcloD+S/niOBfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkwMzEzMDA0MloXDTI0MTIwMjE0MDA0MlowLzEtMCsGA1UEAxMk NzYyYTk4NTktZDAwYS00YTQzLWFkYTAtYzY5MjUwZjA4NGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0H4PoYW9cwbSnZg6YNtK3MuuSJMz7nZRw0lD PpY+p1VHjxhEF9OJzmX2odrMHB2uEyNN4gzQg5VfRdm/ct6L07gBN0NSo1S+ihRT rYA5otTmITXrbWJRJHfHwBPJMug1QDPXqW0WwONL6sz1AuDf/nhkKwFPSYvkNOBw oCehUVc9MtPOVYRoCwH6HcQrsWLqR7zAdp5C0nmYBbi7Sj+DJzq4I8uds7RRqrLU HznwN7M2wNHTKGyuiZLuQIUFy6Zl7tC5YviYKaMkkh3QBlZYBtu+YenJO1tm4GHC 1NGUBOCndfSedoHbUsZqODpbozTacnwNnarNDkFU+BsqWThYEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNl2wcNNsuKNuKzQGIiMOJvy5WUCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTMwZTQ4N2UtNGQ4OC0z YmVlLTk0MjYtNmUzZWE5NzAzZGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAA6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABXM2YoToGue0lpcsF8tps4d5DIVdvLYMSAKFEv8ll6OYf8mCqOy 7QA5OIiqxPwusPKIG3obrr/iuWlzEtnPIt0jUbL4wEreTzP2IvIN6LmrWIp/IFs2 zvFdG2DIjmMt+7WvJWP01if4S36RlS6sn5fhZBaEsBPkDqG9oHiyemHj4f/avRod TdHqawYYgGyUrlmGj/5by//bY0wl6B5rRkbiPl8xgv6gzc1Mbo1VpDa0DpMiOizg AL52ckuUZAYc0Nd1DdY7XawV9nNWW+CFPbMHnN3gHHfM56KHLC/4m7rCZ46pG41/ Hi4ugTAay4Y51Os1heD6hb4NUd6XCoI9pgo= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:07 2024 by rpki-client on console-ams.rpki-client.org