$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/140bddc3-7308-336a-9d35-8c0abf6b77c2.roa File: 140bddc3-7308-336a-9d35-8c0abf6b77c2.roa (raw, json) Hash identifier: 6QTk4aVVopH7aSCmzCbBH6JIaiKlBrEqapCPOppnX4E= Subject key identifier: BD:04:43:26:BA:FF:77:4A:3D:41:CA:FE:91:35:C1:A4:B1:E2:AE:D4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858475A762B596CFC8DF629C2F2A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/140bddc3-7308-336a-9d35-8c0abf6b77c2.roa Signing time: Fri 27 Sep 2024 13:00:41 +0000 ROA not before: Fri 27 Sep 2024 13:00:41 +0000 ROA not after: Thu 26 Dec 2024 14:00:41 +0000 asID: 396593 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5a:76:2b:59:6c:fc:8d:f6:29:c2:f2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 27 13:00:41 2024 GMT Not After : Dec 26 14:00:41 2024 GMT Subject: CN=3e8ce96c-68b3-4c25-8181-4e366e279eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d0:3b:54:d4:03:1c:33:d4:7c:70:0b:0a:42: 2c:48:3f:5d:c2:88:4e:08:05:6a:31:67:e3:47:75: 80:47:1f:40:35:9a:5e:bc:d2:f6:59:b1:56:0a:b7: fa:1f:b9:09:81:53:d7:c5:5c:be:08:61:12:3c:fb: 3b:48:0c:93:f4:8e:c6:50:8b:0a:03:57:a7:b2:11: bd:96:3b:e0:09:74:fa:e0:bd:53:95:ff:64:e7:96: 57:b1:4f:b7:8c:7b:06:4a:7f:f7:ff:99:cf:30:09: 2c:6b:27:a3:b3:a9:32:d0:e6:bf:90:5c:b2:04:ff: 39:7f:33:23:d0:4f:88:f4:3c:9c:98:15:d0:ea:e4: 02:91:4f:ad:49:d5:db:57:26:6d:42:de:e8:43:28: 14:87:a5:b1:dc:9e:95:26:c8:56:9f:ab:bf:9d:13: 9c:ac:3f:fb:f1:71:d4:65:36:79:f9:67:5c:4c:d5: 17:e2:35:c6:25:eb:f2:28:23:43:df:74:5a:6d:79: 43:d2:db:40:ca:02:b8:3d:e1:cb:28:f5:9b:d4:dc: 3d:d9:67:e1:7c:32:95:ff:f5:be:c4:95:26:2a:59: 5c:20:e4:b0:eb:1a:79:71:8f:d0:30:60:f4:2a:15: d4:66:59:9f:fe:38:0c:dd:aa:cf:93:07:0e:70:e0: 84:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:04:43:26:BA:FF:77:4A:3D:41:CA:FE:91:35:C1:A4:B1:E2:AE:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/140bddc3-7308-336a-9d35-8c0abf6b77c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:55:a0:03:0c:87:26:24:1b:3f:72:1b:b8:b1:39:bb:1b:fd: 48:75:c2:81:08:85:bd:4c:9f:e2:e1:ae:e9:82:79:50:30:c0: 24:75:09:19:c8:26:73:0a:a3:cc:cf:43:a8:83:57:f3:7b:71: f9:cb:39:ee:e5:7c:30:2d:71:0f:10:b9:a9:62:e1:c1:77:21: 9f:ac:62:1c:35:ad:3d:59:08:58:e7:14:cb:0d:8f:ea:cd:3c: bb:e9:c9:43:0d:ca:b1:0d:d5:31:f7:8e:06:8e:fe:63:53:2c: e4:07:d0:f7:12:3a:7d:49:6e:0a:fb:05:4d:19:79:54:97:40: 64:b7:f6:71:dc:ed:97:e9:17:a8:1c:63:09:5e:77:a9:60:2d: 7b:47:a7:0a:2d:b5:43:3f:7d:23:c7:54:27:c2:c1:99:93:47: 4b:e7:1b:67:86:ad:0f:b1:ce:17:a2:21:4e:0c:cb:e5:cd:3f: 8f:36:4f:16:fc:8c:55:a5:1e:ab:72:57:50:2f:4d:55:f9:09: 23:db:74:4f:4c:6f:10:03:1d:fc:fc:e9:ce:3a:f7:5c:f6:a7: 1d:81:e2:00:74:6a:40:6e:fa:d2:b7:98:c9:b6:72:5d:d7:fd: 69:8f:a0:41:c7:61:24:85:0a:26:33:d7:39:67:2a:68:4d:ba: 9c:ba:6c:13 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEdaditZbPyN9inC8qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkyNzEzMDA0MVoXDTI0MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk M2U4Y2U5NmMtNjhiMy00YzI1LTgxODEtNGUzNjZlMjc5ZWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntA7VNQDHDPUfHALCkIsSD9dwohOCAVqMWfj R3WARx9ANZpevNL2WbFWCrf6H7kJgVPXxVy+CGESPPs7SAyT9I7GUIsKA1enshG9 ljvgCXT64L1Tlf9k55ZXsU+3jHsGSn/3/5nPMAksayejs6ky0Oa/kFyyBP85fzMj 0E+I9DycmBXQ6uQCkU+tSdXbVyZtQt7oQygUh6Wx3J6VJshWn6u/nROcrD/78XHU ZTZ5+WdcTNUX4jXGJevyKCND33RabXlD0ttAygK4PeHLKPWb1Nw92WfhfDKV//W+ xJUmKllcIOSw6xp5cY/QMGD0KhXUZlmf/jgM3arPkwcOcOCEMQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFL0EQya6/3dKPUHK/pE1waSx4q7UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTQwYmRkYzMtNzMwOC0z MzZhLTlkMzUtOGMwYWJmNmI3N2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAzVaADDIcmJBs/chu4sTm7G/1IdcKBCIW9TJ/i 4a7pgnlQMMAkdQkZyCZzCqPMz0Oog1fze3H5yznu5XwwLXEPELmpYuHBdyGfrGIc Na09WQhY5xTLDY/qzTy76clDDcqxDdUx944Gjv5jUyzkB9D3Ejp9SW4K+wVNGXlU l0Bkt/Zx3O2X6ReoHGMJXnepYC17R6cKLbVDP30jx1QnwsGZk0dL5xtnhq0Psc4X oiFODMvlzT+PNk8W/IxVpR6rcldQL01V+Qkj23RPTG8QAx38/OnOOvdc9qcdgeIA dGpAbvrSt5jJtnJd1/1pj6BBx2EkhQomM9c5ZypoTbqcumwT -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:07 2024 by rpki-client on console-ams.rpki-client.org