$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/154193b3-4343-3606-a090-abe104264035.roa File: 154193b3-4343-3606-a090-abe104264035.roa (raw, json) Hash identifier: ddkApX09p65ZMsBEN6fgTh9DnSFJBsRtD5sMXZpPo/I= Subject key identifier: 26:8E:EB:AF:F6:FF:B9:72:86:C5:5F:E2:2A:BD:34:D2:F5:E5:D8:4B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584534DE988E7BB814E1CB35D240 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/154193b3-4343-3606-a090-abe104264035.roa Signing time: Thu 14 Mar 2024 16:16:37 +0000 ROA not before: Thu 14 Mar 2024 16:16:37 +0000 ROA not after: Wed 12 Jun 2024 16:16:37 +0000 asID: 7342 IP address blocks: 2620:74:7b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:34:de:98:8e:7b:b8:14:e1:cb:35:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 14 16:16:37 2024 GMT Not After : Jun 12 16:16:37 2024 GMT Subject: CN=34022b13-68d1-410b-8622-1e7bbd29d2b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ef:34:90:ca:0e:da:0a:32:ef:3a:3d:20:04: a7:e5:21:4b:82:93:b3:9f:ce:73:9d:91:f0:90:0a: 6e:20:0e:34:e5:1d:7c:a2:1e:4c:8c:ac:d4:c1:5c: 69:01:a2:09:09:41:b1:5e:17:0d:a3:09:35:cf:78: 29:a6:64:ec:12:42:aa:f1:71:4c:35:0e:1c:a1:0c: 7d:cd:cb:d1:98:71:4e:8b:6a:ee:d5:16:1d:81:46: f1:9d:36:4e:c6:27:9c:89:21:24:bc:fd:09:71:b5: 9a:da:a4:a0:5f:9b:e6:0d:6a:70:16:ff:a5:30:39: 51:58:2d:be:94:05:04:de:bd:7a:66:f4:e6:cc:92: 0e:2e:0c:bf:26:b1:e9:d9:10:2b:b6:87:20:66:7d: ef:20:ba:e8:04:91:29:3b:59:fc:8c:a8:57:3e:bf: aa:7f:e3:b0:7b:1f:8e:77:71:25:1c:84:a7:2e:2e: a1:ab:ae:ea:e7:18:76:b5:b1:ad:39:6d:35:1a:b3: 08:dc:38:57:0e:ab:7e:7f:f8:15:e3:83:92:db:15: 5e:5d:5d:e4:f8:25:25:9f:36:35:84:ac:64:c6:14: c5:03:51:2c:e8:98:b3:90:d7:f8:0a:88:f8:36:79: 84:91:42:56:75:cd:58:ac:63:0f:17:9c:44:e5:58: 4f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8E:EB:AF:F6:FF:B9:72:86:C5:5F:E2:2A:BD:34:D2:F5:E5:D8:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/154193b3-4343-3606-a090-abe104264035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:7b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ab:a3:63:ed:08:35:9b:d2:52:d6:3e:8a:76:af:54:a8:68: bd:a9:19:1b:a8:00:02:af:fc:e2:70:7f:dc:ac:b0:6a:09:6d: f0:6d:f5:a2:fe:8c:de:5f:06:62:00:ac:f3:ef:ed:85:3d:f1: 28:86:a5:24:2a:0b:06:3b:1d:4c:e9:3b:4f:01:e7:a5:0e:5c: 61:3c:b8:38:0a:fe:17:2f:e1:73:83:7f:15:17:46:4e:7f:e3: 68:3e:f8:c9:c8:ee:9d:df:a0:67:9d:5c:95:c0:df:2e:5d:cd: ef:99:81:b3:2e:8e:ff:1a:3d:fd:2a:9e:3d:cb:52:fe:96:bf: 4a:f7:4e:29:78:d9:2f:a6:3e:9d:7a:cb:18:64:30:11:c4:a7: 37:85:41:32:16:f6:74:a7:56:b7:33:7a:3c:84:ec:f0:32:c1: dc:bd:1b:bd:41:3e:3d:c0:66:34:ad:ce:76:ac:79:24:30:c5: 79:01:25:60:d4:4a:fc:bf:ec:b0:c9:7c:b2:be:76:ad:f4:09: 26:de:c2:b1:8e:1c:13:78:b7:7f:1c:8f:ff:67:a9:00:98:69: 91:76:65:a6:bd:03:6c:3a:23:1b:7e:b5:0b:97:4e:fe:ab:f0: fa:dc:3a:22:ed:e1:21:df:30:4e:76:f7:54:9e:43:7c:f4:6a: 15:de:e9:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEU03piOe7gU4cs10kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDMxNDE2MTYzN1oXDTI0MDYxMjE2MTYzN1owLzEtMCsGA1UEAxMk MzQwMjJiMTMtNjhkMS00MTBiLTg2MjItMWU3YmJkMjlkMmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhe80kMoO2goy7zo9IASn5SFLgpOzn85znZHw kApuIA405R18oh5MjKzUwVxpAaIJCUGxXhcNowk1z3gppmTsEkKq8XFMNQ4coQx9 zcvRmHFOi2ru1RYdgUbxnTZOxieciSEkvP0JcbWa2qSgX5vmDWpwFv+lMDlRWC2+ lAUE3r16ZvTmzJIOLgy/JrHp2RArtocgZn3vILroBJEpO1n8jKhXPr+qf+Owex+O d3ElHISnLi6hq67q5xh2tbGtOW01GrMI3DhXDqt+f/gV44OS2xVeXV3k+CUlnzY1 hKxkxhTFA1Es6JizkNf4Coj4NnmEkUJWdc1YrGMPF5xE5VhP8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCaO66/2/7lyhsVf4iq9NNL15dhLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTU0MTkzYjMtNDM0My0z NjA2LWEwOTAtYWJlMTA0MjY0MDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAB7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHqro2PtCDWb0lLWPop2r1SoaL2pGRuoAAKv/OJwf9yssGoJbfBt 9aL+jN5fBmIArPPv7YU98SiGpSQqCwY7HUzpO08B56UOXGE8uDgK/hcv4XODfxUX Rk5/42g++MnI7p3foGedXJXA3y5dze+ZgbMujv8aPf0qnj3LUv6Wv0r3Til42S+m Pp16yxhkMBHEpzeFQTIW9nSnVrczejyE7PAywdy9G71BPj3AZjStznaseSQwxXkB JWDUSvy/7LDJfLK+dq30CSbewrGOHBN4t38cj/9nqQCYaZF2Zaa9A2w6Ixt+tQuX Tv6r8PrcOiLt4SHfME5291SeQ3z0ahXe6VU= -----END CERTIFICATE-----Generated at Mon May 13 12:15:40 2024 by rpki-client on console-ams.rpki-client.org