$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/192eaff7-97f0-3a92-8759-3880ed2af9b3.roa File: 192eaff7-97f0-3a92-8759-3880ed2af9b3.roa (raw, json) Hash identifier: uTZ5D8Lm9Jfy6a1ZecWmbglbNHHsDlU/OzlV8NNjUsM= Subject key identifier: 12:41:A0:A0:C1:9B:77:C7:06:AA:FC:0C:DE:EE:96:49:45:E6:73:C4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858472F308FF4AB1598AB3D2FD580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/192eaff7-97f0-3a92-8759-3880ed2af9b3.roa Signing time: Thu 12 Sep 2024 01:00:31 +0000 ROA not before: Thu 12 Sep 2024 01:00:31 +0000 ROA not after: Wed 11 Dec 2024 02:00:31 +0000 asID: 7342 IP address blocks: 2620:74:5b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2f:30:8f:f4:ab:15:98:ab:3d:2f:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 12 01:00:31 2024 GMT Not After : Dec 11 02:00:31 2024 GMT Subject: CN=f6f3e39e-2da9-493e-b1ed-9e55b4713d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d1:23:49:ec:a4:43:d3:86:5c:67:58:54:f4: ff:62:eb:58:bb:24:de:1f:89:a2:13:b1:fb:9d:ce: e8:30:a2:3d:8a:4e:d1:27:bd:58:82:15:55:e2:16: 0c:3f:73:43:8b:2d:b4:cb:dd:16:ee:ff:f0:2e:30: 9b:77:d4:b8:f7:cd:f1:c7:d6:e6:2d:26:db:93:e9: 7e:82:ff:90:14:b9:e8:c6:54:e4:c0:d0:63:fc:56: d3:4e:bf:8f:01:d8:7f:af:d8:10:83:ff:01:54:e9: b8:6d:79:72:3b:14:a4:11:31:70:79:22:4b:98:5e: 48:6d:ae:54:6e:1f:74:72:eb:0e:ff:05:d1:3d:6b: c7:76:95:cd:8d:79:ac:58:96:e9:8f:cd:15:d5:99: 73:3f:a2:0b:aa:4c:e0:a1:f5:a8:3d:04:57:5d:7b: 87:b2:23:d3:b2:f6:bb:73:ac:46:0e:65:8f:8e:10: 87:69:17:f3:5b:db:83:10:f4:24:ed:20:ad:ef:1b: 82:1f:0c:83:cc:a6:63:8c:46:94:cd:b1:cc:9f:a6: f0:b8:3c:58:9d:61:65:90:55:55:03:7c:7d:85:27: 3e:3d:81:80:52:6f:71:4b:f9:6e:a1:9d:3b:6a:8f: 2d:d4:cb:dd:18:a5:14:2d:87:38:61:62:3c:40:e0: 20:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:41:A0:A0:C1:9B:77:C7:06:AA:FC:0C:DE:EE:96:49:45:E6:73:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/192eaff7-97f0-3a92-8759-3880ed2af9b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:5b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:f5:44:49:94:17:3c:79:a1:98:28:bb:67:78:ea:fb:4d:d3: 5e:e2:30:a1:10:c0:4c:70:3e:8b:90:5d:75:09:63:b4:c1:16: c5:4e:ec:f6:1c:18:3a:f5:b0:49:1e:e6:ce:e2:74:85:76:4b: 7f:f8:55:2b:41:3c:2e:7c:c2:b9:54:83:74:01:f6:fb:ef:25: 3a:83:57:b6:67:0d:1a:27:91:43:6b:ce:81:98:83:78:3d:c9: 0e:ba:77:1f:e3:73:5b:99:b2:da:59:f6:03:a2:a1:bc:8a:9e: c5:0f:a9:41:df:66:4f:a0:9e:23:cf:97:ac:75:3b:7b:c1:2d: dd:81:86:b4:2e:b4:08:c2:28:ac:0d:b6:2f:26:f6:55:51:b1: f4:b3:34:6b:f6:ac:4c:57:6c:85:30:c5:ae:4e:f2:bb:66:ff: 1d:e1:45:ef:5a:0c:65:5c:19:40:5d:51:66:52:0f:4a:8c:6d: 73:92:a5:45:b7:f3:28:f0:71:e5:de:1a:54:43:93:83:ee:ba: aa:ff:f0:26:b8:b3:00:31:52:10:03:16:ab:78:5d:19:9d:47: 35:4b:2b:a1:83:d5:d7:5a:8d:ef:7c:3e:09:01:51:07:84:ab: 53:ce:4f:87:c3:59:19:56:6d:f6:35:f1:d3:28:58:ea:df:21: 56:06:ac:35 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEcvMI/0qxWYqz0v1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkxMjAxMDAzMVoXDTI0MTIxMTAyMDAzMVowLzEtMCsGA1UEAxMk ZjZmM2UzOWUtMmRhOS00OTNlLWIxZWQtOWU1NWI0NzEzZDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNEjSeykQ9OGXGdYVPT/YutYuyTeH4miE7H7 nc7oMKI9ik7RJ71YghVV4hYMP3NDiy20y90W7v/wLjCbd9S4983xx9bmLSbbk+l+ gv+QFLnoxlTkwNBj/FbTTr+PAdh/r9gQg/8BVOm4bXlyOxSkETFweSJLmF5Iba5U bh90cusO/wXRPWvHdpXNjXmsWJbpj80V1ZlzP6ILqkzgofWoPQRXXXuHsiPTsva7 c6xGDmWPjhCHaRfzW9uDEPQk7SCt7xuCHwyDzKZjjEaUzbHMn6bwuDxYnWFlkFVV A3x9hSc+PYGAUm9xS/luoZ07ao8t1MvdGKUULYc4YWI8QOAgOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBJBoKDBm3fHBqr8DN7ulklF5nPEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTkyZWFmZjctOTdmMC0z YTkyLTg3NTktMzg4MGVkMmFmOWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHb1REmUFzx5oZgou2d46vtN017iMKEQwExwPouQXXUJY7TBFsVO 7PYcGDr1sEke5s7idIV2S3/4VStBPC58wrlUg3QB9vvvJTqDV7ZnDRonkUNrzoGY g3g9yQ66dx/jc1uZstpZ9gOiobyKnsUPqUHfZk+gniPPl6x1O3vBLd2BhrQutAjC KKwNti8m9lVRsfSzNGv2rExXbIUwxa5O8rtm/x3hRe9aDGVcGUBdUWZSD0qMbXOS pUW38yjwceXeGlRDk4Puuqr/8Ca4swAxUhADFqt4XRmdRzVLK6GD1ddaje98PgkB UQeEq1POT4fDWRlWbfY18dMoWOrfIVYGrDU= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:08 2024 by rpki-client on console-ams.rpki-client.org