$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1aba76b7-9667-3b1a-9562-81a3f91d3153.roa File: 1aba76b7-9667-3b1a-9562-81a3f91d3153.roa (raw, json) Hash identifier: ouJDBVQu3KubjYqmyj+YJtj/OoMc3CDYUAJ4uBr2Kls= Subject key identifier: 4E:95:F1:FA:4E:2D:1C:66:16:24:D7:7D:80:43:B4:AE:55:62:94:26 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285845A9BE14D609C3975BF1916E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1aba76b7-9667-3b1a-9562-81a3f91d3153.roa Signing time: Thu 25 Apr 2024 13:00:33 +0000 ROA not before: Thu 25 Apr 2024 13:00:33 +0000 ROA not after: Wed 24 Jul 2024 13:00:33 +0000 asID: 7342 IP address blocks: 2620:74:4f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a9:be:14:d6:09:c3:97:5b:f1:91:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 25 13:00:33 2024 GMT Not After : Jul 24 13:00:33 2024 GMT Subject: CN=1d467f95-49a5-4f5e-a16b-476175b447c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:dc:7e:45:40:60:4b:4a:85:a3:fb:f5:f0:c8: 75:4a:94:53:d8:d3:b6:99:2e:65:90:70:08:32:86: 57:d9:49:fd:d8:7f:be:29:56:42:61:f7:96:ed:79: 97:ca:8f:66:28:39:f0:55:7c:f1:6c:17:87:cd:06: 4c:3b:c3:80:c9:46:a1:4d:6d:0c:71:c1:7b:42:f3: e3:7e:bd:a9:11:93:2a:ac:5b:de:7c:27:c3:e3:3f: cd:00:a1:06:89:cd:85:77:75:1e:a0:8d:cc:13:a9: 0b:c5:87:a0:0b:18:6c:3b:c6:a2:63:f6:89:fb:d5: ca:6f:b3:97:5c:12:be:64:70:f7:50:56:de:1a:1c: 5c:1a:a9:a2:e5:21:90:81:22:f5:c6:3a:1d:2f:9d: ab:e8:ce:9c:0e:87:ff:fd:e5:ae:50:78:07:3d:d8: 2b:f9:ac:4e:a7:af:ae:cc:27:97:6a:52:0a:9b:b7: e9:a8:95:ea:f9:6a:e8:f7:f7:42:c7:c5:e0:c4:7f: f3:14:5e:eb:28:e5:e4:1c:bd:e3:71:d2:40:40:9b: bf:36:86:57:1a:c5:f5:89:72:73:98:94:85:7f:1e: 75:46:e6:3c:ea:4f:9c:93:c7:5d:44:87:ed:67:72: 1e:66:df:a0:07:54:08:1a:b6:2b:26:8d:b0:55:73: f2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:95:F1:FA:4E:2D:1C:66:16:24:D7:7D:80:43:B4:AE:55:62:94:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1aba76b7-9667-3b1a-9562-81a3f91d3153.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:4f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f8:f6:49:86:82:6b:26:3b:52:3a:32:82:a2:76:8c:bc:c3: 7a:ac:cf:3e:41:c6:a0:4a:73:75:1f:5d:34:42:cc:ac:6e:42: 4d:98:f1:b4:10:e3:93:6c:47:95:54:42:f3:33:d4:59:98:3e: 89:a8:2d:4b:10:92:5f:87:18:05:b0:26:23:b6:8c:5f:ea:fb: fe:6c:cf:00:58:b3:c9:46:cd:04:98:1e:43:4b:99:ca:5a:2e: 4a:87:4c:0f:d6:e9:19:aa:59:21:fc:0b:64:dc:0c:50:f6:32: 6a:21:d2:d3:67:57:b3:0b:e0:e4:e8:ca:68:67:ae:cc:04:15: fe:c3:85:ba:a1:a3:98:df:ed:43:a0:df:f4:a9:49:21:4a:0b: 9e:2e:ae:9b:e8:0d:97:ae:22:42:c6:92:1b:37:d5:7c:c1:0b: ba:ec:2c:96:db:97:35:cd:89:a2:01:ab:0d:10:dd:bf:0a:07: 84:ad:a3:d6:d6:ff:70:e8:49:20:5d:9b:f3:b3:25:75:38:d3: a6:ac:eb:a0:0b:e7:70:25:23:2a:31:21:fe:e8:9c:a8:e3:a3: 99:86:c3:a3:5b:e5:2e:db:3d:3f:eb:69:4d:f2:31:68:60:36: e1:91:cf:ff:5b:a5:c5:45:38:00:3f:f6:13:c2:4a:43:67:5c: f0:6c:f1:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWpvhTWCcOXW/GRboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDQyNTEzMDAzM1oXDTI0MDcyNDEzMDAzM1owLzEtMCsGA1UEAxMk MWQ0NjdmOTUtNDlhNS00ZjVlLWExNmItNDc2MTc1YjQ0N2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9x+RUBgS0qFo/v18Mh1SpRT2NO2mS5lkHAI MoZX2Un92H++KVZCYfeW7XmXyo9mKDnwVXzxbBeHzQZMO8OAyUahTW0MccF7QvPj fr2pEZMqrFvefCfD4z/NAKEGic2Fd3UeoI3ME6kLxYegCxhsO8aiY/aJ+9XKb7OX XBK+ZHD3UFbeGhxcGqmi5SGQgSL1xjodL52r6M6cDof//eWuUHgHPdgr+axOp6+u zCeXalIKm7fpqJXq+Wro9/dCx8XgxH/zFF7rKOXkHL3jcdJAQJu/NoZXGsX1iXJz mJSFfx51RuY86k+ck8ddRIftZ3IeZt+gB1QIGrYrJo2wVXPyHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE6V8fpOLRxmFiTXfYBDtK5VYpQmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWFiYTc2YjctOTY2Ny0z YjFhLTk1NjItODFhM2Y5MWQzMTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE749kmGgmsmO1I6MoKidoy8w3qszz5BxqBKc3UfXTRCzKxuQk2Y 8bQQ45NsR5VUQvMz1FmYPomoLUsQkl+HGAWwJiO2jF/q+/5szwBYs8lGzQSYHkNL mcpaLkqHTA/W6RmqWSH8C2TcDFD2Mmoh0tNnV7ML4OToymhnrswEFf7Dhbqho5jf 7UOg3/SpSSFKC54urpvoDZeuIkLGkhs31XzBC7rsLJbblzXNiaIBqw0Q3b8KB4St o9bW/3DoSSBdm/OzJXU406as66AL53AlIyoxIf7onKjjo5mGw6Nb5S7bPT/raU3y MWhgNuGRz/9bpcVFOAA/9hPCSkNnXPBs8d8= -----END CERTIFICATE-----Generated at Mon May 13 12:58:41 2024 by rpki-client on console-fra.rpki-client.org