$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1e46c044-39b5-3c28-aee2-9338ebd5b95b.roa File: 1e46c044-39b5-3c28-aee2-9338ebd5b95b.roa (raw, json) Hash identifier: AphGgOVhQJ7mz0LdX+NS8ADq4MF7gqic3E2qmWWrcNY= Subject key identifier: 47:00:F1:40:5A:5D:D7:4A:EB:F0:CA:52:A2:11:BA:07:74:A9:4D:FC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847F15526A8146C79A4B577EB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1e46c044-39b5-3c28-aee2-9338ebd5b95b.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 396549 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:26:a8:14:6c:79:a4:b5:77:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=f527ba57-e277-42d4-a84c-b821caae70e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f8:92:ad:11:20:bc:9d:0d:5e:3c:0f:26:df: 9d:58:cf:eb:0f:b2:e9:17:b8:e4:60:f0:18:93:54: d1:a2:00:5f:f9:9f:70:50:64:e0:42:23:4b:6b:70: da:00:14:cd:21:c0:91:2a:6c:02:3a:4a:e0:2d:c3: 7d:15:b4:1f:df:92:88:38:44:4b:ce:59:dd:0a:f3: 44:1a:be:38:3b:eb:75:26:c4:4d:8b:f6:3e:31:fc: 2e:77:91:33:65:d6:a7:42:b6:6a:4e:95:2c:33:20: 33:7c:30:40:01:4d:e6:f4:80:4b:46:5c:91:40:f7: 8c:e6:38:9e:c8:8d:e4:11:a5:37:f0:59:f4:73:f8: 31:3e:2f:a7:06:a4:03:99:ba:89:8c:2e:cf:42:4e: a6:db:ed:b0:dd:0b:49:00:d9:94:77:00:28:09:bd: 01:c4:7f:8d:40:4d:3b:e7:72:ab:97:9f:bd:fb:72: 22:9a:88:b6:bb:32:85:9d:ad:07:57:95:ee:36:6e: dc:3c:80:92:eb:84:81:65:62:9f:50:87:f3:1a:75: 08:15:9d:66:e8:8b:34:77:77:ad:20:c6:05:a1:c3: b4:35:ed:84:35:d4:ff:f1:41:b7:ef:b2:22:a4:33: fb:ee:3a:56:8b:56:22:d0:9a:51:68:18:f3:32:53: 60:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:00:F1:40:5A:5D:D7:4A:EB:F0:CA:52:A2:11:BA:07:74:A9:4D:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1e46c044-39b5-3c28-aee2-9338ebd5b95b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:55:a2:4f:29:2b:82:16:e3:17:1c:4b:23:db:29:1e:7a:ed: 11:81:42:e4:0f:fa:27:f1:65:68:d3:91:cd:3a:6b:58:8e:d8: 4a:21:3d:8e:69:23:a3:3c:cb:88:80:2a:04:58:6f:7b:be:39: b4:3b:34:b3:e2:ad:72:c1:f1:78:19:33:94:18:e4:ff:cf:e7: 97:f8:a5:e3:7e:8e:55:8b:0b:49:b0:4e:01:96:45:ec:a0:c8: 2a:54:f4:73:d5:dd:9d:5d:8d:1e:53:a7:51:49:85:c5:ec:54: 16:45:6d:1e:2c:b5:b8:e9:ed:3b:6b:55:b5:bc:97:13:bc:57: 3a:15:84:59:39:b6:ec:95:85:ed:6b:0f:ef:68:42:52:81:da: f6:40:be:61:61:f5:9d:59:80:a3:83:f7:d0:a4:1c:2e:a6:06: f0:a9:0b:2a:11:82:67:f3:88:d6:5a:57:8d:e5:9b:45:51:32: bf:d4:0b:46:db:af:03:f4:36:6d:f0:3e:1c:62:89:1b:ca:a2: 48:b5:c3:d4:7b:82:5f:34:da:16:63:90:1a:84:03:c3:b6:57: b6:0e:75:f3:4f:c7:f5:bd:4f:6c:04:0e:46:d4:ca:44:2f:75: ac:35:c6:31:e6:89:e5:02:e8:20:7a:72:02:dd:40:0d:94:4d: 9c:72:a0:43 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfxVSaoFGx5pLV36wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ZjUyN2JhNTctZTI3Ny00MmQ0LWE4NGMtYjgyMWNhYWU3MGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifiSrREgvJ0NXjwPJt+dWM/rD7LpF7jkYPAY k1TRogBf+Z9wUGTgQiNLa3DaABTNIcCRKmwCOkrgLcN9FbQf35KIOERLzlndCvNE Gr44O+t1JsRNi/Y+Mfwud5EzZdanQrZqTpUsMyAzfDBAAU3m9IBLRlyRQPeM5jie yI3kEaU38Fn0c/gxPi+nBqQDmbqJjC7PQk6m2+2w3QtJANmUdwAoCb0BxH+NQE07 53Krl5+9+3Iimoi2uzKFna0HV5XuNm7cPICS64SBZWKfUIfzGnUIFZ1m6Is0d3et IMYFocO0Ne2ENdT/8UG377IipDP77jpWi1Yi0JpRaBjzMlNgkQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEcA8UBaXddK6/DKUqIRugd0qU38MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWU0NmMwNDQtMzliNS0z YzI4LWFlZTItOTMzOGViZDViOTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA/VaJPKSuCFuMXHEsj2ykeeu0RgULkD/on8WVo 05HNOmtYjthKIT2OaSOjPMuIgCoEWG97vjm0OzSz4q1ywfF4GTOUGOT/z+eX+KXj fo5ViwtJsE4BlkXsoMgqVPRz1d2dXY0eU6dRSYXF7FQWRW0eLLW46e07a1W1vJcT vFc6FYRZObbslYXtaw/vaEJSgdr2QL5hYfWdWYCjg/fQpBwupgbwqQsqEYJn84jW WleN5ZtFUTK/1AtG268D9DZt8D4cYokbyqJItcPUe4JfNNoWY5AahAPDtle2DnXz T8f1vU9sBA5G1MpEL3WsNcYx5onlAuggenIC3UANlE2ccqBD -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:31 2024 by rpki-client on console-fra.rpki-client.org