$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2064d786-143a-30d6-b028-aba4222934c5.roa File: 2064d786-143a-30d6-b028-aba4222934c5.roa (raw, json) Hash identifier: PYY76Sxi/Ac1lVJAkHux3Uc2+8QWYuDHRzXZYlWW610= Subject key identifier: 43:D2:FE:A0:4D:C2:63:AB:DE:F3:55:0C:A3:2A:54:6F:94:B6:9C:6E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858478E1BC9D074C20C986C6C0C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2064d786-143a-30d6-b028-aba4222934c5.roa Signing time: Wed 16 Oct 2024 01:00:31 +0000 ROA not before: Wed 16 Oct 2024 01:00:31 +0000 ROA not after: Tue 14 Jan 2025 02:00:31 +0000 asID: 0 IP address blocks: 2620:74:f0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:1b:c9:d0:74:c2:0c:98:6c:6c:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 16 01:00:31 2024 GMT Not After : Jan 14 02:00:31 2025 GMT Subject: CN=7290c8ef-5ad2-4a1f-8a29-c17e9a100ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:96:d9:c6:65:bd:78:7e:89:cb:3a:60:b7:09: 9f:e2:4a:4e:e1:b5:70:54:11:93:1d:5c:4c:d7:f8: 6e:bd:0e:14:bc:a3:8d:fd:fc:24:f3:04:69:63:40: f2:0c:0e:9c:bf:c2:c0:7e:3c:89:29:78:68:f3:2d: 96:86:af:4c:60:a0:58:18:82:78:37:c1:5d:5b:ec: 38:98:b0:e7:10:47:10:02:a4:ee:a6:d6:b6:f6:82: 27:2a:de:e9:27:74:d1:72:19:8a:59:f6:78:3e:95: 19:07:a9:28:81:a4:c8:8e:fd:00:19:db:44:b9:38: d6:ad:16:cb:24:f3:5d:9c:74:12:cd:4a:f9:ac:53: 25:bb:ac:d8:88:24:60:2a:1f:44:a2:e2:c5:bd:fd: b5:88:96:6a:aa:bc:48:ab:04:49:6f:6b:cd:7f:f7: 16:7f:21:a3:6c:3e:9a:11:24:1e:d7:70:0c:95:66: 06:1a:42:04:8a:46:88:13:f6:58:1d:30:ed:ba:47: b2:0f:96:26:c8:57:f1:14:0a:44:50:2d:01:f8:7f: 64:7b:95:36:13:51:2c:2a:82:1f:18:9e:48:a5:d8: 79:2b:c2:fc:99:46:6a:78:dc:51:48:bb:45:e0:4e: dd:75:b6:23:86:1b:c6:10:81:95:eb:6f:35:8f:3a: 85:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D2:FE:A0:4D:C2:63:AB:DE:F3:55:0C:A3:2A:54:6F:94:B6:9C:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2064d786-143a-30d6-b028-aba4222934c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:f0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:6c:94:6d:6d:b7:35:a4:6a:17:6d:02:0f:b9:cc:99:3c:25: 95:14:fc:39:42:0e:6d:38:77:b8:32:34:51:65:8e:c0:f6:4f: 75:40:6d:0e:de:9b:12:78:5b:63:5e:47:ac:6b:b9:4c:6d:2e: 56:5c:3e:65:ba:54:e4:af:20:25:19:30:ca:7e:51:7b:1a:e1: 0c:ac:24:96:bd:34:e0:1b:7c:fa:10:55:48:15:08:ca:0a:3c: 5d:e5:fb:c7:a7:36:b3:d6:9d:2a:44:75:c9:dd:d1:f4:2b:05: f4:64:b8:3a:4f:66:6c:75:85:c9:57:87:75:cb:04:b2:04:1a: 9b:3e:84:8b:4f:88:4d:e6:95:18:80:43:fc:b8:35:9a:bc:2d: 9b:59:22:7f:0a:06:9a:e1:62:b7:71:e5:b4:d3:2c:ab:19:1f: 43:21:c9:e5:38:dc:cc:e9:f1:a9:18:b7:1d:cf:59:54:16:79: 70:78:ee:ca:18:67:a4:52:32:3e:7e:f8:6e:e6:17:44:07:f3: 98:88:27:ca:91:2e:5f:fc:13:60:2f:d8:3d:0c:37:4a:69:60: bc:6a:6b:0b:ff:89:77:ae:85:8b:94:b3:9e:fd:d4:be:43:8b: d7:a1:30:2f:e1:f4:98:10:b9:fc:5e:6c:c6:76:80:68:92:f6: 92:70:f6:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeOG8nQdMIMmGxsDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk NzI5MGM4ZWYtNWFkMi00YTFmLThhMjktYzE3ZTlhMTAwZmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpbZxmW9eH6Jyzpgtwmf4kpO4bVwVBGTHVxM 1/huvQ4UvKON/fwk8wRpY0DyDA6cv8LAfjyJKXho8y2Whq9MYKBYGIJ4N8FdW+w4 mLDnEEcQAqTupta29oInKt7pJ3TRchmKWfZ4PpUZB6kogaTIjv0AGdtEuTjWrRbL JPNdnHQSzUr5rFMlu6zYiCRgKh9EouLFvf21iJZqqrxIqwRJb2vNf/cWfyGjbD6a ESQe13AMlWYGGkIEikaIE/ZYHTDtukeyD5YmyFfxFApEUC0B+H9ke5U2E1EsKoIf GJ5Ipdh5K8L8mUZqeNxRSLtF4E7ddbYjhhvGEIGV6281jzqFqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEPS/qBNwmOr3vNVDKMqVG+UtpxuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjA2NGQ3ODYtMTQzYS0z MGQ2LWIwMjgtYWJhNDIyMjkzNGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAdADw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEZslG1ttzWkahdtAg+5zJk8JZUU/DlCDm04d7gyNFFljsD2T3VA bQ7emxJ4W2NeR6xruUxtLlZcPmW6VOSvICUZMMp+UXsa4QysJJa9NOAbfPoQVUgV CMoKPF3l+8enNrPWnSpEdcnd0fQrBfRkuDpPZmx1hclXh3XLBLIEGps+hItPiE3m lRiAQ/y4NZq8LZtZIn8KBprhYrdx5bTTLKsZH0MhyeU43Mzp8akYtx3PWVQWeXB4 7soYZ6RSMj5++G7mF0QH85iIJ8qRLl/8E2Av2D0MN0ppYLxqawv/iXeuhYuUs579 1L5Di9ehMC/h9JgQufxebMZ2gGiS9pJw9to= -----END CERTIFICATE-----Generated at Thu Nov 21 21:44:22 2024 by rpki-client on console-ams.rpki-client.org