$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a134b2-21c4-3715-b147-4f129455688a.roa File: 24a134b2-21c4-3715-b147-4f129455688a.roa (raw, json) Hash identifier: l8QVEJXztueFACMS9fuvT9y42a2BngNDh6HJM1jjJQM= Subject key identifier: 6E:C2:19:37:63:CB:A6:39:7B:6D:A7:A9:44:7D:EC:B6:7B:4D:3B:EB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847A30C0B60CBE9BDD78C144CC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a134b2-21c4-3715-b147-4f129455688a.roa Signing time: Wed 23 Oct 2024 13:00:41 +0000 ROA not before: Wed 23 Oct 2024 13:00:41 +0000 ROA not after: Tue 21 Jan 2025 14:00:41 +0000 asID: 396576 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a3:0c:0b:60:cb:e9:bd:d7:8c:14:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 23 13:00:41 2024 GMT Not After : Jan 21 14:00:41 2025 GMT Subject: CN=c913454a-c036-4f42-850e-ed29e0a3858e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:72:52:a6:31:81:94:f9:c9:c9:53:6a:0f:df: ef:6e:54:3a:4f:63:7a:61:4a:5e:b8:df:05:06:10: 9d:65:cf:da:0f:08:6e:ff:99:e8:40:df:3b:d7:64: 01:76:0d:34:5f:b1:7b:79:13:49:b5:20:2c:f1:19: 45:84:07:68:ac:35:3c:33:e6:ff:80:29:47:ee:25: e8:d1:94:82:67:2b:e4:6e:b1:0a:20:87:d8:80:b4: 8f:4b:af:dc:45:2c:96:2d:82:8c:7b:7e:70:64:48: 77:78:12:99:df:a7:84:0d:9e:d3:e0:17:46:43:6e: 72:5e:8f:83:b0:36:b2:8d:87:0c:b7:68:d1:7d:36: 69:02:a5:5e:73:5e:24:66:7a:01:63:9e:c5:1b:65: f9:d0:9b:b2:89:c0:2c:af:d3:3c:d5:ac:ec:5c:27: 00:61:c8:d4:f7:01:58:83:8e:1c:0a:c6:cb:de:21: f7:93:83:60:d6:4c:64:1e:c2:3c:07:4d:c4:12:f8: 75:aa:21:27:1d:05:fc:53:34:73:1f:bd:63:9a:b8: 5f:ed:25:80:ab:4b:51:74:32:71:48:2f:97:0a:db: e3:1e:63:08:f8:02:a8:27:98:74:fa:a6:ec:e8:d6: f2:1c:95:5a:e1:7e:51:e6:34:83:d3:0f:ad:a2:1f: b7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C2:19:37:63:CB:A6:39:7B:6D:A7:A9:44:7D:EC:B6:7B:4D:3B:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a134b2-21c4-3715-b147-4f129455688a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:6c:35:52:ab:89:ad:12:19:9c:f9:09:61:d1:5a:2c:f6:6b: 75:09:18:df:45:77:fe:55:24:65:bc:22:43:c0:bd:42:3f:d2: 36:60:c8:8e:26:65:b1:2a:a1:21:5e:5f:43:c2:e8:a0:d1:23: 1e:84:37:01:e1:bd:6a:4e:7c:f3:b4:bb:7a:f3:ff:07:61:4c: 87:e7:f8:5a:2d:39:42:c5:e8:5f:84:3f:c0:cb:2d:cb:c6:a5: da:e7:b4:c3:d5:a9:62:06:7e:92:90:1e:e3:3c:6a:11:26:55: b1:92:5f:c7:03:25:d4:5a:42:71:bd:d3:55:4a:b8:7d:c6:e1: 41:74:e5:1c:27:aa:5a:82:d8:dd:29:7f:de:83:c5:90:e6:ef: 6f:41:4e:56:49:53:d1:cf:2d:d6:bc:42:89:e7:ad:97:8e:a5: 7a:bb:d4:ab:fd:d7:5d:d4:3b:58:46:58:f4:eb:d1:da:5f:0a: 90:3c:17:2f:e1:ad:4c:c8:20:73:13:79:b2:d3:82:e1:4c:b6: e0:5d:77:e3:a0:bc:01:e3:30:4a:8d:6b:f9:2d:da:2b:ab:af: ad:5a:a8:23:7c:4a:d1:89:01:af:ba:1a:0e:77:f4:af:ff:69: 50:22:47:12:15:43:1d:13:79:03:df:45:0a:5d:fc:c2:13:d1: 44:62:f5:c1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEejDAtgy+m914wUTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTAyMzEzMDA0MVoXDTI1MDEyMTE0MDA0MVowLzEtMCsGA1UEAxMk YzkxMzQ1NGEtYzAzNi00ZjQyLTg1MGUtZWQyOWUwYTM4NThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnJSpjGBlPnJyVNqD9/vblQ6T2N6YUpeuN8F BhCdZc/aDwhu/5noQN8712QBdg00X7F7eRNJtSAs8RlFhAdorDU8M+b/gClH7iXo 0ZSCZyvkbrEKIIfYgLSPS6/cRSyWLYKMe35wZEh3eBKZ36eEDZ7T4BdGQ25yXo+D sDayjYcMt2jRfTZpAqVec14kZnoBY57FG2X50JuyicAsr9M81azsXCcAYcjU9wFY g44cCsbL3iH3k4Ng1kxkHsI8B03EEvh1qiEnHQX8UzRzH71jmrhf7SWAq0tRdDJx SC+XCtvjHmMI+AKoJ5h0+qbs6NbyHJVa4X5R5jSD0w+toh+33wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFG7CGTdjy6Y5e22nqUR97LZ7TTvrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjRhMTM0YjItMjFjNC0z NzE1LWIxNDctNGYxMjk0NTU2ODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB8bDVSq4mtEhmc+Qlh0Vos9mt1CRjfRXf+VSRl vCJDwL1CP9I2YMiOJmWxKqEhXl9Dwuig0SMehDcB4b1qTnzztLt68/8HYUyH5/ha LTlCxehfhD/Ayy3LxqXa57TD1aliBn6SkB7jPGoRJlWxkl/HAyXUWkJxvdNVSrh9 xuFBdOUcJ6pagtjdKX/eg8WQ5u9vQU5WSVPRzy3WvEKJ562XjqV6u9Sr/ddd1DtY Rlj069HaXwqQPBcv4a1MyCBzE3my04LhTLbgXXfjoLwB4zBKjWv5Ldorq6+tWqgj fErRiQGvuhoOd/Sv/2lQIkcSFUMdE3kD30UKXfzCE9FEYvXB -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:09 2024 by rpki-client on console-ams.rpki-client.org