$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/286ea08e-00cc-3c31-b0e1-d3705e506f6d.roa File: 286ea08e-00cc-3c31-b0e1-d3705e506f6d.roa (raw, json) Hash identifier: 0zdOhxuzSX8Selvh6x0OC5oiDQqkUfe5pVP2tJ9oV2A= Subject key identifier: C1:2D:F0:F4:6E:E6:80:5B:30:22:03:49:93:4E:FD:F3:FB:E8:CB:D0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847B696CCDFDCFCD0FB5126D480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/286ea08e-00cc-3c31-b0e1-d3705e506f6d.roa Signing time: Wed 30 Oct 2024 13:00:40 +0000 ROA not before: Wed 30 Oct 2024 13:00:40 +0000 ROA not after: Tue 28 Jan 2025 14:00:40 +0000 asID: 396595 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b6:96:cc:df:dc:fc:d0:fb:51:26:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 30 13:00:40 2024 GMT Not After : Jan 28 14:00:40 2025 GMT Subject: CN=b1e023f8-31d8-4cc0-b9b8-b0ef8b051e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b8:a3:a8:8e:1e:ce:a1:e2:86:c5:b6:cc:bb: 64:86:76:6b:44:66:8b:8a:55:4d:40:55:68:09:30: 12:46:f7:73:88:86:93:d5:ec:14:b6:bd:4c:83:a4: 68:0e:65:bd:a4:90:2b:4a:a6:0e:fb:a1:e1:c5:5a: ef:b4:8b:a0:af:5c:dc:e0:ef:db:34:13:49:47:e8: 41:be:2d:a2:81:0c:08:3d:00:fc:d0:29:d6:a1:db: 26:d5:db:58:93:6b:8f:8b:5f:b5:b5:75:a3:da:3c: bb:17:80:88:26:fd:d9:2f:93:1a:59:5f:a1:6e:df: e7:e9:80:52:ea:85:a9:84:25:08:cb:e5:8e:53:f5: 09:de:b1:ed:d3:bf:6d:e2:fb:7b:d6:f4:98:39:a9: 64:ed:9a:89:1c:98:86:0f:19:85:2e:61:ca:8f:af: 71:89:7b:77:e6:64:16:5b:d9:57:4c:ba:38:56:a7: b5:0a:1a:36:32:21:43:31:ad:f8:c7:5d:2e:74:69: b6:53:03:4f:44:fe:48:cf:d4:6d:b2:21:95:95:e0: 4e:2d:0e:c6:19:0d:d0:25:35:39:06:e6:22:59:1d: cc:45:a0:66:43:1f:be:1e:1d:1f:e3:ca:b3:35:4c: af:b1:07:d9:a6:a3:b9:91:1e:1c:f9:35:e9:e3:eb: 2a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2D:F0:F4:6E:E6:80:5B:30:22:03:49:93:4E:FD:F3:FB:E8:CB:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/286ea08e-00cc-3c31-b0e1-d3705e506f6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:df:c5:ea:96:bd:4b:3c:6d:62:cd:ae:81:6c:35:5e:74:cd: bf:5e:f6:75:85:72:9f:97:d0:27:00:2d:6b:44:ef:5b:0e:b7: a7:60:26:1b:2c:bf:be:af:0a:42:b7:af:5f:ff:27:61:29:86: 1f:b6:af:ba:a3:f8:80:4d:86:16:de:64:57:84:b2:22:c0:99: 48:c5:05:5b:e2:13:c7:a7:e8:4c:b0:52:e1:b8:9e:aa:58:d5: f3:ea:72:ab:86:63:13:59:c8:81:d3:81:ef:ab:ce:d0:ec:44: 4c:11:cb:6f:22:ac:df:ee:9e:68:24:64:b2:df:ad:b8:14:06: 94:bd:6c:b4:20:b4:d0:f1:d1:73:f0:30:55:31:95:1c:df:cc: e1:1d:d8:89:21:ff:8e:69:b0:1c:47:19:43:40:a7:c3:a3:b0: 20:da:9e:e3:61:61:21:38:27:a0:c1:7a:60:8d:13:4b:3d:8d: 7e:cc:0e:62:ce:92:3a:e2:7c:2f:35:d3:20:22:e5:f2:8d:c7: 9e:8c:b9:d5:99:d3:8d:cb:bc:8b:58:3d:65:69:bc:0c:31:6a: c1:1b:db:52:e9:36:1b:c7:16:aa:8d:10:ee:83:31:24:42:7c: 7e:7e:6e:6d:9c:1c:93:3f:8a:7d:87:86:b4:ad:de:a1:43:94: 0d:15:38:48 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEe2lszf3PzQ+1Em1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTAzMDEzMDA0MFoXDTI1MDEyODE0MDA0MFowLzEtMCsGA1UEAxMk YjFlMDIzZjgtMzFkOC00Y2MwLWI5YjgtYjBlZjhiMDUxZTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLijqI4ezqHihsW2zLtkhnZrRGaLilVNQFVo CTASRvdziIaT1ewUtr1Mg6RoDmW9pJArSqYO+6HhxVrvtIugr1zc4O/bNBNJR+hB vi2igQwIPQD80CnWodsm1dtYk2uPi1+1tXWj2jy7F4CIJv3ZL5MaWV+hbt/n6YBS 6oWphCUIy+WOU/UJ3rHt079t4vt71vSYOalk7ZqJHJiGDxmFLmHKj69xiXt35mQW W9lXTLo4Vqe1Cho2MiFDMa34x10udGm2UwNPRP5Iz9RtsiGVleBOLQ7GGQ3QJTU5 BuYiWR3MRaBmQx++Hh0f48qzNUyvsQfZpqO5kR4c+TXp4+sqcwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMEt8PRu5oBbMCIDSZNO/fP76MvQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjg2ZWEwOGUtMDBjYy0z YzMxLWIwZTEtZDM3MDVlNTA2ZjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAe38Xqlr1LPG1iza6BbDVedM2/XvZ1hXKfl9An AC1rRO9bDrenYCYbLL++rwpCt69f/ydhKYYftq+6o/iATYYW3mRXhLIiwJlIxQVb 4hPHp+hMsFLhuJ6qWNXz6nKrhmMTWciB04Hvq87Q7ERMEctvIqzf7p5oJGSy3624 FAaUvWy0ILTQ8dFz8DBVMZUc38zhHdiJIf+OabAcRxlDQKfDo7Ag2p7jYWEhOCeg wXpgjRNLPY1+zA5izpI64nwvNdMgIuXyjceejLnVmdONy7yLWD1labwMMWrBG9tS 6TYbxxaqjRDugzEkQnx+fm5tnByTP4p9h4a0rd6hQ5QNFThI -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:32 2024 by rpki-client on console-fra.rpki-client.org