$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2af53097-4196-3969-b6f5-fca84330ddf4.roa File: 2af53097-4196-3969-b6f5-fca84330ddf4.roa (raw, json) Hash identifier: uhmcO0VEalJoAsV7kGmJJsUxUzOF2rf3XuA6puJKU94= Subject key identifier: 57:1E:B7:78:B3:78:50:78:78:B8:5F:6E:3A:F4:8E:1B:88:7C:22:F8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847A30C0B19C8280E14FD46CEC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2af53097-4196-3969-b6f5-fca84330ddf4.roa Signing time: Wed 23 Oct 2024 13:00:41 +0000 ROA not before: Wed 23 Oct 2024 13:00:41 +0000 ROA not after: Tue 21 Jan 2025 14:00:41 +0000 asID: 397201 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a3:0c:0b:19:c8:28:0e:14:fd:46:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 23 13:00:41 2024 GMT Not After : Jan 21 14:00:41 2025 GMT Subject: CN=85017790-72cd-4f22-b658-ba7df6d7cbe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:82:bf:60:4b:7b:0b:9e:61:8a:91:d0:55:2f: 7e:91:a3:89:4c:0a:b6:81:17:e0:3c:70:af:4b:d3: 5b:68:fe:7d:8c:05:2b:80:02:31:0d:3b:7c:5f:06: 18:a4:0a:14:88:8c:9f:80:2c:a9:bd:f0:51:48:5d: 42:ed:7e:0b:50:ce:b3:f3:16:3c:67:15:df:e4:20: d5:23:0f:a1:c7:52:5d:b8:2e:4a:4c:02:bd:92:9c: 51:51:fe:d7:4e:28:3f:7f:7d:15:bc:a2:3a:67:cc: 19:9c:88:ab:d9:79:10:14:4d:d6:31:e6:46:2b:56: 9a:7f:7d:b9:ad:59:78:4e:c8:95:0e:6d:57:37:8e: 13:24:de:30:7a:57:11:15:b1:5a:32:aa:33:95:c0: 18:6a:82:a5:37:36:ba:4f:f6:67:af:0e:89:2e:cc: 68:4b:ed:33:f5:86:ce:d8:30:88:21:d1:2b:81:a8: cc:a3:6a:99:00:84:d1:aa:5c:f4:4e:76:92:98:7d: 8b:d1:04:86:f7:bb:73:4a:2d:8b:6c:3c:fe:26:1d: 6c:a6:55:ad:6a:bc:2f:ca:1d:c7:c0:58:25:59:b2: 2a:bc:5b:68:7f:c3:17:99:dc:43:89:c2:7d:b4:a2: bb:14:e6:ac:2b:df:a1:e6:ef:95:9f:22:be:e5:59: 2d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1E:B7:78:B3:78:50:78:78:B8:5F:6E:3A:F4:8E:1B:88:7C:22:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2af53097-4196-3969-b6f5-fca84330ddf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:b0:9d:85:15:d8:5b:7b:35:b6:01:c1:a1:35:d0:65:0f:2b: 2d:d6:23:93:0c:88:2d:64:24:c9:21:19:d9:17:83:a3:1f:01: 50:b5:e6:60:e5:bc:19:a2:33:25:3d:33:4d:fb:2a:f5:be:c9: 1b:9c:bc:f4:ff:fe:ab:d7:b2:2c:c9:b8:48:59:1c:1f:02:b8: f7:5d:11:55:32:25:df:7c:82:d4:a8:5d:13:6d:30:9c:84:01: ff:d5:67:75:55:36:70:a6:80:3c:34:5e:16:9c:09:c9:1c:1c: 83:cb:c7:d1:f3:38:d9:6b:c8:b7:3b:ea:b5:89:52:73:a2:0a: b0:80:18:fe:0b:05:c2:06:25:b0:ce:9a:89:17:38:35:2b:36: 0f:61:fc:51:3e:a3:03:0a:66:1f:d7:e8:d0:ef:9f:25:d3:f7: 7b:70:5e:4d:8a:ec:b2:d3:6a:51:db:a1:68:2a:82:43:6b:9a: 38:16:02:25:45:82:7b:c6:be:e5:27:73:91:4a:7c:42:fd:f5: 24:c1:b2:b3:7d:c3:2b:c2:c9:ff:74:2e:8f:be:59:b5:e9:f8: 8c:87:5c:7c:fc:a6:9b:0d:1f:82:54:7a:f3:53:2a:89:44:9a: 2f:de:d6:cb:59:dc:7e:fd:79:1b:99:0c:9a:6c:f7:12:66:a6: 29:a4:0a:97 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEejDAsZyCgOFP1GzsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTAyMzEzMDA0MVoXDTI1MDEyMTE0MDA0MVowLzEtMCsGA1UEAxMk ODUwMTc3OTAtNzJjZC00ZjIyLWI2NTgtYmE3ZGY2ZDdjYmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoK/YEt7C55hipHQVS9+kaOJTAq2gRfgPHCv S9NbaP59jAUrgAIxDTt8XwYYpAoUiIyfgCypvfBRSF1C7X4LUM6z8xY8ZxXf5CDV Iw+hx1JduC5KTAK9kpxRUf7XTig/f30VvKI6Z8wZnIir2XkQFE3WMeZGK1aaf325 rVl4TsiVDm1XN44TJN4welcRFbFaMqozlcAYaoKlNza6T/Znrw6JLsxoS+0z9YbO 2DCIIdErgajMo2qZAITRqlz0TnaSmH2L0QSG97tzSi2LbDz+Jh1splWtarwvyh3H wFglWbIqvFtof8MXmdxDicJ9tKK7FOasK9+h5u+VnyK+5VktNwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFcet3izeFB4eLhfbjr0jhuIfCL4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmFmNTMwOTctNDE5Ni0z OTY5LWI2ZjUtZmNhODQzMzBkZGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB0sJ2FFdhbezW2AcGhNdBlDyst1iOTDIgtZCTJ IRnZF4OjHwFQteZg5bwZojMlPTNN+yr1vskbnLz0//6r17IsybhIWRwfArj3XRFV MiXffILUqF0TbTCchAH/1Wd1VTZwpoA8NF4WnAnJHByDy8fR8zjZa8i3O+q1iVJz ogqwgBj+CwXCBiWwzpqJFzg1KzYPYfxRPqMDCmYf1+jQ758l0/d7cF5Niuyy02pR 26FoKoJDa5o4FgIlRYJ7xr7lJ3ORSnxC/fUkwbKzfcMrwsn/dC6Pvlm16fiMh1x8 /KabDR+CVHrzUyqJRJov3tbLWdx+/XkbmQyabPcSZqYppAqX -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:09 2024 by rpki-client on console-ams.rpki-client.org