$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b341c3a-7e09-3b4b-bd2e-e9ea70718d54.roa File: 2b341c3a-7e09-3b4b-bd2e-e9ea70718d54.roa (raw, json) Hash identifier: ufkqSrG7Py2s1F2eSXalwDPP5yOockpW4uC/Y1oOz6M= Subject key identifier: F0:05:A6:5B:45:F3:5E:04:11:21:C1:AF:F7:0D:CC:7E:13:C8:BA:7D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858474F4B7E78F6941ACCA65A1B90 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b341c3a-7e09-3b4b-bd2e-e9ea70718d54.roa Signing time: Mon 23 Sep 2024 13:00:40 +0000 ROA not before: Mon 23 Sep 2024 13:00:40 +0000 ROA not after: Sun 22 Dec 2024 14:00:40 +0000 asID: 7342 IP address blocks: 2620:74:45::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4f:4b:7e:78:f6:94:1a:cc:a6:5a:1b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 13:00:40 2024 GMT Not After : Dec 22 14:00:40 2024 GMT Subject: CN=c93b286a-bced-4a76-bb61-5c2f0a4cc471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1b:19:9f:69:8d:ae:4d:02:89:73:19:ed:31: b5:42:ea:07:0f:da:7b:4b:b9:34:a8:ba:69:bb:29: 4b:ab:5b:a7:11:ba:08:b8:55:3e:49:50:c6:c4:40: d3:fd:90:c8:9c:5c:34:7b:d1:72:e4:0d:ea:30:f2: 35:d2:30:f5:ee:72:1e:5b:2b:ca:c8:68:85:57:02: f6:d7:16:de:ec:37:97:0d:45:11:01:2a:18:f1:ce: 2b:78:87:4a:1b:5c:be:f7:a6:37:9e:91:03:a0:88: a3:8d:5e:39:3d:00:4e:61:4b:dc:7f:ba:d5:97:05: 82:ab:0b:ef:d9:60:60:72:ea:8e:14:2d:12:43:68: e7:39:4e:5a:95:99:d6:b8:6b:99:00:36:7e:da:72: 2e:53:f3:31:fd:7e:7b:04:07:9e:11:eb:8e:63:3c: 53:c7:05:49:c3:00:d5:ee:a0:1f:da:b9:54:b5:8c: 14:d3:04:4a:7f:70:46:c5:83:ab:48:c2:ec:84:3e: 17:59:d9:43:72:25:e6:b5:06:c2:18:a2:2e:6b:ff: 33:0a:1d:19:db:72:8c:30:4d:ed:9f:11:1d:1a:4d: 24:ab:6c:14:1b:43:6c:c8:0f:02:ff:63:0a:6a:cd: 04:6c:ca:26:e6:d0:de:ba:fa:dd:76:2b:30:2c:71: 3e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:05:A6:5B:45:F3:5E:04:11:21:C1:AF:F7:0D:CC:7E:13:C8:BA:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b341c3a-7e09-3b4b-bd2e-e9ea70718d54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:45::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:37:84:04:01:e8:f8:56:5e:aa:10:bb:f5:d5:1f:9b:7d:83: c7:17:68:0b:09:01:13:ce:1c:72:2a:46:9a:75:d9:0e:b1:83: 76:35:e2:df:8a:61:3c:d5:db:85:27:b4:9b:f0:b3:1b:5e:c3: 8c:c0:68:00:19:cd:75:fb:62:ac:b5:e1:1d:7d:ce:dd:59:b3: cb:45:ea:3b:ab:99:ca:4b:d7:83:77:90:74:64:1a:b1:c0:8d: b9:5e:28:8f:c0:0d:8b:de:b9:83:7e:60:b2:8b:ee:b1:da:ef: 46:5c:cd:3f:e8:ba:1c:59:28:98:11:07:c3:98:d9:22:d7:9f: 39:ec:5b:6d:bf:06:1a:27:bb:ed:ab:77:b8:09:73:67:82:22: bd:57:2d:e0:a2:68:41:50:ba:17:8a:7e:29:05:e5:ec:33:3d: d3:f8:01:ef:63:c1:1c:90:44:84:a0:f6:7e:9e:83:a2:fc:f0: 24:5e:80:5a:ad:41:bf:50:2f:43:cb:63:47:9f:d5:b2:64:06: 50:55:ca:4a:55:92:21:e1:dd:88:cc:72:db:3f:34:3b:14:8b: cf:a6:22:7e:60:cc:36:55:ba:9e:8e:bf:eb:5b:6b:4f:6b:bd: b5:b0:91:3e:87:2b:00:9f:2b:9b:d1:20:84:4c:67:3a:d8:8f: 0a:bb:e5:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdPS3549pQazKZaG5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkyMzEzMDA0MFoXDTI0MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk YzkzYjI4NmEtYmNlZC00YTc2LWJiNjEtNWMyZjBhNGNjNDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghsZn2mNrk0CiXMZ7TG1QuoHD9p7S7k0qLpp uylLq1unEboIuFU+SVDGxEDT/ZDInFw0e9Fy5A3qMPI10jD17nIeWyvKyGiFVwL2 1xbe7DeXDUURASoY8c4reIdKG1y+96Y3npEDoIijjV45PQBOYUvcf7rVlwWCqwvv 2WBgcuqOFC0SQ2jnOU5alZnWuGuZADZ+2nIuU/Mx/X57BAeeEeuOYzxTxwVJwwDV 7qAf2rlUtYwU0wRKf3BGxYOrSMLshD4XWdlDciXmtQbCGKIua/8zCh0Z23KMME3t nxEdGk0kq2wUG0NsyA8C/2MKas0EbMom5tDeuvrddiswLHE+2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPAFpltF814EESHBr/cNzH4TyLp9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmIzNDFjM2EtN2UwOS0z YjRiLWJkMmUtZTllYTcwNzE4ZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEo3hAQB6PhWXqoQu/XVH5t9g8cXaAsJARPOHHIqRpp12Q6xg3Y1 4t+KYTzV24UntJvwsxtew4zAaAAZzXX7Yqy14R19zt1Zs8tF6jurmcpL14N3kHRk GrHAjbleKI/ADYveuYN+YLKL7rHa70ZczT/ouhxZKJgRB8OY2SLXnznsW22/Bhon u+2rd7gJc2eCIr1XLeCiaEFQuheKfikF5ewzPdP4Ae9jwRyQRISg9n6eg6L88CRe gFqtQb9QL0PLY0ef1bJkBlBVykpVkiHh3YjMcts/NDsUi8+mIn5gzDZVup6Ov+tb a09rvbWwkT6HKwCfK5vRIIRMZzrYjwq75bI= -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:32 2024 by rpki-client on console-fra.rpki-client.org