$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b97f804-6ead-359b-b2b2-6a6b8f8ed149.roa File: 2b97f804-6ead-359b-b2b2-6a6b8f8ed149.roa (raw, json) Hash identifier: Vi+mgfBZNRmCCFjoHbdRx1bFqyhc3WOEXcciYPfHi0g= Subject key identifier: 51:ED:AB:7B:15:C6:C9:13:78:67:EC:40:BB:6F:E1:D4:3C:3C:F8:BC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847A30C089C46441A92B66A8280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b97f804-6ead-359b-b2b2-6a6b8f8ed149.roa Signing time: Wed 23 Oct 2024 13:00:41 +0000 ROA not before: Wed 23 Oct 2024 13:00:41 +0000 ROA not after: Tue 21 Jan 2025 14:00:41 +0000 asID: 40717 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a3:0c:08:9c:46:44:1a:92:b6:6a:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 23 13:00:41 2024 GMT Not After : Jan 21 14:00:41 2025 GMT Subject: CN=f7c73b61-a729-4423-9d4a-fe98e468662e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:23:33:9f:fa:86:50:33:41:ea:b0:0c:75:dc: 20:54:47:f7:ad:5f:48:35:af:da:2b:b2:41:22:83: f4:59:c3:52:7d:1e:95:b0:fa:3d:60:5c:8b:53:26: c0:d9:63:d0:1c:b5:5f:73:20:d8:ce:81:65:0c:11: d0:f6:e4:fe:42:c2:a5:33:66:85:b3:3d:3b:ed:69: 21:a8:20:9f:f7:9a:7d:45:1b:dc:a9:a9:18:82:67: bc:c3:4f:26:47:b1:45:5e:76:14:47:61:de:b9:d8: 5b:5d:15:81:af:23:4b:4a:82:a0:77:7f:ca:a5:f4: 2f:77:1e:e5:99:8f:d9:e2:d4:bc:6b:21:9b:ca:4e: a1:cc:61:e6:a0:ab:96:cd:7e:d5:cf:59:dd:b8:dc: 9d:b5:92:0f:80:50:61:55:f3:4a:d2:e2:eb:6c:3c: 20:26:c3:28:cf:c5:22:c5:a3:2b:41:e3:9f:b9:d5: 2d:4b:7d:1e:62:34:60:a6:7d:ab:bd:64:d3:2d:81: d8:aa:85:7f:df:5d:84:75:ee:cc:c2:dd:27:2a:f2: f7:9b:cb:bb:5f:40:e2:a7:16:5c:3f:f6:67:fd:b1: 9f:99:50:90:5b:3c:3a:db:b9:d3:e8:72:b1:13:52: ed:45:7c:b7:e5:73:ba:18:ed:39:27:bf:c7:9e:92: 85:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:ED:AB:7B:15:C6:C9:13:78:67:EC:40:BB:6F:E1:D4:3C:3C:F8:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b97f804-6ead-359b-b2b2-6a6b8f8ed149.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:54:22:6b:54:9d:56:68:3f:75:76:e9:bf:19:f5:c7:f3:f5: 71:ec:21:78:99:3c:6c:f6:bd:e3:02:14:78:be:9f:f0:95:4a: ff:cd:b4:25:31:cf:8c:4c:8b:0b:4e:3c:90:00:e2:6d:c1:e7: 7b:cd:10:a3:83:f9:55:30:6d:6c:d7:f0:0f:64:f7:99:73:f7: 41:ab:56:ef:0c:04:65:df:c9:11:50:d7:ed:fa:9b:86:d7:d4: 96:95:61:00:20:7d:68:a5:37:68:2d:a5:e0:4d:bf:6c:36:2a: 1b:7c:45:86:11:66:d6:06:15:db:ca:2f:5a:6e:fa:31:5a:8c: 60:15:fe:7d:96:a4:d7:0a:be:51:16:91:e3:cd:fb:c8:c5:62: 3a:cc:58:80:7f:e9:c1:44:c6:ae:cf:52:a0:f3:50:94:29:b6: aa:d3:d6:7b:78:21:92:f6:16:52:e4:d1:31:e5:49:89:35:e0: 39:30:9f:12:a8:69:f5:61:a7:6e:7d:84:2b:8a:4b:ee:0a:f1: da:e3:f1:a5:fa:ae:00:76:aa:90:7f:76:8a:a4:10:19:ce:26: 2b:f4:0d:61:3e:86:fd:07:34:2b:3f:4d:4e:8c:99:a8:7c:e2: 57:f6:d8:e6:99:d9:15:f0:6e:e7:dc:49:b2:be:ac:d1:d9:e5: 5a:0d:e2:80 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEejDAicRkQakrZqgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTAyMzEzMDA0MVoXDTI1MDEyMTE0MDA0MVowLzEtMCsGA1UEAxMk ZjdjNzNiNjEtYTcyOS00NDIzLTlkNGEtZmU5OGU0Njg2NjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriMzn/qGUDNB6rAMddwgVEf3rV9INa/aK7JB IoP0WcNSfR6VsPo9YFyLUybA2WPQHLVfcyDYzoFlDBHQ9uT+QsKlM2aFsz077Wkh qCCf95p9RRvcqakYgme8w08mR7FFXnYUR2HeudhbXRWBryNLSoKgd3/KpfQvdx7l mY/Z4tS8ayGbyk6hzGHmoKuWzX7Vz1nduNydtZIPgFBhVfNK0uLrbDwgJsMoz8Ui xaMrQeOfudUtS30eYjRgpn2rvWTTLYHYqoV/312Ede7Mwt0nKvL3m8u7X0DipxZc P/Zn/bGfmVCQWzw627nT6HKxE1LtRXy35XO6GO05J7/HnpKFwwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFHtq3sVxskTeGfsQLtv4dQ8PPi8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmI5N2Y4MDQtNmVhZC0z NTliLWIyYjItNmE2YjhmOGVkMTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBjVCJrVJ1WaD91dum/GfXH8/Vx7CF4mTxs9r3j AhR4vp/wlUr/zbQlMc+MTIsLTjyQAOJtwed7zRCjg/lVMG1s1/APZPeZc/dBq1bv DARl38kRUNft+puG19SWlWEAIH1opTdoLaXgTb9sNiobfEWGEWbWBhXbyi9abvox WoxgFf59lqTXCr5RFpHjzfvIxWI6zFiAf+nBRMauz1Kg81CUKbaq09Z7eCGS9hZS 5NEx5UmJNeA5MJ8SqGn1YadufYQrikvuCvHa4/Gl+q4AdqqQf3aKpBAZziYr9A1h Pob9BzQrP01OjJmofOJX9tjmmdkV8G7n3EmyvqzR2eVaDeKA -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:09 2024 by rpki-client on console-ams.rpki-client.org