$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ef9af2c-99e8-3422-826d-a49cf4a7693b.roa File: 2ef9af2c-99e8-3422-826d-a49cf4a7693b.roa (raw, json) Hash identifier: 8j+oPasOLUCpsJHqkHjCksGQYyD2P7RPhaE3rSGwHzY= Subject key identifier: 1C:11:36:EC:89:C8:90:05:1D:44:50:F0:91:35:10:BD:B4:4B:47:AD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847A30C0D3C342C93CC41F8E040 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ef9af2c-99e8-3422-826d-a49cf4a7693b.roa Signing time: Wed 23 Oct 2024 13:00:41 +0000 ROA not before: Wed 23 Oct 2024 13:00:41 +0000 ROA not after: Tue 21 Jan 2025 14:00:41 +0000 asID: 396591 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a3:0c:0d:3c:34:2c:93:cc:41:f8:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 23 13:00:41 2024 GMT Not After : Jan 21 14:00:41 2025 GMT Subject: CN=adb78137-ee3a-4420-9a13-f20ef2ecc2a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7e:c7:e1:86:7d:7f:bc:7b:a7:28:9b:9b:19: 2d:1c:02:54:b7:fe:45:6c:16:ef:b2:9a:4e:d9:d6: 41:1b:d2:23:ca:25:7b:8b:0d:78:50:73:4f:d7:20: 29:28:4e:e3:16:a8:e2:a1:06:1d:b4:4d:34:f7:d6: 43:62:09:1f:bf:8c:5f:dd:c3:17:9f:91:85:81:0e: 5d:72:62:28:f7:32:fd:7d:17:56:90:bd:4e:5f:4c: e9:0a:51:69:f2:75:0d:25:f0:69:eb:2f:d2:9f:38: f9:b1:6c:7d:8a:ac:b8:a5:ee:69:37:0e:e1:e3:41: 33:22:3a:6a:57:e2:77:19:c8:1b:bd:fe:d5:ca:d1: e9:38:63:60:c6:10:a1:3e:59:0f:80:97:f3:4d:02: 3e:07:26:b6:41:38:e4:b0:96:bb:0c:da:0f:9c:5c: 69:cc:d6:48:89:ba:6f:c4:a7:15:41:79:bc:e3:31: 9a:61:4b:99:6e:82:cf:b3:99:c5:97:d8:b0:df:8c: 79:20:31:68:a0:88:f7:1f:a9:eb:f9:db:ab:66:8a: cf:3d:ba:20:e3:2b:21:b3:f1:18:4e:fc:bf:4c:71: 4b:93:f6:24:dd:d1:d3:8a:94:29:84:56:66:07:75: 00:bd:68:af:a2:c3:c8:b3:0e:94:9e:da:7a:9c:25: 6b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:11:36:EC:89:C8:90:05:1D:44:50:F0:91:35:10:BD:B4:4B:47:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ef9af2c-99e8-3422-826d-a49cf4a7693b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:9c:14:51:88:0b:b9:6b:62:7f:b3:49:f4:fa:69:7b:5f:02: cc:aa:36:61:af:23:fb:6b:1b:0c:d0:4b:53:04:d7:fb:71:5e: 7e:cc:7b:22:b4:fd:97:98:1a:7f:cb:95:61:39:f8:d7:6e:c4: 47:fc:bf:3a:83:44:8b:e5:53:bf:81:4e:a8:2b:b9:e3:dd:6b: c9:41:84:81:92:7a:58:60:4a:aa:1b:68:69:75:5d:98:2a:5b: df:bb:4b:90:5c:5d:e4:51:ad:0d:d2:fd:72:75:67:d1:0b:2d: 6a:23:27:89:80:88:d7:51:19:f9:49:b8:4e:07:ca:2a:a7:58: 73:05:a6:1a:70:1b:97:af:78:43:c3:49:e5:78:fc:91:4a:3b: 31:de:e3:50:3e:18:74:4b:07:16:29:c2:7e:50:ca:32:f2:18: a8:cd:8a:db:c3:5f:74:8c:58:32:6b:da:10:36:1b:0f:de:3c: 42:33:dc:fe:f1:8b:7c:61:4f:93:30:3e:84:d8:18:ac:b1:20: 63:e7:04:ec:25:8e:ff:b3:0e:ce:14:ca:f8:d7:e2:df:3f:61: f0:ce:f5:d2:2a:05:57:6e:43:32:f0:c1:fb:54:a0:43:b9:c0: ae:d3:96:ea:e1:e6:9a:c5:0e:89:51:9f:f2:f4:98:d4:84:5a: f8:e4:f3:f9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEejDA08NCyTzEH44EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTAyMzEzMDA0MVoXDTI1MDEyMTE0MDA0MVowLzEtMCsGA1UEAxMk YWRiNzgxMzctZWUzYS00NDIwLTlhMTMtZjIwZWYyZWNjMmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX7H4YZ9f7x7pyibmxktHAJUt/5FbBbvsppO 2dZBG9IjyiV7iw14UHNP1yApKE7jFqjioQYdtE0099ZDYgkfv4xf3cMXn5GFgQ5d cmIo9zL9fRdWkL1OX0zpClFp8nUNJfBp6y/Snzj5sWx9iqy4pe5pNw7h40EzIjpq V+J3Gcgbvf7VytHpOGNgxhChPlkPgJfzTQI+Bya2QTjksJa7DNoPnFxpzNZIibpv xKcVQXm84zGaYUuZboLPs5nFl9iw34x5IDFooIj3H6nr+durZorPPbog4yshs/EY Tvy/THFLk/Yk3dHTipQphFZmB3UAvWivosPIsw6Untp6nCVr/wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBwRNuyJyJAFHURQ8JE1EL20S0etMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmVmOWFmMmMtOTllOC0z NDIyLTgyNmQtYTQ5Y2Y0YTc2OTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBsnBRRiAu5a2J/s0n0+ml7XwLMqjZhryP7axsM 0EtTBNf7cV5+zHsitP2XmBp/y5VhOfjXbsRH/L86g0SL5VO/gU6oK7nj3WvJQYSB knpYYEqqG2hpdV2YKlvfu0uQXF3kUa0N0v1ydWfRCy1qIyeJgIjXURn5SbhOB8oq p1hzBaYacBuXr3hDw0nlePyRSjsx3uNQPhh0SwcWKcJ+UMoy8hiozYrbw190jFgy a9oQNhsP3jxCM9z+8Yt8YU+TMD6E2BissSBj5wTsJY7/sw7OFMr41+LfP2HwzvXS KgVXbkMy8MH7VKBDucCu05bq4eaaxQ6JUZ/y9JjUhFr45PP5 -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:10 2024 by rpki-client on console-ams.rpki-client.org