$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2fe844bc-d58b-357d-8a03-037039e894bd.roa File: 2fe844bc-d58b-357d-8a03-037039e894bd.roa (raw, json) Hash identifier: xbdH+kAHGQe/BNTvX3ZTxb2Y3mHlkVs/u7xyHfIgYzc= Subject key identifier: 23:C0:BE:FA:11:18:EB:1C:06:10:D4:95:16:9D:3C:28:CF:49:8D:C7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858474F4B7E88B0C826C6DC8E2DE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2fe844bc-d58b-357d-8a03-037039e894bd.roa Signing time: Mon 23 Sep 2024 13:00:40 +0000 ROA not before: Mon 23 Sep 2024 13:00:40 +0000 ROA not after: Sun 22 Dec 2024 14:00:40 +0000 asID: 7342 IP address blocks: 2620:74:5f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4f:4b:7e:88:b0:c8:26:c6:dc:8e:2d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 13:00:40 2024 GMT Not After : Dec 22 14:00:40 2024 GMT Subject: CN=7b10f77f-82a4-4e0d-96ea-ff226f6ba142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bb:f5:62:37:8d:7f:b7:21:a8:44:2d:8d:53: e2:fe:99:00:c1:3c:70:e8:09:12:88:70:09:bd:5c: ea:3a:da:0b:6e:0e:bf:e2:46:a1:43:8c:23:9d:56: b7:d2:67:7b:90:76:09:e0:bb:09:d8:86:64:06:ff: 30:fe:b9:8c:09:f9:65:38:3a:31:0b:5e:74:52:e6: 01:91:ff:72:34:e3:55:58:b4:9b:e5:95:18:7b:6f: c5:83:ed:4d:6d:27:fc:40:5e:ec:c6:8c:68:bf:20: 93:ef:75:0e:74:8c:51:cc:b0:61:6d:99:40:ac:9f: 6f:33:71:5e:74:6c:1e:e9:00:0d:5d:71:16:b2:5b: b2:fb:57:22:db:05:f5:0e:bd:b3:49:13:15:36:6d: f0:82:fb:21:cb:08:f6:3c:9c:e8:b6:7d:e4:17:58: 0d:9d:51:55:b2:7a:6e:cf:58:15:ca:56:3e:85:7c: 6c:3b:23:d2:93:d3:e4:56:94:a7:ba:65:d3:0c:26: c4:0a:e1:39:45:2a:fc:d2:c3:ab:df:75:ef:0d:10: 15:93:56:05:45:e4:5a:a6:cc:60:50:32:71:11:6b: 1a:3f:11:4e:98:5b:ab:5c:13:7e:ed:37:b0:1b:b9: bc:b0:53:c9:ac:aa:df:81:7b:bf:72:98:f0:b2:ec: c3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C0:BE:FA:11:18:EB:1C:06:10:D4:95:16:9D:3C:28:CF:49:8D:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2fe844bc-d58b-357d-8a03-037039e894bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:5f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:cc:18:09:9d:ab:93:f3:bd:18:84:b7:ec:87:df:77:c0:fc: 24:59:9a:0d:4a:95:37:71:04:0f:b6:c2:b9:c0:fa:14:7f:67: 98:84:1a:f9:8c:27:48:71:47:ed:3f:7e:a6:88:c5:40:89:95: f6:be:9d:64:62:dc:af:b1:48:e5:99:bf:c6:30:81:92:a9:45: 6c:18:08:6c:34:19:48:55:6b:c5:21:86:5f:a8:77:60:cd:ef: 7e:1b:74:9c:36:94:2e:7d:f9:2c:cc:d1:31:2c:87:88:e2:7f: 8e:de:84:c4:9e:37:7b:cc:e1:31:9f:b7:d8:7a:b0:9a:8a:18: 89:ea:84:ac:42:d2:91:ce:37:96:43:42:e9:32:ee:58:30:5e: 3d:a0:c0:7c:09:f5:bd:13:b4:53:b0:e9:cd:2e:bb:ac:0c:7e: ce:6b:42:59:71:a4:69:52:19:18:13:e5:a0:a0:16:f9:e1:bd: da:62:54:bd:c5:26:4f:11:d5:ae:0b:53:a8:c9:f4:3f:c5:76: a8:c3:c9:a7:ab:1c:aa:d9:dc:76:3a:26:22:78:a2:03:46:c7: 95:21:e9:8d:61:4c:25:e2:ae:c5:a4:ca:a2:14:7b:4b:96:ec: c6:10:15:f9:e6:4c:74:84:ec:2b:3e:45:ba:8f:19:56:5c:f3: 1a:25:f4:15 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdPS36IsMgmxtyOLeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkyMzEzMDA0MFoXDTI0MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk N2IxMGY3N2YtODJhNC00ZTBkLTk2ZWEtZmYyMjZmNmJhMTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrv1YjeNf7chqEQtjVPi/pkAwTxw6AkSiHAJ vVzqOtoLbg6/4kahQ4wjnVa30md7kHYJ4LsJ2IZkBv8w/rmMCfllODoxC150UuYB kf9yNONVWLSb5ZUYe2/Fg+1NbSf8QF7sxoxovyCT73UOdIxRzLBhbZlArJ9vM3Fe dGwe6QANXXEWsluy+1ci2wX1Dr2zSRMVNm3wgvshywj2PJzotn3kF1gNnVFVsnpu z1gVylY+hXxsOyPSk9PkVpSnumXTDCbECuE5RSr80sOr33XvDRAVk1YFReRapsxg UDJxEWsaPxFOmFurXBN+7TewG7m8sFPJrKrfgXu/cpjwsuzDeQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCPAvvoRGOscBhDUlRadPCjPSY3HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmZlODQ0YmMtZDU4Yi0z NTdkLThhMDMtMDM3MDM5ZTg5NGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFrMGAmdq5PzvRiEt+yH33fA/CRZmg1KlTdxBA+2wrnA+hR/Z5iE GvmMJ0hxR+0/fqaIxUCJlfa+nWRi3K+xSOWZv8YwgZKpRWwYCGw0GUhVa8Uhhl+o d2DN734bdJw2lC59+SzM0TEsh4jif47ehMSeN3vM4TGft9h6sJqKGInqhKxC0pHO N5ZDQuky7lgwXj2gwHwJ9b0TtFOw6c0uu6wMfs5rQllxpGlSGRgT5aCgFvnhvdpi VL3FJk8R1a4LU6jJ9D/FdqjDyaerHKrZ3HY6JiJ4ogNGx5Uh6Y1hTCXirsWkyqIU e0uW7MYQFfnmTHSE7Cs+RbqPGVZc8xol9BU= -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:32 2024 by rpki-client on console-fra.rpki-client.org