$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3138f02d-1569-35c7-8b50-35f307364831.roa File: 3138f02d-1569-35c7-8b50-35f307364831.roa (raw, json) Hash identifier: qP+Bl4+A0R8QsVz6ZCQ+kJkqo67Zp/zp1gjZrAMoy7E= Subject key identifier: A7:EC:6F:A8:1F:B1:A1:04:92:53:18:1B:C8:F6:C2:49:EF:8D:67:20 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847F155253B4054C0C9E4A1D240 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3138f02d-1569-35c7-8b50-35f307364831.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 396562 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:25:3b:40:54:c0:c9:e4:a1:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=956d1286-2028-4eb9-bfb1-8069ada91c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f0:aa:0c:ad:bb:68:2c:44:52:38:59:28:a9: 6a:db:40:6b:e9:92:0b:b8:ee:f0:51:35:e9:e7:ee: 4c:87:04:88:67:ed:e5:41:55:0d:8a:f5:86:79:d9: 6c:6e:73:0b:98:02:2c:d7:6f:e4:21:48:2a:a8:84: db:8e:7f:89:1f:46:21:55:2d:5b:15:a7:5d:78:db: c5:6f:cf:da:ac:a2:43:a1:6f:2f:e9:ae:77:b4:41: 20:7e:a6:1d:53:39:19:06:53:78:42:5a:80:8f:4b: ba:60:b0:dc:b3:b2:a1:66:9f:7f:d4:9c:f6:f4:1d: c9:af:94:23:81:b0:0e:15:cc:5c:16:38:4f:2f:75: 49:89:2c:77:57:4e:15:83:fd:9d:b4:95:f4:3d:49: a1:a8:76:13:dc:80:bb:f7:fa:06:6c:46:94:6d:ed: 73:0f:3d:de:37:df:a1:6f:cc:c3:08:b4:58:50:2f: d0:02:7d:f1:3b:9e:ee:90:c1:ca:fa:d2:de:c1:7e: 79:cc:63:20:f8:1a:7c:ab:a0:50:be:cd:5a:58:c6: 07:94:2c:f7:1d:92:41:d4:42:41:2a:e0:ad:cd:34: ff:d4:06:4b:b1:75:b0:37:95:59:8f:0f:7c:f3:5d: d3:20:1d:ef:2d:a2:b3:a1:65:06:bc:93:28:df:1a: c8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EC:6F:A8:1F:B1:A1:04:92:53:18:1B:C8:F6:C2:49:EF:8D:67:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3138f02d-1569-35c7-8b50-35f307364831.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:89:46:3a:f6:02:d8:9c:cb:5c:79:92:27:df:3e:e3:84:25: 2c:8f:52:bf:b4:1e:3f:ba:b4:05:7b:9b:6f:61:7d:ed:f0:53: 69:de:43:b1:4e:78:5f:a9:65:43:44:43:cc:db:d0:de:22:4c: 1b:7f:9b:8c:bf:f3:0f:db:14:6d:67:af:98:2d:c3:30:95:22: 8b:52:46:4a:de:fc:e3:9a:ca:ce:c7:3f:4c:b9:fd:48:5b:9a: 81:68:4f:a2:b2:ac:93:7f:5f:f3:a1:78:20:51:4a:65:e9:05: 35:60:38:32:d4:d4:6d:94:4e:c9:48:9c:f9:d7:d7:d0:e0:e0: 54:4b:23:db:1a:44:bf:43:b2:30:e7:b2:18:65:da:43:b6:5f: 21:45:ab:f1:07:21:9e:25:cf:42:23:f7:bc:f6:e7:16:18:d8: 35:65:43:47:3f:f9:a8:56:f5:6e:89:d7:14:a8:9f:f7:ed:67: 09:4b:0b:13:a2:79:56:16:e9:88:5d:e6:45:42:04:0a:42:db: e1:eb:be:00:40:d5:5f:d7:bc:bb:a1:4f:b9:a8:ee:f2:f3:d3: b2:0a:40:05:a0:be:6c:87:24:09:d9:16:bf:15:98:f6:2e:9c: 9a:0b:fb:72:cc:38:fc:51:87:05:52:04:0c:72:ac:e6:c1:3c: 67:2b:45:0f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfxVSU7QFTAyeSh0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk OTU2ZDEyODYtMjAyOC00ZWI5LWJmYjEtODA2OWFkYTkxYzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/CqDK27aCxEUjhZKKlq20Br6ZILuO7wUTXp 5+5MhwSIZ+3lQVUNivWGedlsbnMLmAIs12/kIUgqqITbjn+JH0YhVS1bFaddeNvF b8/arKJDoW8v6a53tEEgfqYdUzkZBlN4QlqAj0u6YLDcs7KhZp9/1Jz29B3Jr5Qj gbAOFcxcFjhPL3VJiSx3V04Vg/2dtJX0PUmhqHYT3IC79/oGbEaUbe1zDz3eN9+h b8zDCLRYUC/QAn3xO57ukMHK+tLewX55zGMg+Bp8q6BQvs1aWMYHlCz3HZJB1EJB KuCtzTT/1AZLsXWwN5VZjw98813TIB3vLaKzoWUGvJMo3xrIJQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKfsb6gfsaEEklMYG8j2wknvjWcgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzEzOGYwMmQtMTU2OS0z NWM3LThiNTAtMzVmMzA3MzY0ODMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA1iUY69gLYnMtceZIn3z7jhCUsj1K/tB4/urQF e5tvYX3t8FNp3kOxTnhfqWVDREPM29DeIkwbf5uMv/MP2xRtZ6+YLcMwlSKLUkZK 3vzjmsrOxz9Muf1IW5qBaE+isqyTf1/zoXggUUpl6QU1YDgy1NRtlE7JSJz519fQ 4OBUSyPbGkS/Q7Iw57IYZdpDtl8hRavxByGeJc9CI/e89ucWGNg1ZUNHP/moVvVu idcUqJ/37WcJSwsTonlWFumIXeZFQgQKQtvh674AQNVf17y7oU+5qO7y89OyCkAF oL5shyQJ2Ra/FZj2LpyaC/tyzDj8UYcFUgQMcqzmwTxnK0UP -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:10 2024 by rpki-client on console-ams.rpki-client.org