$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31dd5564-3ff5-3e5e-bc42-648846e20e34.roa File: 31dd5564-3ff5-3e5e-bc42-648846e20e34.roa (raw, json) Hash identifier: usbRJ5I7bAp/Aokqr8YZWnwyWtkTVXB2BRLjg8JFLbc= Subject key identifier: 17:6F:23:63:B9:E3:7E:56:56:99:84:F8:F0:E6:BB:F4:F9:26:71:73 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847F1551DF4A0E2040B9CB4DE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31dd5564-3ff5-3e5e-bc42-648846e20e34.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 396612 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:1d:f4:a0:e2:04:0b:9c:b4:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=1b8f4535-05cb-4547-96c0-b8f6e685db2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a2:0e:52:b2:08:5f:d4:ea:67:aa:2e:16:ff: 0a:98:90:0f:ed:12:ee:01:b8:c8:b8:96:3d:2e:0d: 7d:56:33:f6:c1:c0:a5:f0:dd:0f:cc:76:fa:71:d1: a6:f9:87:e9:da:04:25:d0:ee:79:85:13:59:8c:d6: 1f:00:70:ab:fd:f0:99:54:0a:35:3a:f8:78:04:e3: 8b:ed:6c:6e:a8:bb:ec:d4:49:4d:7c:32:6f:8e:c2: 88:7b:3e:fa:56:7b:12:89:74:c9:ac:88:c4:f1:98: d8:a6:cf:ff:d9:dd:80:85:d2:1e:8e:42:78:f5:6f: 3f:95:05:bd:3d:d6:15:91:2a:49:8a:fd:a1:d7:71: c1:6b:80:f4:56:9d:d9:e6:42:94:1b:c2:27:bd:42: bc:0e:97:94:db:8f:8f:04:b1:49:97:27:76:4f:12: 9f:b5:f1:1a:3f:f0:ad:b4:c0:72:dc:7a:c4:11:e7: 93:c0:19:ab:a5:c5:d4:94:b3:c8:d9:04:8b:90:8d: c7:38:cf:3e:07:23:57:6b:9d:d2:90:7b:5b:25:36: 6b:28:d2:23:0d:2f:ab:09:07:5a:71:e5:9f:83:ec: c5:8c:d5:30:9b:ff:94:75:60:1b:f0:c7:ee:f9:5b: 45:19:0d:60:2e:a4:32:fb:66:5a:81:ee:84:52:0d: 92:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:6F:23:63:B9:E3:7E:56:56:99:84:F8:F0:E6:BB:F4:F9:26:71:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31dd5564-3ff5-3e5e-bc42-648846e20e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:dc:df:2d:50:b8:94:21:1e:29:b4:f5:aa:b4:ec:f6:b0:2c: 5d:fa:f7:3e:4e:70:36:6f:52:04:b0:ed:34:e1:fd:b0:dd:e1: 5a:bf:20:09:40:81:e0:fb:14:12:63:68:8d:63:05:e7:dd:38: b2:5b:cd:5e:30:d1:2c:29:6c:b4:ab:d1:25:41:35:8c:85:55: 1d:35:3f:8c:77:0c:6d:b1:4b:cb:cd:b7:39:d2:35:70:7f:2f: 0d:83:eb:a0:fb:00:86:d6:1c:0c:a4:c0:1f:bf:c8:ac:d3:af: 58:10:3f:ff:a5:11:dd:d3:f2:0b:f2:b6:ce:89:38:e2:72:12: 0a:fc:f8:90:32:42:e0:db:3e:e4:db:ba:2c:fe:93:6d:7e:4c: e8:f0:ab:01:84:b8:d0:86:9a:a5:ce:25:c3:7a:c6:10:c3:bb: a1:44:15:8c:18:1e:d7:c4:60:c9:30:67:16:18:ed:2f:3b:65: b9:da:bf:df:83:d8:a1:33:51:b3:5b:26:5b:9c:43:ef:f1:21: 32:e7:64:3d:6f:36:92:23:b2:39:11:ac:a2:ec:5a:4b:0f:15: 2b:b7:d5:be:b9:04:f0:98:f7:a7:00:09:57:5f:e4:fa:0b:1e: d4:42:15:05:86:e2:2b:aa:70:c8:e7:7e:c3:67:fb:f0:b7:bb: 84:50:25:17 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfxVR30oOIEC5y03oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MWI4ZjQ1MzUtMDVjYi00NTQ3LTk2YzAtYjhmNmU2ODVkYjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqIOUrIIX9TqZ6ouFv8KmJAP7RLuAbjIuJY9 Lg19VjP2wcCl8N0PzHb6cdGm+Yfp2gQl0O55hRNZjNYfAHCr/fCZVAo1Ovh4BOOL 7WxuqLvs1ElNfDJvjsKIez76VnsSiXTJrIjE8ZjYps//2d2AhdIejkJ49W8/lQW9 PdYVkSpJiv2h13HBa4D0Vp3Z5kKUG8InvUK8DpeU24+PBLFJlyd2TxKftfEaP/Ct tMBy3HrEEeeTwBmrpcXUlLPI2QSLkI3HOM8+ByNXa53SkHtbJTZrKNIjDS+rCQda ceWfg+zFjNUwm/+UdWAb8Mfu+VtFGQ1gLqQy+2Zage6EUg2SDQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBdvI2O5435WVpmE+PDmu/T5JnFzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzFkZDU1NjQtM2ZmNS0z ZTVlLWJjNDItNjQ4ODQ2ZTIwZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAy3N8tULiUIR4ptPWqtOz2sCxd+vc+TnA2b1IE sO004f2w3eFavyAJQIHg+xQSY2iNYwXn3TiyW81eMNEsKWy0q9ElQTWMhVUdNT+M dwxtsUvLzbc50jVwfy8Ng+ug+wCG1hwMpMAfv8is069YED//pRHd0/IL8rbOiTji chIK/PiQMkLg2z7k27os/pNtfkzo8KsBhLjQhpqlziXDesYQw7uhRBWMGB7XxGDJ MGcWGO0vO2W52r/fg9ihM1GzWyZbnEPv8SEy52Q9bzaSI7I5Eayi7FpLDxUrt9W+ uQTwmPenAAlXX+T6Cx7UQhUFhuIrqnDI537DZ/vwt7uEUCUX -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:32 2024 by rpki-client on console-fra.rpki-client.org