$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/343d7628-dbc6-3c0f-8209-5a8e298e0db4.roa File: 343d7628-dbc6-3c0f-8209-5a8e298e0db4.roa (raw, json) Hash identifier: aB9D4qzbenNToTnHpjijMkvW+ksTR0NdsqILk0Drg4w= Subject key identifier: A6:A6:C3:B4:EC:F3:A0:BB:4F:D4:A3:04:E6:81:FF:3B:CF:8C:2B:9E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858471775C9D6B092BCFE2E166080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/343d7628-dbc6-3c0f-8209-5a8e298e0db4.roa Signing time: Tue 03 Sep 2024 13:00:42 +0000 ROA not before: Tue 03 Sep 2024 13:00:42 +0000 ROA not after: Mon 02 Dec 2024 14:00:42 +0000 asID: 7342 IP address blocks: 2620:74:69::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:17:75:c9:d6:b0:92:bc:fe:2e:16:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 3 13:00:42 2024 GMT Not After : Dec 2 14:00:42 2024 GMT Subject: CN=ac1127f3-97a3-4860-a5c9-5ce3b88039ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:68:c0:d1:65:a3:a9:7c:59:de:93:30:d7:48: cf:4d:66:71:d2:db:19:0b:7f:fb:de:f0:9c:06:3d: 3a:24:8a:84:d8:13:ad:93:a9:a4:bf:fb:4e:53:1d: 72:ee:65:19:0f:cf:2c:2e:e5:ab:a1:7c:d9:65:0d: 51:e0:04:99:5f:62:df:ea:44:0a:0e:ff:ba:6a:85: c9:3e:f1:b2:6a:4f:fa:cc:14:e3:07:12:72:3f:24: 40:bf:19:98:17:00:52:c7:1b:3e:fd:0d:55:f3:29: 2a:c9:f1:3e:f1:f6:77:2d:f8:6c:a1:a3:9c:6a:60: 95:7d:df:56:b2:28:ff:26:11:4e:2b:1c:f4:e2:75: bf:10:c7:32:41:cd:df:07:a5:cb:1e:af:41:bb:64: 29:3e:01:7e:b5:19:22:48:d5:8c:55:7f:81:cb:23: 4f:2b:1d:5f:fb:d3:ae:c1:29:ed:60:79:d4:42:b0: d6:51:22:c0:2a:85:e4:f2:38:88:24:c1:61:29:8d: a1:6e:de:4c:6b:19:3e:18:a0:e2:91:2f:18:22:83: fc:3d:ca:b7:87:fc:52:52:e5:d2:05:46:05:b5:6d: 37:f8:4c:92:71:59:1a:db:f0:9e:68:57:b0:01:50: b3:8a:09:8c:1a:d4:f8:ef:1a:fc:65:25:00:38:82: 61:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A6:C3:B4:EC:F3:A0:BB:4F:D4:A3:04:E6:81:FF:3B:CF:8C:2B:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/343d7628-dbc6-3c0f-8209-5a8e298e0db4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:69::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:ca:10:20:6f:b4:9c:82:0d:c7:a3:f0:e6:c2:51:44:fc:08: 5e:75:f1:6a:60:92:e6:96:d8:c0:ff:77:1e:9e:4d:96:bc:96: a7:49:ff:19:0f:8d:ba:7b:79:37:00:b4:86:8c:1c:40:9f:68: 94:1d:36:a1:4b:a7:0f:2a:a6:b2:18:06:b5:b6:b7:a8:e2:82: 94:e5:72:c9:90:34:78:b9:b6:ce:d2:61:08:f8:a7:cd:b4:cb: 1f:bb:08:46:6d:ea:c2:9c:ee:85:bd:62:5f:15:54:b9:cb:bc: b4:0d:d9:24:af:c8:bc:04:a0:07:d7:a7:cc:81:31:63:5d:d9: 33:cb:11:a4:6e:71:59:ce:9e:ec:4a:82:19:aa:59:eb:d7:31: ca:46:e3:50:72:c3:5c:40:4d:8c:37:a3:29:13:a0:e9:61:1f: 2b:06:46:38:ec:ac:50:8c:a3:90:2a:6e:d3:15:28:99:7d:cf: bc:64:29:b3:f3:0d:d5:0f:eb:33:b0:a9:f3:ad:49:26:33:db: 72:8c:6d:d9:67:4c:07:ad:27:65:03:b0:a8:25:d2:2a:5f:59: 0d:7a:d8:cb:de:b0:b6:4b:57:43:82:eb:98:12:80:cb:f6:52: 37:ae:86:83:68:ca:cc:cb:ce:de:89:5d:5c:58:5c:ec:25:b0: 25:bc:4c:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEcXdcnWsJK8/i4WYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkwMzEzMDA0MloXDTI0MTIwMjE0MDA0MlowLzEtMCsGA1UEAxMk YWMxMTI3ZjMtOTdhMy00ODYwLWE1YzktNWNlM2I4ODAzOWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWjA0WWjqXxZ3pMw10jPTWZx0tsZC3/73vCc Bj06JIqE2BOtk6mkv/tOUx1y7mUZD88sLuWroXzZZQ1R4ASZX2Lf6kQKDv+6aoXJ PvGyak/6zBTjBxJyPyRAvxmYFwBSxxs+/Q1V8ykqyfE+8fZ3LfhsoaOcamCVfd9W sij/JhFOKxz04nW/EMcyQc3fB6XLHq9Bu2QpPgF+tRkiSNWMVX+ByyNPKx1f+9Ou wSntYHnUQrDWUSLAKoXk8jiIJMFhKY2hbt5Maxk+GKDikS8YIoP8Pcq3h/xSUuXS BUYFtW03+EyScVka2/CeaFewAVCzigmMGtT47xr8ZSUAOIJhdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKamw7Ts86C7T9SjBOaB/zvPjCueMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzQzZDc2MjgtZGJjNi0z YzBmLTgyMDktNWE4ZTI5OGUwZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFzKECBvtJyCDcej8ObCUUT8CF518WpgkuaW2MD/dx6eTZa8lqdJ /xkPjbp7eTcAtIaMHECfaJQdNqFLpw8qprIYBrW2t6jigpTlcsmQNHi5ts7SYQj4 p820yx+7CEZt6sKc7oW9Yl8VVLnLvLQN2SSvyLwEoAfXp8yBMWNd2TPLEaRucVnO nuxKghmqWevXMcpG41Byw1xATYw3oykToOlhHysGRjjsrFCMo5AqbtMVKJl9z7xk KbPzDdUP6zOwqfOtSSYz23KMbdlnTAetJ2UDsKgl0ipfWQ162MvesLZLV0OC65gS gMv2UjeuhoNoyszLzt6JXVxYXOwlsCW8TDo= -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:32 2024 by rpki-client on console-fra.rpki-client.org