$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f721a6f-3306-31b8-b5b1-ca9b6f4444e4.roa File: 3f721a6f-3306-31b8-b5b1-ca9b6f4444e4.roa (raw, json) Hash identifier: KtMVemiEPL0F776AYdPXNleQQV6+QU4wt400j/qxVE0= Subject key identifier: 44:41:FC:F5:0C:02:35:A2:0D:52:E1:2A:A0:C3:E6:19:23:90:72:58 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847F1552547BE5C285D8D7ABF80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f721a6f-3306-31b8-b5b1-ca9b6f4444e4.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 396570 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:25:47:be:5c:28:5d:8d:7a:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=0704cfb4-604a-4669-b436-4976403d8df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ae:e0:be:3b:5b:3b:cd:a9:41:b8:7f:fe:b0: 1a:f4:34:60:9d:9b:f6:a3:a4:6f:80:08:18:06:32: a3:88:82:49:4d:40:c1:3b:cb:d7:32:6e:1a:75:ea: 8a:77:74:b7:bf:98:3f:eb:17:0a:12:44:b9:11:77: 8b:e2:64:5d:7b:37:81:7e:9b:a1:ba:78:11:24:3a: c5:c6:62:19:6c:b0:85:54:7f:15:e4:2e:df:73:b3: c9:65:2d:e2:2e:82:79:09:c8:e9:14:54:6d:99:ef: 4d:55:84:55:34:f8:31:03:93:84:0e:ec:d3:48:bf: 84:0d:bc:93:cd:06:82:f9:82:61:dc:21:5d:3e:38: bd:e9:d5:f0:45:f1:8f:2a:27:06:fd:30:88:dc:53: 68:10:d6:bd:ba:3f:02:67:6d:48:74:85:31:a1:7f: 93:f1:e6:a8:e5:2d:d4:13:0c:fc:46:3f:ea:42:fc: 54:a5:c0:c3:cb:e8:88:83:a2:a8:59:e3:0d:1f:58: a5:8b:08:0d:08:bc:2b:99:d7:cc:0b:51:06:6c:af: 40:35:14:a1:7a:24:a0:0f:80:67:18:6b:72:e5:f9: cc:49:67:44:53:6e:3f:29:e6:e8:54:1c:fb:91:d5: 38:0f:03:71:5d:4f:69:3a:92:d1:ca:47:c1:83:87: 13:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:41:FC:F5:0C:02:35:A2:0D:52:E1:2A:A0:C3:E6:19:23:90:72:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f721a6f-3306-31b8-b5b1-ca9b6f4444e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:61:4f:4c:29:f8:33:e7:78:fb:9c:44:5e:4d:42:14:3c:40: 7d:4d:12:f3:89:00:c7:7a:e1:f3:15:6a:13:80:89:3f:f6:0d: e0:41:0d:28:3b:43:a7:30:9a:1f:7b:25:69:0d:c5:78:d7:c5: 9a:7e:00:36:6e:3e:8c:84:08:69:09:48:e9:2d:9d:7b:87:7a: 48:cc:12:c4:c0:7d:9f:69:38:8e:67:1d:45:31:b6:bb:44:63: cf:fa:95:27:7c:c8:f7:77:7d:92:ca:64:26:be:1e:f4:4d:9e: 38:0a:be:e4:a5:2c:10:b2:de:53:d7:ab:18:36:13:02:fc:5d: b8:8c:2b:f0:c5:7b:ab:7b:40:09:8b:b7:3f:f7:1d:01:6b:51: 13:3a:87:60:ea:cb:aa:52:05:bf:7e:2c:83:4c:33:84:91:2b: ca:9c:0a:fc:7d:d5:42:f0:e2:a8:37:ac:69:df:74:86:fd:75: 30:e7:3c:11:5d:15:40:2d:e5:75:16:7b:92:3b:4c:a6:ef:54: bc:0d:a3:2f:80:34:24:90:bc:12:8d:11:0a:47:67:c6:ad:c0: be:b1:e2:1f:33:7c:2e:83:d2:8f:86:53:68:fd:27:54:1a:24: 72:2b:a2:65:6a:e3:72:fb:7d:46:bf:0d:46:06:2c:db:bd:4b: 8a:7f:6c:dc -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfxVSVHvlwoXY16v4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MDcwNGNmYjQtNjA0YS00NjY5LWI0MzYtNDk3NjQwM2Q4ZGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma7gvjtbO82pQbh//rAa9DRgnZv2o6RvgAgY BjKjiIJJTUDBO8vXMm4adeqKd3S3v5g/6xcKEkS5EXeL4mRdezeBfpuhungRJDrF xmIZbLCFVH8V5C7fc7PJZS3iLoJ5CcjpFFRtme9NVYRVNPgxA5OEDuzTSL+EDbyT zQaC+YJh3CFdPji96dXwRfGPKicG/TCI3FNoENa9uj8CZ21IdIUxoX+T8eao5S3U Ewz8Rj/qQvxUpcDDy+iIg6KoWeMNH1iliwgNCLwrmdfMC1EGbK9ANRSheiSgD4Bn GGty5fnMSWdEU24/KeboVBz7kdU4DwNxXU9pOpLRykfBg4cTkwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFERB/PUMAjWiDVLhKqDD5hkjkHJYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2Y3MjFhNmYtMzMwNi0z MWI4LWI1YjEtY2E5YjZmNDQ0NGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA8YU9MKfgz53j7nEReTUIUPEB9TRLziQDHeuHz FWoTgIk/9g3gQQ0oO0OnMJofeyVpDcV418WafgA2bj6MhAhpCUjpLZ17h3pIzBLE wH2faTiOZx1FMba7RGPP+pUnfMj3d32SymQmvh70TZ44Cr7kpSwQst5T16sYNhMC /F24jCvwxXure0AJi7c/9x0Ba1ETOodg6suqUgW/fiyDTDOEkSvKnAr8fdVC8OKo N6xp33SG/XUw5zwRXRVALeV1FnuSO0ym71S8DaMvgDQkkLwSjREKR2fGrcC+seIf M3wug9KPhlNo/SdUGiRyK6JlauNy+31Gvw1GBizbvUuKf2zc -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:11 2024 by rpki-client on console-ams.rpki-client.org