$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42b3b98f-53d5-34aa-be3f-f5e31d5a89da.roa File: 42b3b98f-53d5-34aa-be3f-f5e31d5a89da.roa (raw, json) Hash identifier: yu+bdkYTCgCT8lys79NDbHs6yMs4HqPDiAWwHR6jfts= Subject key identifier: FC:68:17:40:E6:89:93:07:11:D8:E1:F1:86:9D:04:10:E3:19:9C:04 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858475A762B25EE667C6218826D40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42b3b98f-53d5-34aa-be3f-f5e31d5a89da.roa Signing time: Fri 27 Sep 2024 13:00:41 +0000 ROA not before: Fri 27 Sep 2024 13:00:41 +0000 ROA not after: Thu 26 Dec 2024 14:00:41 +0000 asID: 396564 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5a:76:2b:25:ee:66:7c:62:18:82:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 27 13:00:41 2024 GMT Not After : Dec 26 14:00:41 2024 GMT Subject: CN=e1ae68ae-4e0e-4a5b-a6d1-714d00958860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:82:03:e7:73:c4:cf:a2:c0:21:62:9c:79:8e: d8:66:58:c3:cc:aa:08:a7:6f:7c:7a:2c:d4:60:3e: 28:8d:c4:13:d5:35:b5:0d:63:5e:1d:61:8c:d2:b6: 44:24:3a:61:5c:48:1e:bb:2c:c6:a1:04:54:ca:e8: 33:8f:e0:60:4a:d1:3e:2a:0b:38:d3:67:07:d5:d3: 37:36:11:b5:7e:87:bb:e6:27:51:73:56:0d:1d:01: 9d:fa:9c:42:1e:d3:df:3f:0d:87:14:2c:37:1d:ed: f7:39:de:e5:a4:53:72:68:4f:19:58:64:5c:45:46: 6c:8a:c6:c5:dc:60:c8:88:07:cf:04:0b:43:2c:7d: 35:f7:7e:b3:48:92:56:ac:3a:93:d5:c4:35:65:dd: b9:48:c0:96:96:4d:ee:4e:f5:d7:17:75:c5:ce:99: c9:62:a9:2f:b2:be:6d:ba:a3:2f:ec:73:5c:ec:cf: d1:4b:92:4d:dc:5d:e4:97:c7:6c:ea:dd:ee:83:57: fb:ec:1a:4d:63:53:34:c2:be:c6:e3:01:2c:e9:41: 69:fa:d5:7a:97:5e:66:50:63:19:f1:44:5c:8f:b3: 06:73:ba:86:95:f1:28:bb:b3:14:3d:2e:22:68:22: fc:f4:b3:c0:b1:73:1d:d6:27:e9:3c:6b:e2:7e:b8: 17:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:68:17:40:E6:89:93:07:11:D8:E1:F1:86:9D:04:10:E3:19:9C:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42b3b98f-53d5-34aa-be3f-f5e31d5a89da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:09:83:35:5f:84:49:d7:65:ed:82:63:59:64:8d:b1:c1:0c: 83:6b:06:55:ef:8b:95:75:f6:38:6d:cb:de:9f:60:14:26:44: 41:e9:2c:f2:91:75:4c:fc:65:87:bb:dd:86:67:ee:6b:2b:c2: c3:6b:b1:f4:82:c2:dc:55:bf:95:ed:61:9a:66:fe:10:dd:bf: 0d:87:3d:62:94:3b:b7:c6:42:e0:0b:55:3c:28:c6:5e:c7:3f: 64:73:4e:b3:29:4b:b7:88:ad:9d:c3:75:90:78:66:81:7d:c9: 88:31:5d:ae:47:8f:77:31:54:d4:b1:b1:0f:07:6f:91:ac:a9: 37:70:28:9e:73:d8:83:5e:f7:1a:f5:99:65:64:5c:a9:6a:ad: bd:01:bd:b3:e1:0e:cf:71:75:9e:e4:17:6f:42:7c:cb:01:3e: 5f:88:17:aa:9f:04:21:34:96:00:0e:a7:7d:20:ab:9b:58:8d: 76:3d:cf:b8:1b:df:4c:19:1e:d1:13:f4:f9:a7:17:5e:d3:77: e6:7e:04:63:1d:dc:a1:29:6c:fa:6c:11:08:27:11:92:69:5f: 89:bf:ae:8a:b1:ed:36:d2:37:b7:18:e4:c7:f3:54:fc:17:f8: ae:d2:fc:d5:4f:bf:63:bc:a3:4b:33:e1:d8:e7:b4:a7:50:fc: 7d:16:65:a5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEdadisl7mZ8YhiCbUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkyNzEzMDA0MVoXDTI0MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk ZTFhZTY4YWUtNGUwZS00YTViLWE2ZDEtNzE0ZDAwOTU4ODYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIID53PEz6LAIWKceY7YZljDzKoIp298eizU YD4ojcQT1TW1DWNeHWGM0rZEJDphXEgeuyzGoQRUyugzj+BgStE+Kgs402cH1dM3 NhG1foe75idRc1YNHQGd+pxCHtPfPw2HFCw3He33Od7lpFNyaE8ZWGRcRUZsisbF 3GDIiAfPBAtDLH01936zSJJWrDqT1cQ1Zd25SMCWlk3uTvXXF3XFzpnJYqkvsr5t uqMv7HNc7M/RS5JN3F3kl8ds6t3ug1f77BpNY1M0wr7G4wEs6UFp+tV6l15mUGMZ 8URcj7MGc7qGlfEou7MUPS4iaCL89LPAsXMd1ifpPGvifrgX3QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPxoF0DmiZMHEdjh8YadBBDjGZwEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDJiM2I5OGYtNTNkNS0z NGFhLWJlM2YtZjVlMzFkNWE4OWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBGCYM1X4RJ12XtgmNZZI2xwQyDawZV74uVdfY4 bcven2AUJkRB6SzykXVM/GWHu92GZ+5rK8LDa7H0gsLcVb+V7WGaZv4Q3b8Nhz1i lDu3xkLgC1U8KMZexz9kc06zKUu3iK2dw3WQeGaBfcmIMV2uR493MVTUsbEPB2+R rKk3cCiec9iDXvca9ZllZFypaq29Ab2z4Q7PcXWe5BdvQnzLAT5fiBeqnwQhNJYA Dqd9IKubWI12Pc+4G99MGR7RE/T5pxde03fmfgRjHdyhKWz6bBEIJxGSaV+Jv66K se020je3GOTH81T8F/iu0vzVT79jvKNLM+HY57SnUPx9FmWl -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:11 2024 by rpki-client on console-ams.rpki-client.org