$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43d32526-2163-341f-b6bb-e44553e73e1e.roa File: 43d32526-2163-341f-b6bb-e44553e73e1e.roa (raw, json) Hash identifier: FgG5ICDn/YihSH4dF74WyTxVISK8WgCe3edGp984WI8= Subject key identifier: E3:0E:20:E2:D7:2A:F6:07:CE:95:83:01:BC:CF:36:18:B9:80:06:12 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847F155225C2C5C1A12794B8240 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43d32526-2163-341f-b6bb-e44553e73e1e.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 396604 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:22:5c:2c:5c:1a:12:79:4b:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=93e062d0-cffb-40bd-876a-7b9059b5ca93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2f:d7:39:bf:c6:0e:ed:e2:66:4d:a0:6d:68: eb:76:dd:83:a9:11:b1:44:30:83:64:f1:21:f2:ff: 42:ad:a2:bf:97:b7:02:cb:5c:14:2c:8b:54:f0:30: 28:07:b9:20:fe:d6:5d:36:9d:a5:82:75:89:d3:5b: f5:15:13:16:59:03:61:65:95:0d:dc:38:9f:f3:2c: 85:c9:a7:21:81:22:07:0d:d1:55:26:f7:c2:17:54: ec:d5:f8:6b:7b:c2:cf:2b:d8:98:f4:91:8f:83:af: 54:2f:e8:0c:34:e8:d2:cb:e4:17:11:01:20:b4:b4: 10:b9:c7:b4:f4:33:83:cb:d2:a1:5c:6c:a9:2f:c5: 68:76:11:27:3b:32:86:2d:d0:ac:8a:d6:f2:d3:b7: 9b:ae:86:89:9e:5b:cf:7f:1c:28:66:f8:e8:a5:16: 94:e9:d2:83:64:9c:2b:dc:41:93:8e:a2:76:52:5d: b6:57:ea:b7:8b:84:78:74:6b:76:af:44:3c:7f:d5: 6d:c9:1a:87:8d:2a:b9:b4:ad:fa:78:30:61:6a:eb: b9:59:61:4a:a2:4e:3b:71:32:dc:af:7f:83:0c:ba: c2:b2:35:93:65:52:6f:12:73:8f:3a:10:e2:4e:27: e9:b9:54:08:47:4c:46:f0:22:13:9d:58:25:fd:9b: 97:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:0E:20:E2:D7:2A:F6:07:CE:95:83:01:BC:CF:36:18:B9:80:06:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43d32526-2163-341f-b6bb-e44553e73e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ca:3d:f4:6d:d5:c4:56:a2:8f:69:53:23:e7:ec:d9:e3:c7: 6b:c6:cb:6d:4f:1e:fa:a8:d6:87:c5:27:dd:46:d6:d1:9a:3f: 6f:62:84:eb:a1:27:16:5f:6c:00:b8:2d:58:21:23:4c:64:2f: 95:14:8e:f9:e2:6d:58:4b:40:98:02:55:6b:2b:02:14:39:0f: 04:60:0a:c2:ac:2f:48:13:c5:8d:bf:1e:37:02:73:53:c3:b8: 45:de:9a:54:34:a5:70:eb:f1:48:9d:f7:ea:89:6a:26:21:df: a7:fa:4c:4b:81:38:7e:4e:07:a2:2a:40:3a:6c:03:6c:f3:05: ef:51:fc:cd:eb:9b:98:16:2a:18:f8:fc:1b:86:d0:1d:f2:f2: 7e:19:45:b4:51:a6:c5:a3:a2:2d:74:a7:6e:19:bb:2c:3b:f6: 8d:7f:93:5f:8c:31:11:a4:bf:e9:db:ac:91:22:1d:e4:3f:bb: 81:4e:88:95:fe:2d:56:f8:d9:fc:79:4d:4d:cc:21:88:61:29: b2:cc:24:9b:5f:e9:ed:92:74:f5:f1:55:04:ff:67:df:b2:39: f2:db:08:a4:3e:a1:c6:44:aa:cd:07:20:77:96:69:51:56:28: 22:b8:fc:58:cf:8a:1b:0b:22:65:e6:a1:25:81:4d:4b:2d:c8: 89:09:bf:38 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfxVSJcLFwaEnlLgkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk OTNlMDYyZDAtY2ZmYi00MGJkLTg3NmEtN2I5MDU5YjVjYTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0i/XOb/GDu3iZk2gbWjrdt2DqRGxRDCDZPEh 8v9CraK/l7cCy1wULItU8DAoB7kg/tZdNp2lgnWJ01v1FRMWWQNhZZUN3Dif8yyF yachgSIHDdFVJvfCF1Ts1fhre8LPK9iY9JGPg69UL+gMNOjSy+QXEQEgtLQQuce0 9DODy9KhXGypL8VodhEnOzKGLdCsitby07ebroaJnlvPfxwoZvjopRaU6dKDZJwr 3EGTjqJ2Ul22V+q3i4R4dGt2r0Q8f9VtyRqHjSq5tK36eDBhauu5WWFKok47cTLc r3+DDLrCsjWTZVJvEnOPOhDiTifpuVQIR0xG8CITnVgl/ZuXawIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOMOIOLXKvYHzpWDAbzPNhi5gAYSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDNkMzI1MjYtMjE2My0z NDFmLWI2YmItZTQ0NTUzZTczZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBiyj30bdXEVqKPaVMj5+zZ48drxsttTx76qNaH xSfdRtbRmj9vYoTroScWX2wAuC1YISNMZC+VFI754m1YS0CYAlVrKwIUOQ8EYArC rC9IE8WNvx43AnNTw7hF3ppUNKVw6/FInffqiWomId+n+kxLgTh+TgeiKkA6bANs 8wXvUfzN65uYFioY+PwbhtAd8vJ+GUW0UabFo6ItdKduGbssO/aNf5NfjDERpL/p 26yRIh3kP7uBToiV/i1W+Nn8eU1NzCGIYSmyzCSbX+ntknT18VUE/2ffsjny2wik PqHGRKrNByB3lmlRVigiuPxYz4obCyJl5qElgU1LLciJCb84 -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:11 2024 by rpki-client on console-ams.rpki-client.org