$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4457d2ee-2dac-3c85-bae0-c5cf9ee9ca76.roa File: 4457d2ee-2dac-3c85-bae0-c5cf9ee9ca76.roa (raw, json) Hash identifier: LEA3LkshKoVcJOIeJ4zNgE5nQ2VI80tjONEKhIp/9f4= Subject key identifier: 04:FE:47:84:31:F0:12:A4:FE:56:A2:A0:16:F1:65:E7:62:98:07:EB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847B696CF22CFC4EFA2FE42EA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4457d2ee-2dac-3c85-bae0-c5cf9ee9ca76.roa Signing time: Wed 30 Oct 2024 13:00:40 +0000 ROA not before: Wed 30 Oct 2024 13:00:40 +0000 ROA not after: Tue 28 Jan 2025 14:00:40 +0000 asID: 396580 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b6:96:cf:22:cf:c4:ef:a2:fe:42:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 30 13:00:40 2024 GMT Not After : Jan 28 14:00:40 2025 GMT Subject: CN=d7a929a3-d1c0-4f2e-828f-cc4a01aa8d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5b:6c:31:47:8b:55:2a:99:f4:fe:cb:f7:8d: 9f:83:c2:26:0e:52:64:53:79:31:d5:88:7b:33:bf: cc:66:93:31:e7:fa:10:3e:0e:44:cd:e4:17:c5:95: 11:e3:13:4c:65:63:c3:18:96:7c:de:ff:95:cb:98: 69:4f:b5:55:0e:4d:62:7d:ba:2e:ec:cd:f4:37:05: c4:50:16:b3:00:1b:53:37:94:a1:61:b3:fa:58:ba: fc:19:5c:0d:b0:61:28:73:4c:65:b1:a0:67:13:78: 69:c4:a4:76:46:ad:0c:0b:89:9f:b1:be:12:47:d9: 2b:c8:d4:30:4f:97:7a:a8:c3:87:b3:bf:c9:27:1a: ca:89:00:cb:a3:d4:e7:da:fb:2f:90:10:e5:78:8d: ca:45:01:6a:16:5a:84:b2:73:7c:e3:c1:61:bd:32: a6:26:9d:1a:5e:7b:d7:3d:70:59:9a:59:35:64:9f: 8a:a3:24:7f:e9:95:1a:02:63:61:5c:b0:76:69:25: a5:73:2d:34:d3:35:77:db:da:da:0b:99:dd:68:aa: f3:2d:c6:fe:ae:66:a1:eb:57:2b:d9:10:75:7c:39: 0d:37:69:0f:ea:87:4b:e3:c6:1f:ba:8a:09:c3:45: f0:ea:ab:29:a5:f1:8b:58:04:b8:de:df:33:41:be: f9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FE:47:84:31:F0:12:A4:FE:56:A2:A0:16:F1:65:E7:62:98:07:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4457d2ee-2dac-3c85-bae0-c5cf9ee9ca76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:68:aa:d0:91:76:84:fb:da:b5:07:41:54:01:43:97:25:37: 44:72:da:e9:b1:16:20:a1:95:a3:a5:52:01:f5:39:cb:fe:2b: c7:1f:ba:8a:07:f0:63:42:c5:07:72:77:f7:3b:b5:dd:f8:3a: 74:9c:ff:a2:4d:a0:7e:5a:98:58:4a:03:39:99:a8:52:78:da: 17:1c:19:a5:7a:4d:7f:2f:0f:b3:44:52:8b:52:1e:62:5a:e4: 34:93:0e:72:3e:35:3c:53:75:b8:0c:08:9b:b3:0c:d3:c0:20: f7:ca:6d:bf:9a:53:f0:48:69:70:e3:bc:ee:32:9c:78:3d:c3: 13:81:69:56:46:0e:e8:da:9d:14:02:85:54:5d:0d:ac:d6:d2: 2d:ab:0d:0c:ef:9c:52:05:03:92:9f:e9:76:17:1e:14:2e:1c: 43:11:35:2b:9b:8f:ec:58:57:62:28:cf:0c:f4:9a:b7:eb:9c: fd:bb:79:5b:79:6a:b8:37:fd:ca:c8:f1:0c:24:89:07:74:27: 91:15:5a:8d:11:8f:fe:27:1f:3b:41:68:9a:b4:15:09:6e:cc: a7:fb:10:a3:59:8e:f6:95:bf:02:e9:d3:0d:af:c9:f0:79:ae: d2:03:d7:d1:e9:7c:78:ca:d2:33:a6:a6:04:03:04:ca:17:4a: 6f:c6:98:64 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEe2ls8iz8Tvov5C6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTAzMDEzMDA0MFoXDTI1MDEyODE0MDA0MFowLzEtMCsGA1UEAxMk ZDdhOTI5YTMtZDFjMC00ZjJlLTgyOGYtY2M0YTAxYWE4ZDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1tsMUeLVSqZ9P7L942fg8ImDlJkU3kx1Yh7 M7/MZpMx5/oQPg5EzeQXxZUR4xNMZWPDGJZ83v+Vy5hpT7VVDk1ifbou7M30NwXE UBazABtTN5ShYbP6WLr8GVwNsGEoc0xlsaBnE3hpxKR2Rq0MC4mfsb4SR9kryNQw T5d6qMOHs7/JJxrKiQDLo9Tn2vsvkBDleI3KRQFqFlqEsnN848FhvTKmJp0aXnvX PXBZmlk1ZJ+KoyR/6ZUaAmNhXLB2aSWlcy000zV329raC5ndaKrzLcb+rmah61cr 2RB1fDkNN2kP6odL48YfuooJw0Xw6qsppfGLWAS43t8zQb75cQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAT+R4Qx8BKk/laioBbxZedimAfrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDQ1N2QyZWUtMmRhYy0z Yzg1LWJhZTAtYzVjZjllZTljYTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBUaKrQkXaE+9q1B0FUAUOXJTdEctrpsRYgoZWj pVIB9TnL/ivHH7qKB/BjQsUHcnf3O7Xd+Dp0nP+iTaB+WphYSgM5mahSeNoXHBml ek1/Lw+zRFKLUh5iWuQ0kw5yPjU8U3W4DAibswzTwCD3ym2/mlPwSGlw47zuMpx4 PcMTgWlWRg7o2p0UAoVUXQ2s1tItqw0M75xSBQOSn+l2Fx4ULhxDETUrm4/sWFdi KM8M9Jq365z9u3lbeWq4N/3KyPEMJIkHdCeRFVqNEY/+Jx87QWiatBUJbsyn+xCj WY72lb8C6dMNr8nwea7SA9fR6Xx4ytIzpqYEAwTKF0pvxphk -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:11 2024 by rpki-client on console-ams.rpki-client.org