$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4548f520-15a9-3a02-9b0b-596986e2e25b.roa File: 4548f520-15a9-3a02-9b0b-596986e2e25b.roa (raw, json) Hash identifier: H48OGCqC8sApXuaf4JWo8qRUSNSAVLXv7Kt7p2TTGiw= Subject key identifier: 33:DD:FF:C0:CA:0B:CD:E0:5F:CE:A4:E5:FC:86:78:E6:21:57:1A:57 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584776610B83E36A8DC7873F8140 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4548f520-15a9-3a02-9b0b-596986e2e25b.roa Signing time: Mon 07 Oct 2024 13:00:40 +0000 ROA not before: Mon 07 Oct 2024 13:00:40 +0000 ROA not after: Sun 05 Jan 2025 14:00:40 +0000 asID: 0 IP address blocks: 2620:74:ef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:61:0b:83:e3:6a:8d:c7:87:3f:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:40 2024 GMT Not After : Jan 5 14:00:40 2025 GMT Subject: CN=f8b746b0-d361-4702-8a2f-5c8baf26aeef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:40:d9:3f:da:0e:0f:d6:49:f4:fa:0b:25:ba: b6:d2:f7:6d:e4:d6:b9:96:5c:57:0f:d3:21:fb:4d: 99:71:be:b3:aa:bc:a0:09:c1:eb:66:15:f9:57:07: 9b:75:27:8b:d4:8a:47:ab:c8:27:25:b7:1f:38:61: fa:94:40:00:24:3d:bd:fe:e8:2a:4b:1c:3b:a8:bf: 0c:1a:27:16:48:7d:6b:82:69:c0:d0:9d:30:26:fd: 2b:ca:ab:ec:17:09:9a:a5:c1:dc:af:6d:5e:22:80: 7c:d3:7a:9c:79:c4:c2:f4:6d:b2:46:95:16:90:f4: 10:07:d6:70:55:33:47:82:1d:99:05:fe:11:79:f5: 7b:4c:5a:cd:95:05:d2:81:8f:90:bf:8c:f1:27:f3: 2f:d6:b6:78:73:12:10:d7:6f:a7:11:7f:ec:d8:74: ae:ec:7c:84:d5:6f:7d:81:6c:7b:42:00:3f:9f:22: f5:06:55:ef:e5:a1:be:48:cb:77:31:18:f2:4c:40: b6:e9:e8:2a:b4:5f:a3:a9:2c:4c:bc:e7:bc:eb:8c: 02:a5:cf:7e:6c:03:89:84:67:9d:88:1f:9e:98:19: eb:bd:5f:ff:2f:d6:b0:3b:fe:ed:79:4d:3a:fc:b4: 7f:81:dd:3e:78:d0:65:b1:a5:2e:bd:a5:02:01:5a: 3b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DD:FF:C0:CA:0B:CD:E0:5F:CE:A4:E5:FC:86:78:E6:21:57:1A:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4548f520-15a9-3a02-9b0b-596986e2e25b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:ef::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:23:fb:c8:b1:f0:a7:bc:c8:65:17:66:d7:c3:bf:9f:cd:c1: f2:02:32:f9:44:bf:e3:7b:49:0b:80:b5:a2:e7:e8:25:f0:3e: f3:c1:c2:29:5f:bb:ca:a9:30:55:ff:f6:1d:7b:cf:9e:64:48: d3:16:07:60:9e:5f:14:d2:bc:58:d4:43:e2:e7:ca:8b:47:f4: 9e:c0:fe:60:79:73:48:28:c9:99:64:5d:f4:d8:26:42:e2:db: 1b:2f:eb:b9:ef:37:45:ce:a0:ce:3c:12:d3:ed:f7:5d:f9:d7: 3b:5e:ab:0b:d1:9c:7a:0c:c7:89:4d:40:fc:de:d5:1b:db:fb: 69:c3:0c:fb:c7:c4:7d:f8:be:95:9e:30:94:e6:59:6a:d8:6b: 51:7e:80:76:44:de:ef:e8:41:fc:71:05:2d:e5:d5:74:98:01: b9:55:4c:0a:3b:0d:93:b4:7d:2d:61:2e:b1:2f:38:13:4b:a8: 6f:da:eb:66:55:cc:13:66:16:6a:46:18:4e:90:91:ea:b7:51: f9:ef:0d:da:99:d1:5e:ff:de:e3:ef:73:4c:52:fa:f3:18:86: 72:a8:f4:09:9d:7e:14:2f:c4:27:4f:32:e2:a7:2f:f2:77:19: bb:d3:bd:5b:92:c0:6c:1f:98:67:65:13:ed:64:34:c0:49:59: 28:e9:8f:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEd2YQuD42qNx4c/gUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk ZjhiNzQ2YjAtZDM2MS00NzAyLThhMmYtNWM4YmFmMjZhZWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEDZP9oOD9ZJ9PoLJbq20vdt5Na5llxXD9Mh +02Zcb6zqrygCcHrZhX5VwebdSeL1IpHq8gnJbcfOGH6lEAAJD29/ugqSxw7qL8M GicWSH1rgmnA0J0wJv0ryqvsFwmapcHcr21eIoB803qcecTC9G2yRpUWkPQQB9Zw VTNHgh2ZBf4RefV7TFrNlQXSgY+Qv4zxJ/Mv1rZ4cxIQ12+nEX/s2HSu7HyE1W99 gWx7QgA/nyL1BlXv5aG+SMt3MRjyTEC26egqtF+jqSxMvOe864wCpc9+bAOJhGed iB+emBnrvV//L9awO/7teU06/LR/gd0+eNBlsaUuvaUCAVo7NwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDPd/8DKC83gX86k5fyGeOYhVxpXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDU0OGY1MjAtMTVhOS0z YTAyLTliMGItNTk2OTg2ZTJlMjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdADv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFoj+8ix8Ke8yGUXZtfDv5/NwfICMvlEv+N7SQuAtaLn6CXwPvPB wilfu8qpMFX/9h17z55kSNMWB2CeXxTSvFjUQ+LnyotH9J7A/mB5c0goyZlkXfTY JkLi2xsv67nvN0XOoM48EtPt91351zteqwvRnHoMx4lNQPze1Rvb+2nDDPvHxH34 vpWeMJTmWWrYa1F+gHZE3u/oQfxxBS3l1XSYAblVTAo7DZO0fS1hLrEvOBNLqG/a 62ZVzBNmFmpGGE6Qkeq3UfnvDdqZ0V7/3uPvc0xS+vMYhnKo9AmdfhQvxCdPMuKn L/J3GbvTvVuSwGwfmGdlE+1kNMBJWSjpj0Q= -----END CERTIFICATE-----Generated at Thu Nov 21 21:44:23 2024 by rpki-client on console-ams.rpki-client.org