$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/465ff9f1-7da3-3fc9-991e-1274d379e541.roa File: 465ff9f1-7da3-3fc9-991e-1274d379e541.roa (raw, json) Hash identifier: 6dbODqn5qz3cXnUVbqo4qXrdYWPdHQVk0Jefc9IoqhY= Subject key identifier: F6:75:44:62:C3:97:56:7F:30:43:18:C7:1A:17:2E:FB:A5:F1:C9:05 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858471D0C96C34CD228BC008FAB40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/465ff9f1-7da3-3fc9-991e-1274d379e541.roa Signing time: Thu 05 Sep 2024 13:03:45 +0000 ROA not before: Thu 05 Sep 2024 13:03:45 +0000 ROA not after: Wed 04 Dec 2024 14:03:45 +0000 asID: 0 IP address blocks: 2620:74:2d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Oct 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1d:0c:96:c3:4c:d2:28:bc:00:8f:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 5 13:03:45 2024 GMT Not After : Dec 4 14:03:45 2024 GMT Subject: CN=a587e7cb-1284-49fc-a3c0-10aa2da99fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:37:21:b5:fb:e1:eb:3b:83:9a:12:4f:81:97: 20:6f:a0:89:c2:63:e4:8e:d4:2f:f8:59:eb:5e:c1: de:62:67:55:af:a3:a4:5b:9a:08:a7:11:4d:e8:b7: 54:54:c4:f0:c5:21:d4:89:fd:37:fc:c1:ba:9e:ed: 76:c5:7a:4c:6b:f9:fe:f3:fa:bb:54:03:6d:36:8b: d8:9a:41:ed:e6:56:5f:d6:e1:11:2b:78:1f:6d:d4: 9a:45:11:0e:fa:ac:ff:90:60:52:c1:10:f3:e6:17: 66:b1:44:bd:ec:d2:fc:3a:9a:3a:86:03:6f:eb:fb: 6d:91:ba:2d:02:fc:76:ac:80:37:10:0c:d2:22:0c: ca:28:0d:5b:83:7f:f7:e9:45:54:ac:09:cf:37:dd: fc:9f:38:12:5a:ab:0a:28:31:a6:35:15:bc:02:f5: 69:05:9e:64:e3:d5:e5:3b:3f:d1:8f:c3:f1:e6:da: bc:20:6f:3e:de:d7:72:a8:be:92:fd:37:98:55:40: bf:57:7a:cf:52:e1:54:a5:09:43:44:f1:eb:a0:cc: 43:23:fd:a0:54:8a:fb:8b:6a:c3:d0:2e:d8:c5:d7: e2:93:f2:13:b2:76:99:34:04:1f:11:c9:08:84:b7: aa:30:6f:b6:09:a3:0b:46:79:ee:de:84:7f:6e:47: 9f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:75:44:62:C3:97:56:7F:30:43:18:C7:1A:17:2E:FB:A5:F1:C9:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/465ff9f1-7da3-3fc9-991e-1274d379e541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:a4:74:bf:28:c3:83:24:aa:af:da:cc:e6:48:d7:15:08:02: d0:2e:ba:0c:8c:bb:73:d5:44:28:99:7b:a4:e3:a0:05:1d:70: e6:09:d6:f4:b0:e8:bf:41:1f:4b:10:03:79:12:e0:f6:2b:84: 69:e7:e1:ae:60:a0:e6:f7:3f:97:f0:18:6b:26:32:14:a6:71: 0d:d5:b7:58:31:68:64:ed:35:ad:b0:5f:fb:25:df:14:64:d5: bd:ed:f3:1d:1e:d4:7c:b1:85:4a:dd:34:1c:9f:00:24:43:d1: 0f:30:0e:e9:b8:d1:de:f4:f1:80:99:00:46:9b:1b:99:f8:1a: 30:46:f4:be:15:2d:c2:3e:e7:48:9a:a9:4c:74:0f:b8:f1:4b: e2:db:b0:06:fc:cb:ca:af:89:90:4e:1b:63:c9:c3:e5:63:59: f0:fa:5d:de:03:91:e5:eb:54:60:c5:38:b1:64:3b:e4:f6:8a: ae:12:10:dc:3c:91:95:8e:da:39:9e:11:26:d3:9c:35:3a:17: 58:86:97:8d:3e:4f:95:f7:c7:b0:31:db:ce:42:66:fb:14:21: 7c:c1:0f:12:a0:4f:f4:bd:b1:b3:20:f8:e0:ef:8c:c7:ed:0c: f0:34:40:9b:e1:ae:f4:79:80:cc:c8:95:6a:e7:29:ba:aa:be: 20:e6:22:67 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEcdDJbDTNIovACPq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkwNTEzMDM0NVoXDTI0MTIwNDE0MDM0NVowLzEtMCsGA1UEAxMk YTU4N2U3Y2ItMTI4NC00OWZjLWEzYzAtMTBhYTJkYTk5ZmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Dchtfvh6zuDmhJPgZcgb6CJwmPkjtQv+Fnr XsHeYmdVr6OkW5oIpxFN6LdUVMTwxSHUif03/MG6nu12xXpMa/n+8/q7VANtNovY mkHt5lZf1uERK3gfbdSaRREO+qz/kGBSwRDz5hdmsUS97NL8Opo6hgNv6/ttkbot Avx2rIA3EAzSIgzKKA1bg3/36UVUrAnPN938nzgSWqsKKDGmNRW8AvVpBZ5k49Xl Oz/Rj8Px5tq8IG8+3tdyqL6S/TeYVUC/V3rPUuFUpQlDRPHroMxDI/2gVIr7i2rD 0C7Yxdfik/ITsnaZNAQfEckIhLeqMG+2CaMLRnnu3oR/bkefmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPZ1RGLDl1Z/MEMYxxoXLvul8ckFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDY1ZmY5ZjEtN2RhMy0z ZmM5LTk5MWUtMTI3NGQzNzllNTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADCkdL8ow4Mkqq/azOZI1xUIAtAuugyMu3PVRCiZe6TjoAUdcOYJ 1vSw6L9BH0sQA3kS4PYrhGnn4a5goOb3P5fwGGsmMhSmcQ3Vt1gxaGTtNa2wX/sl 3xRk1b3t8x0e1HyxhUrdNByfACRD0Q8wDum40d708YCZAEabG5n4GjBG9L4VLcI+ 50iaqUx0D7jxS+LbsAb8y8qviZBOG2PJw+VjWfD6Xd4DkeXrVGDFOLFkO+T2iq4S ENw8kZWO2jmeESbTnDU6F1iGl40+T5X3x7Ax285CZvsUIXzBDxKgT/S9sbMg+ODv jMftDPA0QJvhrvR5gMzIlWrnKbqqviDmImc= -----END CERTIFICATE-----Generated at Tue Oct 22 21:17:52 2024 by rpki-client on console-ams.rpki-client.org