$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fe2a3cd-b31f-34db-8d2d-6e6423e27a71.roa File: 4fe2a3cd-b31f-34db-8d2d-6e6423e27a71.roa (raw, json) Hash identifier: 5rfnm3sy6sNihFxvnyeaawNEA2fPvqVNSh4Z7rP+7EU= Subject key identifier: 33:0D:20:F9:C4:9F:75:B9:3B:6E:D7:F5:18:B5:E6:B4:42:10:5D:A8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858475A7623AC5179119DED4098C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fe2a3cd-b31f-34db-8d2d-6e6423e27a71.roa Signing time: Fri 27 Sep 2024 13:00:41 +0000 ROA not before: Fri 27 Sep 2024 13:00:41 +0000 ROA not after: Thu 26 Dec 2024 14:00:41 +0000 asID: 396608 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5a:76:23:ac:51:79:11:9d:ed:40:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 27 13:00:41 2024 GMT Not After : Dec 26 14:00:41 2024 GMT Subject: CN=ae2ca090-74e8-4866-a2f5-dc60100ee47d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c3:11:d6:82:10:c8:2f:01:98:be:0e:25:7c: eb:9d:9d:18:b1:f7:03:5c:af:2d:14:85:b1:d6:d1: 12:cf:4d:14:f6:69:ec:3a:b9:c1:02:9a:55:81:da: 33:12:62:2c:81:76:70:fb:09:8a:d8:a1:96:c4:71: 4b:c4:d7:b8:56:b4:23:5b:7d:12:6d:2e:63:fe:b2: dc:43:e7:8e:b1:be:8a:2d:ba:68:e8:79:1d:29:41: 66:6e:46:cc:c1:c6:0d:8f:db:10:35:9c:5e:9f:7f: a1:a4:68:ed:60:cd:a8:97:38:ca:d4:87:5d:57:fd: ed:0f:6e:ba:ae:2a:1d:24:e6:5e:37:3d:ed:d6:a6: bd:06:9d:a6:57:f2:dd:6f:f0:e0:b2:ab:dd:07:fc: ad:5e:27:fa:7e:39:d6:08:06:c2:5a:57:13:51:ba: 93:a1:50:63:8c:99:f8:01:f7:e0:05:c9:19:19:74: dc:80:b5:ef:65:7c:fa:b5:eb:3f:1e:fa:f8:1b:1c: d2:13:7b:2d:e8:a3:af:78:66:3b:c9:55:9a:4d:33: 7e:de:b9:04:be:a5:4b:1b:11:94:e1:ee:ac:95:54: 7b:6e:28:a6:10:6d:99:79:e3:4a:5c:07:4c:6c:18: 04:dc:92:17:c0:b6:cf:90:95:84:5e:2d:f2:30:ed: f5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0D:20:F9:C4:9F:75:B9:3B:6E:D7:F5:18:B5:E6:B4:42:10:5D:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fe2a3cd-b31f-34db-8d2d-6e6423e27a71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:d4:13:cd:c2:34:1a:96:e8:5b:32:07:67:67:6c:8c:88:47: 02:5c:63:ba:4a:69:e7:d2:e2:1c:66:8d:a9:e4:91:23:49:c2: 14:9d:97:9d:3f:ee:91:a8:03:5e:1b:5d:df:ad:c6:4d:24:dd: a8:ac:81:f6:6d:c3:d2:ba:9e:da:ef:fe:2e:a4:69:03:6d:95: 6c:b7:f9:dc:e4:ee:fa:7b:69:0f:37:8d:e5:99:54:a7:6a:6e: dc:a1:a8:21:f4:51:00:3c:be:40:c0:4d:54:8e:74:56:47:24: 3b:c6:46:48:8d:9e:64:0e:90:8a:ec:c7:1d:ae:de:60:f8:9b: 83:6b:5f:6a:b6:c7:4d:95:e7:c9:2e:b0:4f:07:44:66:14:5a: 05:4b:83:2b:7f:c1:fc:ec:00:ad:a4:90:38:c8:cc:c6:f5:09: 98:cd:12:b4:38:7e:2f:d3:63:8a:57:a7:53:6b:ae:57:ef:3a: 45:44:b1:59:90:ab:b1:a7:5d:b1:f4:2e:4a:ca:96:e8:44:57: 95:f8:78:cf:7d:a6:fd:b3:d6:9b:d6:f9:a8:52:6c:b4:ca:7a: 1c:4b:83:24:ce:f8:c1:82:90:92:c4:73:f1:7c:85:b0:db:e8: cf:b2:d5:77:c5:7f:b1:ed:e2:6e:ab:86:28:17:e2:4b:d9:ba: 57:46:22:73 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEdadiOsUXkRne1AmMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkyNzEzMDA0MVoXDTI0MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk YWUyY2EwOTAtNzRlOC00ODY2LWEyZjUtZGM2MDEwMGVlNDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMMR1oIQyC8BmL4OJXzrnZ0YsfcDXK8tFIWx 1tESz00U9mnsOrnBAppVgdozEmIsgXZw+wmK2KGWxHFLxNe4VrQjW30SbS5j/rLc Q+eOsb6KLbpo6HkdKUFmbkbMwcYNj9sQNZxen3+hpGjtYM2olzjK1IddV/3tD266 riodJOZeNz3t1qa9Bp2mV/Ldb/DgsqvdB/ytXif6fjnWCAbCWlcTUbqToVBjjJn4 AffgBckZGXTcgLXvZXz6tes/Hvr4GxzSE3st6KOveGY7yVWaTTN+3rkEvqVLGxGU 4e6slVR7biimEG2ZeeNKXAdMbBgE3JIXwLbPkJWEXi3yMO31xQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDMNIPnEn3W5O27X9Ri15rRCEF2oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGZlMmEzY2QtYjMxZi0z NGRiLThkMmQtNmU2NDIzZTI3YTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBT1BPNwjQaluhbMgdnZ2yMiEcCXGO6Smnn0uIc Zo2p5JEjScIUnZedP+6RqANeG13frcZNJN2orIH2bcPSup7a7/4upGkDbZVst/nc 5O76e2kPN43lmVSnam7coagh9FEAPL5AwE1UjnRWRyQ7xkZIjZ5kDpCK7Mcdrt5g +JuDa19qtsdNlefJLrBPB0RmFFoFS4Mrf8H87ACtpJA4yMzG9QmYzRK0OH4v02OK V6dTa65X7zpFRLFZkKuxp12x9C5KypboRFeV+HjPfab9s9ab1vmoUmy0ynocS4Mk zvjBgpCSxHPxfIWw2+jPstV3xX+x7eJuq4YoF+JL2bpXRiJz -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:34 2024 by rpki-client on console-fra.rpki-client.org