$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/518e3b9a-5635-355b-8a40-3467e68d7e88.roa File: 518e3b9a-5635-355b-8a40-3467e68d7e88.roa (raw, json) Hash identifier: S5oCgv4iuaUdQjSBSdSqCRRfZyEMuwYIFrtZ29RDUtM= Subject key identifier: 22:B1:D9:54:80:95:CF:AA:DA:DA:5B:85:5E:67:FA:3B:28:4F:F8:82 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847A30C0A7EB89818C9DC331760 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/518e3b9a-5635-355b-8a40-3467e68d7e88.roa Signing time: Wed 23 Oct 2024 13:00:41 +0000 ROA not before: Wed 23 Oct 2024 13:00:41 +0000 ROA not after: Tue 21 Jan 2025 14:00:41 +0000 asID: 396617 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a3:0c:0a:7e:b8:98:18:c9:dc:33:17:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 23 13:00:41 2024 GMT Not After : Jan 21 14:00:41 2025 GMT Subject: CN=7606e7a3-0735-4cb5-bacc-e9801fdeb7aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:82:ab:f6:10:dc:7f:14:2a:99:03:b9:1e:2e: f9:f5:e0:66:ec:18:06:b9:ef:c1:8f:2d:02:24:ee: 64:d3:c5:19:b6:c9:4c:99:ec:94:b9:1f:be:9b:0a: bc:61:5e:d8:af:78:82:29:44:03:4d:0d:83:b8:70: 93:19:73:59:a8:77:f6:67:5a:16:98:08:8f:aa:4e: 6c:c3:ac:06:82:74:63:65:af:ef:fe:d1:72:b6:71: 64:93:d4:f5:13:f8:76:9e:1a:18:4e:1e:b5:1d:cb: 36:8d:f7:59:25:dd:50:60:f7:a2:eb:f7:fc:0e:37: fa:f1:d0:9d:4d:c0:c0:13:c9:83:19:58:b0:de:1f: 67:c7:40:5b:aa:24:8b:e8:33:57:8f:cb:be:a3:cd: 15:0b:07:a7:1c:c8:0f:30:da:74:ec:b5:c5:63:97: 46:c7:83:a5:db:bc:34:50:a7:c0:8a:96:a0:04:f9: f1:e4:29:39:0b:d7:b1:ad:2f:c4:5e:e3:9d:52:b6: b4:a1:40:fe:21:0f:55:e0:54:66:b2:34:81:d5:74: a4:ef:95:03:62:d4:bd:d1:85:73:0a:70:83:d1:9d: f0:29:87:1a:81:e5:9f:c0:e1:67:06:fb:52:b4:ee: db:da:13:94:fd:57:80:d1:f1:31:81:77:a8:90:d7: 1b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B1:D9:54:80:95:CF:AA:DA:DA:5B:85:5E:67:FA:3B:28:4F:F8:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/518e3b9a-5635-355b-8a40-3467e68d7e88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:69:5f:c4:d2:80:bf:1e:62:8b:b6:6b:ba:97:ff:0b:47:43: dc:85:52:8e:ed:7c:6e:1d:0f:e2:d4:87:51:93:8c:52:bb:f5: 53:1b:44:e0:8e:b7:9d:02:5a:ea:ab:34:d3:42:ca:fd:38:7f: f5:53:9c:02:27:4a:ae:16:8c:e7:7c:45:c2:08:b9:93:49:ec: e5:88:35:a9:2f:1c:18:5f:ad:04:a8:f1:ba:e5:f1:ae:c9:e4: b4:0b:c4:61:97:a3:09:aa:05:30:dc:a1:4a:d5:c8:53:e2:b2: aa:6c:04:83:5d:f1:3e:db:dd:e8:c6:66:4d:a3:39:fe:97:dd: be:61:06:ac:5d:87:4d:e7:98:0b:2c:50:2b:c3:03:55:89:10: c4:32:f7:fa:31:56:3e:3e:b2:80:0c:c5:ad:51:83:f6:d4:56: 99:27:28:e0:dc:2f:93:9c:94:8a:f5:a3:65:de:bc:50:8a:e4: 84:41:4f:e5:85:ee:09:56:fa:80:da:c1:fa:e3:50:ae:fb:e1: 19:2f:32:c7:da:43:7f:76:46:0e:c8:73:dc:27:ac:ff:76:91: 20:4b:ad:ab:76:4f:73:3b:fd:1f:02:0d:33:09:f9:48:d4:de: 77:14:87:82:01:29:01:0f:73:06:d5:61:5b:78:1f:bc:b9:70: 09:10:09:6a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEejDAp+uJgYydwzF2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTAyMzEzMDA0MVoXDTI1MDEyMTE0MDA0MVowLzEtMCsGA1UEAxMk NzYwNmU3YTMtMDczNS00Y2I1LWJhY2MtZTk4MDFmZGViN2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIKr9hDcfxQqmQO5Hi759eBm7BgGue/Bjy0C JO5k08UZtslMmeyUuR++mwq8YV7Yr3iCKUQDTQ2DuHCTGXNZqHf2Z1oWmAiPqk5s w6wGgnRjZa/v/tFytnFkk9T1E/h2nhoYTh61Hcs2jfdZJd1QYPei6/f8Djf68dCd TcDAE8mDGViw3h9nx0BbqiSL6DNXj8u+o80VCwenHMgPMNp07LXFY5dGx4Ol27w0 UKfAipagBPnx5Ck5C9exrS/EXuOdUra0oUD+IQ9V4FRmsjSB1XSk75UDYtS90YVz CnCD0Z3wKYcageWfwOFnBvtStO7b2hOU/VeA0fExgXeokNcbiQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCKx2VSAlc+q2tpbhV5n+jsoT/iCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTE4ZTNiOWEtNTYzNS0z NTViLThhNDAtMzQ2N2U2OGQ3ZTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBIaV/E0oC/HmKLtmu6l/8LR0PchVKO7XxuHQ/i 1IdRk4xSu/VTG0TgjredAlrqqzTTQsr9OH/1U5wCJ0quFoznfEXCCLmTSezliDWp LxwYX60EqPG65fGuyeS0C8Rhl6MJqgUw3KFK1chT4rKqbASDXfE+293oxmZNozn+ l92+YQasXYdN55gLLFArwwNViRDEMvf6MVY+PrKADMWtUYP21FaZJyjg3C+TnJSK 9aNl3rxQiuSEQU/lhe4JVvqA2sH641Cu++EZLzLH2kN/dkYOyHPcJ6z/dpEgS62r dk9zO/0fAg0zCflI1N53FIeCASkBD3MG1WFbeB+8uXAJEAlq -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:35 2024 by rpki-client on console-fra.rpki-client.org