$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/573ec4e0-ae5d-3f5e-bf8f-d446713a3ad7.roa File: 573ec4e0-ae5d-3f5e-bf8f-d446713a3ad7.roa (raw, json) Hash identifier: 6McMCzAuqOuzMuPwDdKvpFe+K4P8tjFOFyl3qJS7bH8= Subject key identifier: 5D:B9:97:73:7A:56:5D:17:8F:80:52:80:7F:9B:61:61:86:2B:D5:4A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847F1552093BF962D932E43CE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/573ec4e0-ae5d-3f5e-bf8f-d446713a3ad7.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 396617 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:20:93:bf:96:2d:93:2e:43:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=ffd06306-fadf-4676-a16d-4f0c733c1211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:05:10:0a:7c:35:5e:1d:c9:53:e4:57:3b:40: 1e:44:e2:3a:b0:26:3c:af:72:bb:16:d8:2d:b4:ae: 57:d9:35:b6:59:60:b0:6a:fc:66:d8:97:9c:28:f1: 8b:df:31:d2:ae:a6:29:2c:03:f9:ec:e5:b4:54:88: ca:a4:42:22:8c:de:71:f6:f6:fb:c3:d1:ea:f3:2d: 8e:f1:3c:cb:e4:1f:e1:24:30:ca:1c:71:bb:ba:6c: 26:48:59:e2:50:2b:09:af:91:70:c8:6e:8f:29:ee: 89:f3:4f:6a:19:0a:c3:8f:fc:35:14:f2:7f:28:0d: 87:ab:96:c4:69:b6:ee:5c:8b:4c:53:30:f4:ba:4d: ae:f1:2f:17:92:2a:18:22:f2:83:e2:2c:0b:cc:ae: cd:bd:c1:b6:64:f3:f9:f8:da:00:ca:df:f6:48:6a: 12:21:96:29:a2:d9:96:43:af:84:2c:d8:05:8f:6a: b5:2d:71:b7:24:fe:c3:3a:16:d1:00:15:b3:86:00: b1:9d:ba:54:17:25:30:51:99:d1:ba:88:0d:0e:a2: 7f:cc:6b:e1:35:5e:c9:ba:75:93:d4:24:a8:d0:61: 91:cf:71:a5:d3:db:6e:9f:59:c7:4b:37:ba:b1:03: 16:b7:49:3f:0e:90:10:0f:e0:1f:24:35:fd:18:65: 45:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B9:97:73:7A:56:5D:17:8F:80:52:80:7F:9B:61:61:86:2B:D5:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/573ec4e0-ae5d-3f5e-bf8f-d446713a3ad7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:97:ba:ee:a1:3c:7d:68:01:ed:ea:f5:55:cd:d9:32:32:f9: 55:76:5f:5e:a8:b1:24:87:fa:3b:4d:66:ba:70:e3:25:29:db: b4:02:f3:cc:2c:78:bd:72:74:c6:ab:30:aa:66:e4:b8:a1:1e: 13:1b:17:27:b1:66:70:95:f6:87:7d:c6:7f:22:a2:da:c1:7a: 79:59:84:4d:6e:d1:95:ce:cc:31:e7:dc:0a:15:46:37:99:68: af:d3:ef:2e:bf:17:d0:57:9b:8a:cc:a7:4e:27:c2:d8:d9:82: 82:44:f7:0d:48:72:d5:c5:44:9b:6e:f0:1e:6a:95:ce:80:5c: 6f:80:33:bc:40:fb:0c:08:b3:e5:50:84:81:7d:0d:b2:5b:a4: 9b:42:51:e1:c0:8e:7f:29:f3:0f:69:d2:ac:37:63:e0:0c:f9: c4:17:a9:1d:f3:b2:38:db:39:d9:7f:ea:96:29:9e:63:83:61: af:a8:ea:82:0c:57:12:0f:1a:c4:e7:4e:43:be:54:97:55:8d: c4:10:68:3f:27:07:b8:bb:4b:4c:8e:58:eb:69:f6:93:67:df: 2e:72:44:2f:7f:4c:80:18:c5:e8:9c:98:bb:f0:90:e0:f0:04: e0:cd:d1:2e:cf:87:5e:32:95:c0:57:47:82:b2:33:12:a1:17: 0e:71:5d:56 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfxVSCTv5Ytky5DzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ZmZkMDYzMDYtZmFkZi00Njc2LWExNmQtNGYwYzczM2MxMjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQUQCnw1Xh3JU+RXO0AeROI6sCY8r3K7Ftgt tK5X2TW2WWCwavxm2JecKPGL3zHSrqYpLAP57OW0VIjKpEIijN5x9vb7w9Hq8y2O 8TzL5B/hJDDKHHG7umwmSFniUCsJr5FwyG6PKe6J809qGQrDj/w1FPJ/KA2Hq5bE abbuXItMUzD0uk2u8S8XkioYIvKD4iwLzK7NvcG2ZPP5+NoAyt/2SGoSIZYpotmW Q6+ELNgFj2q1LXG3JP7DOhbRABWzhgCxnbpUFyUwUZnRuogNDqJ/zGvhNV7JunWT 1CSo0GGRz3Gl09tun1nHSze6sQMWt0k/DpAQD+AfJDX9GGVFeQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFF25l3N6Vl0Xj4BSgH+bYWGGK9VKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTczZWM0ZTAtYWU1ZC0z ZjVlLWJmOGYtZDQ0NjcxM2EzYWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCGl7ruoTx9aAHt6vVVzdkyMvlVdl9eqLEkh/o7 TWa6cOMlKdu0AvPMLHi9cnTGqzCqZuS4oR4TGxcnsWZwlfaHfcZ/IqLawXp5WYRN btGVzswx59wKFUY3mWiv0+8uvxfQV5uKzKdOJ8LY2YKCRPcNSHLVxUSbbvAeapXO gFxvgDO8QPsMCLPlUISBfQ2yW6SbQlHhwI5/KfMPadKsN2PgDPnEF6kd87I42znZ f+qWKZ5jg2GvqOqCDFcSDxrE505DvlSXVY3EEGg/Jwe4u0tMjljrafaTZ98uckQv f0yAGMXonJi78JDg8ATgzdEuz4deMpXAV0eCsjMSoRcOcV1W -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:35 2024 by rpki-client on console-fra.rpki-client.org