$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/59ab09f2-54f3-354a-8b6f-28d5c29f681e.roa File: 59ab09f2-54f3-354a-8b6f-28d5c29f681e.roa (raw, json) Hash identifier: CcJ+3hctiH3zyf2u7FjyC0v7egsYME6KlLqzioE9wTE= Subject key identifier: 20:0B:2C:B7:FB:F4:3F:A4:76:A9:4E:1A:AE:F5:71:60:B3:04:51:5D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847A30C0BE73AF03A6AA1388F40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/59ab09f2-54f3-354a-8b6f-28d5c29f681e.roa Signing time: Wed 23 Oct 2024 13:00:41 +0000 ROA not before: Wed 23 Oct 2024 13:00:41 +0000 ROA not after: Tue 21 Jan 2025 14:00:41 +0000 asID: 396563 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a3:0c:0b:e7:3a:f0:3a:6a:a1:38:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 23 13:00:41 2024 GMT Not After : Jan 21 14:00:41 2025 GMT Subject: CN=7b3be802-52bc-40ca-ad0d-4235d53079d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:eb:2d:65:dd:ab:8a:32:67:6e:e8:8f:ac:37: 45:b8:db:60:87:f2:d6:12:da:6e:e4:11:25:4f:4b: 04:bb:ac:24:78:8e:d2:f5:7b:e7:3d:c2:69:83:6e: 4a:0f:99:4b:6b:38:b8:6b:4d:ab:af:2a:cd:d0:10: c7:0d:31:2a:17:ca:60:2c:89:85:a8:f0:3d:8a:be: ca:77:6e:ad:b8:c3:d6:51:59:14:16:14:00:ce:04: 24:c7:e3:78:98:3d:25:27:8a:1f:2f:96:0a:66:e1: 54:58:d7:52:40:79:56:6c:b4:10:ce:6d:63:c6:ce: 36:d0:f7:c7:ea:09:f2:d6:13:34:f1:51:bf:d1:e0: 47:38:37:ec:68:a6:b5:8a:97:6d:75:8a:96:45:9f: 82:98:35:d4:df:cb:a7:67:31:75:96:6c:a7:8e:d3: 58:92:0e:30:d3:62:c8:f2:a9:b6:20:90:fe:4d:12: f1:fd:b5:9b:2a:cd:2c:73:b2:d7:67:49:19:3f:36: 98:8a:32:ce:63:6d:ef:4d:0f:bf:b2:9a:ce:de:cd: 15:3e:d0:5a:52:e9:9d:26:21:a5:5c:ca:2d:da:db: 2a:56:c6:3d:9a:41:90:e2:ef:ab:d8:4d:33:d2:8c: da:52:2f:a1:8a:19:ab:ed:15:24:63:15:50:0d:93: 4a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0B:2C:B7:FB:F4:3F:A4:76:A9:4E:1A:AE:F5:71:60:B3:04:51:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/59ab09f2-54f3-354a-8b6f-28d5c29f681e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:7c:13:92:48:f4:52:03:3d:1c:45:a6:d5:89:8c:9f:72:04: f5:f2:bf:6e:37:8d:27:24:3d:fd:42:81:c5:b4:c7:4f:88:f9: 34:6f:e9:5f:a1:3a:19:15:05:3e:f9:0a:94:4e:e0:33:4c:08: bc:0b:e8:c0:32:84:7b:b5:4a:01:3d:e9:53:61:fb:25:a0:e5: 1a:7a:f1:27:8c:5f:65:99:95:b3:4b:45:f6:c7:5f:c2:81:11: 16:39:95:95:18:18:cc:70:93:00:24:f5:04:55:46:e2:38:6c: 89:6c:26:1e:67:a3:0c:67:e4:54:de:48:85:b5:91:6c:32:36: 46:63:31:08:b9:2c:e9:e1:a6:c9:fc:39:6b:86:d5:6a:d9:7c: 00:31:ad:cb:95:e7:0e:ec:0e:43:68:e9:f6:69:cc:1a:d8:40: 9f:97:84:cf:d4:19:eb:0d:38:84:90:c9:ca:e6:0f:4a:ac:1b: 7c:b4:5a:d3:64:70:ba:2a:5e:9a:90:06:1e:f3:cf:74:94:a5: 73:1a:77:0a:00:88:a7:b5:de:ab:a5:c9:48:35:36:76:d2:79: 28:76:4d:a5:3d:c6:a9:b0:ab:36:c0:76:a9:42:12:ca:c2:3c: 95:d3:e4:84:55:c8:a3:5b:dd:3a:f6:a4:28:a2:df:be:a1:49: 16:9a:6f:bb -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEejDAvnOvA6aqE4j0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTAyMzEzMDA0MVoXDTI1MDEyMTE0MDA0MVowLzEtMCsGA1UEAxMk N2IzYmU4MDItNTJiYy00MGNhLWFkMGQtNDIzNWQ1MzA3OWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArestZd2rijJnbuiPrDdFuNtgh/LWEtpu5BEl T0sEu6wkeI7S9XvnPcJpg25KD5lLazi4a02rryrN0BDHDTEqF8pgLImFqPA9ir7K d26tuMPWUVkUFhQAzgQkx+N4mD0lJ4ofL5YKZuFUWNdSQHlWbLQQzm1jxs420PfH 6gny1hM08VG/0eBHODfsaKa1ipdtdYqWRZ+CmDXU38unZzF1lmynjtNYkg4w02LI 8qm2IJD+TRLx/bWbKs0sc7LXZ0kZPzaYijLOY23vTQ+/sprO3s0VPtBaUumdJiGl XMot2tsqVsY9mkGQ4u+r2E0z0ozaUi+hihmr7RUkYxVQDZNKNQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCALLLf79D+kdqlOGq71cWCzBFFdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTlhYjA5ZjItNTRmMy0z NTRhLThiNmYtMjhkNWMyOWY2ODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBvfBOSSPRSAz0cRabViYyfcgT18r9uN40nJD39 QoHFtMdPiPk0b+lfoToZFQU++QqUTuAzTAi8C+jAMoR7tUoBPelTYfsloOUaevEn jF9lmZWzS0X2x1/CgREWOZWVGBjMcJMAJPUEVUbiOGyJbCYeZ6MMZ+RU3kiFtZFs MjZGYzEIuSzp4abJ/DlrhtVq2XwAMa3LlecO7A5DaOn2acwa2ECfl4TP1BnrDTiE kMnK5g9KrBt8tFrTZHC6Kl6akAYe8890lKVzGncKAIintd6rpclINTZ20nkodk2l PcapsKs2wHapQhLKwjyV0+SEVcijW9069qQoot++oUkWmm+7 -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:14 2024 by rpki-client on console-ams.rpki-client.org