$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a774a78-6a7a-3ef3-b749-cce52efdbc5c.roa File: 5a774a78-6a7a-3ef3-b749-cce52efdbc5c.roa (raw, json) Hash identifier: ms7y+IIJyig4ezo4Dd5jFs0/2OZjFu4k2Z4W3TpWFHM= Subject key identifier: 51:4C:08:0A:AE:DA:0E:69:3A:8F:F3:52:8A:92:B0:D5:0A:F9:28:3C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847F1551F8F84DE62E996DF1480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a774a78-6a7a-3ef3-b749-cce52efdbc5c.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 396569 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:1f:8f:84:de:62:e9:96:df:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=2d4ac512-4cbf-4d6f-976b-a164fb545ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:dc:10:e7:f8:62:8b:4b:27:fa:e4:78:ed:45: 37:32:d5:65:b3:1e:df:c6:de:50:44:74:08:75:88: 46:0e:c6:9c:0e:4a:ec:5c:14:99:e5:ad:af:0b:0b: a0:96:ee:a9:90:5d:dd:56:72:b0:72:5d:c8:ad:85: 0a:91:22:45:cd:51:ea:ec:ef:b0:8f:ab:18:30:5c: cc:37:87:97:2d:f2:da:fb:a1:38:27:94:c2:ff:9f: c8:a3:22:ba:17:f9:50:4f:6e:a1:5a:b6:70:58:df: 88:47:5d:0c:6b:b3:27:98:6e:0e:fa:61:56:29:64: f2:bf:2e:0f:8d:19:f9:df:2d:e9:d3:82:e2:08:84: 30:e5:2d:55:c6:60:b0:57:82:9e:3e:fd:5d:7d:7f: 6c:83:96:b9:21:25:77:93:95:67:62:80:b5:0f:69: eb:f4:5c:3b:89:8d:58:0a:e5:ed:54:03:86:96:55: 70:d8:1b:3a:6e:61:dc:d5:18:8b:b2:4b:97:9a:9f: 77:22:2a:5c:b1:2d:a9:5c:47:d9:74:0b:fa:c8:f8: 59:79:7d:2b:f9:96:cb:95:de:38:54:23:a9:c1:65: 25:03:4c:fb:52:0d:27:ac:7c:be:2f:97:db:50:e4: 89:2f:e4:88:4c:6e:85:a2:99:5f:a7:e7:9c:bc:5e: 33:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4C:08:0A:AE:DA:0E:69:3A:8F:F3:52:8A:92:B0:D5:0A:F9:28:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a774a78-6a7a-3ef3-b749-cce52efdbc5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:05:19:16:49:c5:31:41:53:29:68:70:c9:5e:e2:c0:00:d3: c1:b1:35:27:ec:4a:65:96:49:b2:dd:e1:8b:62:80:25:ba:3f: 06:3a:5e:db:13:69:be:82:c2:66:23:df:a0:e0:5f:a9:e1:c5: 1a:22:3c:d0:55:db:4a:7d:2e:bf:e5:e5:db:14:14:45:35:77: 9e:0a:aa:e5:f1:22:4c:fa:e8:1a:11:7b:c4:c3:14:09:3c:da: 2f:37:e0:35:4a:36:40:15:f8:95:47:67:f8:c5:37:5a:64:fb: 9d:d0:8f:cc:83:a4:ac:ea:9d:86:25:e8:19:c2:64:be:aa:e6: f1:0e:38:a2:b6:aa:37:ec:24:ef:3b:76:95:61:94:66:49:c1: 6b:29:8c:43:c5:1f:51:42:ba:d4:94:eb:ce:4e:9d:cd:44:87: fb:1a:e1:cf:35:26:ec:2f:d2:99:cd:d7:e2:78:7c:5f:6b:ab: 2d:9e:2c:2b:03:81:0f:a5:34:67:6c:f1:d5:e8:18:13:90:06: a8:53:2e:9b:75:31:93:cf:8e:ef:56:ea:f4:4d:11:b6:a0:9d: 01:49:fa:fd:fc:41:fe:d5:19:e0:8f:30:66:bf:26:de:aa:f7: 5c:90:56:54:67:f4:0c:39:10:a2:ab:94:20:dd:97:9f:bb:56: 85:4b:55:6b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfxVR+PhN5i6ZbfFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MmQ0YWM1MTItNGNiZi00ZDZmLTk3NmItYTE2NGZiNTQ1Y2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4twQ5/hii0sn+uR47UU3MtVlsx7fxt5QRHQI dYhGDsacDkrsXBSZ5a2vCwuglu6pkF3dVnKwcl3IrYUKkSJFzVHq7O+wj6sYMFzM N4eXLfLa+6E4J5TC/5/IoyK6F/lQT26hWrZwWN+IR10Ma7MnmG4O+mFWKWTyvy4P jRn53y3p04LiCIQw5S1VxmCwV4KePv1dfX9sg5a5ISV3k5VnYoC1D2nr9Fw7iY1Y CuXtVAOGllVw2Bs6bmHc1RiLskuXmp93IipcsS2pXEfZdAv6yPhZeX0r+ZbLld44 VCOpwWUlA0z7Ug0nrHy+L5fbUOSJL+SITG6Foplfp+ecvF4zBwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFFMCAqu2g5pOo/zUoqSsNUK+Sg8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWE3NzRhNzgtNmE3YS0z ZWYzLWI3NDktY2NlNTJlZmRiYzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBxBRkWScUxQVMpaHDJXuLAANPBsTUn7Epllkmy 3eGLYoAluj8GOl7bE2m+gsJmI9+g4F+p4cUaIjzQVdtKfS6/5eXbFBRFNXeeCqrl 8SJM+ugaEXvEwxQJPNovN+A1SjZAFfiVR2f4xTdaZPud0I/Mg6Ss6p2GJegZwmS+ qubxDjiitqo37CTvO3aVYZRmScFrKYxDxR9RQrrUlOvOTp3NRIf7GuHPNSbsL9KZ zdfieHxfa6stniwrA4EPpTRnbPHV6BgTkAaoUy6bdTGTz47vVur0TRG2oJ0BSfr9 /EH+1RngjzBmvybeqvdckFZUZ/QMORCiq5Qg3Zefu1aFS1Vr -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:35 2024 by rpki-client on console-fra.rpki-client.org