$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/624cff09-124b-34a2-b04f-9ed49000da48.roa File: 624cff09-124b-34a2-b04f-9ed49000da48.roa (raw, json) Hash identifier: ljAnbZyjjJOzA1IwL6L3oaqtzZYPh7lrW+8mhIKsz6w= Subject key identifier: 8E:11:56:63:C9:C6:B2:76:68:80:77:43:CE:DE:9B:94:31:A0:46:8E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584754E0F4F67AE97E3739D0B200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/624cff09-124b-34a2-b04f-9ed49000da48.roa Signing time: Wed 25 Sep 2024 13:00:41 +0000 ROA not before: Wed 25 Sep 2024 13:00:41 +0000 ROA not after: Tue 24 Dec 2024 14:00:41 +0000 asID: 7342 IP address blocks: 2620:74:67::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:54:e0:f4:f6:7a:e9:7e:37:39:d0:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 13:00:41 2024 GMT Not After : Dec 24 14:00:41 2024 GMT Subject: CN=c805045c-924c-4810-8722-843857e4cd73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5a:06:7f:09:be:2b:cb:2a:8c:ab:96:be:c9: 2f:cf:f9:f7:a1:c5:e8:ad:29:ee:f0:a4:dc:ad:b7: 02:a2:6c:ab:7f:ab:3f:de:8f:a1:fd:d2:f2:9d:63: c0:35:90:ef:62:e5:20:30:95:b2:0f:48:ae:ed:a9: 3b:a8:23:09:86:be:98:40:a1:10:c8:fd:77:16:d4: 30:10:33:7d:90:ef:99:63:2d:50:87:ee:8c:bc:d1: b0:7b:b6:6c:a4:f8:32:b5:d9:8d:b7:ae:63:a6:e0: 9d:84:1f:f6:25:ec:c9:64:24:b3:2e:11:49:d3:2e: 10:dc:b1:18:04:cb:c2:7c:b9:02:cf:b7:96:77:a4: e6:e0:9a:84:07:f5:38:6b:af:85:a5:94:62:2d:57: 48:a8:6f:7a:c5:5b:9f:75:ba:9d:ce:5a:a4:73:8c: 1b:58:80:44:2f:07:4e:85:82:9e:7e:84:71:f9:0e: 40:05:43:a5:76:14:dc:bf:d7:82:b2:24:39:49:fa: e0:17:ba:28:b9:e2:35:5e:5e:b9:dc:a2:3d:c3:78: e8:31:84:3b:53:56:f8:da:f4:c0:e3:74:47:a1:16: 66:1f:d8:cc:0d:d9:ae:c5:87:3c:e9:b9:6a:6d:48: fc:72:75:27:d7:8f:e6:31:41:c9:20:38:ef:f2:d1: fc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:11:56:63:C9:C6:B2:76:68:80:77:43:CE:DE:9B:94:31:A0:46:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/624cff09-124b-34a2-b04f-9ed49000da48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:67::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:8f:36:7c:c9:aa:50:e9:83:e8:44:9e:14:d0:4f:36:9c:bf: 57:9b:88:6b:d2:bd:f2:88:cb:01:29:6b:86:ce:e8:8b:33:54: 4a:ea:27:16:1b:8b:6c:8d:0f:25:b3:e3:cc:e0:5a:97:dd:84: dc:db:6d:ee:de:eb:c1:94:73:20:8a:88:98:95:1f:57:0e:db: b3:6b:e8:1f:32:93:d9:0d:4b:15:f4:f9:c3:b5:47:ef:4f:01: 89:26:bd:74:62:a4:10:7b:cf:e8:47:9b:d3:cc:0f:c9:bd:45: bf:3a:ec:d1:11:86:a2:59:91:51:11:55:d0:c6:17:fb:c9:4c: 73:5d:ff:1a:95:03:75:bc:08:05:30:81:ac:5f:38:aa:6c:9a: ef:72:56:c5:c2:73:06:ca:f9:29:53:90:40:0e:14:58:e6:15: e8:03:d0:0f:d7:94:26:72:82:08:94:30:61:f1:09:51:ac:90: 31:c8:a3:82:7c:06:63:6f:5b:98:bb:b9:12:5d:c9:c5:24:cb: 3f:47:f1:1a:d7:8e:7c:19:40:8b:1d:af:d3:fe:d5:3a:2f:c9: 6a:c9:51:fb:e6:96:f0:59:44:a3:66:f9:71:41:3f:d3:e4:06: 98:67:f6:a4:b4:ef:29:b6:78:39:5e:22:3f:1f:c8:54:a9:93: 8f:28:0f:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdU4PT2eul+NznQsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk YzgwNTA0NWMtOTI0Yy00ODEwLTg3MjItODQzODU3ZTRjZDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVoGfwm+K8sqjKuWvskvz/n3ocXorSnu8KTc rbcComyrf6s/3o+h/dLynWPANZDvYuUgMJWyD0iu7ak7qCMJhr6YQKEQyP13FtQw EDN9kO+ZYy1Qh+6MvNGwe7ZspPgytdmNt65jpuCdhB/2JezJZCSzLhFJ0y4Q3LEY BMvCfLkCz7eWd6Tm4JqEB/U4a6+FpZRiLVdIqG96xVufdbqdzlqkc4wbWIBELwdO hYKefoRx+Q5ABUOldhTcv9eCsiQ5SfrgF7ooueI1Xl653KI9w3joMYQ7U1b42vTA 43RHoRZmH9jMDdmuxYc86blqbUj8cnUn14/mMUHJIDjv8tH8DQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI4RVmPJxrJ2aIB3Q87em5QxoEaOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjI0Y2ZmMDktMTI0Yi0z NGEyLWIwNGYtOWVkNDkwMDBkYTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAACPNnzJqlDpg+hEnhTQTzacv1ebiGvSvfKIywEpa4bO6IszVErq JxYbi2yNDyWz48zgWpfdhNzbbe7e68GUcyCKiJiVH1cO27Nr6B8yk9kNSxX0+cO1 R+9PAYkmvXRipBB7z+hHm9PMD8m9Rb867NERhqJZkVERVdDGF/vJTHNd/xqVA3W8 CAUwgaxfOKpsmu9yVsXCcwbK+SlTkEAOFFjmFegD0A/XlCZyggiUMGHxCVGskDHI o4J8BmNvW5i7uRJdycUkyz9H8RrXjnwZQIsdr9P+1TovyWrJUfvmlvBZRKNm+XFB P9PkBphn9qS07ym2eDleIj8fyFSpk48oDzQ= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:14 2024 by rpki-client on console-ams.rpki-client.org