$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66869cdf-ea3e-3d60-9d06-a0ff1e97a3fc.roa File: 66869cdf-ea3e-3d60-9d06-a0ff1e97a3fc.roa (raw, json) Hash identifier: d7TXi/FKnLpgiEbeWfeTpN3NQUcasGlut4U2s+nTSd0= Subject key identifier: D3:28:76:5F:49:49:92:71:BA:56:91:4F:E1:69:F8:14:B7:2D:D3:FA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858477BF66FD50E2A8F38466E2900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66869cdf-ea3e-3d60-9d06-a0ff1e97a3fc.roa Signing time: Wed 09 Oct 2024 13:00:42 +0000 ROA not before: Wed 09 Oct 2024 13:00:42 +0000 ROA not after: Tue 07 Jan 2025 14:00:42 +0000 asID: 7342 IP address blocks: 2620:74:65::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7b:f6:6f:d5:0e:2a:8f:38:46:6e:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 9 13:00:42 2024 GMT Not After : Jan 7 14:00:42 2025 GMT Subject: CN=5535366e-234b-45ed-9c9c-20080b6db211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:8b:b5:4b:fb:c7:15:86:5d:ec:cb:8e:87:ee: dc:8f:5a:c5:d9:56:f8:fc:bf:40:d8:a9:f7:a0:40: 5e:e5:c0:cb:a6:29:48:05:66:01:06:70:3e:1a:f8: 76:da:bf:34:4f:24:3e:90:5d:90:51:9e:67:f4:86: f4:06:8e:95:76:da:d2:b7:31:8d:ce:04:22:7c:b6: 8d:90:c9:07:0d:b2:fb:fa:42:ab:85:84:dd:05:1b: 4b:b6:0e:a8:b4:88:30:0a:cd:7b:16:e5:b3:cf:6b: 15:f4:a3:d3:4d:a8:e9:b7:b7:98:2c:0e:4b:e3:d2: 94:a9:70:c8:42:ad:48:1f:f5:04:eb:a7:11:d8:dc: 11:24:51:01:f0:d7:e1:5a:d9:fb:85:23:e1:a7:c3: 45:8d:31:05:d0:c5:a3:4f:07:df:f1:57:48:56:14: 09:59:f4:ef:50:c6:1b:70:76:7e:aa:84:9a:0f:32: ef:54:a2:b0:fc:56:d7:8b:5f:f5:98:71:6d:8e:32: 85:9a:1a:7c:0a:77:d2:40:43:0d:04:24:ee:bf:ae: 7a:0d:74:d8:83:b2:1f:33:20:be:30:34:b2:4d:01: 80:00:c4:6b:3a:00:77:10:08:1c:40:b0:a6:a3:88: 95:81:7d:16:5f:26:da:56:90:8e:04:e1:b4:bd:a9: 3c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:28:76:5F:49:49:92:71:BA:56:91:4F:E1:69:F8:14:B7:2D:D3:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66869cdf-ea3e-3d60-9d06-a0ff1e97a3fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:65::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:ed:81:58:5e:ba:ce:a3:51:37:cf:96:4b:87:23:41:48:2c: bf:97:8f:4b:b0:c5:4c:05:55:11:30:ce:e2:2b:ef:c5:8c:8f: 1e:2d:4f:90:35:07:0c:e9:0a:90:c6:78:a9:10:9b:7c:48:19: 47:93:89:45:88:91:fd:f8:0f:53:c1:88:a4:bb:b9:b4:00:5b: f2:40:2f:da:bd:d5:69:e6:93:0c:e6:6e:49:8c:04:dc:64:e2: 44:dd:bf:08:4c:90:7d:57:5d:7a:38:b5:53:c3:b8:d2:48:78: 08:35:5c:c5:6e:df:4f:29:4d:88:be:1a:ef:b5:8c:85:cf:88: be:f7:5b:34:bb:1c:48:07:ed:eb:07:ee:7d:4a:e0:b8:c9:48: 81:81:08:e8:d9:51:86:ac:f6:54:82:fc:fe:5d:e2:d0:4f:c1: 1f:db:07:9e:14:44:5a:5f:4f:03:60:70:00:5f:10:33:98:bf: 7a:25:31:a4:4c:69:13:74:03:0e:1e:68:0a:ca:9e:97:22:7f: 75:e6:cf:0e:b1:79:8a:12:69:f6:ff:ae:cd:05:a5:87:db:9b: 40:97:0e:db:19:f7:ff:e0:9b:69:e7:57:af:9a:fc:ce:f3:bd: b5:48:cc:36:f0:9d:bc:48:2d:ee:d9:62:d4:a8:f0:90:b8:64: 52:e9:d2:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEd79m/VDiqPOEZuKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTAwOTEzMDA0MloXDTI1MDEwNzE0MDA0MlowLzEtMCsGA1UEAxMk NTUzNTM2NmUtMjM0Yi00NWVkLTljOWMtMjAwODBiNmRiMjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ou1S/vHFYZd7MuOh+7cj1rF2Vb4/L9A2Kn3 oEBe5cDLpilIBWYBBnA+Gvh22r80TyQ+kF2QUZ5n9Ib0Bo6VdtrStzGNzgQifLaN kMkHDbL7+kKrhYTdBRtLtg6otIgwCs17FuWzz2sV9KPTTajpt7eYLA5L49KUqXDI Qq1IH/UE66cR2NwRJFEB8NfhWtn7hSPhp8NFjTEF0MWjTwff8VdIVhQJWfTvUMYb cHZ+qoSaDzLvVKKw/FbXi1/1mHFtjjKFmhp8CnfSQEMNBCTuv656DXTYg7IfMyC+ MDSyTQGAAMRrOgB3EAgcQLCmo4iVgX0WXybaVpCOBOG0vak8mQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNModl9JSZJxulaRT+Fp+BS3LdP6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjY4NjljZGYtZWEzZS0z ZDYwLTlkMDYtYTBmZjFlOTdhM2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEztgVheus6jUTfPlkuHI0FILL+Xj0uwxUwFVREwzuIr78WMjx4t T5A1BwzpCpDGeKkQm3xIGUeTiUWIkf34D1PBiKS7ubQAW/JAL9q91WnmkwzmbkmM BNxk4kTdvwhMkH1XXXo4tVPDuNJIeAg1XMVu308pTYi+Gu+1jIXPiL73WzS7HEgH 7esH7n1K4LjJSIGBCOjZUYas9lSC/P5d4tBPwR/bB54URFpfTwNgcABfEDOYv3ol MaRMaRN0Aw4eaArKnpcif3Xmzw6xeYoSafb/rs0FpYfbm0CXDtsZ9//gm2nnV6+a /M7zvbVIzDbwnbxILe7ZYtSo8JC4ZFLp0oM= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:15 2024 by rpki-client on console-ams.rpki-client.org