$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/668c7565-d48b-3581-8b27-87e2b0cf2875.roa File: 668c7565-d48b-3581-8b27-87e2b0cf2875.roa (raw, json) Hash identifier: tCPauzVL/lkgLWg36PYnVbbNbviMvoKznHCpFw9pj7E= Subject key identifier: 9F:56:B2:05:71:90:5E:E9:F6:75:B1:CD:E8:98:A7:24:45:E9:13:77 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858474F4B7EC5F2680564F7CBACA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/668c7565-d48b-3581-8b27-87e2b0cf2875.roa Signing time: Mon 23 Sep 2024 13:00:40 +0000 ROA not before: Mon 23 Sep 2024 13:00:40 +0000 ROA not after: Sun 22 Dec 2024 14:00:40 +0000 asID: 7342 IP address blocks: 2620:74:37::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4f:4b:7e:c5:f2:68:05:64:f7:cb:ac:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 13:00:40 2024 GMT Not After : Dec 22 14:00:40 2024 GMT Subject: CN=85063338-db2c-4a80-b84f-939c339c9c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9d:48:b8:05:89:e6:c3:55:50:f5:7e:6b:26: 39:d8:13:5e:4b:ba:5d:8b:8c:1a:18:d2:c7:dd:8e: 0b:5d:c0:b8:8f:fb:ab:c0:fc:c6:bd:a3:52:64:2d: 03:c3:37:45:d4:3e:46:89:b3:9e:67:a7:b4:54:7e: 98:67:02:3c:44:89:45:de:ca:0d:71:74:99:bc:4d: 58:16:ff:81:e8:fe:05:1f:ee:28:8e:df:97:a2:5e: 77:6f:76:de:87:1d:18:64:c5:5e:be:1a:78:34:be: 3b:b3:9d:3a:d6:07:27:6c:39:c5:7f:aa:18:54:28: 76:fd:d6:99:f8:6e:a8:94:e0:e2:91:83:d8:5c:d1: 69:32:5d:d8:ca:31:b5:fe:27:2d:12:b2:62:43:0d: 70:77:1c:bc:9b:6b:e0:0d:98:5a:3c:29:ea:47:22: 35:9b:23:a9:b0:54:d0:6b:b6:7b:af:67:95:50:18: 9a:77:db:77:de:5b:cf:85:1c:cb:1b:ce:7b:28:98: 2a:ee:40:4d:8f:6c:a0:70:5c:de:53:64:6f:30:46: c4:43:83:4c:d9:59:de:22:5c:02:c1:af:71:1b:69: 66:2f:bf:51:44:07:5b:a8:ca:4c:e3:2b:12:6b:5a: d6:29:74:b1:08:37:57:ac:4d:76:88:dd:b3:56:52: 74:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:56:B2:05:71:90:5E:E9:F6:75:B1:CD:E8:98:A7:24:45:E9:13:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/668c7565-d48b-3581-8b27-87e2b0cf2875.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:37::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:42:c1:d8:52:14:0b:3c:90:86:e7:23:b3:a1:7a:e2:42:9f: c6:ac:f4:be:30:49:82:a1:19:02:0f:11:08:b3:e2:a2:89:95: cd:cb:45:91:3f:38:a9:03:cf:81:b2:42:fa:f8:68:0b:5e:6a: e0:60:57:07:81:76:4a:30:80:00:02:1a:0a:4f:b2:5f:42:6e: 82:61:86:d9:f9:38:ca:e1:50:dd:70:10:3f:a5:64:db:95:3d: bd:82:7b:78:01:27:4b:0d:aa:13:98:65:3f:d0:8f:ec:f4:58: aa:f6:5e:c2:fc:c4:eb:49:72:16:a8:2b:5f:ff:74:8a:dc:c1: ca:22:8a:27:8d:a3:f0:de:04:ab:52:bc:a8:3d:80:35:32:be: 46:29:ed:4b:73:f1:2f:6a:d7:0a:9e:bd:06:62:df:3f:f6:01: 0c:eb:7f:29:f0:68:43:0e:68:34:6e:6a:12:f9:98:9e:c2:93: ed:37:07:93:31:af:db:f9:78:ff:27:ba:38:0f:ae:d6:e1:2d: 7b:58:01:0f:5e:23:29:6f:1f:f2:d5:4e:39:dd:d0:6e:24:bc: bb:c8:6d:f7:44:90:b0:89:57:b5:d8:0e:34:78:c3:73:ba:bd: cf:3a:6d:fc:10:e7:13:8d:af:0a:dd:e9:b0:ee:2f:39:3a:64: 47:26:6c:08 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdPS37F8mgFZPfLrKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkyMzEzMDA0MFoXDTI0MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk ODUwNjMzMzgtZGIyYy00YTgwLWI4NGYtOTM5YzMzOWM5YzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv51IuAWJ5sNVUPV+ayY52BNeS7pdi4waGNLH 3Y4LXcC4j/urwPzGvaNSZC0DwzdF1D5GibOeZ6e0VH6YZwI8RIlF3soNcXSZvE1Y Fv+B6P4FH+4ojt+Xol53b3behx0YZMVevhp4NL47s5061gcnbDnFf6oYVCh2/daZ +G6olODikYPYXNFpMl3YyjG1/ictErJiQw1wdxy8m2vgDZhaPCnqRyI1myOpsFTQ a7Z7r2eVUBiad9t33lvPhRzLG857KJgq7kBNj2ygcFzeU2RvMEbEQ4NM2VneIlwC wa9xG2lmL79RRAdbqMpM4ysSa1rWKXSxCDdXrE12iN2zVlJ0+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ9WsgVxkF7p9nWxzeiYpyRF6RN3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjY4Yzc1NjUtZDQ4Yi0z NTgxLThiMjctODdlMmIwY2YyODc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAA3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGtCwdhSFAs8kIbnI7OheuJCn8as9L4wSYKhGQIPEQiz4qKJlc3L RZE/OKkDz4GyQvr4aAteauBgVweBdkowgAACGgpPsl9CboJhhtn5OMrhUN1wED+l ZNuVPb2Ce3gBJ0sNqhOYZT/Qj+z0WKr2XsL8xOtJchaoK1//dIrcwcoiiieNo/De BKtSvKg9gDUyvkYp7Utz8S9q1wqevQZi3z/2AQzrfynwaEMOaDRuahL5mJ7Ck+03 B5Mxr9v5eP8nujgPrtbhLXtYAQ9eIylvH/LVTjnd0G4kvLvIbfdEkLCJV7XYDjR4 w3O6vc86bfwQ5xONrwrd6bDuLzk6ZEcmbAg= -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:36 2024 by rpki-client on console-fra.rpki-client.org