$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6d2efe20-37c5-3aa6-b61b-189ea04df997.roa File: 6d2efe20-37c5-3aa6-b61b-189ea04df997.roa (raw, json) Hash identifier: T3MWgdAoceJ4X6gBx1OTe2YXpEdsrbiB3eUuxhuSUzg= Subject key identifier: 20:E3:5D:84:83:08:F0:E1:F2:4C:6D:CB:41:57:00:E5:70:97:F1:4F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847B696C7C81697CD9377F7BAC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6d2efe20-37c5-3aa6-b61b-189ea04df997.roa Signing time: Wed 30 Oct 2024 13:00:40 +0000 ROA not before: Wed 30 Oct 2024 13:00:40 +0000 ROA not after: Tue 28 Jan 2025 14:00:40 +0000 asID: 396585 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b6:96:c7:c8:16:97:cd:93:77:f7:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 30 13:00:40 2024 GMT Not After : Jan 28 14:00:40 2025 GMT Subject: CN=6f04d64e-9c21-4c34-b326-f8df28f798b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:32:79:21:b2:50:c1:04:cb:92:ae:1c:c8:98: b6:4d:61:f3:f1:41:8f:85:10:d7:93:9e:a0:7b:10: 22:2a:0b:5d:d4:e9:2c:99:21:d4:11:fc:fd:db:dc: 15:7e:0e:1f:e6:58:5f:c2:62:d0:08:6b:4a:b9:d0: 31:ad:53:c4:42:f2:0d:43:98:98:3f:9f:9b:ac:26: ad:b5:b3:7c:9a:c1:12:f9:8e:83:21:55:8b:2d:2f: 4e:e5:f6:34:1e:37:a4:d7:d4:a9:40:a8:30:a5:3d: 52:95:61:76:f3:b3:25:74:f3:e6:f9:b2:4a:e0:25: 79:46:82:90:f3:e5:45:31:57:f2:6f:18:09:11:1b: 77:78:dc:1f:f5:71:8a:f2:e2:10:88:05:66:70:3f: 5e:5b:4e:1c:55:72:c3:a0:d4:74:3d:4d:f9:80:0d: e4:8f:28:a5:2d:df:20:eb:86:c0:27:86:f9:04:6a: 0a:52:62:43:35:d9:50:f4:8a:08:48:5c:04:d1:20: 1f:be:98:57:cd:a9:3c:2d:f9:6a:e3:d8:61:3d:54: 7c:d8:2b:f9:45:db:16:e1:14:a8:55:47:f8:99:5f: 7d:ce:62:28:38:2a:50:4b:64:29:8e:02:1c:c7:86: e8:b8:c6:d9:ba:7f:60:85:3e:85:3e:f1:23:fd:76: 9e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E3:5D:84:83:08:F0:E1:F2:4C:6D:CB:41:57:00:E5:70:97:F1:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6d2efe20-37c5-3aa6-b61b-189ea04df997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:aa:3f:3f:a7:b8:bc:88:59:20:30:71:b6:e8:a9:5d:57:39: d9:06:f5:46:97:dc:dc:6f:9d:fd:05:a4:7a:30:29:ca:90:e8: 2a:3b:e4:be:02:1d:d5:7a:b6:44:ad:36:60:82:e7:36:65:cc: dc:2b:a1:5f:a1:e5:b5:63:20:76:7b:26:eb:cd:56:db:ef:26: 6b:3c:7a:f1:5c:b9:57:46:b4:68:4c:9d:ba:80:e7:e1:75:f3: 61:a1:ca:c6:7f:7e:0b:a3:56:24:e9:7d:c2:d9:e6:e4:ff:fb: 4f:14:47:8f:01:b1:96:02:41:8b:14:35:6f:95:ee:48:f9:ec: 6d:f3:24:9a:57:c4:0e:42:db:96:74:0d:81:f5:21:2f:4f:ee: c6:cc:11:60:72:dc:53:fa:94:be:58:4e:72:64:7d:eb:fc:40: f1:5f:94:3a:26:59:9a:0f:a2:14:b7:27:eb:8e:3f:53:99:1a: 2b:ba:bc:44:24:2c:50:ed:a9:d5:73:d2:57:49:21:49:30:6d: 1d:3e:c4:39:11:09:2a:cb:42:f2:08:0a:79:36:ec:96:d3:52: 01:2b:32:38:ca:1e:06:21:d7:1a:7d:e6:32:f6:ab:6b:7f:89: c2:38:0b:f3:d3:96:6d:16:8c:71:f1:df:66:8c:f3:be:2e:66: 58:35:bd:7a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEe2lsfIFpfNk3f3usAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTAzMDEzMDA0MFoXDTI1MDEyODE0MDA0MFowLzEtMCsGA1UEAxMk NmYwNGQ2NGUtOWMyMS00YzM0LWIzMjYtZjhkZjI4Zjc5OGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDJ5IbJQwQTLkq4cyJi2TWHz8UGPhRDXk56g exAiKgtd1OksmSHUEfz929wVfg4f5lhfwmLQCGtKudAxrVPEQvINQ5iYP5+brCat tbN8msES+Y6DIVWLLS9O5fY0Hjek19SpQKgwpT1SlWF287MldPPm+bJK4CV5RoKQ 8+VFMVfybxgJERt3eNwf9XGK8uIQiAVmcD9eW04cVXLDoNR0PU35gA3kjyilLd8g 64bAJ4b5BGoKUmJDNdlQ9IoISFwE0SAfvphXzak8Lflq49hhPVR82Cv5RdsW4RSo VUf4mV99zmIoOCpQS2QpjgIcx4bouMbZun9ghT6FPvEj/XaeOwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCDjXYSDCPDh8kxty0FXAOVwl/FPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmQyZWZlMjAtMzdjNS0z YWE2LWI2MWItMTg5ZWEwNGRmOTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAvqj8/p7i8iFkgMHG26KldVznZBvVGl9zcb539 BaR6MCnKkOgqO+S+Ah3VerZErTZgguc2ZczcK6FfoeW1YyB2eybrzVbb7yZrPHrx XLlXRrRoTJ26gOfhdfNhocrGf34Lo1Yk6X3C2ebk//tPFEePAbGWAkGLFDVvle5I +ext8ySaV8QOQtuWdA2B9SEvT+7GzBFgctxT+pS+WE5yZH3r/EDxX5Q6JlmaD6IU tyfrjj9TmRorurxEJCxQ7anVc9JXSSFJMG0dPsQ5EQkqy0LyCAp5NuyW01IBKzI4 yh4GIdcafeYy9qtrf4nCOAvz05ZtFoxx8d9mjPO+LmZYNb16 -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:15 2024 by rpki-client on console-ams.rpki-client.org