$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7b4533f5-6724-3b14-a682-5ee294a59a91.roa File: 7b4533f5-6724-3b14-a682-5ee294a59a91.roa (raw, json) Hash identifier: M3PhuAnJRO1CEEAei2nrDafutMCJq25rpD3cb6fUZSk= Subject key identifier: AD:96:78:34:69:89:34:DA:76:76:19:1D:A8:2B:6E:56:0F:40:12:46 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847B696CD1359C71B39982B8080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7b4533f5-6724-3b14-a682-5ee294a59a91.roa Signing time: Wed 30 Oct 2024 13:00:40 +0000 ROA not before: Wed 30 Oct 2024 13:00:40 +0000 ROA not after: Tue 28 Jan 2025 14:00:40 +0000 asID: 396542 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b6:96:cd:13:59:c7:1b:39:98:2b:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 30 13:00:40 2024 GMT Not After : Jan 28 14:00:40 2025 GMT Subject: CN=2aa3b751-75f8-4216-900f-81f0d82719c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c0:70:55:94:f1:e1:2d:ec:ce:9e:6f:40:dc: 67:e9:3d:16:0c:d5:a7:72:2e:f6:3e:5c:1f:7b:17: 67:aa:a0:40:65:34:04:ea:a7:2c:63:83:af:63:20: 0a:64:ad:c4:fa:58:f9:cb:3c:b5:3f:8e:d6:6d:4e: 96:54:1a:fc:d1:5e:01:9e:9c:3a:92:84:bc:26:05: 69:e5:a1:cf:b8:64:46:92:36:0e:76:d2:98:0d:61: 2c:93:4e:de:f3:2d:07:0c:e8:6b:43:24:74:dd:74: 37:9b:ac:c9:d2:7d:f7:fe:4a:ba:79:59:d4:2b:4f: 75:f1:0c:a4:cc:51:76:c3:82:14:f7:0b:f3:15:75: ed:dc:5f:55:43:14:32:16:74:02:c2:5f:6b:e9:14: 64:c6:cc:a8:50:19:18:98:a4:e5:4c:5e:32:bf:f4: 9a:51:1f:0a:88:2d:fc:d3:15:d8:07:68:a7:bd:8e: f0:1a:57:4e:68:5d:99:fa:12:2b:ca:8c:af:9a:85: ea:44:a9:9a:a6:c9:c7:87:12:b4:7d:44:0a:a6:16: 28:2a:5c:6b:0c:92:1e:f2:62:e1:57:12:9d:2d:85: 04:4b:eb:c8:36:85:4a:78:cd:87:ad:1d:38:06:cf: 11:66:1a:4f:80:fe:4f:03:06:07:b5:59:59:7f:bc: a6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:96:78:34:69:89:34:DA:76:76:19:1D:A8:2B:6E:56:0F:40:12:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7b4533f5-6724-3b14-a682-5ee294a59a91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:d9:5d:1d:dd:cf:80:87:68:41:2a:4e:08:e3:e9:4a:af:7a: 4b:12:99:52:24:c1:90:ab:e8:06:07:37:86:66:b2:6a:3f:6b: 91:7d:42:aa:f9:85:06:5a:1b:a1:24:3d:5c:e2:a8:42:b5:93: fc:fc:d4:1a:29:4d:27:c5:0f:53:40:bd:95:db:de:7d:79:55: 65:b2:6d:44:c5:3f:31:3a:8a:24:69:30:ec:d3:1c:1c:07:ce: 24:9c:04:c1:6a:d4:18:84:24:b4:a7:1f:73:27:6e:36:3b:9c: b7:9f:b6:e6:69:80:65:e2:8e:71:32:1e:16:50:05:cc:ed:50: 6b:b1:45:88:3d:0b:be:d2:c2:f7:be:24:c0:ab:b0:f7:ef:a1: 52:b0:c6:60:0b:7e:56:9f:12:3e:84:a1:99:44:10:66:65:38: ba:89:db:c1:a9:cc:7f:7a:94:5a:b5:74:6b:17:83:f4:dc:0a: ac:53:ca:b1:b7:a4:56:39:00:46:28:6a:7a:45:91:96:02:43: c6:88:34:15:1c:14:fd:11:d4:c2:57:1b:0b:05:fa:bb:e5:81: bc:d4:4e:b8:a6:99:43:22:8f:c9:6d:d1:9e:de:ad:fe:49:2e: dc:d8:b8:eb:4a:93:a4:22:fa:c2:f9:b3:2d:d2:f0:67:55:2c: e3:ca:29:72 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEe2ls0TWccbOZgrgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTAzMDEzMDA0MFoXDTI1MDEyODE0MDA0MFowLzEtMCsGA1UEAxMk MmFhM2I3NTEtNzVmOC00MjE2LTkwMGYtODFmMGQ4MjcxOWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsBwVZTx4S3szp5vQNxn6T0WDNWnci72Plwf exdnqqBAZTQE6qcsY4OvYyAKZK3E+lj5yzy1P47WbU6WVBr80V4Bnpw6koS8JgVp 5aHPuGRGkjYOdtKYDWEsk07e8y0HDOhrQyR03XQ3m6zJ0n33/kq6eVnUK0918Qyk zFF2w4IU9wvzFXXt3F9VQxQyFnQCwl9r6RRkxsyoUBkYmKTlTF4yv/SaUR8KiC38 0xXYB2invY7wGldOaF2Z+hIryoyvmoXqRKmapsnHhxK0fUQKphYoKlxrDJIe8mLh VxKdLYUES+vINoVKeM2HrR04Bs8RZhpPgP5PAwYHtVlZf7ym/wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFK2WeDRpiTTadnYZHagrblYPQBJGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2I0NTMzZjUtNjcyNC0z YjE0LWE2ODItNWVlMjk0YTU5YTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCN2V0d3c+Ah2hBKk4I4+lKr3pLEplSJMGQq+gG BzeGZrJqP2uRfUKq+YUGWhuhJD1c4qhCtZP8/NQaKU0nxQ9TQL2V2959eVVlsm1E xT8xOookaTDs0xwcB84knATBatQYhCS0px9zJ242O5y3n7bmaYBl4o5xMh4WUAXM 7VBrsUWIPQu+0sL3viTAq7D376FSsMZgC35WnxI+hKGZRBBmZTi6idvBqcx/epRa tXRrF4P03AqsU8qxt6RWOQBGKGp6RZGWAkPGiDQVHBT9EdTCVxsLBfq75YG81E64 pplDIo/JbdGe3q3+SS7c2LjrSpOkIvrC+bMt0vBnVSzjyily -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:39 2024 by rpki-client on console-fra.rpki-client.org