$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/81d85d25-3d38-3589-a563-5088ae15f34c.roa File: 81d85d25-3d38-3589-a563-5088ae15f34c.roa (raw, json) Hash identifier: uSYSKqgIqYQvcFArKGIgtT/SUjoTZ74wd4rkpe7GLkw= Subject key identifier: 74:52:C3:DC:1E:83:AB:41:E6:B7:80:F9:E1:DB:04:DA:51:EF:75:59 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584726D0742CAC62A530E44F3640 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/81d85d25-3d38-3589-a563-5088ae15f34c.roa Signing time: Mon 09 Sep 2024 01:00:31 +0000 ROA not before: Mon 09 Sep 2024 01:00:31 +0000 ROA not after: Sun 08 Dec 2024 02:00:31 +0000 asID: 20362 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:26:d0:74:2c:ac:62:a5:30:e4:4f:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 9 01:00:31 2024 GMT Not After : Dec 8 02:00:31 2024 GMT Subject: CN=bed8a359-3e21-466b-8710-77755ccd1748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:92:1b:32:3e:98:27:29:8e:70:6d:81:a4:60: 77:f3:69:61:a0:6e:67:5d:79:8d:f1:35:3f:e1:94: 84:ae:89:f9:2a:40:aa:14:df:d1:c3:0d:70:59:5c: 91:29:a7:2c:14:7a:eb:39:23:b0:56:0d:bf:b8:e3: a1:b2:35:c8:51:cd:5b:22:08:cb:56:0e:a6:2c:21: 5f:48:29:37:0e:4b:49:b7:71:0a:4a:85:ac:d2:23: 16:a8:b2:f7:af:03:2d:91:55:c8:9f:17:fe:88:54: e3:46:44:e8:dc:dd:26:08:13:ef:9f:f1:f4:cd:4a: 6b:a0:e1:c4:3b:12:fa:8a:ab:6a:61:98:44:0d:11: 3f:ca:a9:b7:c1:bc:a5:91:e3:a4:10:70:0a:a5:39: b2:61:a1:ca:18:19:e2:3c:f6:d7:95:9a:72:b3:ed: c7:9f:3f:fd:92:e2:31:8b:6c:a9:b4:10:f1:3c:00: a7:21:be:33:24:fa:8b:e8:b2:00:28:c5:c9:52:61: 17:53:de:63:69:ae:b7:bf:61:92:b7:8b:d6:a4:5c: 5f:a7:3f:01:6f:12:51:4d:01:01:67:0f:53:01:74: df:4d:b0:40:fd:3c:d0:b2:b8:ac:0b:be:c5:46:b9: 61:1b:a7:d3:00:b5:25:94:97:96:cf:21:17:92:b8: ff:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:52:C3:DC:1E:83:AB:41:E6:B7:80:F9:E1:DB:04:DA:51:EF:75:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/81d85d25-3d38-3589-a563-5088ae15f34c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:fe:2f:33:e2:18:76:09:79:b1:a8:fe:a3:b3:d8:53:d6:63: 95:2a:4d:b0:0e:4c:88:32:c7:e4:ab:20:5b:cf:0a:59:f9:3c: 79:78:cd:ef:96:09:13:ce:de:c3:3b:07:08:c9:38:cb:77:f5: c0:7f:dc:e2:1f:bb:e4:52:2c:f3:8d:4f:0d:5e:ee:2c:33:0f: 6a:86:d4:43:8a:a9:fa:0f:67:01:62:bc:d1:4f:3f:2b:30:22: c5:ae:9a:ca:00:9d:fc:f6:3a:75:e9:59:22:9c:ff:70:4e:04: d4:45:67:47:cd:9d:a9:f2:7d:c0:ba:4c:85:08:17:89:6f:a7: 0b:44:0c:5f:ff:98:ef:33:ce:9e:c2:2c:d3:87:98:0b:91:57: 14:ce:b8:f8:74:8a:6e:82:33:b5:80:12:68:79:80:36:00:2b: 20:c7:26:69:fa:6f:c6:8c:3e:b1:da:7b:61:e5:c8:ad:10:fb: 7e:07:0c:34:26:ce:9e:e8:3c:76:74:03:02:72:7e:b1:33:d6: ce:55:76:36:a7:db:1d:45:53:2a:6b:97:7c:3a:d4:d2:b3:a9: 13:25:87:22:c9:eb:8a:f3:49:69:8a:0f:8a:08:29:db:7b:57: cb:14:4f:16:31:a9:bf:92:88:a8:5e:4a:bf:0a:7d:9e:15:9c: 56:46:d1:89 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEcm0HQsrGKlMORPNkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkwOTAxMDAzMVoXDTI0MTIwODAyMDAzMVowLzEtMCsGA1UEAxMk YmVkOGEzNTktM2UyMS00NjZiLTg3MTAtNzc3NTVjY2QxNzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5IbMj6YJymOcG2BpGB382lhoG5nXXmN8TU/ 4ZSEron5KkCqFN/Rww1wWVyRKacsFHrrOSOwVg2/uOOhsjXIUc1bIgjLVg6mLCFf SCk3DktJt3EKSoWs0iMWqLL3rwMtkVXInxf+iFTjRkTo3N0mCBPvn/H0zUproOHE OxL6iqtqYZhEDRE/yqm3wbylkeOkEHAKpTmyYaHKGBniPPbXlZpys+3Hnz/9kuIx i2yptBDxPACnIb4zJPqL6LIAKMXJUmEXU95jaa63v2GSt4vWpFxfpz8BbxJRTQEB Zw9TAXTfTbBA/TzQsrisC77FRrlhG6fTALUllJeWzyEXkrj/DQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHRSw9weg6tB5reA+eHbBNpR73VZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODFkODVkMjUtM2QzOC0z NTg5LWE1NjMtNTA4OGFlMTVmMzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA//i8z4hh2CXmxqP6js9hT1mOVKk2wDkyIMsfk qyBbzwpZ+Tx5eM3vlgkTzt7DOwcIyTjLd/XAf9ziH7vkUizzjU8NXu4sMw9qhtRD iqn6D2cBYrzRTz8rMCLFrprKAJ389jp16VkinP9wTgTURWdHzZ2p8n3AukyFCBeJ b6cLRAxf/5jvM86ewizTh5gLkVcUzrj4dIpugjO1gBJoeYA2ACsgxyZp+m/GjD6x 2nth5citEPt+Bww0Js6e6Dx2dAMCcn6xM9bOVXY2p9sdRVMqa5d8OtTSs6kTJYci yeuK80lpig+KCCnbe1fLFE8WMam/koioXkq/Cn2eFZxWRtGJ -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:39 2024 by rpki-client on console-fra.rpki-client.org