$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e9d3395-d7f3-384f-9d8f-9206964ffe24.roa File: 8e9d3395-d7f3-384f-9d8f-9206964ffe24.roa (raw, json) Hash identifier: Yz11ByMxEe9S7sNOwHViKY3Xh0WvZsLn7bqVxtO2/Vc= Subject key identifier: 5C:C5:E9:20:06:91:25:7A:18:32:91:6D:5E:55:24:78:B7:C5:A5:A7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847B696C9B084BE0D4A2987DDC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e9d3395-d7f3-384f-9d8f-9206964ffe24.roa Signing time: Wed 30 Oct 2024 13:00:40 +0000 ROA not before: Wed 30 Oct 2024 13:00:40 +0000 ROA not after: Tue 28 Jan 2025 14:00:40 +0000 asID: 396573 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b6:96:c9:b0:84:be:0d:4a:29:87:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 30 13:00:40 2024 GMT Not After : Jan 28 14:00:40 2025 GMT Subject: CN=c4d52e8f-d7df-4fdd-a934-da5dac98e0d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:20:ed:e1:55:77:cc:de:12:75:69:33:e5:d2: 72:5b:76:ca:a8:aa:45:f5:ed:b1:45:1c:38:7e:03: 2e:07:6b:73:86:52:15:5f:68:36:23:14:b0:8d:74: cd:7f:26:0e:3f:d9:33:43:eb:e3:47:91:ca:54:39: 7f:56:51:17:62:bd:e0:40:ae:dd:da:99:80:7b:07: f6:2a:51:b4:c1:c1:5b:f9:f8:81:65:7c:a2:55:5c: d7:a3:0a:bc:87:d9:88:34:ba:2b:dc:aa:91:a8:2e: 52:84:b3:e7:7b:ed:d4:60:be:d5:1b:09:1f:00:98: c1:a1:cd:d6:70:3d:65:a8:98:5a:ac:bc:46:84:32: c2:64:14:f3:d4:5e:be:a0:5d:f1:99:1e:90:fe:60: ba:0e:06:41:a4:0e:59:db:a2:0e:1e:10:e4:50:ce: e6:47:20:25:94:db:0c:db:4f:5a:fc:ca:87:11:d1: 77:ff:86:98:d0:1a:34:1b:5c:18:4c:58:41:bc:97: ed:17:ad:1d:9e:83:4f:a6:62:e2:ca:1a:68:81:a7: e5:67:e6:46:cb:8e:a0:0c:f6:70:98:3e:1d:5b:5e: d5:db:a5:1b:1e:ef:72:42:53:ca:a7:c7:50:0f:14: ba:85:16:19:97:0f:d0:86:fd:57:70:26:eb:ab:3e: d7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C5:E9:20:06:91:25:7A:18:32:91:6D:5E:55:24:78:B7:C5:A5:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e9d3395-d7f3-384f-9d8f-9206964ffe24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:c2:54:70:7a:47:62:76:7e:f0:93:65:50:fa:e9:72:5a:5d: 63:09:cb:1c:8d:2d:9b:18:11:48:22:b3:74:d3:99:69:59:6a: f2:e5:9f:46:1e:6c:18:fc:f3:9d:be:4e:bd:eb:57:83:eb:70: 3c:fb:8c:60:a3:44:d9:0d:4c:95:ba:f1:b4:cc:38:1d:d3:c7: dc:41:f3:f7:51:9d:45:77:b9:f7:c6:c5:02:94:9d:f5:3d:68: 1c:2b:3e:4d:fc:12:fb:9e:72:32:3a:c0:e2:ff:ff:c4:01:11: ce:42:9d:d5:f7:c6:e3:87:c1:bc:29:25:ef:2c:14:2d:6e:ea: 44:af:5e:dd:2f:9f:87:e1:06:60:fc:11:a1:26:bd:96:af:db: 1a:39:90:1f:b8:43:11:3d:13:3b:26:f4:2d:88:bb:e7:5a:16: f3:e7:f0:b1:0b:16:84:79:eb:8f:a3:52:58:34:09:d9:20:cb: 87:cd:50:7b:0a:50:66:7d:d5:bf:cf:61:89:8b:e6:da:a5:aa: 02:f9:e4:44:fd:57:11:e2:a2:47:bb:73:c7:1a:c8:9c:32:76: 91:b4:0f:6f:c3:6f:1c:af:89:64:cb:27:7b:13:e9:0b:45:90: 8c:3f:a7:7a:73:b9:31:a0:07:16:1a:ff:8d:aa:53:47:a2:a7: 13:1f:8c:1d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEe2lsmwhL4NSimH3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTAzMDEzMDA0MFoXDTI1MDEyODE0MDA0MFowLzEtMCsGA1UEAxMk YzRkNTJlOGYtZDdkZi00ZmRkLWE5MzQtZGE1ZGFjOThlMGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiDt4VV3zN4SdWkz5dJyW3bKqKpF9e2xRRw4 fgMuB2tzhlIVX2g2IxSwjXTNfyYOP9kzQ+vjR5HKVDl/VlEXYr3gQK7d2pmAewf2 KlG0wcFb+fiBZXyiVVzXowq8h9mINLor3KqRqC5ShLPne+3UYL7VGwkfAJjBoc3W cD1lqJharLxGhDLCZBTz1F6+oF3xmR6Q/mC6DgZBpA5Z26IOHhDkUM7mRyAllNsM 209a/MqHEdF3/4aY0Bo0G1wYTFhBvJftF60dnoNPpmLiyhpogaflZ+ZGy46gDPZw mD4dW17V26UbHu9yQlPKp8dQDxS6hRYZlw/Qhv1XcCbrqz7XKwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFzF6SAGkSV6GDKRbV5VJHi3xaWnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGU5ZDMzOTUtZDdmMy0z ODRmLTlkOGYtOTIwNjk2NGZmZTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAQwlRwekdidn7wk2VQ+ulyWl1jCcscjS2bGBFI IrN005lpWWry5Z9GHmwY/POdvk6961eD63A8+4xgo0TZDUyVuvG0zDgd08fcQfP3 UZ1Fd7n3xsUClJ31PWgcKz5N/BL7nnIyOsDi///EARHOQp3V98bjh8G8KSXvLBQt bupEr17dL5+H4QZg/BGhJr2Wr9saOZAfuEMRPRM7JvQtiLvnWhbz5/CxCxaEeeuP o1JYNAnZIMuHzVB7ClBmfdW/z2GJi+bapaoC+eRE/VcR4qJHu3PHGsicMnaRtA9v w28cr4lkyyd7E+kLRZCMP6d6c7kxoAcWGv+NqlNHoqcTH4wd -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:18 2024 by rpki-client on console-ams.rpki-client.org