$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/924a3ec1-874c-311e-9203-35d1f1b5b990.roa File: 924a3ec1-874c-311e-9203-35d1f1b5b990.roa (raw, json) Hash identifier: jIklCE5sOwXeiiOsYCDNYmb54izeudxt3zI2wkWiXNU= Subject key identifier: DE:8D:C6:E4:08:FD:74:71:C7:59:9D:5A:98:2A:B8:A5:5C:F7:34:AD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858477BF6727CD33D313A1DCF5BA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/924a3ec1-874c-311e-9203-35d1f1b5b990.roa Signing time: Wed 09 Oct 2024 13:00:42 +0000 ROA not before: Wed 09 Oct 2024 13:00:42 +0000 ROA not after: Tue 07 Jan 2025 14:00:42 +0000 asID: 7342 IP address blocks: 2620:74:6f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7b:f6:72:7c:d3:3d:31:3a:1d:cf:5b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 9 13:00:42 2024 GMT Not After : Jan 7 14:00:42 2025 GMT Subject: CN=092de2e0-91ac-4d4b-8ca2-e2f3658e5129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c3:64:f6:0c:ac:54:f2:d9:49:c6:98:14:4d: e6:f0:90:e3:78:ce:e8:22:5a:a0:4e:3d:5b:90:ed: 9e:c1:69:4a:59:19:de:77:41:65:5a:36:eb:49:14: fe:42:45:18:c9:1f:d7:c8:75:15:69:f1:e0:8f:90: 9c:4e:37:51:03:86:74:7a:35:b4:6b:c7:2f:e2:28: 57:de:e5:47:9d:09:af:da:57:3d:b8:e1:b4:c3:92: 32:a3:b9:f7:11:05:cc:81:ad:48:85:91:99:21:d9: 01:e5:8a:1b:44:95:b7:53:96:64:20:99:ca:08:9f: a1:5a:6a:82:c1:f4:ab:46:00:9c:51:1d:02:c0:25: d2:8b:d7:f6:ff:b7:3d:46:e8:26:93:6f:bc:d6:74: e5:ee:23:7c:ce:87:63:df:0e:f7:52:9a:24:b0:25: 9a:9d:f0:8a:4f:27:4c:27:31:37:c4:61:92:0e:ff: 9c:ce:99:d8:db:c9:cd:80:79:d8:3e:f1:27:a4:a9: 94:c4:c6:52:03:2e:16:32:db:16:98:47:71:c5:85: 65:ac:68:22:e4:a4:97:ba:be:d7:e6:f1:57:8d:c0: c7:d5:7b:9a:59:6a:19:6a:63:5c:6b:6a:8a:f0:8b: ea:a3:f8:ac:d7:53:28:f6:bc:8b:dd:00:60:a0:aa: 0b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8D:C6:E4:08:FD:74:71:C7:59:9D:5A:98:2A:B8:A5:5C:F7:34:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/924a3ec1-874c-311e-9203-35d1f1b5b990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:6f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:1c:b3:df:d2:9a:a1:04:57:60:e2:a7:d1:f3:d1:75:e8:40: 1e:51:94:67:e9:89:c6:9d:44:a0:db:5c:99:b8:f2:a2:2f:a6: 3b:c9:c4:e9:bc:8c:0d:fd:85:a5:69:4b:0b:15:5e:ce:9c:e7: 1b:cc:67:d0:d0:0d:00:eb:7e:ee:53:c1:9a:c9:b3:7b:4b:ff: 7b:8f:ba:6c:fc:25:0f:c8:d8:21:8d:ce:37:97:e2:21:2c:12: a4:b2:62:fe:5c:dd:87:25:0c:f8:15:8b:8a:b8:f2:7d:ec:33: f1:b5:a1:2c:e8:f8:73:fe:e2:4e:d8:aa:49:e8:90:55:d4:db: 9c:9f:83:2f:7e:e6:68:39:4c:b2:db:72:75:8a:77:26:da:3f: f0:c1:cf:39:3a:65:67:e1:d0:6d:27:ba:5e:39:16:b3:58:96: 0d:0c:c0:d6:66:fa:b6:99:ac:94:83:0d:f7:b5:30:a6:3f:94: 7a:bc:12:12:d4:36:1f:55:c5:61:d2:2c:9a:be:87:64:17:a8: 69:ec:87:92:cf:a9:72:b3:25:25:df:a9:3a:4f:60:a8:5b:54: e2:38:39:4f:3f:0f:31:a4:1f:dc:86:6a:bc:9f:5c:ab:93:66: f9:ab:0c:5f:13:7d:80:1e:bf:5d:fc:8f:33:82:28:02:87:c7: c3:04:fb:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEd79nJ80z0xOh3PW6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTAwOTEzMDA0MloXDTI1MDEwNzE0MDA0MlowLzEtMCsGA1UEAxMk MDkyZGUyZTAtOTFhYy00ZDRiLThjYTItZTJmMzY1OGU1MTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMNk9gysVPLZScaYFE3m8JDjeM7oIlqgTj1b kO2ewWlKWRned0FlWjbrSRT+QkUYyR/XyHUVafHgj5CcTjdRA4Z0ejW0a8cv4ihX 3uVHnQmv2lc9uOG0w5Iyo7n3EQXMga1IhZGZIdkB5YobRJW3U5ZkIJnKCJ+hWmqC wfSrRgCcUR0CwCXSi9f2/7c9Rugmk2+81nTl7iN8zodj3w73UpoksCWanfCKTydM JzE3xGGSDv+czpnY28nNgHnYPvEnpKmUxMZSAy4WMtsWmEdxxYVlrGgi5KSXur7X 5vFXjcDH1XuaWWoZamNca2qK8Ivqo/is11Mo9ryL3QBgoKoLnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN6NxuQI/XRxx1mdWpgquKVc9zStMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTI0YTNlYzEtODc0Yy0z MTFlLTkyMDMtMzVkMWYxYjViOTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE0cs9/SmqEEV2Dip9Hz0XXoQB5RlGfpicadRKDbXJm48qIvpjvJ xOm8jA39haVpSwsVXs6c5xvMZ9DQDQDrfu5TwZrJs3tL/3uPumz8JQ/I2CGNzjeX 4iEsEqSyYv5c3YclDPgVi4q48n3sM/G1oSzo+HP+4k7YqknokFXU25yfgy9+5mg5 TLLbcnWKdybaP/DBzzk6ZWfh0G0nul45FrNYlg0MwNZm+raZrJSDDfe1MKY/lHq8 EhLUNh9VxWHSLJq+h2QXqGnsh5LPqXKzJSXfqTpPYKhbVOI4OU8/DzGkH9yGaryf XKuTZvmrDF8TfYAev138jzOCKAKHx8ME+9Q= -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:40 2024 by rpki-client on console-fra.rpki-client.org