$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97b47bdf-5922-364b-86a9-95d04e55d2d4.roa File: 97b47bdf-5922-364b-86a9-95d04e55d2d4.roa (raw, json) Hash identifier: lDmfHxrdeKJlNQ4W05j9RuDUzsDomJ7GVjqn1/KygGU= Subject key identifier: F9:1A:31:65:A8:83:29:83:16:73:3A:E3:3F:8B:4D:89:A3:66:0F:C9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847B696CCB362EF62B9C2D1DC40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97b47bdf-5922-364b-86a9-95d04e55d2d4.roa Signing time: Wed 30 Oct 2024 13:00:40 +0000 ROA not before: Wed 30 Oct 2024 13:00:40 +0000 ROA not after: Tue 28 Jan 2025 14:00:40 +0000 asID: 397203 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b6:96:cc:b3:62:ef:62:b9:c2:d1:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 30 13:00:40 2024 GMT Not After : Jan 28 14:00:40 2025 GMT Subject: CN=40e95e76-6815-40f2-9505-a22ddc8912f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:91:c4:e3:a9:16:c5:e6:76:31:2c:4f:8f:d1: a9:7e:e7:db:82:39:2c:ba:58:be:ab:bd:9d:0c:33: 10:fe:8b:e4:4c:83:0b:3b:16:81:35:1b:6e:97:9e: de:d1:e9:42:73:82:18:df:eb:51:21:5f:c0:b6:3a: 8b:4c:f7:fe:e3:c6:bd:f9:d0:47:d2:4d:3f:31:fc: 3e:98:1d:ee:43:4f:c5:8f:7d:2f:c0:29:02:29:7d: a9:94:2d:d3:83:0b:6c:6f:d0:1f:ea:00:86:ee:4b: d5:8b:40:57:3b:f8:24:0f:f0:8f:0e:b9:86:c2:74: 9f:eb:17:6b:15:26:2d:28:0f:31:36:74:fc:5f:75: 39:5d:27:dd:ce:a0:90:d9:0a:10:80:0c:9a:8e:57: 6b:bd:8e:30:6d:3e:cb:08:fa:7f:24:0f:b3:11:2a: c5:7e:7e:36:eb:f6:2f:87:02:a6:a1:11:1c:3a:0a: bd:3d:c1:c4:7e:91:c2:d8:95:10:bd:8b:70:d8:b1: 5d:c7:73:0f:e3:de:50:c9:75:dc:62:b1:54:41:bd: 6f:50:c5:c6:a6:05:d7:ec:20:0e:e9:08:ca:52:54: 0c:61:79:f4:b8:3c:7b:41:00:09:5b:98:09:ff:b5: a4:f7:c3:6e:00:c2:4c:c3:80:4a:71:d8:b8:3d:03: ee:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1A:31:65:A8:83:29:83:16:73:3A:E3:3F:8B:4D:89:A3:66:0F:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97b47bdf-5922-364b-86a9-95d04e55d2d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:91:3e:1c:b2:fc:a4:95:91:eb:17:3b:23:f3:cd:b6:11:3e: 26:5f:af:93:6b:aa:06:18:9c:1c:29:60:a6:55:16:66:a9:ca: 05:6a:88:44:bb:1d:96:a3:0c:24:a4:22:4c:c7:50:2f:25:6a: 3f:a0:91:aa:28:5e:70:d2:aa:26:a0:04:d7:54:0d:5c:97:2b: c9:14:de:32:cc:20:7a:f7:bd:24:a6:29:84:87:91:2d:6d:41: b6:c6:37:b4:67:10:27:3c:c2:97:c6:c6:95:8c:93:87:71:1c: b9:cc:4a:ca:35:3a:4a:eb:54:df:e5:17:54:b6:1a:69:41:86: 22:50:44:8d:0e:ea:ee:9f:6f:49:23:8a:1b:df:56:fe:3a:0c: 0b:bb:13:e3:ed:e0:16:9a:14:4d:7c:60:71:6b:49:b0:40:91: ea:1c:a2:bf:e8:d2:01:1d:18:21:dd:75:c3:2d:35:16:4e:4a: f5:a9:2c:8c:b4:41:e8:36:20:e6:c0:9a:28:c3:44:49:a4:d8: df:a9:f5:63:df:08:2e:ec:7b:fe:de:d5:1a:cd:75:38:1f:b2: 8f:c5:6b:28:26:59:83:11:54:76:bd:ef:2d:59:60:c9:e8:d3: a9:9d:fb:7a:c6:e6:75:7c:07:0c:39:1b:52:c8:c4:db:a6:7b: fd:bf:11:2d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEe2lsyzYu9iucLR3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTAzMDEzMDA0MFoXDTI1MDEyODE0MDA0MFowLzEtMCsGA1UEAxMk NDBlOTVlNzYtNjgxNS00MGYyLTk1MDUtYTIyZGRjODkxMmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpHE46kWxeZ2MSxPj9Gpfufbgjksuli+q72d DDMQ/ovkTIMLOxaBNRtul57e0elCc4IY3+tRIV/AtjqLTPf+48a9+dBH0k0/Mfw+ mB3uQ0/Fj30vwCkCKX2plC3Tgwtsb9Af6gCG7kvVi0BXO/gkD/CPDrmGwnSf6xdr FSYtKA8xNnT8X3U5XSfdzqCQ2QoQgAyajldrvY4wbT7LCPp/JA+zESrFfn426/Yv hwKmoREcOgq9PcHEfpHC2JUQvYtw2LFdx3MP495QyXXcYrFUQb1vUMXGpgXX7CAO 6QjKUlQMYXn0uDx7QQAJW5gJ/7Wk98NuAMJMw4BKcdi4PQPuuQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPkaMWWogymDFnM64z+LTYmjZg/JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTdiNDdiZGYtNTkyMi0z NjRiLTg2YTktOTVkMDRlNTVkMmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAfkT4csvyklZHrFzsj8822ET4mX6+Ta6oGGJwc KWCmVRZmqcoFaohEux2WowwkpCJMx1AvJWo/oJGqKF5w0qomoATXVA1clyvJFN4y zCB6970kpimEh5EtbUG2xje0ZxAnPMKXxsaVjJOHcRy5zErKNTpK61Tf5RdUthpp QYYiUESNDurun29JI4ob31b+OgwLuxPj7eAWmhRNfGBxa0mwQJHqHKK/6NIBHRgh 3XXDLTUWTkr1qSyMtEHoNiDmwJoow0RJpNjfqfVj3wgu7Hv+3tUazXU4H7KPxWso JlmDEVR2ve8tWWDJ6NOpnft6xuZ1fAcMORtSyMTbpnv9vxEt -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:19 2024 by rpki-client on console-ams.rpki-client.org