$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99e72a70-ee95-37f2-969e-a4df454963e4.roa File: 99e72a70-ee95-37f2-969e-a4df454963e4.roa (raw, json) Hash identifier: hgXToBu4fhefDkhVraH8nTdk3D4Vf5TvNeit58YzaM4= Subject key identifier: A9:65:26:3F:30:D2:B0:6A:70:E1:3A:B8:B0:1F:89:1F:5B:DE:8A:E5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847F1551C14DAB4416269F9DE00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99e72a70-ee95-37f2-969e-a4df454963e4.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 396546 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:1c:14:da:b4:41:62:69:f9:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=e7a3faf4-9c55-416c-a6e4-4a3a7be426a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c1:b7:e6:59:19:0d:05:9b:6d:99:d8:cb:48: 54:56:b0:a8:47:b7:32:76:89:35:14:c4:27:36:1e: 25:ee:7c:e6:e0:88:0c:c0:19:eb:1d:55:c8:b4:81: a9:5d:52:2a:a4:2d:c4:9c:96:85:8c:ed:93:d3:8f: 61:93:ff:bb:22:90:97:10:74:3b:92:82:84:64:a3: 08:91:fb:b7:7d:e4:06:7a:1f:a2:04:75:5e:fd:7a: 1c:15:dd:68:81:5a:a5:21:88:bb:7f:76:2f:8a:64: 56:02:77:5f:a1:1a:84:bf:a1:d4:cd:29:9e:5e:39: 36:0f:c9:4d:11:cf:6c:3b:d5:6f:f9:03:71:98:a1: 11:fc:f9:37:58:c1:d1:b0:26:55:ed:49:ac:5e:0b: b2:fb:c3:00:97:5c:d7:84:8c:0e:6f:50:ce:6e:20: ca:dc:0b:3d:78:b1:62:f4:6b:60:22:6a:ba:db:00: cd:e9:a0:14:b1:55:5c:e2:97:6a:1d:0f:f1:cd:51: fe:a8:1d:39:b4:0d:d1:ac:e9:49:0a:c1:aa:a3:93: f1:ba:d0:46:9d:fe:cc:8c:0f:94:b1:ad:98:df:84: 0c:d0:f2:60:22:c0:7f:81:e4:cb:36:83:68:7e:06: f9:43:b4:06:46:5f:f1:32:d2:dc:c7:4e:5e:0a:c0: d2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:65:26:3F:30:D2:B0:6A:70:E1:3A:B8:B0:1F:89:1F:5B:DE:8A:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99e72a70-ee95-37f2-969e-a4df454963e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:df:e6:d2:18:bb:21:31:d0:06:40:6e:34:f4:b8:d1:98:0e: 32:0f:51:c9:8e:ea:79:f3:72:71:c5:3c:a7:35:ae:49:30:93: c6:fa:5a:25:c5:81:ca:0f:4f:46:6d:f8:6e:84:25:49:2d:03: 4b:7d:90:02:dd:3a:25:ad:b4:d1:b3:c2:ef:9a:b1:52:a2:52: 46:66:b1:c6:bb:c1:b7:3f:d1:c4:9d:3f:00:57:89:d9:6b:05: 2f:dd:1a:66:ee:a1:04:9d:73:f1:72:2a:12:c5:6e:3b:b8:67: ec:52:4e:54:a6:5a:ac:bc:36:f4:51:e8:6d:5d:ab:db:6e:0e: 13:f3:45:07:2b:77:15:ce:4f:84:cb:8f:e6:4e:78:ef:1c:96: 2b:99:ca:e3:24:5d:4c:d1:29:70:dd:95:bf:3f:3c:d0:8f:79: 74:fc:4b:cf:f1:b2:04:a9:8b:a9:32:07:e9:a9:8d:df:22:e5: 94:29:f6:88:a4:6f:cf:98:b7:d9:9e:35:41:c1:4b:ae:0f:a5: 80:71:4c:3a:2c:2c:4a:8c:05:8d:da:df:d2:cb:a6:a2:2e:98: 22:69:94:54:37:27:e7:2d:bb:74:d2:97:7f:3e:8c:c5:8b:c6: 37:62:d7:ed:94:8b:62:36:e7:c7:cd:39:32:82:0c:9f:79:ba: be:37:bf:99 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfxVRwU2rRBYmn53gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ZTdhM2ZhZjQtOWM1NS00MTZjLWE2ZTQtNGEzYTdiZTQyNmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsG35lkZDQWbbZnYy0hUVrCoR7cydok1FMQn Nh4l7nzm4IgMwBnrHVXItIGpXVIqpC3EnJaFjO2T049hk/+7IpCXEHQ7koKEZKMI kfu3feQGeh+iBHVe/XocFd1ogVqlIYi7f3YvimRWAndfoRqEv6HUzSmeXjk2D8lN Ec9sO9Vv+QNxmKER/Pk3WMHRsCZV7UmsXguy+8MAl1zXhIwOb1DObiDK3As9eLFi 9GtgImq62wDN6aAUsVVc4pdqHQ/xzVH+qB05tA3RrOlJCsGqo5PxutBGnf7MjA+U sa2Y34QM0PJgIsB/geTLNoNofgb5Q7QGRl/xMtLcx05eCsDSvQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKllJj8w0rBqcOE6uLAfiR9b3orlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTllNzJhNzAtZWU5NS0z N2YyLTk2OWUtYTRkZjQ1NDk2M2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA/3+bSGLshMdAGQG409LjRmA4yD1HJjup583Jx xTynNa5JMJPG+lolxYHKD09GbfhuhCVJLQNLfZAC3TolrbTRs8LvmrFSolJGZrHG u8G3P9HEnT8AV4nZawUv3Rpm7qEEnXPxcioSxW47uGfsUk5UplqsvDb0UehtXavb bg4T80UHK3cVzk+Ey4/mTnjvHJYrmcrjJF1M0Slw3ZW/PzzQj3l0/EvP8bIEqYup MgfpqY3fIuWUKfaIpG/PmLfZnjVBwUuuD6WAcUw6LCxKjAWN2t/Sy6aiLpgiaZRU NyfnLbt00pd/PozFi8Y3YtftlItiNufHzTkyggyfebq+N7+Z -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:41 2024 by rpki-client on console-fra.rpki-client.org