$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b2013b5-afa7-327a-a1d5-35bad6fdf646.roa File: 9b2013b5-afa7-327a-a1d5-35bad6fdf646.roa (raw, json) Hash identifier: yYeczm5gC9e5fuIooZyMA50X4oQSp2ALS8iZiSihTOs= Subject key identifier: 1F:1B:7B:5B:54:81:36:CC:FD:50:21:FC:5F:EA:56:C4:76:64:92:AA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847B696CD839508F5D665F35980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b2013b5-afa7-327a-a1d5-35bad6fdf646.roa Signing time: Wed 30 Oct 2024 13:00:40 +0000 ROA not before: Wed 30 Oct 2024 13:00:40 +0000 ROA not after: Tue 28 Jan 2025 14:00:40 +0000 asID: 397211 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b6:96:cd:83:95:08:f5:d6:65:f3:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 30 13:00:40 2024 GMT Not After : Jan 28 14:00:40 2025 GMT Subject: CN=b1205434-caec-4f11-a938-bf7e133496eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:83:18:a0:9b:37:12:1b:f1:c7:75:fd:50:ae: 06:58:b5:98:7b:5c:c6:14:a7:6b:04:25:ed:4e:1e: 9e:7a:1b:3f:47:75:d8:da:da:ce:7b:88:b2:0c:0d: 7c:70:17:f1:f1:2e:41:68:e5:85:86:2d:c5:3d:da: 52:5d:52:86:e3:ca:2b:a3:11:ea:e8:2f:ac:4c:23: 74:9a:1a:81:f7:86:2d:79:77:29:c8:5c:a8:f6:cb: 7e:52:8e:83:b4:e4:a3:aa:7d:96:c5:e0:6c:db:b5: 9c:89:ee:a2:59:25:3f:34:ca:01:43:3c:52:11:30: da:02:16:fe:b1:52:a5:55:df:7f:18:3e:72:90:b4: eb:22:55:f6:d1:5c:da:68:3a:0b:bf:a8:12:5a:98: d5:be:dc:8d:7b:74:0e:20:98:41:2d:43:aa:ca:53: 50:b5:55:49:de:eb:b6:6b:68:8c:bd:98:9d:7d:1f: 2f:fe:76:6f:fd:c6:77:c8:8e:7b:6c:f5:3b:13:f6: 6f:62:80:7f:c4:33:87:c1:02:f6:a7:5f:53:00:cf: bc:b8:af:56:af:00:f3:41:c5:cb:94:92:e8:c7:23: 24:70:e5:1a:2a:86:4f:4d:30:c7:0c:cf:b5:6c:1f: 48:c2:cd:b4:6e:0c:d3:fa:3d:ad:9e:de:5e:4d:c6: a7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1B:7B:5B:54:81:36:CC:FD:50:21:FC:5F:EA:56:C4:76:64:92:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b2013b5-afa7-327a-a1d5-35bad6fdf646.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:e4:f1:21:b0:63:3b:38:89:0d:33:d1:38:fd:c5:c9:97:2a: 95:ca:77:d5:75:1e:29:62:91:1a:c1:d3:dd:7c:5d:93:68:b4: 5c:b3:33:88:40:1a:57:1a:c5:49:fc:7a:1d:f2:50:7c:be:91: da:5c:71:f0:3c:4e:21:78:e9:18:ed:f3:10:9d:a7:a0:20:dd: fa:fa:8e:17:73:2c:a2:d9:4b:0e:c1:1c:a7:60:99:74:40:50: 35:16:ad:fd:84:8c:31:73:ad:98:c9:04:b9:f8:34:e0:82:0d: a4:bf:37:93:ce:76:01:41:67:de:1b:6b:57:86:9b:8e:f4:7e: 86:82:a3:4f:ae:74:f0:11:12:53:a2:8e:09:38:ed:7f:32:a4: 77:c2:1f:24:ab:4c:4e:52:04:bc:27:83:1f:79:0c:58:8b:f7: d7:87:f0:61:61:bb:80:ba:6d:0b:ba:d7:fb:1f:90:67:f9:c5: be:a1:42:91:7a:74:fb:b3:50:2c:18:59:a2:7c:30:50:69:b0: c6:d7:d6:4f:a8:4f:3e:1f:d0:be:c5:85:ef:00:e4:76:82:c9: 82:e5:0e:f4:3d:ae:d5:33:06:53:39:ad:61:33:d1:52:85:59: 12:24:f9:b4:3b:00:d0:7e:89:92:52:3e:86:f7:b8:58:85:aa: 20:e2:12:20 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEe2ls2DlQj11mXzWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTAzMDEzMDA0MFoXDTI1MDEyODE0MDA0MFowLzEtMCsGA1UEAxMk YjEyMDU0MzQtY2FlYy00ZjExLWE5MzgtYmY3ZTEzMzQ5NmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIMYoJs3Ehvxx3X9UK4GWLWYe1zGFKdrBCXt Th6eehs/R3XY2trOe4iyDA18cBfx8S5BaOWFhi3FPdpSXVKG48oroxHq6C+sTCN0 mhqB94YteXcpyFyo9st+Uo6DtOSjqn2WxeBs27Wcie6iWSU/NMoBQzxSETDaAhb+ sVKlVd9/GD5ykLTrIlX20VzaaDoLv6gSWpjVvtyNe3QOIJhBLUOqylNQtVVJ3uu2 a2iMvZidfR8v/nZv/cZ3yI57bPU7E/ZvYoB/xDOHwQL2p19TAM+8uK9WrwDzQcXL lJLoxyMkcOUaKoZPTTDHDM+1bB9Iws20bgzT+j2tnt5eTcan0wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFB8be1tUgTbM/VAh/F/qVsR2ZJKqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWIyMDEzYjUtYWZhNy0z MjdhLWExZDUtMzViYWQ2ZmRmNjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAh5PEhsGM7OIkNM9E4/cXJlyqVynfVdR4pYpEa wdPdfF2TaLRcszOIQBpXGsVJ/Hod8lB8vpHaXHHwPE4heOkY7fMQnaegIN36+o4X cyyi2UsOwRynYJl0QFA1Fq39hIwxc62YyQS5+DTggg2kvzeTznYBQWfeG2tXhpuO 9H6GgqNPrnTwERJToo4JOO1/MqR3wh8kq0xOUgS8J4MfeQxYi/fXh/BhYbuAum0L utf7H5Bn+cW+oUKRenT7s1AsGFmifDBQabDG19ZPqE8+H9C+xYXvAOR2gsmC5Q70 Pa7VMwZTOa1hM9FShVkSJPm0OwDQfomSUj6G97hYhaog4hIg -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:19 2024 by rpki-client on console-ams.rpki-client.org