$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0561ed3-1465-39a5-9ab2-c60526f02d5a.roa File: a0561ed3-1465-39a5-9ab2-c60526f02d5a.roa (raw, json) Hash identifier: trMuE6DxpijWIHLRSkHsgvD9BWX9B/gpKpVfAe38YBA= Subject key identifier: F9:E9:20:E4:59:91:8A:AC:F5:5C:8A:72:0A:99:9F:42:3C:71:D5:D6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858478E1BCAC1ACB4B7D98BF3D680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0561ed3-1465-39a5-9ab2-c60526f02d5a.roa Signing time: Wed 16 Oct 2024 01:00:31 +0000 ROA not before: Wed 16 Oct 2024 01:00:31 +0000 ROA not after: Tue 14 Jan 2025 02:00:31 +0000 asID: 0 IP address blocks: 2620:74:98::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:1b:ca:c1:ac:b4:b7:d9:8b:f3:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 16 01:00:31 2024 GMT Not After : Jan 14 02:00:31 2025 GMT Subject: CN=fddbf77f-6e23-4c2b-abcf-30db59761060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a5:87:50:42:71:01:3f:5c:24:6b:78:07:f1: f9:29:77:55:b6:37:18:7c:f1:0a:83:bd:47:4f:22: 33:5d:9a:ae:c2:13:ce:b9:c4:82:80:d0:ce:b2:fd: bb:f3:bf:17:d7:fe:23:71:f3:3b:09:06:79:10:d8: 74:aa:4a:e4:f6:49:2c:7c:9f:80:db:97:88:35:1b: d6:64:08:32:b7:30:4c:95:5e:13:84:b1:fc:00:b5: d0:01:1a:c8:9f:f9:aa:12:a5:45:7f:12:82:72:b9: 3f:ea:60:58:ee:3c:86:62:4e:4c:f7:f6:8a:51:70: 34:fd:2a:83:d6:2c:21:4d:e6:78:76:7b:61:de:58: 11:0d:70:7f:29:75:07:e4:e5:72:bf:e1:d5:ad:2e: 96:83:5d:99:b0:38:49:7d:d0:50:b5:4a:dc:35:49: 47:79:43:02:63:66:52:33:ea:a7:80:a9:94:4b:0d: eb:c2:70:57:28:ba:a8:b5:c4:37:41:00:b3:53:8f: 5c:1c:8d:fd:b9:b3:36:b2:1a:5e:d0:93:cb:3f:27: 9f:af:e5:f8:27:fb:27:c3:1a:a3:51:f1:5d:d2:0e: e9:3b:36:ff:bc:4c:41:74:3e:96:d4:79:71:e2:8f: 5e:a7:0b:78:8b:1a:24:93:23:11:f8:9a:b5:b5:08: 7f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E9:20:E4:59:91:8A:AC:F5:5C:8A:72:0A:99:9F:42:3C:71:D5:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0561ed3-1465-39a5-9ab2-c60526f02d5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:98::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:91:b5:d9:ec:a6:2d:5a:55:4d:ab:f0:84:f9:01:98:65:42: af:48:09:6b:23:18:18:3e:78:86:1a:bf:95:9f:fb:5e:0d:28: 92:ab:24:fd:f5:a1:a2:d8:3c:9d:3b:44:d3:e8:00:6d:ec:95: de:78:2c:37:0c:b9:ec:78:4a:4d:a2:f9:73:dc:97:69:d5:49: 6c:db:76:cf:76:9b:ba:8a:3f:ab:93:33:59:4b:ad:b8:8e:9a: 1a:7e:32:31:c6:11:0b:1d:f6:82:87:4b:34:8b:2a:4b:86:dd: 58:0a:33:6b:de:6e:bf:bd:2c:3b:db:68:0d:4e:85:bc:1b:eb: ad:8d:96:d3:17:15:a1:d0:2e:53:8d:77:f2:ec:cc:9e:d3:c6: 75:ca:da:04:71:5e:57:32:91:1f:0e:9e:22:cd:94:aa:19:71: ed:29:86:de:31:d1:d4:eb:7c:25:90:41:3e:8c:32:e3:1a:11: 1c:67:c9:d6:83:77:e6:cb:be:b2:ff:c8:07:2b:98:07:6a:4e: 06:9b:c7:22:21:7f:19:a6:05:d3:7d:db:8c:d4:33:ba:67:b1: cf:f8:28:1f:7a:79:17:67:0b:48:e0:f2:c8:10:3e:2f:67:2e: cc:09:fb:3f:38:1f:bf:8a:7d:14:2f:df:99:a9:58:f7:96:88: a3:21:7f:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeOG8rBrLS32Yvz1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk ZmRkYmY3N2YtNmUyMy00YzJiLWFiY2YtMzBkYjU5NzYxMDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6WHUEJxAT9cJGt4B/H5KXdVtjcYfPEKg71H TyIzXZquwhPOucSCgNDOsv27878X1/4jcfM7CQZ5ENh0qkrk9kksfJ+A25eINRvW ZAgytzBMlV4ThLH8ALXQARrIn/mqEqVFfxKCcrk/6mBY7jyGYk5M9/aKUXA0/SqD 1iwhTeZ4dnth3lgRDXB/KXUH5OVyv+HVrS6Wg12ZsDhJfdBQtUrcNUlHeUMCY2ZS M+qngKmUSw3rwnBXKLqotcQ3QQCzU49cHI39ubM2shpe0JPLPyefr+X4J/snwxqj UfFd0g7pOzb/vExBdD6W1Hlx4o9epwt4ixokkyMR+Jq1tQh/NwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPnpIORZkYqs9VyKcgqZn0I8cdXWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTA1NjFlZDMtMTQ2NS0z OWE1LTlhYjItYzYwNTI2ZjAyZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiAAdACY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHSRtdnspi1aVU2r8IT5AZhlQq9ICWsjGBg+eIYav5Wf+14NKJKr JP31oaLYPJ07RNPoAG3sld54LDcMuex4Sk2i+XPcl2nVSWzbds92m7qKP6uTM1lL rbiOmhp+MjHGEQsd9oKHSzSLKkuG3VgKM2vebr+9LDvbaA1Ohbwb662NltMXFaHQ LlONd/LszJ7TxnXK2gRxXlcykR8OniLNlKoZce0pht4x0dTrfCWQQT6MMuMaERxn ydaDd+bLvrL/yAcrmAdqTgabxyIhfxmmBdN924zUM7pnsc/4KB96eRdnC0jg8sgQ Pi9nLswJ+z84H7+KfRQv35mpWPeWiKMhfxE= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:35 2024 by rpki-client on console-fra.rpki-client.org