$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a95a5475-cc59-301d-87ba-30e0973eef12.roa File: a95a5475-cc59-301d-87ba-30e0973eef12.roa (raw, json) Hash identifier: KF8zx1IW41ThhQAqHAFfOxvmdZWfwDtKWDexdnqXdx0= Subject key identifier: 9D:2C:85:CA:93:BD:E7:92:B0:EC:87:D1:F7:AC:DD:1C:3C:13:8A:E2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858478E1BCA3066C75EAD8AD16C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a95a5475-cc59-301d-87ba-30e0973eef12.roa Signing time: Wed 16 Oct 2024 01:00:31 +0000 ROA not before: Wed 16 Oct 2024 01:00:31 +0000 ROA not after: Tue 14 Jan 2025 02:00:31 +0000 asID: 0 IP address blocks: 2620:74:e8::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:1b:ca:30:66:c7:5e:ad:8a:d1:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 16 01:00:31 2024 GMT Not After : Jan 14 02:00:31 2025 GMT Subject: CN=e5fe08b8-4381-4a53-b299-4fdb1674cdc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ab:cf:e7:09:f0:ff:2a:9c:86:86:60:c0:70: d8:8e:52:3a:34:c0:38:e0:22:98:fc:30:00:0a:c4: a7:30:45:3b:de:57:96:69:21:73:9c:9a:d6:4b:f2: 99:a7:73:13:ce:5e:72:28:24:2d:0c:98:de:51:6f: ca:d2:be:c4:24:90:8c:a4:fd:fd:e6:3c:5c:50:75: d0:32:13:c4:02:ca:f0:f6:b3:05:94:a4:d8:b5:de: f7:96:9f:bb:ff:5d:bf:1a:6d:ad:6a:6a:9f:2b:6c: d0:3b:ed:f8:92:cd:b1:90:dc:fe:27:a3:3e:01:80: 3a:7c:b7:83:b0:47:11:e9:99:b3:6f:c5:71:4b:e4: ec:9f:9b:0f:e3:77:b0:06:f9:9d:d3:0f:be:36:ad: 70:98:07:c1:7d:8c:b3:82:b8:f1:57:14:fc:c9:56: ee:52:87:eb:a1:e9:58:11:a1:b5:0a:00:35:c0:2f: 02:27:c9:dc:a4:d6:e2:0f:5a:54:2e:48:14:b7:18: d7:fb:54:20:1e:d5:65:67:14:2a:44:9b:ec:5c:35: 16:7d:67:f0:40:ab:0c:a8:1e:57:01:8f:1b:b2:89: 57:21:61:05:8c:18:76:fd:6c:a5:90:23:17:95:40: f2:10:20:bd:c8:cc:d2:63:06:c7:62:a0:0f:50:97: dd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2C:85:CA:93:BD:E7:92:B0:EC:87:D1:F7:AC:DD:1C:3C:13:8A:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a95a5475-cc59-301d-87ba-30e0973eef12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:e8::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:f1:ba:db:26:b1:ec:f8:ac:99:99:55:4a:72:23:7e:db:f4: fb:ab:bf:a8:6e:a8:78:3c:31:78:79:56:0d:34:70:05:3b:ad: 66:25:5f:4b:fa:13:ea:9b:0b:da:f2:66:32:19:ef:7f:ef:97: 77:ea:f5:95:9d:07:78:c5:4e:2d:88:51:d6:78:95:8b:89:3e: f1:8c:2e:eb:47:05:d0:45:dd:bf:1c:4a:a1:52:66:e1:db:28: d6:9b:58:75:b9:d3:c2:f2:55:b3:08:f1:20:23:1e:69:90:26: 2e:83:f3:4d:a9:06:fe:62:89:cf:5f:07:c3:5b:f2:d9:48:72: a2:6d:1e:5f:ba:70:fd:eb:85:a4:57:93:83:70:65:d6:8c:4c: 45:19:16:ed:0f:99:14:74:3b:85:70:95:8c:33:e1:61:f0:52: 99:65:9a:e5:a9:97:dc:84:db:68:c2:bc:72:9a:ab:30:1d:63: 90:77:ab:f4:7d:10:d1:b7:e0:32:52:08:cd:5b:e3:ef:1e:14: 82:2f:89:2e:23:02:50:09:44:55:0b:b9:b4:e8:d0:ea:f5:fc: d1:22:ec:ee:fd:76:bf:d9:77:b8:6e:53:cc:b9:d0:29:17:bc: 01:4d:1c:43:52:40:9c:95:f5:4d:31:8e:b0:20:6a:e1:38:31: 9d:67:bf:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeOG8owZsderYrRbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk ZTVmZTA4YjgtNDM4MS00YTUzLWIyOTktNGZkYjE2NzRjZGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6vP5wnw/yqchoZgwHDYjlI6NMA44CKY/DAA CsSnMEU73leWaSFznJrWS/KZp3MTzl5yKCQtDJjeUW/K0r7EJJCMpP395jxcUHXQ MhPEAsrw9rMFlKTYtd73lp+7/12/Gm2tamqfK2zQO+34ks2xkNz+J6M+AYA6fLeD sEcR6Zmzb8VxS+Tsn5sP43ewBvmd0w++Nq1wmAfBfYyzgrjxVxT8yVbuUofroelY EaG1CgA1wC8CJ8ncpNbiD1pULkgUtxjX+1QgHtVlZxQqRJvsXDUWfWfwQKsMqB5X AY8bsolXIWEFjBh2/WylkCMXlUDyECC9yMzSYwbHYqAPUJfdxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ0shcqTveeSsOyH0fes3Rw8E4riMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTk1YTU0NzUtY2M1OS0z MDFkLTg3YmEtMzBlMDk3M2VlZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJiAAdADo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEDxutsmsez4rJmZVUpyI37b9Purv6huqHg8MXh5Vg00cAU7rWYl X0v6E+qbC9ryZjIZ73/vl3fq9ZWdB3jFTi2IUdZ4lYuJPvGMLutHBdBF3b8cSqFS ZuHbKNabWHW508LyVbMI8SAjHmmQJi6D802pBv5iic9fB8Nb8tlIcqJtHl+6cP3r haRXk4NwZdaMTEUZFu0PmRR0O4VwlYwz4WHwUpllmuWpl9yE22jCvHKaqzAdY5B3 q/R9ENG34DJSCM1b4+8eFIIviS4jAlAJRFULubTo0Or1/NEi7O79dr/Zd7huU8y5 0CkXvAFNHENSQJyV9U0xjrAgauE4MZ1nv9g= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:35 2024 by rpki-client on console-fra.rpki-client.org