$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a95a5475-cc59-301d-87ba-30e0973eef12.roa File: a95a5475-cc59-301d-87ba-30e0973eef12.roa (raw, json) Hash identifier: M0SwrEC9Vyqnct0eJPEbN7dZR0HCJtApBY0MC5Q/pk8= Subject key identifier: BE:70:11:E6:9B:B7:EB:20:88:95:CB:0B:63:87:55:7F:35:8F:03:E3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285846AEC4F3D5ABCFED1C24CBF6F0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a95a5475-cc59-301d-87ba-30e0973eef12.roa Signing time: Sun 28 Jul 2024 01:00:28 +0000 ROA not before: Sun 28 Jul 2024 01:00:28 +0000 ROA not after: Sat 26 Oct 2024 01:00:28 +0000 asID: 0 IP address blocks: 2620:74:e8::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Sep 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:ae:c4:f3:d5:ab:cf:ed:1c:24:cb:f6:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 28 01:00:28 2024 GMT Not After : Oct 26 01:00:28 2024 GMT Subject: CN=2c796e20-0f60-4f36-9680-3c466462a713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d0:39:eb:0c:24:dd:ac:c6:9a:c0:62:1c:28: fc:0b:0c:46:0c:67:33:5d:10:4d:08:1e:f8:56:b7: 1b:8f:77:0d:ae:cd:28:25:21:45:3f:9d:a9:d9:0c: 1e:da:02:f7:43:2f:2b:88:e8:94:61:8a:b4:f3:51: b4:98:54:f9:09:6d:22:3f:19:95:e9:db:9b:8b:01: 98:03:ba:c5:5c:e1:cc:b3:a6:f7:9b:a5:cc:9a:0f: 13:8f:c0:40:cc:3e:d1:32:05:d2:b9:8a:d4:31:53: 82:f6:e4:05:a0:de:53:d6:43:ff:4d:fc:ed:fc:52: 2f:96:5a:fc:82:1c:d6:d7:df:41:29:f8:39:9d:95: 2a:67:6f:c5:7b:e9:07:4d:b4:a5:42:40:c1:21:0c: 33:14:85:c2:2c:af:3e:01:60:67:db:bc:96:53:83: e5:74:5b:3e:69:d9:9f:0b:2d:23:8e:15:7e:09:ad: 0f:b0:95:fe:ba:75:a6:ab:90:6b:c3:f3:c9:5d:53: d5:35:17:15:85:d2:5f:42:ea:7c:d6:14:cb:7f:64: 3d:8a:c1:83:14:ba:3d:0a:d0:a8:f7:2a:56:d8:20: 42:9b:67:ee:af:34:74:40:7f:f6:d1:0e:bf:8a:50: bd:5a:9d:51:11:e1:e8:67:e7:f8:2e:c7:e2:62:5e: f9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:70:11:E6:9B:B7:EB:20:88:95:CB:0B:63:87:55:7F:35:8F:03:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a95a5475-cc59-301d-87ba-30e0973eef12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:e8::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:ee:31:02:c4:9b:64:0d:1c:67:ba:45:9f:db:a7:3a:3a:d8: b9:e5:3b:16:cb:43:76:fb:55:b9:16:5d:9e:70:90:10:b9:4e: 47:44:4a:c4:78:c6:c1:71:01:84:9c:e2:63:a4:46:5d:90:70: 12:8a:bb:17:6e:66:6d:5c:3f:04:f4:73:32:8f:ef:e5:67:f9: 68:e8:63:14:2f:12:f3:8e:18:a8:cd:2b:b9:e9:54:52:44:9b: b2:e6:15:9a:74:69:94:6e:91:3a:6a:b3:05:0f:c7:09:31:07: 67:17:17:f6:e3:04:09:34:85:63:c4:6a:b3:c7:89:d5:75:74: 68:0a:c7:c9:a1:51:bf:40:97:cc:72:5b:ed:41:d5:15:74:42: 50:2b:a4:d1:b6:af:6f:de:01:69:30:87:c6:c4:7b:18:9f:a8: 78:44:3f:04:53:79:96:33:4f:12:32:8d:cd:0c:16:c6:b3:13: 79:38:51:1b:43:b5:b1:aa:7d:16:a3:e5:d6:be:ad:72:76:17: 5e:a7:52:aa:84:22:34:01:38:b5:9f:91:9f:be:01:ac:41:94: c9:0a:7e:79:42:18:e5:20:ba:fd:79:be:ee:3f:2b:da:00:c0: 7f:de:87:b4:3d:28:d1:ce:81:d4:63:52:4a:bd:68:8c:fd:a5: 2b:d0:e6:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEauxPPVq8/tHCTL9vAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDcyODAxMDAyOFoXDTI0MTAyNjAxMDAyOFowLzEtMCsGA1UEAxMk MmM3OTZlMjAtMGY2MC00ZjM2LTk2ODAtM2M0NjY0NjJhNzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNA56wwk3azGmsBiHCj8CwxGDGczXRBNCB74 Vrcbj3cNrs0oJSFFP52p2Qwe2gL3Qy8riOiUYYq081G0mFT5CW0iPxmV6dubiwGY A7rFXOHMs6b3m6XMmg8Tj8BAzD7RMgXSuYrUMVOC9uQFoN5T1kP/Tfzt/FIvllr8 ghzW199BKfg5nZUqZ2/Fe+kHTbSlQkDBIQwzFIXCLK8+AWBn27yWU4PldFs+admf Cy0jjhV+Ca0PsJX+unWmq5Brw/PJXVPVNRcVhdJfQup81hTLf2Q9isGDFLo9CtCo 9ypW2CBCm2furzR0QH/20Q6/ilC9Wp1REeHoZ+f4LsfiYl75eQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL5wEeabt+sgiJXLC2OHVX81jwPjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTk1YTU0NzUtY2M1OS0z MDFkLTg3YmEtMzBlMDk3M2VlZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJiAAdADo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAvuMQLEm2QNHGe6RZ/bpzo62LnlOxbLQ3b7VbkWXZ5wkBC5TkdE SsR4xsFxAYSc4mOkRl2QcBKKuxduZm1cPwT0czKP7+Vn+WjoYxQvEvOOGKjNK7np VFJEm7LmFZp0aZRukTpqswUPxwkxB2cXF/bjBAk0hWPEarPHidV1dGgKx8mhUb9A l8xyW+1B1RV0QlArpNG2r2/eAWkwh8bEexifqHhEPwRTeZYzTxIyjc0MFsazE3k4 URtDtbGqfRaj5da+rXJ2F16nUqqEIjQBOLWfkZ++AaxBlMkKfnlCGOUguv15vu4/ K9oAwH/eh7Q9KNHOgdRjUkq9aIz9pSvQ5ic= -----END CERTIFICATE-----Generated at Fri Sep 20 20:32:43 2024 by rpki-client on console-fra.rpki-client.org