$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa71b912-ec1b-36e2-9852-18906b9fa27f.roa File: aa71b912-ec1b-36e2-9852-18906b9fa27f.roa (raw, json) Hash identifier: 69tJlM++2KGxHtpARX1BmEFHBGv/8V7OR7uqLpTZ2Uw= Subject key identifier: 2D:F9:30:ED:F0:10:50:01:51:60:86:5E:42:1F:26:93:ED:06:45:C7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584726D070684A576110DB44DB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa71b912-ec1b-36e2-9852-18906b9fa27f.roa Signing time: Mon 09 Sep 2024 01:00:31 +0000 ROA not before: Mon 09 Sep 2024 01:00:31 +0000 ROA not after: Sun 08 Dec 2024 02:00:31 +0000 asID: 396597 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:26:d0:70:68:4a:57:61:10:db:44:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 9 01:00:31 2024 GMT Not After : Dec 8 02:00:31 2024 GMT Subject: CN=56ee89e9-dca5-45a4-a963-ac0bf2baaa5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:af:2d:97:88:7c:19:a7:9a:12:6f:8d:b3:c4: 6e:67:1e:8c:39:43:68:7f:c2:f9:57:16:9a:51:3f: 19:2d:23:59:6d:42:bc:bf:28:60:1a:2d:07:42:93: 19:f3:10:dd:e0:d2:cc:d3:32:74:0a:c1:c4:32:f4: 66:e7:9b:2f:45:e1:68:eb:38:4a:fa:b2:4f:a6:6e: 35:d5:52:55:08:05:14:e9:dc:5e:62:13:bf:7e:f3: 98:77:67:85:0a:89:13:7a:14:7f:b1:ad:3b:8b:2d: 78:77:b0:46:96:89:fe:18:c5:c3:e3:a0:d8:ce:dc: ca:f6:65:1d:7f:66:b1:a8:2e:c1:2c:c1:9b:2f:dd: 16:98:38:a2:7b:2c:6e:9d:25:09:d6:71:23:fe:4e: 81:97:19:7f:7d:19:3e:10:3b:7b:cc:eb:d7:96:96: 13:11:e4:00:80:72:7a:54:23:85:5b:39:38:c5:33: 56:56:fd:a9:0d:2c:e2:10:5c:38:a8:00:d6:78:1e: 54:44:63:02:96:eb:70:ef:4a:0b:81:75:c7:1b:e0: d0:a8:7b:5c:4c:ec:88:93:78:2b:02:cc:1b:0b:d8: 94:b7:c1:eb:0d:c9:f5:23:36:46:07:0a:ff:cf:45: 92:c0:51:f7:50:17:c6:62:b8:d1:28:87:30:e3:99: 0d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F9:30:ED:F0:10:50:01:51:60:86:5E:42:1F:26:93:ED:06:45:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa71b912-ec1b-36e2-9852-18906b9fa27f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:49:a0:74:4b:14:46:7a:07:c5:12:d8:da:3c:f5:0e:04:04: f4:1d:d9:36:71:c4:b0:1b:1f:6e:b0:2e:76:26:bc:77:97:d2: 6f:6a:f6:79:7a:fc:ec:31:93:30:6e:3a:eb:f1:40:2f:a1:0f: ca:84:0e:47:48:9a:15:e5:0b:70:6c:44:b3:e0:88:8c:51:43: 22:90:29:53:1a:4a:7b:de:6c:64:4b:e9:48:6e:67:35:bb:40: 08:43:8b:51:7a:01:b4:16:47:79:20:38:51:2c:a4:01:1d:05: ab:ae:c3:e7:ee:cd:45:f2:a4:9d:97:f5:69:83:2e:45:2f:37: 26:17:de:5a:ba:39:55:43:bd:67:39:bf:a2:3a:35:9b:6a:59: a5:fd:80:42:9d:7b:10:d6:fb:c8:72:15:86:9c:d2:8c:d0:2f: f2:27:f4:ba:ae:bc:1e:4e:39:6d:e0:f2:c1:a7:49:fd:f6:ba: 2c:30:25:e0:66:d1:0d:c4:c8:74:08:96:c5:52:f7:8c:ba:a7: 09:f5:98:28:6d:4f:48:34:76:ac:7c:78:5d:36:e2:eb:e5:a6: c5:36:e2:75:75:f4:12:93:d6:01:e3:fa:90:63:6c:54:b5:71: 29:b8:64:b6:c0:03:cd:b5:78:fa:db:24:11:9f:4f:54:75:c9: ee:0f:15:83 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEcm0HBoSldhENtE2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkwOTAxMDAzMVoXDTI0MTIwODAyMDAzMVowLzEtMCsGA1UEAxMk NTZlZTg5ZTktZGNhNS00NWE0LWE5NjMtYWMwYmYyYmFhYTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA168tl4h8GaeaEm+Ns8RuZx6MOUNof8L5Vxaa UT8ZLSNZbUK8vyhgGi0HQpMZ8xDd4NLM0zJ0CsHEMvRm55svReFo6zhK+rJPpm41 1VJVCAUU6dxeYhO/fvOYd2eFCokTehR/sa07iy14d7BGlon+GMXD46DYztzK9mUd f2axqC7BLMGbL90WmDiieyxunSUJ1nEj/k6Blxl/fRk+EDt7zOvXlpYTEeQAgHJ6 VCOFWzk4xTNWVv2pDSziEFw4qADWeB5URGMClutw70oLgXXHG+DQqHtcTOyIk3gr AswbC9iUt8HrDcn1IzZGBwr/z0WSwFH3UBfGYrjRKIcw45kNjwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFC35MO3wEFABUWCGXkIfJpPtBkXHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWE3MWI5MTItZWMxYi0z NmUyLTk4NTItMTg5MDZiOWZhMjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAySaB0SxRGegfFEtjaPPUOBAT0Hdk2ccSwGx9u sC52Jrx3l9JvavZ5evzsMZMwbjrr8UAvoQ/KhA5HSJoV5QtwbESz4IiMUUMikClT Gkp73mxkS+lIbmc1u0AIQ4tRegG0Fkd5IDhRLKQBHQWrrsPn7s1F8qSdl/Vpgy5F LzcmF95aujlVQ71nOb+iOjWbalml/YBCnXsQ1vvIchWGnNKM0C/yJ/S6rrweTjlt 4PLBp0n99rosMCXgZtENxMh0CJbFUveMuqcJ9ZgobU9INHasfHhdNuLr5abFNuJ1 dfQSk9YB4/qQY2xUtXEpuGS2wAPNtXj62yQRn09UdcnuDxWD -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:21 2024 by rpki-client on console-ams.rpki-client.org