$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b22367a3-6301-354b-8d0e-abda840dacd8.roa File: b22367a3-6301-354b-8d0e-abda840dacd8.roa (raw, json) Hash identifier: PLHiXTTcUsgExK7n3pVoT2qyXy/yga4Zrx0U/njx3ag= Subject key identifier: 29:DE:07:EB:BB:70:00:94:6C:C3:E2:8B:C7:55:EC:EB:22:97:5A:C1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285845A9BE1492436F8F92B4A51D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b22367a3-6301-354b-8d0e-abda840dacd8.roa Signing time: Thu 25 Apr 2024 13:00:33 +0000 ROA not before: Thu 25 Apr 2024 13:00:33 +0000 ROA not after: Wed 24 Jul 2024 13:00:33 +0000 asID: 7342 IP address blocks: 2620:74:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a9:be:14:92:43:6f:8f:92:b4:a5:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 25 13:00:33 2024 GMT Not After : Jul 24 13:00:33 2024 GMT Subject: CN=6bd54bf4-6f8a-4e01-9dbd-7dc881bd4d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:02:e0:55:25:25:0c:7d:98:aa:e6:45:fa:81: b4:32:35:72:39:90:b9:d1:9e:e6:4a:fe:74:5e:08: 8f:e7:e0:33:04:e2:cb:44:b6:ee:44:59:34:15:57: a9:c1:0f:7a:16:d5:e8:1b:3e:04:8b:a4:e7:fb:a1: 5f:d6:95:b0:57:ed:b1:11:1c:78:a9:75:f9:d9:3b: 9c:55:9c:cf:a3:ff:9a:11:d3:6d:87:32:44:44:81: 00:05:7b:de:81:39:f4:8d:a7:6c:6c:0c:d8:a9:73: 5e:59:5d:0a:fc:1c:62:39:f0:45:f2:86:79:49:50: ed:4e:68:27:af:63:8a:bf:7e:b5:58:16:67:e9:35: a5:ec:78:d5:cb:7f:d4:3a:2d:83:14:5b:25:0c:cb: ce:2a:c9:bb:ed:80:a3:80:96:3e:3b:44:da:d2:d1: 73:46:27:82:a0:2d:ad:b7:e6:cc:7b:a4:2b:72:0e: ad:35:12:95:c2:6b:a5:0e:ea:d2:9d:9a:cf:c5:8b: 3a:7b:3d:0d:36:a3:99:d0:26:05:95:72:1f:41:97: c3:d7:bd:b2:1d:b9:74:5f:a9:7b:91:9b:e8:57:2b: ea:c5:bb:e5:25:0e:ea:c5:fd:eb:6b:a6:96:e7:60: 1b:c4:fa:d3:a9:65:d8:78:a4:56:98:d4:f9:b1:2b: 43:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DE:07:EB:BB:70:00:94:6C:C3:E2:8B:C7:55:EC:EB:22:97:5A:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b22367a3-6301-354b-8d0e-abda840dacd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:23::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:f4:a4:7b:9b:ab:7a:0e:f7:a7:aa:40:8b:1f:e8:07:4d:9e: d1:d6:b4:a9:6d:86:9b:d1:59:58:91:43:9b:6f:9f:e4:e2:fe: d9:5b:ee:c5:44:fd:d7:0c:6d:6c:d7:1a:e1:27:c3:13:8e:b4: 45:10:c4:87:25:b0:6a:bf:5c:41:66:cf:a8:9e:40:ef:44:a0: 31:b6:da:7a:9c:52:10:35:94:2d:6b:49:4b:dc:14:8d:aa:00: 99:1c:e1:43:c7:ee:0c:83:c0:37:98:4a:62:85:6e:d4:b7:a3: 2d:62:69:1f:a5:b1:c7:92:b6:93:83:4b:1d:74:cc:ee:3f:9e: 84:65:d1:00:f4:3d:84:02:75:a8:ae:7b:7e:58:75:0d:b2:90: 6d:21:a0:77:82:b1:59:12:53:08:e2:0d:6a:d3:49:13:a2:d8: 25:40:70:06:e8:db:f5:ce:27:f0:07:6d:b6:76:0c:41:9f:e3: 4a:5b:98:96:ab:ba:9e:6a:a9:92:9a:34:11:69:2f:d2:54:10: 44:9c:4d:94:84:c0:cf:e5:a5:a0:37:29:34:0c:10:41:c9:1b: 33:67:81:1c:02:eb:6b:45:83:ad:ff:5a:28:07:22:62:f4:e5: 31:cd:18:4e:2b:fc:45:f8:1c:39:c5:d6:3d:5d:f7:e0:31:59: 90:b1:b3:6e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWpvhSSQ2+PkrSlHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDQyNTEzMDAzM1oXDTI0MDcyNDEzMDAzM1owLzEtMCsGA1UEAxMk NmJkNTRiZjQtNmY4YS00ZTAxLTlkYmQtN2RjODgxYmQ0ZDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggLgVSUlDH2YquZF+oG0MjVyOZC50Z7mSv50 XgiP5+AzBOLLRLbuRFk0FVepwQ96FtXoGz4Ei6Tn+6Ff1pWwV+2xERx4qXX52Tuc VZzPo/+aEdNthzJERIEABXvegTn0jadsbAzYqXNeWV0K/BxiOfBF8oZ5SVDtTmgn r2OKv361WBZn6TWl7HjVy3/UOi2DFFslDMvOKsm77YCjgJY+O0Ta0tFzRieCoC2t t+bMe6Qrcg6tNRKVwmulDurSnZrPxYs6ez0NNqOZ0CYFlXIfQZfD172yHbl0X6l7 kZvoVyvqxbvlJQ7qxf3ra6aW52AbxPrTqWXYeKRWmNT5sStD7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCneB+u7cACUbMPii8dV7Osil1rBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjIyMzY3YTMtNjMwMS0z NTRiLThkMGUtYWJkYTg0MGRhY2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAID0pHubq3oO96eqQIsf6AdNntHWtKlthpvRWViRQ5tvn+Ti/tlb 7sVE/dcMbWzXGuEnwxOOtEUQxIclsGq/XEFmz6ieQO9EoDG22nqcUhA1lC1rSUvc FI2qAJkc4UPH7gyDwDeYSmKFbtS3oy1iaR+lsceStpODSx10zO4/noRl0QD0PYQC daiue35YdQ2ykG0hoHeCsVkSUwjiDWrTSROi2CVAcAbo2/XOJ/AHbbZ2DEGf40pb mJarup5qqZKaNBFpL9JUEEScTZSEwM/lpaA3KTQMEEHJGzNngRwC62tFg63/WigH ImL05THNGE4r/EX4HDnF1j1d9+AxWZCxs24= -----END CERTIFICATE-----Generated at Sun May 12 19:25:56 2024 by rpki-client on console-fra.rpki-client.org