$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b295b1e9-136a-331f-9518-a3269178352b.roa File: b295b1e9-136a-331f-9518-a3269178352b.roa (raw, json) Hash identifier: 6qbHcUbXkpJa1llqKmRVVH2qZd+kHP8cMTW3dCl6cu4= Subject key identifier: AC:0D:AC:70:5A:53:68:94:9F:CD:D0:13:D0:8A:09:C2:ED:50:45:B5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858477BF67260A6D71A39D7626500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b295b1e9-136a-331f-9518-a3269178352b.roa Signing time: Wed 09 Oct 2024 13:00:42 +0000 ROA not before: Wed 09 Oct 2024 13:00:42 +0000 ROA not after: Tue 07 Jan 2025 14:00:42 +0000 asID: 7342 IP address blocks: 2620:74:55::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7b:f6:72:60:a6:d7:1a:39:d7:62:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 9 13:00:42 2024 GMT Not After : Jan 7 14:00:42 2025 GMT Subject: CN=71cf0582-3f64-49f4-8305-cb986270c59a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:46:31:94:eb:88:90:b7:2e:04:b3:61:46:2e: cf:f3:03:92:29:ca:51:1f:ac:5d:bc:f4:54:a5:b5: 27:4b:29:a3:8f:1e:2a:09:71:c8:28:1f:ec:3e:3f: 46:61:ff:f8:b6:e0:a5:77:79:6b:ce:f4:2d:c5:0b: ca:55:2b:72:35:6a:c7:30:e4:ed:32:a1:81:b2:dc: cc:95:21:c6:de:5a:6c:7c:31:f0:4f:8d:57:22:a9: 38:5d:25:8d:8a:73:2c:3a:e4:f6:a7:89:77:79:d0: df:16:7f:85:30:84:8c:bc:0b:bd:92:81:1d:b1:f3: b6:bb:d7:e7:48:c9:97:0b:0d:c9:27:0a:24:ea:3c: 3a:48:52:b0:ce:d8:2a:07:d7:3e:9c:43:d2:3a:c7: 2d:ff:3f:f2:8c:5e:e2:a2:11:70:b8:8e:c8:c6:d4: 49:db:db:9c:43:14:45:85:9a:ca:af:ab:0f:91:bf: 4d:49:9f:03:46:e1:12:63:e2:e7:83:34:ca:93:ed: e7:39:9b:c0:74:23:c7:a8:51:e9:5b:68:13:31:98: 28:0e:04:9f:1d:c6:fe:0e:8a:c2:28:b4:82:1e:33: 20:b7:9c:72:99:e8:31:c0:41:a7:c1:47:d7:4e:1e: d3:f3:bc:29:a2:50:c7:f5:60:68:68:8d:29:29:0f: 96:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:0D:AC:70:5A:53:68:94:9F:CD:D0:13:D0:8A:09:C2:ED:50:45:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b295b1e9-136a-331f-9518-a3269178352b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:55::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:4c:3f:83:a4:9c:f5:b6:80:bd:0b:74:5e:28:b4:55:21:6a: ed:25:fe:e6:ac:7d:50:50:82:35:fb:83:12:7e:2c:10:d2:89: 7a:23:02:0a:ef:21:ac:53:6b:93:53:8e:f8:79:b1:f9:83:80: 42:fb:91:e7:a4:0b:8e:9e:e7:e6:8d:af:10:66:9b:ac:3d:f6: 8a:f2:ae:3d:6d:03:69:3a:8c:8c:67:e2:e8:74:41:68:88:bb: 3b:b8:f9:03:82:bf:d5:19:d2:5c:6e:8b:d4:8c:6e:b2:7b:70: 47:c8:25:c1:40:bd:2e:77:71:be:03:4c:c1:3d:02:c3:63:20: 53:7c:ba:ec:56:19:3e:c7:44:01:76:d6:a9:c9:50:9d:53:66: 4b:a5:30:63:81:f4:5b:3d:21:4e:87:60:3c:8a:b1:32:bd:5c: be:d8:16:0a:c2:36:6c:70:76:61:40:50:f3:f2:34:ae:37:e2: 57:24:56:ca:c7:d0:aa:15:96:f4:1e:54:2e:f1:b2:bf:0c:55: 5f:34:e8:54:47:f7:df:0e:6d:e1:5d:2b:9b:ff:29:04:26:24: f9:b0:2b:3e:c5:ba:54:14:a4:90:10:14:90:c5:33:71:b9:ac: d0:17:c0:b8:bc:0a:a9:91:f0:7d:db:12:a2:dc:9a:56:94:87: 05:4b:8f:6e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEd79nJgptcaOddiZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTAwOTEzMDA0MloXDTI1MDEwNzE0MDA0MlowLzEtMCsGA1UEAxMk NzFjZjA1ODItM2Y2NC00OWY0LTgzMDUtY2I5ODYyNzBjNTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEYxlOuIkLcuBLNhRi7P8wOSKcpRH6xdvPRU pbUnSymjjx4qCXHIKB/sPj9GYf/4tuCld3lrzvQtxQvKVStyNWrHMOTtMqGBstzM lSHG3lpsfDHwT41XIqk4XSWNinMsOuT2p4l3edDfFn+FMISMvAu9koEdsfO2u9fn SMmXCw3JJwok6jw6SFKwztgqB9c+nEPSOsct/z/yjF7iohFwuI7IxtRJ29ucQxRF hZrKr6sPkb9NSZ8DRuESY+LngzTKk+3nOZvAdCPHqFHpW2gTMZgoDgSfHcb+DorC KLSCHjMgt5xymegxwEGnwUfXTh7T87wpolDH9WBoaI0pKQ+WcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKwNrHBaU2iUn83QE9CKCcLtUEW1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjI5NWIxZTktMTM2YS0z MzFmLTk1MTgtYTMyNjkxNzgzNTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABVMP4OknPW2gL0LdF4otFUhau0l/uasfVBQgjX7gxJ+LBDSiXoj AgrvIaxTa5NTjvh5sfmDgEL7keekC46e5+aNrxBmm6w99oryrj1tA2k6jIxn4uh0 QWiIuzu4+QOCv9UZ0lxui9SMbrJ7cEfIJcFAvS53cb4DTME9AsNjIFN8uuxWGT7H RAF21qnJUJ1TZkulMGOB9Fs9IU6HYDyKsTK9XL7YFgrCNmxwdmFAUPPyNK434lck VsrH0KoVlvQeVC7xsr8MVV806FRH998ObeFdK5v/KQQmJPmwKz7FulQUpJAQFJDF M3G5rNAXwLi8CqmR8H3bEqLcmlaUhwVLj24= -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:43 2024 by rpki-client on console-fra.rpki-client.org