$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3eef609-149f-3bcf-b888-57b9229f7002.roa File: b3eef609-149f-3bcf-b888-57b9229f7002.roa (raw, json) Hash identifier: 860vZVmq9R+YTl0x2ac+VYHBScHkd1RU2HDpXRipdzU= Subject key identifier: 29:0E:E0:21:61:49:F5:6D:3E:59:27:64:0C:D5:38:76:07:A2:CF:F5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858471775C992EBFA55948A357A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3eef609-149f-3bcf-b888-57b9229f7002.roa Signing time: Tue 03 Sep 2024 13:00:42 +0000 ROA not before: Tue 03 Sep 2024 13:00:42 +0000 ROA not after: Mon 02 Dec 2024 14:00:42 +0000 asID: 7342 IP address blocks: 2620:74:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:17:75:c9:92:eb:fa:55:94:8a:35:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 3 13:00:42 2024 GMT Not After : Dec 2 14:00:42 2024 GMT Subject: CN=7eab7472-92d6-4e1a-8842-3c371da4f7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:74:90:cb:59:04:5e:c5:af:12:81:8c:4b:f6: 02:0a:cf:0e:32:d4:d6:ab:57:f9:8d:8a:e9:66:c2: 33:fc:bd:67:79:e3:f4:8f:c1:c5:0e:0f:87:ad:88: fe:cb:6a:ce:25:65:0f:83:63:f3:39:e0:ab:9f:b2: 61:36:ca:ec:45:aa:e4:1c:41:ec:18:cc:aa:e6:91: f7:b3:06:7c:57:fd:ef:62:73:54:cb:26:23:90:0a: 8c:35:7d:84:6c:8e:90:01:b0:d7:2b:fa:21:01:e3: 1e:e8:c1:a5:de:86:b9:40:1c:b6:cc:2a:5e:d3:d1: 78:ea:fd:c5:c8:c5:9a:0a:f4:b9:9f:25:97:d1:c8: 92:e1:b4:c3:03:71:79:e2:a6:fb:00:51:7d:5f:4c: 6a:e4:18:33:03:18:70:9c:31:b8:f5:e8:de:5b:de: 5e:62:63:43:34:1b:25:5d:78:ab:72:90:a3:03:2f: 53:f7:6d:ea:bd:ad:3e:23:03:19:ff:82:0b:c1:02: 15:d9:68:4a:0f:95:79:33:15:bc:46:0f:ab:c3:95: f5:61:cc:7a:23:99:cc:2d:1e:c1:1f:6a:0a:af:45: a0:98:f4:1c:72:0d:71:8a:db:a0:9d:12:d7:f0:9c: 31:47:f4:db:fc:84:03:f9:7c:48:3c:52:e2:10:78: d5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0E:E0:21:61:49:F5:6D:3E:59:27:64:0C:D5:38:76:07:A2:CF:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3eef609-149f-3bcf-b888-57b9229f7002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:83:f9:8c:d8:ff:68:57:4b:fc:8b:1f:96:9f:5b:b9:d9:69: f8:c1:d2:8f:fc:9c:03:e9:ad:2c:61:fc:a9:40:9a:c1:d9:6d: ff:b9:c1:33:09:a3:ff:39:83:ff:9b:bf:9b:ef:f1:d5:b7:8a: fe:1f:5a:57:b3:28:b0:5a:d8:e1:6b:45:11:c0:0b:41:3f:c6: 85:4d:bc:12:75:5d:1e:99:8b:7d:a9:81:cc:54:b2:64:40:96: 1f:ce:cd:7a:6e:39:57:d5:63:44:d4:56:fe:bd:ee:a0:c3:16: 55:b5:0b:17:d6:ee:5d:eb:3d:01:7a:96:c8:25:d9:4b:67:75: e5:0f:9e:78:99:9c:b8:8f:5f:5e:c3:92:db:ac:92:f6:cb:48: 51:4b:25:c2:18:60:10:23:e1:ff:37:44:f9:5d:6e:34:25:4e: ef:36:8b:a4:2e:39:d9:e1:58:f2:7a:be:4e:c0:d3:fc:2f:72: 48:24:2b:19:db:27:36:84:f0:7b:ec:1d:1f:c6:00:5c:d3:d9: b2:d0:4c:ab:14:d0:94:b1:64:b4:88:d2:73:5c:4f:2e:93:c2: 18:96:6d:29:70:2d:8a:e0:fb:7f:64:ed:02:16:5c:05:88:2d: bb:13:4d:0d:5e:46:4d:2a:0a:1c:15:8d:28:2e:c3:30:c1:a1: 62:91:22:37 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEcXdcmS6/pVlIo1egAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkwMzEzMDA0MloXDTI0MTIwMjE0MDA0MlowLzEtMCsGA1UEAxMk N2VhYjc0NzItOTJkNi00ZTFhLTg4NDItM2MzNzFkYTRmN2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHSQy1kEXsWvEoGMS/YCCs8OMtTWq1f5jYrp ZsIz/L1neeP0j8HFDg+HrYj+y2rOJWUPg2PzOeCrn7JhNsrsRarkHEHsGMyq5pH3 swZ8V/3vYnNUyyYjkAqMNX2EbI6QAbDXK/ohAeMe6MGl3oa5QBy2zCpe09F46v3F yMWaCvS5nyWX0ciS4bTDA3F54qb7AFF9X0xq5BgzAxhwnDG49ejeW95eYmNDNBsl XXircpCjAy9T923qva0+IwMZ/4ILwQIV2WhKD5V5MxW8Rg+rw5X1Ycx6I5nMLR7B H2oKr0WgmPQccg1xitugnRLX8JwxR/Tb/IQD+XxIPFLiEHjVwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCkO4CFhSfVtPlknZAzVOHYHos/1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjNlZWY2MDktMTQ5Zi0z YmNmLWI4ODgtNTdiOTIyOWY3MDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACeD+YzY/2hXS/yLH5afW7nZafjB0o/8nAPprSxh/KlAmsHZbf+5 wTMJo/85g/+bv5vv8dW3iv4fWlezKLBa2OFrRRHAC0E/xoVNvBJ1XR6Zi32pgcxU smRAlh/OzXpuOVfVY0TUVv697qDDFlW1CxfW7l3rPQF6lsgl2UtndeUPnniZnLiP X17DktuskvbLSFFLJcIYYBAj4f83RPldbjQlTu82i6QuOdnhWPJ6vk7A0/wvckgk KxnbJzaE8HvsHR/GAFzT2bLQTKsU0JSxZLSI0nNcTy6TwhiWbSlwLYrg+39k7QIW XAWILbsTTQ1eRk0qChwVjSguwzDBoWKRIjc= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:21 2024 by rpki-client on console-ams.rpki-client.org