$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3eef609-149f-3bcf-b888-57b9229f7002.roa File: b3eef609-149f-3bcf-b888-57b9229f7002.roa (raw, json) Hash identifier: 8fGfVY8WaCEDC872qBnmM4huYyl4zdmv3LttKfyEqNY= Subject key identifier: ED:34:27:B0:26:84:BA:CF:DA:52:31:A3:D0:CD:37:7E:EB:F9:FE:B8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584558C175EEDCF20341E6F5CF40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3eef609-149f-3bcf-b888-57b9229f7002.roa Signing time: Wed 27 Mar 2024 12:47:01 +0000 ROA not before: Wed 27 Mar 2024 12:47:01 +0000 ROA not after: Tue 25 Jun 2024 12:47:01 +0000 asID: 7342 IP address blocks: 2620:74:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:58:c1:75:ee:dc:f2:03:41:e6:f5:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 27 12:47:01 2024 GMT Not After : Jun 25 12:47:01 2024 GMT Subject: CN=b5b038ab-a151-469f-9cda-bbdd876312a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b5:49:a4:28:34:c2:83:86:ed:09:a0:51:d4: 6d:6b:28:3d:d8:6c:bf:5c:96:10:a8:cf:05:b0:57: 4c:14:2e:99:2c:e4:e1:d5:ef:51:03:2f:cb:45:f7: ea:94:49:d8:de:4c:e9:31:d3:00:9c:43:4d:ef:db: 8f:cb:7f:b5:85:d5:28:aa:76:bd:6a:b6:c0:a6:a6: a2:d0:f8:f8:5a:67:54:06:2f:96:61:e8:d1:7b:26: df:2e:e6:9d:e0:83:8e:ab:c7:27:b7:e8:5c:de:17: 81:98:72:ee:c3:ef:1a:4a:ff:39:61:9a:49:a6:51: fb:4a:27:e6:4d:b5:8a:45:bd:bc:b9:82:98:3d:ba: 19:fa:3d:14:9f:1b:d8:e9:be:32:d6:a1:78:c5:b0: d6:fd:d0:4c:7a:fe:b0:00:76:5e:6e:b2:a7:ae:0a: 1e:1a:e1:33:99:7b:c1:c3:1b:73:66:9f:bd:0b:66: 5f:25:bc:f1:25:eb:fe:86:a1:3b:3e:45:31:ad:e9: 93:33:cd:b6:19:c2:50:02:f9:58:3c:72:81:dc:d8: e8:e4:88:2a:1d:ff:3b:54:a6:9b:0c:2e:5c:81:15: ac:be:a9:a9:a6:dd:af:87:98:ab:36:8b:57:46:64: dd:3f:b7:39:76:95:84:18:85:1b:f8:5b:27:1a:05: 50:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:34:27:B0:26:84:BA:CF:DA:52:31:A3:D0:CD:37:7E:EB:F9:FE:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3eef609-149f-3bcf-b888-57b9229f7002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c0:f7:ab:4a:a3:93:8e:6d:bf:4c:ff:9d:00:a1:ff:ff:58: 02:86:07:04:25:c3:22:a6:8c:d5:25:65:d5:d0:ac:c2:96:74: 14:d8:3d:83:ba:1d:72:f3:68:81:1a:b6:6e:9a:e1:e4:ba:3b: 3e:5a:ea:49:1f:94:53:f0:d7:e5:66:d3:e6:b3:33:05:52:c9: cb:ec:cf:4d:8b:e0:19:20:a3:b1:c4:f4:a1:1c:84:b9:ce:17: da:f8:78:4d:d6:e7:6b:de:f6:50:06:04:18:40:39:ce:06:97: 65:29:f7:d6:5c:b0:c4:8a:64:cf:b5:08:9a:bd:d5:62:19:1b: 89:76:83:d2:74:ba:c0:bb:a8:bb:e4:91:f7:1a:3a:df:b5:9e: 1a:fb:c7:5d:da:0c:42:3e:f0:46:6e:73:f8:9b:d3:1d:a5:8f: 2a:2c:03:42:e9:78:49:8e:cc:c4:d0:41:84:03:9b:a2:ce:5b: a9:c0:bc:9e:22:bc:ba:ed:d7:20:6f:87:3b:7a:c1:97:0e:f5: c3:79:b5:1d:a6:e0:b0:ba:74:60:75:eb:84:be:8a:5c:02:6e: 42:55:7f:0b:91:b3:60:ef:99:ac:5f:57:00:32:35:75:12:b9: 33:50:35:b0:93:a1:99:ea:32:34:31:6f:1e:37:10:4b:3c:33: 8a:8c:1b:7b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVYwXXu3PIDQeb1z0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDMyNzEyNDcwMVoXDTI0MDYyNTEyNDcwMVowLzEtMCsGA1UEAxMk YjViMDM4YWItYTE1MS00NjlmLTljZGEtYmJkZDg3NjMxMmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbVJpCg0woOG7QmgUdRtayg92Gy/XJYQqM8F sFdMFC6ZLOTh1e9RAy/LRffqlEnY3kzpMdMAnENN79uPy3+1hdUoqna9arbApqai 0Pj4WmdUBi+WYejReybfLuad4IOOq8cnt+hc3heBmHLuw+8aSv85YZpJplH7Sifm TbWKRb28uYKYPboZ+j0UnxvY6b4y1qF4xbDW/dBMev6wAHZebrKnrgoeGuEzmXvB wxtzZp+9C2ZfJbzxJev+hqE7PkUxremTM822GcJQAvlYPHKB3Njo5IgqHf87VKab DC5cgRWsvqmppt2vh5irNotXRmTdP7c5dpWEGIUb+FsnGgVQnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO00J7AmhLrP2lIxo9DNN37r+f64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjNlZWY2MDktMTQ5Zi0z YmNmLWI4ODgtNTdiOTIyOWY3MDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAnA96tKo5OObb9M/50Aof//WAKGBwQlwyKmjNUlZdXQrMKWdBTY PYO6HXLzaIEatm6a4eS6Oz5a6kkflFPw1+Vm0+azMwVSycvsz02L4Bkgo7HE9KEc hLnOF9r4eE3W52ve9lAGBBhAOc4Gl2Up99ZcsMSKZM+1CJq91WIZG4l2g9J0usC7 qLvkkfcaOt+1nhr7x13aDEI+8EZuc/ib0x2ljyosA0LpeEmOzMTQQYQDm6LOW6nA vJ4ivLrt1yBvhzt6wZcO9cN5tR2m4LC6dGB164S+ilwCbkJVfwuRs2DvmaxfVwAy NXUSuTNQNbCToZnqMjQxbx43EEs8M4qMG3s= -----END CERTIFICATE-----Generated at Sun May 12 15:20:24 2024 by rpki-client on console-ams.rpki-client.org