$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b71c364a-deae-3b2d-8ac9-f06a7cecd3e3.roa File: b71c364a-deae-3b2d-8ac9-f06a7cecd3e3.roa (raw, json) Hash identifier: tAdxS8PRxc8XwId2xh0FfI5DsSE7KiK/036geNEdBIk= Subject key identifier: F1:48:BF:92:53:4D:0B:BE:98:5A:F8:F4:1E:8E:65:89:CB:99:EC:B3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847F15522F1CE5AC0C18BBDDD00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b71c364a-deae-3b2d-8ac9-f06a7cecd3e3.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 397206 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:22:f1:ce:5a:c0:c1:8b:bd:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=0f7bfc1a-0c66-4976-8f95-8417db6f3fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:24:b2:3c:29:76:44:8a:c6:94:5b:d7:25:aa: 3a:c6:a6:23:3a:c0:44:0b:ca:9e:d6:aa:23:18:8d: e1:a2:05:29:ef:a4:1a:67:08:a7:f5:e2:05:64:d4: cf:65:20:67:43:ad:27:a1:5d:87:30:fd:f1:80:d1: f4:0d:88:f1:00:c7:c8:48:8a:90:b3:bf:1a:d3:f9: 79:a4:8f:1f:d8:26:61:75:df:2f:3b:f5:cd:cf:43: 49:62:66:b9:6f:5d:53:58:37:3b:12:c9:d7:8d:e1: bf:e8:35:b2:0f:a6:7b:29:99:2a:c0:0e:eb:ae:78: 67:18:b5:6b:25:ce:e5:d7:cf:51:37:a9:6f:65:63: a1:3e:82:1e:fe:16:55:66:fb:63:cc:5d:eb:cb:18: ee:71:85:b9:73:2b:da:89:b5:06:6c:02:21:c7:08: 74:c4:16:b4:a2:c5:1c:30:d5:f7:67:c9:f4:7e:60: 85:d7:fc:b7:69:03:5c:a4:e9:20:90:8f:72:b2:ec: f0:b4:d8:ca:a3:30:08:a5:ce:3d:dc:28:be:aa:82: c3:ec:e8:12:07:84:29:27:68:67:e1:21:70:6a:14: 25:97:29:49:fb:72:cc:67:0f:5b:bc:2c:65:a8:3e: 2e:35:1e:ba:44:1d:76:0f:11:ba:51:d8:f5:3d:9f: 04:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:48:BF:92:53:4D:0B:BE:98:5A:F8:F4:1E:8E:65:89:CB:99:EC:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b71c364a-deae-3b2d-8ac9-f06a7cecd3e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:b1:c1:0b:be:da:b9:af:6b:a1:87:1f:1a:f7:88:c0:69:66: 55:a1:e3:0d:59:0f:97:41:33:22:63:32:b9:d7:04:e1:d0:51: a5:75:dc:dc:8d:5d:fe:e1:57:f1:14:79:a0:1a:ae:b8:6a:a0: 42:2e:cd:e8:39:18:46:97:17:ee:5d:14:aa:78:5b:84:19:8c: db:f1:41:fb:6a:c6:29:9e:e6:1d:57:19:77:16:45:5c:56:f1: b4:43:d2:5b:d0:c6:3a:d3:7d:5e:b6:7a:66:dc:f8:d6:7e:8c: f8:1c:da:bd:ee:0e:72:5f:11:94:3a:9c:e6:9b:40:5a:0c:7c: 4d:d9:1c:78:4e:74:f4:71:de:fa:92:24:bc:85:eb:93:ad:d6: 6c:0c:d9:87:2f:e6:ce:8c:b0:7d:a8:bd:2f:e6:df:35:53:e4: d8:84:50:f1:d7:a7:53:b5:ca:f0:e4:4f:a5:ce:e0:b2:87:1c: 78:98:df:fd:1e:dc:bf:02:7e:39:e6:75:e9:4f:c3:6f:50:50: a4:63:a4:bb:9b:9f:08:c3:e8:ef:14:66:4d:90:ca:6b:03:b5: 5f:33:bc:6d:5e:86:32:65:6e:1f:5f:cd:6c:9c:ce:51:77:d7: dc:5c:06:12:60:9a:d1:ff:c3:e5:f4:ed:8b:85:12:bb:a4:c4: 00:83:af:bd -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfxVSLxzlrAwYu93QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MGY3YmZjMWEtMGM2Ni00OTc2LThmOTUtODQxN2RiNmYzZmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CSyPCl2RIrGlFvXJao6xqYjOsBEC8qe1qoj GI3hogUp76QaZwin9eIFZNTPZSBnQ60noV2HMP3xgNH0DYjxAMfISIqQs78a0/l5 pI8f2CZhdd8vO/XNz0NJYma5b11TWDc7EsnXjeG/6DWyD6Z7KZkqwA7rrnhnGLVr Jc7l189RN6lvZWOhPoIe/hZVZvtjzF3ryxjucYW5cyvaibUGbAIhxwh0xBa0osUc MNX3Z8n0fmCF1/y3aQNcpOkgkI9ysuzwtNjKozAIpc493Ci+qoLD7OgSB4QpJ2hn 4SFwahQllylJ+3LMZw9bvCxlqD4uNR66RB12DxG6Udj1PZ8E6wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPFIv5JTTQu+mFr49B6OZYnLmeyzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjcxYzM2NGEtZGVhZS0z YjJkLThhYzktZjA2YTdjZWNkM2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQACscELvtq5r2uhhx8a94jAaWZVoeMNWQ+XQTMi YzK51wTh0FGlddzcjV3+4VfxFHmgGq64aqBCLs3oORhGlxfuXRSqeFuEGYzb8UH7 asYpnuYdVxl3FkVcVvG0Q9Jb0MY6031etnpm3PjWfoz4HNq97g5yXxGUOpzmm0Ba DHxN2Rx4TnT0cd76kiS8heuTrdZsDNmHL+bOjLB9qL0v5t81U+TYhFDx16dTtcrw 5E+lzuCyhxx4mN/9Hty/An455nXpT8NvUFCkY6S7m58Iw+jvFGZNkMprA7VfM7xt XoYyZW4fX81snM5Rd9fcXAYSYJrR/8Pl9O2LhRK7pMQAg6+9 -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:22 2024 by rpki-client on console-ams.rpki-client.org