$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/baf5385d-2f68-372a-9c60-6ed99c881111.roa File: baf5385d-2f68-372a-9c60-6ed99c881111.roa (raw, json) Hash identifier: 8qkVU8blmnipO8RIg7DGcRyr+2nh4R/S4g1mQNFNRx8= Subject key identifier: 40:48:25:0C:6F:B7:D3:E8:E5:95:1B:00:51:D6:8E:00:31:F4:EB:32 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584726D072750632607DA42FB480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/baf5385d-2f68-372a-9c60-6ed99c881111.roa Signing time: Mon 09 Sep 2024 01:00:31 +0000 ROA not before: Mon 09 Sep 2024 01:00:31 +0000 ROA not after: Sun 08 Dec 2024 02:00:31 +0000 asID: 396592 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:26:d0:72:75:06:32:60:7d:a4:2f:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 9 01:00:31 2024 GMT Not After : Dec 8 02:00:31 2024 GMT Subject: CN=cedab57e-7b4b-453e-92f1-934232ff5e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8e:ea:2c:da:1f:c6:53:c5:43:76:82:ee:ec: f7:47:98:51:a8:32:12:25:e7:ca:16:06:53:8f:b3: 05:46:cc:ab:76:0e:91:a3:69:78:95:c7:87:b6:6d: c4:54:c6:22:dc:0e:98:57:ff:42:c6:99:bf:2c:a0: e1:77:f1:2e:37:2c:96:22:df:82:df:8a:24:ff:74: 37:49:2a:f5:f0:76:9f:f8:f5:96:24:ae:5d:2b:47: 70:8f:25:51:2b:fb:59:61:ea:55:fe:cf:66:42:51: ba:e1:ef:65:d8:a9:37:8c:49:f7:49:c3:1a:19:e1: a6:d9:53:b2:e4:6d:89:98:1a:0b:14:7a:0b:ba:95: cb:b0:1d:51:07:24:62:a0:fd:42:65:4b:8d:dc:67: bc:2c:ca:6c:1a:87:14:cf:0e:d4:d5:e7:8a:3b:8e: b5:76:e3:d4:e7:ac:f0:df:58:60:50:28:d5:6b:31: 52:a2:22:cc:21:fb:22:01:52:2e:51:31:e3:ce:8f: 18:ea:9a:f9:18:36:b9:60:c2:23:5f:a3:f8:ba:78: 48:7d:97:d3:e2:26:7e:6c:3b:5d:e2:35:4a:6c:73: 1a:b8:2b:81:0e:0b:e7:20:00:1e:78:ef:20:31:7e: e7:e1:96:39:41:1a:55:7e:59:28:fb:24:94:e2:62: 70:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:48:25:0C:6F:B7:D3:E8:E5:95:1B:00:51:D6:8E:00:31:F4:EB:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/baf5385d-2f68-372a-9c60-6ed99c881111.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:22:00:48:ce:df:a3:26:85:66:1f:32:45:f4:1a:60:3d:27: 4c:fb:12:16:6f:4a:05:1c:d4:e4:71:69:f5:9f:25:51:52:2f: 56:df:f6:e8:78:4e:d5:ba:c0:f1:dd:6c:d0:c4:e3:2a:0e:e5: df:f2:e5:16:8d:87:27:4e:0b:ae:63:36:91:65:8f:36:d1:c9: 4e:cc:cf:1d:78:82:4c:97:33:e5:10:02:23:28:1c:de:56:55: 47:fa:0a:53:2e:a8:5c:aa:c5:4b:2b:14:32:40:3a:49:34:03: e2:2b:e9:d9:c7:e6:77:83:b5:e8:2f:12:50:63:04:64:94:a4: 0a:70:d6:af:8b:e8:e3:e9:0a:67:c3:33:5c:9f:4d:ba:47:cf: 23:02:4d:83:59:a4:89:33:d6:df:04:60:35:fb:5e:2b:f2:e4: 23:b8:56:af:4e:90:cc:fc:16:fe:b4:a9:3e:d2:8e:1c:4d:14: 22:20:c9:e2:52:bd:19:7a:eb:1b:58:6b:96:71:f9:24:a1:7c: 72:a7:48:55:d2:fe:9b:32:72:d2:98:50:0a:0f:f3:0a:f2:c2: 48:22:1d:4c:0c:a6:92:11:cf:3a:2a:56:ee:78:8f:fd:d0:bf: 52:0f:de:e0:cb:25:17:98:d3:71:f5:70:82:2c:5d:62:0b:93: a5:df:f8:48 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEcm0HJ1BjJgfaQvtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkwOTAxMDAzMVoXDTI0MTIwODAyMDAzMVowLzEtMCsGA1UEAxMk Y2VkYWI1N2UtN2I0Yi00NTNlLTkyZjEtOTM0MjMyZmY1ZTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI7qLNofxlPFQ3aC7uz3R5hRqDISJefKFgZT j7MFRsyrdg6Ro2l4lceHtm3EVMYi3A6YV/9Cxpm/LKDhd/EuNyyWIt+C34ok/3Q3 SSr18Haf+PWWJK5dK0dwjyVRK/tZYepV/s9mQlG64e9l2Kk3jEn3ScMaGeGm2VOy 5G2JmBoLFHoLupXLsB1RByRioP1CZUuN3Ge8LMpsGocUzw7U1eeKO461duPU56zw 31hgUCjVazFSoiLMIfsiAVIuUTHjzo8Y6pr5GDa5YMIjX6P4unhIfZfT4iZ+bDtd 4jVKbHMauCuBDgvnIAAeeO8gMX7n4ZY5QRpVflko+ySU4mJwpwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEBIJQxvt9Po5ZUbAFHWjgAx9OsyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmFmNTM4NWQtMmY2OC0z NzJhLTljNjAtNmVkOTljODgxMTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAXIgBIzt+jJoVmHzJF9BpgPSdM+xIWb0oFHNTk cWn1nyVRUi9W3/boeE7VusDx3WzQxOMqDuXf8uUWjYcnTguuYzaRZY820clOzM8d eIJMlzPlEAIjKBzeVlVH+gpTLqhcqsVLKxQyQDpJNAPiK+nZx+Z3g7XoLxJQYwRk lKQKcNavi+jj6QpnwzNcn026R88jAk2DWaSJM9bfBGA1+14r8uQjuFavTpDM/Bb+ tKk+0o4cTRQiIMniUr0ZeusbWGuWcfkkoXxyp0hV0v6bMnLSmFAKD/MK8sJIIh1M DKaSEc86KlbueI/90L9SD97gyyUXmNNx9XCCLF1iC5Ol3/hI -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:22 2024 by rpki-client on console-ams.rpki-client.org