$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be8b0ba4-4c98-3879-8103-ca1a55408f51.roa File: be8b0ba4-4c98-3879-8103-ca1a55408f51.roa (raw, json) Hash identifier: piqRAEiDpQarWdob+lR+o0ATKRB4hBVW0cuentL0T6Y= Subject key identifier: 43:31:5E:72:73:B6:9F:42:CD:E6:0D:27:93:89:E3:97:A8:82:FE:04 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584762D688DE60DAA035061A0028 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be8b0ba4-4c98-3879-8103-ca1a55408f51.roa Signing time: Mon 30 Sep 2024 13:00:42 +0000 ROA not before: Mon 30 Sep 2024 13:00:42 +0000 ROA not after: Sun 29 Dec 2024 14:00:42 +0000 asID: 7342 IP address blocks: 2620:74:62::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:62:d6:88:de:60:da:a0:35:06:1a:00:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 30 13:00:42 2024 GMT Not After : Dec 29 14:00:42 2024 GMT Subject: CN=a8d3e947-776b-49ce-8ebc-720dd35d2fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:10:48:23:bd:9d:4b:a7:6c:f9:a0:48:ed:34: ee:de:0e:98:d1:ac:e9:24:26:b6:d3:ce:19:76:2f: 64:04:d3:91:a8:43:d2:e3:6d:f5:7e:82:72:88:e0: e7:ab:ce:fc:6d:a9:15:d5:db:93:b0:91:d3:d0:6d: 9e:62:58:cd:c2:ea:db:78:d5:04:37:0f:31:e3:b2: 1b:bc:0d:0c:15:c1:76:41:f5:42:9b:32:7a:65:43: 68:63:d8:c7:40:6e:47:10:60:23:c3:ef:03:5a:53: d1:29:da:76:1c:d2:eb:08:a1:d3:0c:89:6d:57:5d: 45:2d:07:17:7f:40:4a:8b:94:ab:13:c9:27:68:36: 34:b2:8c:92:9b:85:78:f0:82:7c:78:79:9c:76:f7: 4f:ce:27:0c:61:80:78:63:2f:f6:05:e2:69:a3:a2: 25:dd:c5:b8:53:50:db:0a:5a:9a:90:a8:1f:2e:63: 1d:59:05:cd:be:2d:fd:a0:1f:af:ae:2a:c9:49:42: 1a:be:e0:b2:f0:8b:5b:cf:c8:52:d5:5b:3e:91:fb: ed:2c:9d:2a:a3:30:2f:0a:4f:e0:d7:57:18:f5:7b: 80:c5:23:c7:68:75:1d:cc:bb:cc:4f:c3:0f:08:82: ce:1a:65:b6:4b:11:97:bc:bf:38:d9:2a:e9:d5:d4: 4f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:31:5E:72:73:B6:9F:42:CD:E6:0D:27:93:89:E3:97:A8:82:FE:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be8b0ba4-4c98-3879-8103-ca1a55408f51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:62::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:cf:f2:3d:a1:03:46:ef:bf:27:d6:01:8f:35:b7:a3:9f:0b: c5:d8:1d:b7:68:2c:13:93:1c:a4:7f:d1:b8:31:77:d3:22:a2: 8b:f3:dc:80:89:de:7b:79:76:e8:30:b5:62:d6:68:21:5b:02: cf:05:08:c6:1e:10:df:6f:38:1f:33:2a:9c:85:cb:f3:a2:43: 57:14:ba:59:48:6d:81:b1:6c:b0:8d:7d:b3:1a:80:fe:c0:a4: df:30:a4:eb:4d:e1:95:22:3c:6e:fb:1d:e7:df:22:4e:b7:99: 09:6b:7f:5f:2e:e4:73:e1:5d:dc:69:e4:99:4a:98:ba:6e:08: 79:2d:62:34:7f:ea:3f:3c:3f:2e:bb:98:99:e1:4a:11:6b:5e: 3c:3e:58:62:bf:5e:eb:b3:9f:1e:70:b7:7e:65:a8:fe:6a:5a: 41:62:88:3f:90:78:23:2c:4c:07:f8:24:a5:66:81:35:3c:8c: 9f:f5:e7:97:9c:d5:fd:43:38:da:ae:93:b4:4b:f4:61:77:97: 32:f5:e0:b8:eb:c1:3d:1b:18:51:80:5b:69:20:91:7a:77:e9: ff:7f:43:14:bb:d2:31:cb:ca:0b:fc:1d:45:23:9c:97:dd:ae: 7e:d5:72:58:3f:53:eb:0e:aa:95:82:1c:03:cb:0a:23:df:f6: ca:c4:2c:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdi1ojeYNqgNQYaACgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkzMDEzMDA0MloXDTI0MTIyOTE0MDA0MlowLzEtMCsGA1UEAxMk YThkM2U5NDctNzc2Yi00OWNlLThlYmMtNzIwZGQzNWQyZmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhBII72dS6ds+aBI7TTu3g6Y0azpJCa2084Z di9kBNORqEPS4231foJyiODnq878bakV1duTsJHT0G2eYljNwurbeNUENw8x47Ib vA0MFcF2QfVCmzJ6ZUNoY9jHQG5HEGAjw+8DWlPRKdp2HNLrCKHTDIltV11FLQcX f0BKi5SrE8knaDY0soySm4V48IJ8eHmcdvdPzicMYYB4Yy/2BeJpo6Il3cW4U1Db ClqakKgfLmMdWQXNvi39oB+vrirJSUIavuCy8Itbz8hS1Vs+kfvtLJ0qozAvCk/g 11cY9XuAxSPHaHUdzLvMT8MPCILOGmW2SxGXvL842Srp1dRPwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEMxXnJztp9CzeYNJ5OJ45eogv4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmU4YjBiYTQtNGM5OC0z ODc5LTgxMDMtY2ExYTU1NDA4ZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABfP8j2hA0bvvyfWAY81t6OfC8XYHbdoLBOTHKR/0bgxd9Mioovz 3ICJ3nt5dugwtWLWaCFbAs8FCMYeEN9vOB8zKpyFy/OiQ1cUullIbYGxbLCNfbMa gP7ApN8wpOtN4ZUiPG77HeffIk63mQlrf18u5HPhXdxp5JlKmLpuCHktYjR/6j88 Py67mJnhShFrXjw+WGK/Xuuznx5wt35lqP5qWkFiiD+QeCMsTAf4JKVmgTU8jJ/1 55ec1f1DONquk7RL9GF3lzL14LjrwT0bGFGAW2kgkXp36f9/QxS70jHLygv8HUUj nJfdrn7Vclg/U+sOqpWCHAPLCiPf9srELAM= -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:44 2024 by rpki-client on console-fra.rpki-client.org