$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be8b0ba4-4c98-3879-8103-ca1a55408f51.roa File: be8b0ba4-4c98-3879-8103-ca1a55408f51.roa (raw, json) Hash identifier: aKPRk6YvtCfUqzcvbJVT3utFguwPp9STHZFth1JPyTo= Subject key identifier: D4:20:51:0B:AB:BA:7C:7F:45:05:70:FC:37:FC:35:5D:CE:B7:F1:90 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285845A41D85F33EA74514AE541B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be8b0ba4-4c98-3879-8103-ca1a55408f51.roa Signing time: Tue 23 Apr 2024 12:38:08 +0000 ROA not before: Tue 23 Apr 2024 12:38:08 +0000 ROA not after: Mon 22 Jul 2024 12:38:08 +0000 asID: 7342 IP address blocks: 2620:74:62::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a4:1d:85:f3:3e:a7:45:14:ae:54:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 23 12:38:08 2024 GMT Not After : Jul 22 12:38:08 2024 GMT Subject: CN=3d517044-6c93-4309-8f66-3b2d9a7dc753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:36:92:c0:05:68:53:12:4e:83:1f:2f:ac:92: 04:2b:25:0e:92:5c:7f:66:ea:f7:ee:9a:b7:5c:fc: c1:97:ae:47:e8:76:b6:87:23:90:69:f4:50:01:cc: e5:30:68:1d:7d:ad:aa:99:10:86:65:fa:9d:f0:aa: 40:f2:c9:dc:0f:6d:45:bc:d4:4e:ca:c3:93:09:3f: 83:cd:84:2f:44:5d:05:b0:18:9a:74:6c:52:88:f1: 3a:3f:d0:ed:41:5c:5e:89:52:48:73:50:e2:3a:f1: 18:fb:6c:65:8a:56:ea:eb:8a:fc:64:5f:0c:87:64: d8:b3:f1:e9:88:52:24:51:5d:19:54:04:91:fb:12: fa:4f:bb:87:4e:27:1d:0f:88:5d:4b:92:c6:c2:90: 44:28:d0:d3:c9:54:1a:21:93:1d:a7:28:d0:3a:34: df:5e:4e:76:d7:b1:14:98:31:5b:16:fb:32:98:b1: a5:9b:85:21:e5:9e:6a:44:f7:79:b9:9a:28:1a:67: f9:45:d5:19:99:96:2e:ec:e4:18:f2:35:c6:9c:d5: 74:87:ce:af:7f:8a:77:6c:94:5b:3a:b9:c4:ca:d9: a0:9c:a7:7a:dc:a8:55:63:3e:8f:37:7c:b5:06:f9: 2f:7b:5b:23:f7:e4:e7:c3:d8:f3:fa:2b:f5:e8:25: 0b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:20:51:0B:AB:BA:7C:7F:45:05:70:FC:37:FC:35:5D:CE:B7:F1:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be8b0ba4-4c98-3879-8103-ca1a55408f51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:62::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:69:a9:de:9d:13:71:00:a5:34:49:56:04:55:f1:e6:b0:38: 99:eb:4a:68:5e:df:c9:65:4e:d9:e8:18:d7:a9:3c:64:25:4b: cb:9c:80:06:03:8b:61:13:c7:ab:98:4b:50:a2:87:54:52:fc: 72:80:71:fb:7c:27:0a:13:ca:a5:a2:09:ed:14:f4:16:39:5d: 25:1f:2a:06:45:63:35:f6:d4:c6:8f:a4:27:c1:f1:a8:78:08: b8:9c:e6:f9:be:7c:76:e1:86:bb:a9:27:2e:af:35:32:bf:0c: 37:99:46:fa:5e:e6:a9:bc:80:af:22:df:19:8c:5d:8a:a7:e0: 49:25:0f:97:cf:49:7a:03:22:f2:a8:e6:96:e7:e1:90:ec:e4: bb:76:f8:49:ac:d5:1b:77:42:de:ec:90:76:a9:3e:7a:f0:ad: 45:e7:a8:d6:72:07:9d:86:ed:ac:7d:5d:25:2b:2e:f1:c5:05: a2:85:5b:94:9f:3b:1f:22:03:22:e7:89:a0:3c:48:34:27:fa: c4:b3:3d:8e:34:ca:26:a8:80:5d:fb:01:f2:9c:5f:4a:bb:96: c0:f8:e0:39:e6:3d:b8:d4:14:de:7c:11:af:c4:92:da:51:2f: 0b:12:fb:f8:fc:83:14:84:30:b8:10:16:af:e1:09:19:07:9c: 30:5b:c8:1b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWkHYXzPqdFFK5UG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDQyMzEyMzgwOFoXDTI0MDcyMjEyMzgwOFowLzEtMCsGA1UEAxMk M2Q1MTcwNDQtNmM5My00MzA5LThmNjYtM2IyZDlhN2RjNzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjaSwAVoUxJOgx8vrJIEKyUOklx/Zur37pq3 XPzBl65H6Ha2hyOQafRQAczlMGgdfa2qmRCGZfqd8KpA8sncD21FvNROysOTCT+D zYQvRF0FsBiadGxSiPE6P9DtQVxeiVJIc1DiOvEY+2xlilbq64r8ZF8Mh2TYs/Hp iFIkUV0ZVASR+xL6T7uHTicdD4hdS5LGwpBEKNDTyVQaIZMdpyjQOjTfXk5217EU mDFbFvsymLGlm4Uh5Z5qRPd5uZooGmf5RdUZmZYu7OQY8jXGnNV0h86vf4p3bJRb OrnEytmgnKd63KhVYz6PN3y1Bvkve1sj9+Tnw9jz+iv16CULxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNQgUQurunx/RQVw/Df8NV3Ot/GQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmU4YjBiYTQtNGM5OC0z ODc5LTgxMDMtY2ExYTU1NDA4ZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACtpqd6dE3EApTRJVgRV8eawOJnrSmhe38llTtnoGNepPGQlS8uc gAYDi2ETx6uYS1Cih1RS/HKAcft8JwoTyqWiCe0U9BY5XSUfKgZFYzX21MaPpCfB 8ah4CLic5vm+fHbhhrupJy6vNTK/DDeZRvpe5qm8gK8i3xmMXYqn4EklD5fPSXoD IvKo5pbn4ZDs5Lt2+Ems1Rt3Qt7skHapPnrwrUXnqNZyB52G7ax9XSUrLvHFBaKF W5SfOx8iAyLniaA8SDQn+sSzPY40yiaogF37AfKcX0q7lsD44DnmPbjUFN58Ea/E ktpRLwsS+/j8gxSEMLgQFq/hCRkHnDBbyBs= -----END CERTIFICATE-----Generated at Mon May 13 12:15:41 2024 by rpki-client on console-ams.rpki-client.org