$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/beaf5995-a580-35dc-b4a9-719173ffda0e.roa File: beaf5995-a580-35dc-b4a9-719173ffda0e.roa (raw, json) Hash identifier: if4q4JUEzoJVclQkGwbItLAC+rrFh8Rdga115HJWLaA= Subject key identifier: 67:44:C1:A9:87:24:83:AF:F1:07:E6:D0:F6:55:22:23:9C:69:3A:38 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847A30C0DBB9F9720DAC51FF500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/beaf5995-a580-35dc-b4a9-719173ffda0e.roa Signing time: Wed 23 Oct 2024 13:00:41 +0000 ROA not before: Wed 23 Oct 2024 13:00:41 +0000 ROA not after: Tue 21 Jan 2025 14:00:41 +0000 asID: 396593 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a3:0c:0d:bb:9f:97:20:da:c5:1f:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 23 13:00:41 2024 GMT Not After : Jan 21 14:00:41 2025 GMT Subject: CN=d3c1102f-12e5-4da4-ba16-f7599eeb7b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ec:dc:10:42:8c:21:ea:a2:42:46:48:12:0d: 5f:17:a0:7c:3b:59:6c:5d:08:7a:9f:61:61:16:90: 3c:ee:a1:12:02:b6:8c:53:a3:c3:5f:3d:bf:39:d5: 7b:57:3e:79:31:f0:ec:ea:e5:78:23:ec:f2:dd:81: 7b:4a:b6:10:fd:28:77:25:b1:53:ae:91:f1:c4:2d: 29:77:c2:ce:c7:16:4d:17:08:54:e3:0d:b2:96:24: a2:ad:c2:97:67:b2:88:a0:b5:05:98:18:05:e0:03: cd:e5:2c:ec:4f:65:0d:a4:95:c7:dd:6a:c7:08:05: 83:7f:39:a0:6a:0b:11:80:a2:3d:10:d5:40:f6:00: 05:a9:1b:e4:b1:88:ef:50:73:20:6a:a9:60:08:18: 2f:e2:cd:11:11:24:e1:a5:84:02:48:a2:60:a1:60: 13:74:c3:5f:43:f8:b4:d8:dc:c1:e9:92:9b:ef:53: bb:12:de:72:28:47:54:ea:aa:3d:42:5c:3d:77:a2: 4f:d6:e0:06:2b:17:6a:9a:f2:4b:cc:46:b3:f5:c1: 96:29:d8:4b:9d:4b:da:02:30:8f:4e:05:a8:7d:d7: 66:4e:c0:f3:85:c4:c3:dc:35:4c:b8:af:b6:b8:b8: 39:1f:ab:68:08:5a:b9:65:32:8a:24:cb:f3:97:77: 8e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:44:C1:A9:87:24:83:AF:F1:07:E6:D0:F6:55:22:23:9C:69:3A:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/beaf5995-a580-35dc-b4a9-719173ffda0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:26:5a:d4:f6:14:65:f3:27:56:79:1a:69:b5:72:dc:9c:f6: 71:3a:b2:e7:dd:29:57:fa:74:31:7a:72:87:28:f0:d7:5a:b5: ef:de:8c:6e:79:7f:6b:80:05:cc:8e:75:31:da:58:8f:7a:9b: 39:71:8a:9a:32:9f:c7:5a:92:8d:02:a7:e8:cd:3d:67:e8:6b: 33:6a:67:89:e6:da:7d:14:a5:bc:3c:1b:00:af:b1:a5:02:88: 44:e8:b6:dc:41:c1:d8:61:d7:f2:f7:81:e9:ed:c4:06:41:05: 17:61:60:fa:01:77:bf:3e:17:da:37:1d:3a:db:b3:74:35:0e: 40:8b:35:af:28:3e:f7:d0:da:e6:2c:8b:1c:b6:9b:f7:60:c6: 18:78:55:8e:3e:7b:2c:cd:6a:23:a3:0f:38:2f:3c:0b:c4:2d: 4a:63:01:9f:5a:f2:2c:cf:3f:be:3b:1b:f9:9c:78:6b:eb:96: 9b:e5:d6:ed:2a:c8:b8:d3:2c:39:5d:0f:55:7e:56:e7:8b:f5: f6:66:40:fe:2d:5a:8b:d6:3a:7f:e3:92:f9:f7:96:66:74:22: b8:ce:70:89:d0:ce:54:e9:d1:54:a6:f0:84:b1:3e:26:22:91: e1:ae:f3:d2:d7:39:5e:93:43:a8:62:5c:5b:ad:e2:9d:4b:99: d5:7c:ec:bc -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEejDA27n5cg2sUf9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTAyMzEzMDA0MVoXDTI1MDEyMTE0MDA0MVowLzEtMCsGA1UEAxMk ZDNjMTEwMmYtMTJlNS00ZGE0LWJhMTYtZjc1OTllZWI3Yjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuzcEEKMIeqiQkZIEg1fF6B8O1lsXQh6n2Fh FpA87qESAraMU6PDXz2/OdV7Vz55MfDs6uV4I+zy3YF7SrYQ/Sh3JbFTrpHxxC0p d8LOxxZNFwhU4w2yliSircKXZ7KIoLUFmBgF4APN5SzsT2UNpJXH3WrHCAWDfzmg agsRgKI9ENVA9gAFqRvksYjvUHMgaqlgCBgv4s0RESThpYQCSKJgoWATdMNfQ/i0 2NzB6ZKb71O7Et5yKEdU6qo9Qlw9d6JP1uAGKxdqmvJLzEaz9cGWKdhLnUvaAjCP TgWofddmTsDzhcTD3DVMuK+2uLg5H6toCFq5ZTKKJMvzl3eOswIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGdEwamHJIOv8Qfm0PZVIiOcaTo4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmVhZjU5OTUtYTU4MC0z NWRjLWI0YTktNzE5MTczZmZkYTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCKJlrU9hRl8ydWeRpptXLcnPZxOrLn3SlX+nQx enKHKPDXWrXv3oxueX9rgAXMjnUx2liPeps5cYqaMp/HWpKNAqfozT1n6GszameJ 5tp9FKW8PBsAr7GlAohE6LbcQcHYYdfy94Hp7cQGQQUXYWD6AXe/PhfaNx0627N0 NQ5AizWvKD730NrmLIsctpv3YMYYeFWOPnsszWojow84LzwLxC1KYwGfWvIszz++ Oxv5nHhr65ab5dbtKsi40yw5XQ9Vflbni/X2ZkD+LVqL1jp/45L595ZmdCK4znCJ 0M5U6dFUpvCEsT4mIpHhrvPS1zlek0OoYlxbreKdS5nVfOy8 -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:22 2024 by rpki-client on console-ams.rpki-client.org