$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c426e094-0f31-30c1-bf59-1310513e6d6c.roa File: c426e094-0f31-30c1-bf59-1310513e6d6c.roa (raw, json) Hash identifier: 4BO6ev6xKOCBF236AUW7rv3v6KkvUlJMLYAeIRt1Muw= Subject key identifier: 7B:49:10:4F:74:37:0B:E0:79:6A:42:F0:2E:D2:B2:8D:39:9E:73:48 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584738F5F64401EDA82F52380E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c426e094-0f31-30c1-bf59-1310513e6d6c.roa Signing time: Sun 15 Sep 2024 13:00:42 +0000 ROA not before: Sun 15 Sep 2024 13:00:42 +0000 ROA not after: Sat 14 Dec 2024 14:00:42 +0000 asID: 396546 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:38:f5:f6:44:01:ed:a8:2f:52:38:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 15 13:00:42 2024 GMT Not After : Dec 14 14:00:42 2024 GMT Subject: CN=de53db85-1445-4e41-9dc3-3aecae2cfe2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:df:dc:74:38:49:0e:2f:78:a2:d9:41:f5:aa: df:e0:c4:d7:be:54:52:1c:35:d9:fd:60:3c:3d:b5: 87:28:95:43:10:c8:dd:2f:49:cd:d7:5c:95:f2:28: 00:c4:89:d7:19:5b:b9:d9:de:a9:02:c6:46:f8:08: c7:c1:74:2b:7d:50:f4:c0:fb:3e:45:71:08:c5:53: 60:81:cb:4e:47:05:ce:a0:fb:6d:d6:76:79:f5:6d: eb:58:76:35:d9:55:ea:52:c4:ba:4d:15:a4:c7:be: 25:31:b6:57:57:e7:da:d9:f7:d9:6e:f5:cc:9a:b5: ea:b3:33:14:00:91:5d:12:0e:66:ee:03:e2:6c:ea: eb:d3:ed:3c:6a:5b:04:73:09:85:5c:53:0c:7a:52: 6e:38:06:f1:82:a6:81:2a:fc:8b:bb:1a:94:83:c7: 47:b5:bd:38:c5:ed:14:1d:14:69:24:4c:d6:cb:d6: 00:33:9d:d6:88:57:f1:9d:c5:35:95:ac:a3:b7:f5: 58:b2:cd:20:cf:a6:18:99:5f:56:de:08:af:22:7f: e9:c5:7f:df:86:9f:45:98:02:bd:7b:bd:fe:22:5a: 59:1f:c5:e9:d5:3f:b8:4b:ec:01:6e:5a:4c:f5:ff: 88:a3:09:e8:f8:b6:d8:c0:67:df:6d:e6:0e:39:fd: db:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:49:10:4F:74:37:0B:E0:79:6A:42:F0:2E:D2:B2:8D:39:9E:73:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c426e094-0f31-30c1-bf59-1310513e6d6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:07:ca:90:53:b6:62:3e:71:3e:4d:ad:4d:26:4f:2f:fd:9f: 27:ad:cf:1a:06:56:93:03:15:d1:33:05:38:bd:30:13:c4:16: 7e:c0:e0:ee:a6:6c:e3:1d:74:1d:1a:ff:4e:60:a7:fa:c9:36: 85:9d:9f:ac:57:8a:2c:51:82:ad:e6:a8:43:65:cc:7e:9a:41: 62:87:c8:43:dd:18:0e:6f:00:95:d0:c4:0c:95:47:a2:66:7a: 80:70:34:f4:05:0c:9e:d5:8d:58:26:3e:67:9e:08:c5:d4:74: 70:16:c6:69:d8:86:d3:5c:63:0c:a3:c0:de:81:21:0c:d9:a2: d9:fc:50:24:43:8e:d1:1c:60:52:c5:ea:e3:6f:a5:6b:e9:2d: 89:05:fd:2f:f0:25:6f:25:42:f7:cd:a8:33:ad:d5:ea:06:82: 9d:8c:79:70:08:fd:9f:a3:59:89:c9:11:46:68:0c:22:7d:cb: be:a0:f0:be:c2:b0:f1:a4:74:9b:25:10:a5:ca:8b:04:25:d9: a2:02:1e:b5:83:38:3a:71:2e:a6:a8:60:51:20:eb:ed:fe:af: 0c:6a:7d:c2:3f:24:9b:97:91:26:db:57:f9:5f:4e:10:64:ca: 2a:91:de:43:09:17:f8:bd:27:7e:02:45:e4:51:46:39:4a:02: 1a:5a:4c:ec -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEc49fZEAe2oL1I4DoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkxNTEzMDA0MloXDTI0MTIxNDE0MDA0MlowLzEtMCsGA1UEAxMk ZGU1M2RiODUtMTQ0NS00ZTQxLTlkYzMtM2FlY2FlMmNmZTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd/cdDhJDi94otlB9arf4MTXvlRSHDXZ/WA8 PbWHKJVDEMjdL0nN11yV8igAxInXGVu52d6pAsZG+AjHwXQrfVD0wPs+RXEIxVNg gctORwXOoPtt1nZ59W3rWHY12VXqUsS6TRWkx74lMbZXV+fa2ffZbvXMmrXqszMU AJFdEg5m7gPibOrr0+08alsEcwmFXFMMelJuOAbxgqaBKvyLuxqUg8dHtb04xe0U HRRpJEzWy9YAM53WiFfxncU1layjt/VYss0gz6YYmV9W3givIn/pxX/fhp9FmAK9 e73+IlpZH8Xp1T+4S+wBblpM9f+Iowno+LbYwGffbeYOOf3b1wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHtJEE90NwvgeWpC8C7Sso05nnNIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzQyNmUwOTQtMGYzMS0z MGMxLWJmNTktMTMxMDUxM2U2ZDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCNB8qQU7ZiPnE+Ta1NJk8v/Z8nrc8aBlaTAxXR MwU4vTATxBZ+wODupmzjHXQdGv9OYKf6yTaFnZ+sV4osUYKt5qhDZcx+mkFih8hD 3RgObwCV0MQMlUeiZnqAcDT0BQye1Y1YJj5nngjF1HRwFsZp2IbTXGMMo8DegSEM 2aLZ/FAkQ47RHGBSxerjb6Vr6S2JBf0v8CVvJUL3zagzrdXqBoKdjHlwCP2fo1mJ yRFGaAwifcu+oPC+wrDxpHSbJRClyosEJdmiAh61gzg6cS6mqGBRIOvt/q8Man3C PySbl5Em21f5X04QZMoqkd5DCRf4vSd+AkXkUUY5SgIaWkzs -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:23 2024 by rpki-client on console-ams.rpki-client.org