$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c820ab43-1033-3d58-b4a0-dda33f5dfb6a.roa File: c820ab43-1033-3d58-b4a0-dda33f5dfb6a.roa (raw, json) Hash identifier: 9tk9Qj04wnXOc+ZS6F7a1h3RsHeyICVpQfJz6PrO7gw= Subject key identifier: A7:04:24:03:18:48:C5:F7:C6:11:3B:CD:60:97:39:A9:D0:64:5D:C3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285845962B9BBFF514E03216772300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c820ab43-1033-3d58-b4a0-dda33f5dfb6a.roa Signing time: Thu 18 Apr 2024 12:45:12 +0000 ROA not before: Thu 18 Apr 2024 12:45:12 +0000 ROA not after: Wed 17 Jul 2024 12:45:12 +0000 asID: 7342 IP address blocks: 2620:74:86::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:96:2b:9b:bf:f5:14:e0:32:16:77:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 18 12:45:12 2024 GMT Not After : Jul 17 12:45:12 2024 GMT Subject: CN=2be33842-342d-45ee-a562-a66e35c974a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:43:0e:e5:77:31:de:62:fb:c9:32:60:d2:4c: 8d:0e:93:17:21:44:45:d6:b6:44:f4:cb:73:0c:43: 09:c5:54:98:26:82:aa:3a:36:b0:37:89:77:09:60: 68:cf:3a:c0:9c:56:2f:fd:21:bf:64:bc:15:ce:ff: b0:b2:65:88:b4:a1:97:72:c1:51:d5:42:87:0b:a3: 2e:3f:93:41:e4:82:4d:36:71:e1:68:db:4b:ea:c7: ef:b7:0b:6a:c5:7e:83:17:64:81:59:5a:c7:ff:88: d6:11:33:20:bd:22:c1:9a:07:67:bc:39:79:5c:90: c3:d9:b4:0c:4c:95:9f:20:c4:fc:a7:2b:2f:85:ac: 61:37:10:4e:6a:77:ec:2b:98:83:bf:e1:d1:59:db: d4:5d:7f:fc:26:c8:21:77:a4:98:84:ac:82:4c:fd: fb:0c:fc:ca:95:08:9b:5b:af:c7:8c:90:a3:20:65: 3f:9e:b9:8f:a1:5d:93:97:3e:48:7a:5d:07:c9:d7: 7c:1a:90:15:6c:0e:41:7e:87:91:6a:52:4e:6b:34: 78:43:d0:92:46:ce:a6:c3:0a:9c:03:be:ce:12:88: fd:fb:23:80:47:72:b7:93:67:65:53:74:0e:55:ac: af:08:69:62:d1:4c:c5:00:38:04:44:a7:1e:fa:fa: 28:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:04:24:03:18:48:C5:F7:C6:11:3B:CD:60:97:39:A9:D0:64:5D:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c820ab43-1033-3d58-b4a0-dda33f5dfb6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:86::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:56:c6:bd:cf:a7:15:ee:62:b6:ee:46:1a:a7:75:24:6c:2a: dc:7d:13:0e:94:94:48:dc:cd:02:b2:61:92:62:84:ac:fe:0e: f1:e8:33:d2:ca:bd:19:04:c2:d3:0b:79:88:37:66:e5:ec:cf: 16:22:a8:e9:46:aa:10:ff:3d:a9:b9:5f:c2:6e:f8:3b:9b:18: 87:40:6b:01:aa:8a:49:6d:c8:80:4c:fd:bc:19:0c:4a:ee:b1: 20:3e:5e:4e:d9:00:9b:18:ae:d6:bf:b1:da:b5:20:f0:8b:e6: a5:7b:76:77:d8:83:7f:30:e1:d2:61:b4:6b:b3:f5:d2:d5:5f: 77:ec:40:f8:da:76:54:17:6e:a5:9d:27:c5:3f:38:6b:5e:80: 53:4a:80:c7:d4:7a:bb:cc:20:b9:f7:8b:12:39:94:6e:39:a3: 9f:30:9d:a9:c2:47:74:5d:08:e6:0f:7e:f9:32:56:0b:7f:44: b8:de:0f:b3:60:bc:23:fe:7a:55:da:fd:4a:3e:ae:21:1c:1c: 94:26:f7:76:19:79:6c:07:76:07:83:3a:1a:fd:10:d1:0c:47: d5:b7:c7:b4:e5:13:db:ba:75:ea:22:c8:18:49:d9:49:2b:9c: 0d:b0:bb:79:a0:b1:58:c1:78:96:81:0f:73:74:6a:f8:8d:06: 11:10:35:22 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWWK5u/9RTgMhZ3IwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDQxODEyNDUxMloXDTI0MDcxNzEyNDUxMlowLzEtMCsGA1UEAxMk MmJlMzM4NDItMzQyZC00NWVlLWE1NjItYTY2ZTM1Yzk3NGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEMO5Xcx3mL7yTJg0kyNDpMXIURF1rZE9Mtz DEMJxVSYJoKqOjawN4l3CWBozzrAnFYv/SG/ZLwVzv+wsmWItKGXcsFR1UKHC6Mu P5NB5IJNNnHhaNtL6sfvtwtqxX6DF2SBWVrH/4jWETMgvSLBmgdnvDl5XJDD2bQM TJWfIMT8pysvhaxhNxBOanfsK5iDv+HRWdvUXX/8Jsghd6SYhKyCTP37DPzKlQib W6/HjJCjIGU/nrmPoV2Tlz5Iel0Hydd8GpAVbA5BfoeRalJOazR4Q9CSRs6mwwqc A77OEoj9+yOAR3K3k2dlU3QOVayvCGli0UzFADgERKce+vooNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKcEJAMYSMX3xhE7zWCXOanQZF3DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzgyMGFiNDMtMTAzMy0z ZDU4LWI0YTAtZGRhMzNmNWRmYjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADxWxr3PpxXuYrbuRhqndSRsKtx9Ew6UlEjczQKyYZJihKz+DvHo M9LKvRkEwtMLeYg3ZuXszxYiqOlGqhD/Pam5X8Ju+DubGIdAawGqikltyIBM/bwZ DErusSA+Xk7ZAJsYrta/sdq1IPCL5qV7dnfYg38w4dJhtGuz9dLVX3fsQPjadlQX bqWdJ8U/OGtegFNKgMfUervMILn3ixI5lG45o58wnanCR3RdCOYPfvkyVgt/RLje D7NgvCP+elXa/Uo+riEcHJQm93YZeWwHdgeDOhr9ENEMR9W3x7TlE9u6deoiyBhJ 2UkrnA2wu3mgsVjBeJaBD3N0aviNBhEQNSI= -----END CERTIFICATE-----Generated at Sun May 12 02:12:37 2024 by rpki-client on console-ams.rpki-client.org