$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c853e1d5-13ac-351a-9d88-98dde451d814.roa File: c853e1d5-13ac-351a-9d88-98dde451d814.roa (raw, json) Hash identifier: jXPBHg29Qc0JxtvT8IV9GhjTX6qUMxH3hfyOkuDdvZg= Subject key identifier: 6A:9B:14:79:D2:CB:1E:62:B7:06:40:38:6B:CF:5F:6F:44:72:FD:36 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858474F4B7EB6403FC13541192380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c853e1d5-13ac-351a-9d88-98dde451d814.roa Signing time: Mon 23 Sep 2024 13:00:40 +0000 ROA not before: Mon 23 Sep 2024 13:00:40 +0000 ROA not after: Sun 22 Dec 2024 14:00:40 +0000 asID: 7342 IP address blocks: 2620:74:47::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4f:4b:7e:b6:40:3f:c1:35:41:19:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 13:00:40 2024 GMT Not After : Dec 22 14:00:40 2024 GMT Subject: CN=3adf5b5f-e7bb-4e2e-b132-dfe169127a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2d:72:f4:df:32:dd:a6:d7:7b:d6:97:b0:2a: 72:e8:29:20:d1:65:fd:af:1b:6b:c9:e8:41:0c:a0: 71:55:83:d3:b9:13:15:f4:c4:77:c9:71:43:a8:af: e8:8a:6d:b6:2c:6c:60:3e:8c:34:7a:69:1d:37:88: 72:60:40:39:29:03:4e:d7:1c:10:a5:44:89:79:6a: ef:2d:51:98:e1:05:fa:b8:64:6f:a9:a8:16:8c:c9: f8:12:40:e7:db:b1:83:be:6f:98:db:9e:23:90:3f: 48:2a:50:44:ad:8c:2a:a5:a2:f2:59:5e:82:ef:c6: e7:95:e4:55:ca:f4:56:a9:9c:4a:94:3b:57:da:98: 17:6f:be:25:62:a6:2d:58:87:62:16:d1:8c:89:c2: 2a:8b:e8:0f:8c:15:a3:1f:b4:b9:05:5d:f2:90:5b: 1f:2e:e5:ce:02:48:77:05:95:16:4e:b3:27:79:b9: dc:0d:cf:6d:3c:a7:c2:ba:d4:83:fe:ff:44:b6:43: b8:32:31:5f:e5:3e:16:42:e3:71:b1:4b:d9:4a:f4: 55:7a:ab:85:ff:66:92:cd:62:0b:50:02:0f:bf:69: 9d:bf:8e:e0:be:36:a7:5d:33:7d:ae:4f:d1:4e:92: 2b:30:c1:62:99:ca:90:80:92:b6:e9:e0:1c:f9:c0: e1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9B:14:79:D2:CB:1E:62:B7:06:40:38:6B:CF:5F:6F:44:72:FD:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c853e1d5-13ac-351a-9d88-98dde451d814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:47::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:b7:d2:0b:69:43:35:f4:6f:66:f9:11:48:24:53:5d:47:ba: 47:a3:07:8c:8a:7c:53:f4:29:b6:b8:b3:c5:eb:ba:7e:a6:c0: 46:15:ce:d5:0d:4c:54:bb:a6:48:d0:d4:32:1b:f8:2c:56:3b: 63:5a:2b:b2:be:c2:99:63:ce:72:c7:6b:7c:aa:d3:de:b1:e3: bb:07:4f:1e:82:f2:2c:c8:f1:3d:5d:ed:9d:8a:cb:af:48:c0: 70:82:06:7b:16:6a:db:17:5e:fc:a3:b0:4c:c6:ef:d8:1f:ee: da:e6:59:6a:64:bb:5b:f8:ee:01:f5:20:2c:32:19:e2:d9:3d: da:62:aa:a3:89:dd:fb:60:16:42:18:96:85:79:0c:8f:c2:9d: 0a:20:26:78:4a:b2:d8:35:28:0e:a1:37:ed:18:3e:7f:5a:70: 93:7e:bd:1d:ad:0c:9b:e8:c9:b4:fc:16:f2:d3:26:71:f9:a9: 03:5c:c6:08:d9:ce:8a:73:10:9a:13:c5:23:e3:0b:f8:ba:0a: c3:b7:ea:89:12:65:7f:9c:97:39:11:07:f5:bf:cb:42:90:8a: ec:32:54:74:22:14:fa:df:4b:5e:25:05:53:b8:47:91:42:3b: 42:21:ff:de:d9:72:a5:fd:ab:66:a2:7b:2e:6c:d0:86:1b:d7: 76:1d:1f:ea -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdPS362QD/BNUEZI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkyMzEzMDA0MFoXDTI0MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk M2FkZjViNWYtZTdiYi00ZTJlLWIxMzItZGZlMTY5MTI3YTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC1y9N8y3abXe9aXsCpy6Ckg0WX9rxtryehB DKBxVYPTuRMV9MR3yXFDqK/oim22LGxgPow0emkdN4hyYEA5KQNO1xwQpUSJeWrv LVGY4QX6uGRvqagWjMn4EkDn27GDvm+Y254jkD9IKlBErYwqpaLyWV6C78bnleRV yvRWqZxKlDtX2pgXb74lYqYtWIdiFtGMicIqi+gPjBWjH7S5BV3ykFsfLuXOAkh3 BZUWTrMnebncDc9tPKfCutSD/v9EtkO4MjFf5T4WQuNxsUvZSvRVequF/2aSzWIL UAIPv2mdv47gvjanXTN9rk/RTpIrMMFimcqQgJK26eAc+cDh9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGqbFHnSyx5itwZAOGvPX29Ecv02MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzg1M2UxZDUtMTNhYy0z NTFhLTlkODgtOThkZGU0NTFkODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI230gtpQzX0b2b5EUgkU11HukejB4yKfFP0Kba4s8Xrun6mwEYV ztUNTFS7pkjQ1DIb+CxWO2NaK7K+wpljznLHa3yq096x47sHTx6C8izI8T1d7Z2K y69IwHCCBnsWatsXXvyjsEzG79gf7trmWWpku1v47gH1ICwyGeLZPdpiqqOJ3ftg FkIYloV5DI/CnQogJnhKstg1KA6hN+0YPn9acJN+vR2tDJvoybT8FvLTJnH5qQNc xgjZzopzEJoTxSPjC/i6CsO36okSZX+clzkRB/W/y0KQiuwyVHQiFPrfS14lBVO4 R5FCO0Ih/97ZcqX9q2aiey5s0IYb13YdH+o= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:23 2024 by rpki-client on console-ams.rpki-client.org