$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc9e38a0-7990-364f-ba30-72becd75524e.roa File: cc9e38a0-7990-364f-ba30-72becd75524e.roa (raw, json) Hash identifier: f70ED1IWuybP79HzJ9txcj6GUjq/Jzf4a+fm65+n5vs= Subject key identifier: 46:6B:35:2C:38:23:2D:07:D0:AE:9A:49:A9:8C:32:94:7C:0C:19:D0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285845453B7C68726CE7CED4FB9D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc9e38a0-7990-364f-ba30-72becd75524e.roa Signing time: Wed 20 Mar 2024 12:56:42 +0000 ROA not before: Wed 20 Mar 2024 12:56:42 +0000 ROA not after: Tue 18 Jun 2024 12:56:42 +0000 asID: 7342 IP address blocks: 2620:74:80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3b:7c:68:72:6c:e7:ce:d4:fb:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 20 12:56:42 2024 GMT Not After : Jun 18 12:56:42 2024 GMT Subject: CN=43ff28a6-759e-48d5-91d1-a717f6793057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9f:3e:cf:c9:1f:53:62:16:f0:0d:63:cc:1c: e4:57:63:3a:4f:b7:4a:b4:a4:2d:f8:85:e6:ef:1f: db:c5:c8:7f:a0:a5:ef:a4:d1:ec:27:4d:36:e7:f9: b1:4c:b2:0b:31:2f:0f:5b:ab:99:5c:f6:7d:f1:ca: 5b:da:c0:bd:fb:37:3b:31:bf:59:e5:a6:f2:6f:68: f0:f6:76:26:36:60:73:ed:49:43:0e:33:d5:db:41: 45:e0:23:85:66:6e:3b:a2:77:34:3f:08:31:da:6a: 58:bb:a4:2f:9f:ae:5b:c1:f9:60:bb:b3:66:81:30: 07:f9:65:5f:b9:35:b6:bb:fe:65:1c:e5:07:97:13: 4d:bf:21:87:af:40:41:fb:98:79:c5:ab:f4:45:d3: cb:0d:72:0f:45:00:9d:58:be:b6:58:06:e1:63:40: c0:47:f9:38:46:a5:97:ee:f6:92:82:bc:aa:b6:c2: 11:b6:e0:0e:06:35:f8:34:7c:6b:45:f0:c3:86:8f: ad:c0:d2:2e:7f:c1:89:f0:81:ed:c2:ce:72:2d:78: 50:8a:d3:c2:65:86:0d:9d:bf:bc:d8:33:23:38:1d: f4:b4:5d:b6:38:1a:43:63:28:64:fd:4d:47:87:75: 87:e1:4d:ad:ee:c6:fb:aa:b0:dc:cf:f3:ed:85:20: 55:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6B:35:2C:38:23:2D:07:D0:AE:9A:49:A9:8C:32:94:7C:0C:19:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc9e38a0-7990-364f-ba30-72becd75524e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:80::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:7a:82:d0:28:c4:0e:f4:86:88:fa:6d:81:fc:12:59:6b:3a: fa:af:35:07:38:c4:0a:43:ca:40:60:e4:98:64:ae:05:49:6c: 6b:77:82:4b:55:94:0f:c4:a8:e5:c4:d6:e6:e9:b8:f6:6c:a9: cc:0a:7f:fb:9f:9c:ce:f1:73:6d:e7:7b:15:03:89:16:e8:b2: ee:32:de:fb:29:91:44:88:40:77:2d:98:33:25:ff:6d:97:87: 30:b4:74:5b:a2:f1:a5:6d:48:1c:26:c4:f1:84:73:d1:9f:ba: 5a:03:80:80:ca:eb:2d:3a:68:a0:84:c1:70:59:47:8f:54:1c: ca:76:e1:91:53:ec:6b:72:9e:21:3f:c5:7b:e0:9e:d7:49:60: 30:5c:39:ae:36:57:08:8c:6a:bf:21:e1:be:20:07:17:9b:98: 76:d6:44:d9:0e:a6:3b:8e:fb:db:8b:bf:87:26:d0:1e:72:0a: 9c:49:1a:46:71:b7:16:60:e0:6a:64:a9:ac:6a:3c:9e:d3:43: 15:80:2c:26:eb:6c:75:05:d7:50:1f:e2:fb:81:2a:94:4c:5d: e1:6e:42:93:af:64:25:d9:82:05:fd:19:2e:31:8e:b6:1b:c0: e5:b0:76:11:f4:82:66:34:b8:c0:22:b8:12:a5:96:60:2f:6e: 75:94:f0:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVFO3xocmznztT7nQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDMyMDEyNTY0MloXDTI0MDYxODEyNTY0MlowLzEtMCsGA1UEAxMk NDNmZjI4YTYtNzU5ZS00OGQ1LTkxZDEtYTcxN2Y2NzkzMDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq58+z8kfU2IW8A1jzBzkV2M6T7dKtKQt+IXm 7x/bxch/oKXvpNHsJ0025/mxTLILMS8PW6uZXPZ98cpb2sC9+zc7Mb9Z5abyb2jw 9nYmNmBz7UlDDjPV20FF4COFZm47onc0Pwgx2mpYu6Qvn65bwflgu7NmgTAH+WVf uTW2u/5lHOUHlxNNvyGHr0BB+5h5xav0RdPLDXIPRQCdWL62WAbhY0DAR/k4RqWX 7vaSgryqtsIRtuAOBjX4NHxrRfDDho+twNIuf8GJ8IHtws5yLXhQitPCZYYNnb+8 2DMjOB30tF22OBpDYyhk/U1Hh3WH4U2t7sb7qrDcz/PthSBVNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEZrNSw4Iy0H0K6aSamMMpR8DBnQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2M5ZTM4YTAtNzk5MC0z NjRmLWJhMzAtNzJiZWNkNzU1MjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD96gtAoxA70hoj6bYH8EllrOvqvNQc4xApDykBg5JhkrgVJbGt3 gktVlA/EqOXE1ubpuPZsqcwKf/ufnM7xc23nexUDiRbosu4y3vspkUSIQHctmDMl /22XhzC0dFui8aVtSBwmxPGEc9GfuloDgIDK6y06aKCEwXBZR49UHMp24ZFT7Gty niE/xXvgntdJYDBcOa42VwiMar8h4b4gBxebmHbWRNkOpjuO+9uLv4cm0B5yCpxJ GkZxtxZg4GpkqaxqPJ7TQxWALCbrbHUF11Af4vuBKpRMXeFuQpOvZCXZggX9GS4x jrYbwOWwdhH0gmY0uMAiuBKllmAvbnWU8Dk= -----END CERTIFICATE-----Generated at Sun May 12 14:59:29 2024 by rpki-client on console-fra.rpki-client.org