$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd792ac4-72c5-3479-867d-e3c0dceee16a.roa File: cd792ac4-72c5-3479-867d-e3c0dceee16a.roa (raw, json) Hash identifier: 0m3gYQllqidlB6kNQQ2UeHFioRwLNEtWC3cVMu5AKmo= Subject key identifier: 39:51:EF:B2:62:8F:65:C4:3F:02:80:32:99:03:F1:63:31:7F:62:C8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847F155271B07CC5F28D58FF700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd792ac4-72c5-3479-867d-e3c0dceee16a.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 40647 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:27:1b:07:cc:5f:28:d5:8f:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=dc350ed5-fcac-433f-8461-10ddaad4cc3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:54:77:24:f3:10:35:49:d7:95:68:85:91:93: 08:1e:69:6f:e0:c3:59:66:bb:67:a2:7e:bd:34:8e: ff:4f:36:38:47:97:f1:fd:de:ad:cc:3e:af:07:3a: 92:0c:6c:04:4e:13:1e:39:83:b1:b9:47:0d:21:d2: c8:c8:ff:21:9d:99:db:29:01:55:02:6c:19:1f:0d: 47:47:b3:2e:b6:f5:b2:a7:97:b5:c9:5c:15:bf:13: 0a:8d:1c:87:a5:29:d4:90:e7:32:58:fe:bc:b2:af: da:d5:b2:8d:29:49:b4:48:9d:44:08:09:a7:67:9a: cf:c9:d9:ab:6c:43:1c:73:be:1b:52:1e:2f:d3:c9: 08:35:14:e5:bf:43:c5:7c:71:65:69:6d:1e:30:01: 03:64:da:72:56:4f:17:c2:c9:18:80:c8:0f:2c:1a: 81:31:38:34:b5:68:b7:4c:dd:34:e3:2f:f0:65:91: 4d:ae:b1:71:cf:2e:a6:fa:95:20:5d:b4:3f:c5:8a: 46:6c:53:fe:03:02:ed:6d:f0:cc:63:fc:6b:5a:f1: f3:11:49:c9:12:95:7f:ac:1a:aa:27:30:5f:22:40: 85:9d:b5:74:3f:86:c2:74:4f:42:32:8d:60:51:f4: 3a:4e:f4:ef:5b:df:b0:21:d8:e7:77:ca:11:78:29: 24:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:51:EF:B2:62:8F:65:C4:3F:02:80:32:99:03:F1:63:31:7F:62:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd792ac4-72c5-3479-867d-e3c0dceee16a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:ff:fa:83:7d:44:ed:34:70:81:6b:49:7d:9e:d7:40:04:63: de:22:6c:03:e7:74:6a:90:e5:d0:6e:e7:cc:95:3c:50:9a:0d: 07:e8:31:fc:6e:bc:01:58:90:6c:49:2e:fb:57:81:36:0c:89: 94:b2:24:0d:32:7e:8a:a2:6e:c2:af:17:0a:04:90:2a:4d:28: 16:f8:76:b5:59:45:93:9c:38:52:fa:63:6a:76:c3:d9:dc:d6: 59:7e:82:98:45:c9:10:4e:df:a9:06:cf:d0:cd:ee:05:c7:b5: 9b:13:d8:bd:da:7e:ee:c9:9d:2c:b4:2d:6f:11:3f:05:e2:a0: 44:8f:b7:70:e3:88:69:4d:1c:88:35:74:c9:a7:12:a5:ba:e6: b5:62:58:08:bf:c8:28:e7:9d:82:ab:17:2b:27:54:75:7e:89: b3:ec:15:81:fe:22:33:ca:e2:24:c0:24:15:9f:48:fb:5f:3f: 04:8a:08:b9:ea:9b:d0:eb:9f:de:6e:ae:d5:db:5e:cf:a0:a2: 6e:86:81:60:95:2a:15:0c:c9:96:da:06:91:66:1d:f5:cf:ea: 5e:a7:28:ec:81:a7:12:bf:4e:ef:be:d1:f4:1c:5b:35:1d:8b: 63:d0:25:51:09:52:05:98:de:36:af:0e:a5:d4:a9:7e:fd:81: fa:39:3f:46 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfxVScbB8xfKNWP9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ZGMzNTBlZDUtZmNhYy00MzNmLTg0NjEtMTBkZGFhZDRjYzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVR3JPMQNUnXlWiFkZMIHmlv4MNZZrtnon69 NI7/TzY4R5fx/d6tzD6vBzqSDGwEThMeOYOxuUcNIdLIyP8hnZnbKQFVAmwZHw1H R7MutvWyp5e1yVwVvxMKjRyHpSnUkOcyWP68sq/a1bKNKUm0SJ1ECAmnZ5rPydmr bEMcc74bUh4v08kINRTlv0PFfHFlaW0eMAEDZNpyVk8XwskYgMgPLBqBMTg0tWi3 TN004y/wZZFNrrFxzy6m+pUgXbQ/xYpGbFP+AwLtbfDMY/xrWvHzEUnJEpV/rBqq JzBfIkCFnbV0P4bCdE9CMo1gUfQ6TvTvW9+wIdjnd8oReCkkDwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDlR77Jij2XEPwKAMpkD8WMxf2LIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2Q3OTJhYzQtNzJjNS0z NDc5LTg2N2QtZTNjMGRjZWVlMTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAl//qDfUTtNHCBa0l9ntdABGPeImwD53RqkOXQ bufMlTxQmg0H6DH8brwBWJBsSS77V4E2DImUsiQNMn6Kom7CrxcKBJAqTSgW+Ha1 WUWTnDhS+mNqdsPZ3NZZfoKYRckQTt+pBs/Qze4Fx7WbE9i92n7uyZ0stC1vET8F 4qBEj7dw44hpTRyINXTJpxKluua1YlgIv8go552CqxcrJ1R1fomz7BWB/iIzyuIk wCQVn0j7Xz8Eigi56pvQ65/ebq7V217PoKJuhoFglSoVDMmW2gaRZh31z+pepyjs gacSv07vvtH0HFs1HYtj0CVRCVIFmN42rw6l1Kl+/YH6OT9G -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:24 2024 by rpki-client on console-ams.rpki-client.org