$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cdb679e8-8c03-350b-8270-06d1a9a9216c.roa File: cdb679e8-8c03-350b-8270-06d1a9a9216c.roa (raw, json) Hash identifier: XZDz/EA53Bhk1vLlfrCuPkB798zHhhO08GpzfEy9+38= Subject key identifier: ED:A8:C2:B7:71:CC:21:2C:4A:7E:76:E1:16:45:FE:77:14:67:09:74 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847766116498DA3126C92DBCEC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cdb679e8-8c03-350b-8270-06d1a9a9216c.roa Signing time: Mon 07 Oct 2024 13:00:40 +0000 ROA not before: Mon 07 Oct 2024 13:00:40 +0000 ROA not after: Sun 05 Jan 2025 14:00:40 +0000 asID: 7342 IP address blocks: 2620:74:64::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:61:16:49:8d:a3:12:6c:92:db:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:40 2024 GMT Not After : Jan 5 14:00:40 2025 GMT Subject: CN=29d9f0b2-b6b1-4b94-b072-0008f7b90d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5f:54:1c:f5:82:26:a6:24:01:3a:f5:d3:01: d2:13:b5:ee:d9:00:d5:83:f7:58:43:14:45:99:a8: 24:e2:23:6c:f1:f4:b2:22:9b:c6:90:dd:8a:58:7b: 17:52:b4:a8:71:7e:6b:b5:6f:c1:1c:4a:af:41:a9: 5b:57:01:89:f0:da:ac:e8:86:b7:9e:80:d8:b6:b3: fa:ac:c8:29:a3:d9:6f:94:36:2f:87:b5:d3:d1:0e: 69:91:94:91:db:2e:bd:da:2a:e2:7b:b7:01:88:7b: 1c:df:0f:a0:d1:2d:2b:96:ac:43:25:99:84:63:30: aa:d1:56:db:37:36:e9:56:ff:c2:9a:d3:45:f2:74: c0:62:24:33:dc:4f:a2:39:31:f0:f2:a1:62:8b:6a: 03:9d:be:c5:e9:57:be:f9:9f:c5:66:cc:17:08:e0: 42:0f:51:40:8d:4b:5d:cc:8f:04:09:5e:7e:df:0a: b5:fc:de:52:10:b9:5d:7e:32:1a:10:67:42:aa:5e: 5b:49:86:48:74:5a:5e:2e:55:f7:0a:65:9e:4a:66: 0c:68:9a:77:48:1c:2f:55:87:47:3d:b2:40:c8:49: 9e:57:ff:70:18:1d:02:af:83:a7:b4:33:18:d7:02: d1:da:10:3f:9d:ee:e4:7c:83:4e:83:ed:80:22:3a: 37:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A8:C2:B7:71:CC:21:2C:4A:7E:76:E1:16:45:FE:77:14:67:09:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cdb679e8-8c03-350b-8270-06d1a9a9216c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:64::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:9b:a7:51:b6:80:f2:51:81:cf:6a:bf:50:35:27:35:b5:59: 83:0f:6b:f2:dd:72:76:9d:13:3a:5b:40:92:30:ac:61:5d:6d: 8b:61:aa:1e:a3:e4:9a:41:e3:f1:8a:31:55:ee:70:ad:b5:47: 79:7d:aa:eb:97:0c:92:fe:9f:35:ce:da:da:62:c9:a8:d6:31: 6e:be:25:c9:af:2b:43:d0:f8:a1:86:fd:65:5a:2e:ab:79:93: a2:1c:d5:f9:13:d3:a1:8d:17:c0:17:4d:87:04:aa:e8:3e:76: a5:e7:0b:94:8a:20:4c:c2:aa:b3:7f:91:33:4d:72:d0:e5:e7: c7:8e:1e:28:e9:ae:d8:c8:64:79:3f:e0:06:67:5c:28:4b:44: 8e:61:5a:4b:d6:e4:31:a9:04:29:8d:80:33:cf:aa:25:aa:ec: 60:3c:a6:02:b2:19:6b:d7:7b:0d:e9:46:2a:ab:d9:f9:37:1d: 1d:85:11:bd:cf:67:9a:ae:32:14:30:f0:50:a1:dc:d1:5b:11: 3c:3f:34:0a:f6:44:48:68:a9:0f:6a:c8:7c:8c:14:4b:05:77: ee:6f:03:3a:2d:45:c4:15:59:af:de:e7:e8:f0:10:95:3c:73: 2a:b9:ed:5a:1b:86:bc:11:2b:b1:09:4b:41:c1:b0:3d:f3:12: 57:e2:34:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEd2YRZJjaMSbJLbzsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk MjlkOWYwYjItYjZiMS00Yjk0LWIwNzItMDAwOGY3YjkwZDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl9UHPWCJqYkATr10wHSE7Xu2QDVg/dYQxRF magk4iNs8fSyIpvGkN2KWHsXUrSocX5rtW/BHEqvQalbVwGJ8Nqs6Ia3noDYtrP6 rMgpo9lvlDYvh7XT0Q5pkZSR2y692irie7cBiHsc3w+g0S0rlqxDJZmEYzCq0Vbb NzbpVv/CmtNF8nTAYiQz3E+iOTHw8qFii2oDnb7F6Ve++Z/FZswXCOBCD1FAjUtd zI8ECV5+3wq1/N5SELldfjIaEGdCql5bSYZIdFpeLlX3CmWeSmYMaJp3SBwvVYdH PbJAyEmeV/9wGB0Cr4OntDMY1wLR2hA/ne7kfINOg+2AIjo3PQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO2owrdxzCEsSn524RZF/ncUZwl0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2RiNjc5ZTgtOGMwMy0z NTBiLTgyNzAtMDZkMWE5YTkyMTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADebp1G2gPJRgc9qv1A1JzW1WYMPa/LdcnadEzpbQJIwrGFdbYth qh6j5JpB4/GKMVXucK21R3l9quuXDJL+nzXO2tpiyajWMW6+JcmvK0PQ+KGG/WVa Lqt5k6Ic1fkT06GNF8AXTYcEqug+dqXnC5SKIEzCqrN/kTNNctDl58eOHijprtjI ZHk/4AZnXChLRI5hWkvW5DGpBCmNgDPPqiWq7GA8pgKyGWvXew3pRiqr2fk3HR2F Eb3PZ5quMhQw8FCh3NFbETw/NAr2REhoqQ9qyHyMFEsFd+5vAzotRcQVWa/e5+jw EJU8cyq57VobhrwRK7EJS0HBsD3zElfiNEw= -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:45 2024 by rpki-client on console-fra.rpki-client.org