$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9a2f116-0c12-314a-b5f7-cef03a98dfa3.roa File: d9a2f116-0c12-314a-b5f7-cef03a98dfa3.roa (raw, json) Hash identifier: WRQ3WpkJrfVDhPbXZpNu6pQ3Pc6egLgKVk67s4Xei2U= Subject key identifier: B6:BD:A8:06:EA:6F:5C:16:3B:9C:A8:E2:10:06:65:75:9C:0F:0D:51 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847F155230A31515DEE2F48E880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9a2f116-0c12-314a-b5f7-cef03a98dfa3.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 22547 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:23:0a:31:51:5d:ee:2f:48:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=6db8d1fa-6659-4b4f-83b2-5e7bda1ca33c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:01:07:5e:75:d3:19:00:04:3e:4f:bc:88:0b: 44:e8:84:8d:a9:3c:f5:27:1f:b1:7e:f9:55:bd:7d: 99:f5:20:f3:93:6c:f8:7e:27:00:66:e4:02:87:23: 98:80:43:31:33:e5:56:ec:b8:b4:7e:4f:2c:c9:ee: f4:0c:7d:0e:3e:f6:b8:6f:c7:88:3f:df:cf:ed:ea: 95:5e:be:2d:fd:19:17:29:b6:02:02:36:7a:d6:4c: 45:09:49:93:7f:fa:19:2a:94:10:5a:48:79:ce:79: ac:51:53:43:20:e1:4a:da:02:b3:33:28:50:fa:d6: 45:d4:7a:1d:5f:90:eb:63:ec:91:54:b5:d5:50:02: 00:e2:6d:c1:e3:6c:b9:17:a0:a6:e4:be:bd:a2:04: 01:e5:26:9c:e4:2b:02:af:46:c9:6c:e2:a9:2d:33: 1a:f7:2c:32:7f:f1:a2:36:7f:de:4b:d2:a5:b9:60: 6d:24:53:1a:2c:10:26:2d:57:e5:3f:01:60:4e:e9: 97:9b:07:f4:b1:15:b7:00:c2:5c:9d:89:10:6c:5a: e4:9c:de:a3:a9:f4:a0:b6:80:7e:8a:26:01:34:3d: 70:07:e4:59:62:a5:ae:50:a9:20:2e:cb:54:01:2e: f6:76:5e:61:ed:d4:78:ab:ca:0f:2e:9e:58:0b:b1: a3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BD:A8:06:EA:6F:5C:16:3B:9C:A8:E2:10:06:65:75:9C:0F:0D:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9a2f116-0c12-314a-b5f7-cef03a98dfa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:10:22:6f:60:c6:c5:35:56:9e:67:45:bd:e0:94:df:ff:7f: e5:8b:19:f8:ba:c7:95:4c:e3:70:b4:e7:88:8e:3d:fb:d3:5f: f6:7a:20:21:e7:39:5e:dd:a6:ad:07:7a:96:c3:d5:31:c4:80: f5:3f:8f:8d:fe:2f:76:17:ef:a6:a7:4d:9a:38:6f:59:79:2b: e8:c7:7f:94:c5:82:2e:ae:bd:7a:70:fc:7f:9f:f4:88:ff:75: a2:7f:25:fa:01:b6:5f:92:60:24:40:f6:df:1a:d1:bb:86:3a: ef:22:8b:5a:fe:03:24:a1:cc:3b:43:5f:ec:3e:85:30:49:d0: b7:27:7d:4a:aa:4d:4c:de:6d:b8:14:b1:e8:b0:1f:df:38:28: a5:0f:85:80:62:99:63:f7:1d:f4:1e:a8:8d:39:bc:87:87:5a: c8:01:1c:f1:00:05:d3:96:57:03:fc:7b:76:2f:af:70:f2:08: 37:2c:83:5e:46:1a:ad:db:e1:85:bf:06:c8:d8:13:1a:15:06: 95:e8:2d:0f:ff:04:8f:d1:17:fe:d5:78:71:38:f4:10:5a:b1: ee:ea:04:63:c1:e4:24:89:f3:36:5c:11:aa:cc:e6:79:54:3b: 34:91:55:44:87:96:d4:9d:18:7e:1d:ba:5f:84:f8:74:5e:3b: 39:ed:af:98 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfxVSMKMVFd7i9I6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NmRiOGQxZmEtNjY1OS00YjRmLTgzYjItNWU3YmRhMWNhMzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwEHXnXTGQAEPk+8iAtE6ISNqTz1Jx+xfvlV vX2Z9SDzk2z4ficAZuQChyOYgEMxM+VW7Li0fk8sye70DH0OPva4b8eIP9/P7eqV Xr4t/RkXKbYCAjZ61kxFCUmTf/oZKpQQWkh5znmsUVNDIOFK2gKzMyhQ+tZF1Hod X5DrY+yRVLXVUAIA4m3B42y5F6Cm5L69ogQB5Sac5CsCr0bJbOKpLTMa9ywyf/Gi Nn/eS9KluWBtJFMaLBAmLVflPwFgTumXmwf0sRW3AMJcnYkQbFrknN6jqfSgtoB+ iiYBND1wB+RZYqWuUKkgLstUAS72dl5h7dR4q8oPLp5YC7GjgwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLa9qAbqb1wWO5yo4hAGZXWcDw1RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDlhMmYxMTYtMGMxMi0z MTRhLWI1ZjctY2VmMDNhOThkZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBSECJvYMbFNVaeZ0W94JTf/3/lixn4useVTONw tOeIjj3701/2eiAh5zle3aatB3qWw9UxxID1P4+N/i92F++mp02aOG9ZeSvox3+U xYIurr16cPx/n/SI/3WifyX6AbZfkmAkQPbfGtG7hjrvIota/gMkocw7Q1/sPoUw SdC3J31Kqk1M3m24FLHosB/fOCilD4WAYplj9x30HqiNObyHh1rIARzxAAXTllcD /Ht2L69w8gg3LINeRhqt2+GFvwbI2BMaFQaV6C0P/wSP0Rf+1XhxOPQQWrHu6gRj weQkifM2XBGqzOZ5VDs0kVVEh5bUnRh+HbpfhPh0Xjs57a+Y -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:24 2024 by rpki-client on console-ams.rpki-client.org