$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da08faf4-e7a9-3dfe-b4d9-331f323f76a4.roa File: da08faf4-e7a9-3dfe-b4d9-331f323f76a4.roa (raw, json) Hash identifier: LC9Pnr0FgynXSKnrto1x2pQ6ybqj73x20cjwZSwypt4= Subject key identifier: 8D:DA:CE:96:DE:60:2A:83:9D:03:65:B8:2A:58:3E:A0:2E:B0:A1:8E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847F1551B0EFC7E7579EC6DC8C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da08faf4-e7a9-3dfe-b4d9-331f323f76a4.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 396603 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:1b:0e:fc:7e:75:79:ec:6d:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=3926c297-bdf2-4f5c-9534-a0edd2cb1ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0b:fc:22:03:e7:1b:88:7c:5e:c7:07:22:61: c2:13:95:ff:ac:7e:b3:52:0c:4b:a6:d9:0f:e0:92: b5:da:d1:26:de:1c:f7:81:49:31:58:de:f3:94:66: 1f:3f:26:8f:d4:bf:c9:c4:7e:c1:36:93:6e:2d:54: ce:1f:99:be:69:a9:4c:72:e9:a3:e0:14:a9:d2:76: d6:cd:70:64:a7:51:40:af:47:ab:1c:f1:4d:3d:fa: b7:06:0d:4b:e4:53:88:e9:cf:4d:a6:d7:4c:8e:9f: 3d:cf:58:68:61:53:8a:95:98:dc:a4:a8:d9:6c:25: 48:41:b2:36:8b:97:5c:ce:99:e4:aa:af:da:b6:f9: a0:ff:36:45:e9:9f:2a:41:27:13:2b:b0:16:fa:5d: 7c:58:ab:60:50:a1:0b:84:96:51:32:5a:14:a3:e1: b3:58:85:30:7f:99:8a:d5:3a:bd:6d:33:ae:9c:72: 3c:1c:9b:79:b6:9d:6c:33:f5:f9:e2:1f:40:23:51: 5d:22:6c:fd:ac:90:f7:f7:9d:47:b8:56:9f:a3:cb: d7:e8:03:44:f5:81:7f:70:bd:e3:d6:dc:25:bb:b3: c0:0f:80:d2:1b:e5:8f:8a:57:40:a3:68:12:90:e8: 1c:b3:e6:92:f5:30:35:a1:1e:39:37:fc:44:1c:e9: 3b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:DA:CE:96:DE:60:2A:83:9D:03:65:B8:2A:58:3E:A0:2E:B0:A1:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da08faf4-e7a9-3dfe-b4d9-331f323f76a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:84:c7:59:42:a9:09:8c:67:01:15:7b:30:61:74:26:dd:cd: 6b:f2:de:74:fe:8b:8f:31:ce:2e:d9:ab:66:af:0c:14:68:e4: 68:82:e0:2b:69:b1:43:a7:1c:02:c5:37:ee:9e:02:55:db:8f: 2c:72:44:9f:4b:59:ba:00:54:a2:3b:24:1f:55:6b:4b:9e:12: fc:39:c3:10:31:1f:18:f5:6c:36:f1:39:94:3d:b4:31:a5:e4: b9:0e:8f:f7:a1:bf:a3:3c:1d:5c:50:1e:00:41:6c:fa:5d:11: fc:99:74:51:15:fd:0d:1b:91:d3:48:82:97:70:32:5f:83:9e: 11:6f:79:1a:64:9a:47:71:55:b3:d0:bd:20:f1:7b:dd:8b:e3: 4f:f0:e4:f6:b7:09:3d:13:02:4b:8e:bf:f6:52:82:bc:90:1a: 54:43:a8:15:ca:8c:c7:0f:12:77:27:43:3e:26:42:d2:0b:69: ab:79:8a:9b:a7:61:d0:6a:36:40:41:3a:8b:e7:b5:f9:1c:bd: cf:cf:5f:b3:e8:d5:1c:a5:1d:9a:59:6c:19:4a:43:dc:a0:27: 1e:9b:33:4e:ca:40:92:b5:aa:5f:0f:54:bc:cd:9f:93:9e:ff: ba:b7:c1:78:79:fb:86:5d:fa:65:d7:6f:13:58:21:1e:30:eb: 6e:76:ee:d4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfxVRsO/H51eextyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MzkyNmMyOTctYmRmMi00ZjVjLTk1MzQtYTBlZGQyY2IxZmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgv8IgPnG4h8XscHImHCE5X/rH6zUgxLptkP 4JK12tEm3hz3gUkxWN7zlGYfPyaP1L/JxH7BNpNuLVTOH5m+aalMcumj4BSp0nbW zXBkp1FAr0erHPFNPfq3Bg1L5FOI6c9NptdMjp89z1hoYVOKlZjcpKjZbCVIQbI2 i5dczpnkqq/atvmg/zZF6Z8qQScTK7AW+l18WKtgUKELhJZRMloUo+GzWIUwf5mK 1Tq9bTOunHI8HJt5tp1sM/X54h9AI1FdImz9rJD3951HuFafo8vX6ANE9YF/cL3j 1twlu7PAD4DSG+WPildAo2gSkOgcs+aS9TA1oR45N/xEHOk7uwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFI3azpbeYCqDnQNluCpYPqAusKGOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGEwOGZhZjQtZTdhOS0z ZGZlLWI0ZDktMzMxZjMyM2Y3NmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAjhMdZQqkJjGcBFXswYXQm3c1r8t50/ouPMc4u 2atmrwwUaORoguArabFDpxwCxTfungJV248sckSfS1m6AFSiOyQfVWtLnhL8OcMQ MR8Y9Ww28TmUPbQxpeS5Do/3ob+jPB1cUB4AQWz6XRH8mXRRFf0NG5HTSIKXcDJf g54Rb3kaZJpHcVWz0L0g8Xvdi+NP8OT2twk9EwJLjr/2UoK8kBpUQ6gVyozHDxJ3 J0M+JkLSC2mreYqbp2HQajZAQTqL57X5HL3Pz1+z6NUcpR2aWWwZSkPcoCcemzNO ykCStapfD1S8zZ+Tnv+6t8F4efuGXfpl128TWCEeMOtudu7U -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:46 2024 by rpki-client on console-fra.rpki-client.org