$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd2209f3-37ce-32d6-97ec-3d99ffc6dc3b.roa File: dd2209f3-37ce-32d6-97ec-3d99ffc6dc3b.roa (raw, json) Hash identifier: 0eZMSUUkw4cBUyNtVtbnuSwJQDTX7hAYXKVNSfmQSJo= Subject key identifier: 44:0A:17:D7:CE:60:78:B7:0F:6C:F8:18:32:3E:E5:AD:C9:2E:6D:47 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285845A41D857A583A68006BDB4D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd2209f3-37ce-32d6-97ec-3d99ffc6dc3b.roa Signing time: Tue 23 Apr 2024 12:38:08 +0000 ROA not before: Tue 23 Apr 2024 12:38:08 +0000 ROA not after: Mon 22 Jul 2024 12:38:08 +0000 asID: 7342 IP address blocks: 2620:74:6a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a4:1d:85:7a:58:3a:68:00:6b:db:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 23 12:38:08 2024 GMT Not After : Jul 22 12:38:08 2024 GMT Subject: CN=25987c00-ea80-4dac-b5a5-de5f8c711cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b3:d1:fe:00:15:34:28:1f:81:bc:31:28:35: 83:e0:d9:f9:b9:58:74:a5:8f:b5:5b:ab:db:1a:18: 3a:4d:f1:d0:b1:6a:3c:7d:27:b0:f2:63:23:09:a8: ab:51:e8:58:8a:34:fd:eb:a3:5f:23:50:c7:7c:8c: f6:03:71:41:a1:2b:a0:bc:e4:1d:26:83:59:cb:ae: 79:2a:e9:6c:6d:4b:c3:0b:27:b3:17:7f:75:ce:30: 23:34:96:bb:b0:02:04:ec:c4:a1:68:34:99:1c:1c: 3e:9e:34:33:0c:3a:e9:16:d3:93:0c:ec:4d:f7:3d: c4:4b:b1:49:3b:86:e7:11:f7:23:f1:31:91:57:12: dc:e3:bd:28:10:79:4d:2f:79:4f:3e:5f:49:9e:b6: 44:61:dd:f7:ce:31:48:10:73:56:31:78:a8:c8:6f: a9:5b:ca:f2:12:ee:e1:4f:c5:b0:7a:7b:10:d1:db: 1c:2d:70:5a:2e:c7:99:02:d1:b3:bc:d3:5f:0a:d4: 5b:62:d2:5d:53:72:83:8f:de:2d:b5:74:73:a1:ea: 60:c3:ec:ec:1a:b1:86:05:71:e4:33:6d:b8:0e:d2: 0f:b7:05:33:86:28:57:ab:83:ef:a1:e4:e4:d9:82: b3:7f:6e:fc:38:e7:64:3a:c9:3e:a6:21:e5:f3:9f: 43:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0A:17:D7:CE:60:78:B7:0F:6C:F8:18:32:3E:E5:AD:C9:2E:6D:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd2209f3-37ce-32d6-97ec-3d99ffc6dc3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:6a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:2d:e4:e8:7c:3a:98:93:55:f7:31:fe:f9:c8:b6:1b:e9:7b: 86:72:fa:a4:c0:0f:92:43:73:29:b9:61:ce:a0:1f:d5:83:97: 39:a3:45:ce:f4:3c:de:ac:77:1b:42:2e:32:97:e9:ee:a2:ab: 2e:6a:18:f6:80:bc:f4:12:2c:d4:fa:89:93:be:5a:b4:20:53: 1c:be:df:99:06:66:0e:bd:1c:3f:ac:47:30:fe:ed:f0:c3:61: 11:d8:a0:ac:57:f6:86:5c:ec:02:27:94:b6:5d:7b:e9:f6:f5: e3:9f:85:e2:3b:18:b0:ac:d4:24:2e:90:52:71:98:26:aa:60: 00:b0:a3:44:08:fa:99:51:0d:3f:f0:c4:59:bd:d8:3b:86:32: 44:a2:e6:9a:62:28:13:88:5e:e0:21:79:f5:fe:8b:4b:a4:e7: 76:ef:99:10:57:36:a9:a6:91:01:4d:fa:45:9e:39:50:df:5f: 04:06:c0:46:8c:9c:9d:9a:a8:b0:34:a1:21:75:50:9d:14:b6: b0:2b:53:67:59:83:8e:46:bd:d3:67:ac:1f:a1:c9:d6:bb:41: 97:6b:ae:be:59:d9:f9:75:2b:51:ff:e6:75:ec:e9:96:fb:3c: 4a:52:92:9a:35:5f:ee:3c:9f:07:b8:fe:d0:84:9b:6d:80:39: 83:a6:4e:f3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWkHYV6WDpoAGvbTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDQyMzEyMzgwOFoXDTI0MDcyMjEyMzgwOFowLzEtMCsGA1UEAxMk MjU5ODdjMDAtZWE4MC00ZGFjLWI1YTUtZGU1ZjhjNzExY2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLPR/gAVNCgfgbwxKDWD4Nn5uVh0pY+1W6vb Ghg6TfHQsWo8fSew8mMjCairUehYijT966NfI1DHfIz2A3FBoSugvOQdJoNZy655 KulsbUvDCyezF391zjAjNJa7sAIE7MShaDSZHBw+njQzDDrpFtOTDOxN9z3ES7FJ O4bnEfcj8TGRVxLc470oEHlNL3lPPl9JnrZEYd33zjFIEHNWMXioyG+pW8ryEu7h T8WwensQ0dscLXBaLseZAtGzvNNfCtRbYtJdU3KDj94ttXRzoepgw+zsGrGGBXHk M224DtIPtwUzhihXq4PvoeTk2YKzf278OOdkOsk+piHl859DGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEQKF9fOYHi3D2z4GDI+5a3JLm1HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGQyMjA5ZjMtMzdjZS0z MmQ2LTk3ZWMtM2Q5OWZmYzZkYzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEIt5Oh8OpiTVfcx/vnIthvpe4Zy+qTAD5JDcym5Yc6gH9WDlzmj Rc70PN6sdxtCLjKX6e6iqy5qGPaAvPQSLNT6iZO+WrQgUxy+35kGZg69HD+sRzD+ 7fDDYRHYoKxX9oZc7AInlLZde+n29eOfheI7GLCs1CQukFJxmCaqYACwo0QI+plR DT/wxFm92DuGMkSi5ppiKBOIXuAhefX+i0uk53bvmRBXNqmmkQFN+kWeOVDfXwQG wEaMnJ2aqLA0oSF1UJ0UtrArU2dZg45GvdNnrB+hyda7QZdrrr5Z2fl1K1H/5nXs 6Zb7PEpSkpo1X+48nwe4/tCEm22AOYOmTvM= -----END CERTIFICATE-----Generated at Sun May 12 15:20:24 2024 by rpki-client on console-ams.rpki-client.org