$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd2209f3-37ce-32d6-97ec-3d99ffc6dc3b.roa File: dd2209f3-37ce-32d6-97ec-3d99ffc6dc3b.roa (raw, json) Hash identifier: Ga1gXhAK1/hElq6j0J1DbtlAbePIfbHvxpVe7WrZ5pU= Subject key identifier: A8:5F:5B:B7:A6:91:96:B0:0C:56:1D:75:12:D8:C2:11:ED:7C:BC:B4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584762D678222EFDB7F6BA34C880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd2209f3-37ce-32d6-97ec-3d99ffc6dc3b.roa Signing time: Mon 30 Sep 2024 13:00:42 +0000 ROA not before: Mon 30 Sep 2024 13:00:42 +0000 ROA not after: Sun 29 Dec 2024 14:00:42 +0000 asID: 7342 IP address blocks: 2620:74:6a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:62:d6:78:22:2e:fd:b7:f6:ba:34:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 30 13:00:42 2024 GMT Not After : Dec 29 14:00:42 2024 GMT Subject: CN=4f20e527-e653-42cb-a9e3-7f5d7ac41088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:02:15:44:95:86:f6:d8:30:c5:99:47:5f:4f: 20:ab:54:19:47:76:a0:ca:50:30:ed:8d:3c:91:ca: 33:31:a4:8c:27:4e:52:17:ae:99:04:9e:c7:cf:0b: 91:26:c5:18:29:ae:6e:1d:a5:4b:83:69:e3:e7:d6: af:78:8c:b4:da:90:ff:cb:f7:f8:1b:2b:49:ea:ec: fc:20:fb:0c:13:d4:62:1c:b6:a2:11:ef:52:6e:bd: 0d:0c:f7:13:8d:35:25:db:cd:61:ba:66:a0:d6:09: 2b:88:1d:f3:37:ea:88:99:fb:7b:7c:f4:04:72:c3: aa:db:25:6f:b4:09:eb:09:67:84:eb:76:3f:88:7a: 8c:1a:fa:82:60:c7:01:5c:eb:e8:68:e0:48:e9:5e: 5b:d1:13:a4:21:43:65:4c:72:25:d0:d7:7d:41:8e: 3c:d9:b8:83:03:9d:25:1f:dc:af:25:a5:73:35:68: 08:3d:12:d2:c6:02:07:b6:43:7c:3a:3f:94:f6:92: 55:66:9d:04:f3:dc:05:ea:41:a9:6e:ce:7e:4e:c7: a2:83:d1:32:a1:92:72:4f:20:7c:41:0b:47:fc:1d: c5:bc:fd:27:fa:6a:fe:1e:aa:b6:08:da:82:ae:97: 83:f1:5a:3a:d0:25:b3:56:c2:72:4a:9d:31:2f:52: 54:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5F:5B:B7:A6:91:96:B0:0C:56:1D:75:12:D8:C2:11:ED:7C:BC:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd2209f3-37ce-32d6-97ec-3d99ffc6dc3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:6a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:ff:cb:e0:0f:3d:77:34:bd:27:80:4c:05:a6:cb:c3:a0:16: 95:d6:d3:d5:88:76:b4:41:ea:22:e7:c9:de:47:56:fb:97:2a: b9:90:ae:7d:64:91:3f:c5:fa:ed:f8:4e:12:f1:5d:bb:17:fb: 92:48:32:6b:c1:3b:36:14:04:fa:a2:03:24:70:2f:e7:4d:df: 93:55:9c:3c:f5:ec:d3:2d:38:ba:72:25:e6:25:4d:cd:ce:17: 20:61:c4:bc:53:ed:56:af:d3:28:e8:0d:61:5c:a9:f6:ed:a4: 26:b0:af:ce:fe:b0:b3:cf:dd:3f:9b:82:31:57:fc:f8:ba:cf: 0d:90:bb:c5:7a:1e:25:f2:26:61:92:ca:ab:6f:eb:14:88:20: 2b:2a:64:8d:6f:fd:f0:93:cc:19:8e:8e:dd:72:97:95:ae:2a: f9:4a:ac:36:e3:63:cd:b5:d2:02:87:cb:5b:0d:12:32:37:62: 97:da:ea:9d:56:c4:31:2e:94:63:d6:e5:e5:36:5f:d9:d9:a5: 0c:99:c4:4f:5b:70:a8:d9:f3:79:b7:f5:f2:93:50:22:7f:03: 26:05:2a:3f:97:2e:af:1d:ac:2f:47:10:47:6a:7f:9b:8e:a5: 28:4d:64:bd:35:70:14:b0:35:ec:f4:9d:bb:72:41:b6:14:67: 67:c4:e6:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdi1ngiLv239ro0yIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkzMDEzMDA0MloXDTI0MTIyOTE0MDA0MlowLzEtMCsGA1UEAxMk NGYyMGU1MjctZTY1My00MmNiLWE5ZTMtN2Y1ZDdhYzQxMDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwIVRJWG9tgwxZlHX08gq1QZR3agylAw7Y08 kcozMaSMJ05SF66ZBJ7HzwuRJsUYKa5uHaVLg2nj59aveIy02pD/y/f4GytJ6uz8 IPsME9RiHLaiEe9Sbr0NDPcTjTUl281humag1gkriB3zN+qImft7fPQEcsOq2yVv tAnrCWeE63Y/iHqMGvqCYMcBXOvoaOBI6V5b0ROkIUNlTHIl0Nd9QY482biDA50l H9yvJaVzNWgIPRLSxgIHtkN8Oj+U9pJVZp0E89wF6kGpbs5+Tseig9EyoZJyTyB8 QQtH/B3FvP0n+mr+Hqq2CNqCrpeD8Vo60CWzVsJySp0xL1JUfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKhfW7emkZawDFYddRLYwhHtfLy0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGQyMjA5ZjMtMzdjZS0z MmQ2LTk3ZWMtM2Q5OWZmYzZkYzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACz/y+APPXc0vSeATAWmy8OgFpXW09WIdrRB6iLnyd5HVvuXKrmQ rn1kkT/F+u34ThLxXbsX+5JIMmvBOzYUBPqiAyRwL+dN35NVnDz17NMtOLpyJeYl Tc3OFyBhxLxT7Vav0yjoDWFcqfbtpCawr87+sLPP3T+bgjFX/Pi6zw2Qu8V6HiXy JmGSyqtv6xSIICsqZI1v/fCTzBmOjt1yl5WuKvlKrDbjY8210gKHy1sNEjI3Ypfa 6p1WxDEulGPW5eU2X9nZpQyZxE9bcKjZ83m39fKTUCJ/AyYFKj+XLq8drC9HEEdq f5uOpShNZL01cBSwNez0nbtyQbYUZ2fE5oc= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:25 2024 by rpki-client on console-ams.rpki-client.org