$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e9e2c79d-24a0-3300-a416-7f24ab517a2a.roa File: e9e2c79d-24a0-3300-a416-7f24ab517a2a.roa (raw, json) Hash identifier: u7xEc5vpQfzXTc60Hp/rTUCNOvym+slu8tAF485I3RU= Subject key identifier: DA:E7:C3:9C:F8:D2:74:90:B4:B4:D1:21:6B:D7:6A:A1:89:D3:B0:25 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858475A762A072E2240A9B94D1D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e9e2c79d-24a0-3300-a416-7f24ab517a2a.roa Signing time: Fri 27 Sep 2024 13:00:41 +0000 ROA not before: Fri 27 Sep 2024 13:00:41 +0000 ROA not after: Thu 26 Dec 2024 14:00:41 +0000 asID: 397203 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5a:76:2a:07:2e:22:40:a9:b9:4d:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 27 13:00:41 2024 GMT Not After : Dec 26 14:00:41 2024 GMT Subject: CN=b341d37e-a7d7-4916-9f76-a0804873de26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e4:0d:35:be:f1:22:9c:0a:df:d5:94:cc:0a: 39:a1:bf:95:c8:9d:09:be:50:5e:5c:24:5d:1a:dc: 55:73:a9:aa:73:13:5d:ea:7b:14:df:bf:e0:8d:95: c2:19:19:a6:1d:76:e2:55:f2:2a:09:0f:19:47:10: 75:53:38:64:73:7a:b7:c8:03:0c:a3:bc:1d:0a:c7: c8:79:34:11:91:d0:79:46:9b:7f:01:f7:89:9a:27: 6a:03:c6:4a:c7:44:cf:2e:81:89:b0:06:40:9a:60: 0d:ed:58:8e:15:39:74:b1:25:44:0e:37:65:1f:d1: c5:93:a1:d7:8a:56:a3:7a:1f:4a:dc:ad:c8:3e:7a: a2:a3:0d:e5:99:46:a2:5e:50:b2:de:8f:09:70:ad: d3:ba:f5:f8:87:a0:b4:60:23:53:3c:61:2f:32:5c: ae:c7:31:fa:27:ed:b5:2e:00:f6:f5:c9:f1:45:e5: 03:7a:4c:47:41:e3:be:44:4c:d8:e0:54:d1:85:97: 5d:0f:d8:45:44:5b:a9:e2:53:97:44:e6:43:4c:34: 61:8e:36:8a:c8:74:ca:17:b6:24:78:dd:4c:e5:c5: 67:db:42:03:72:68:d1:74:b6:11:12:30:73:33:df: af:2c:a1:fc:ff:c6:71:ae:df:57:56:c9:31:af:60: c7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E7:C3:9C:F8:D2:74:90:B4:B4:D1:21:6B:D7:6A:A1:89:D3:B0:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e9e2c79d-24a0-3300-a416-7f24ab517a2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:18:32:40:26:5a:ec:2f:b8:2a:d4:55:71:99:9b:10:b4:fd: 13:47:b9:71:ce:bf:47:69:b8:c7:4d:f6:92:c0:ee:d4:91:91: cc:5e:21:d3:56:5a:28:6b:e7:56:7b:bc:0a:05:6a:83:97:4d: 06:a0:13:47:62:99:6c:ea:93:8b:ac:7f:ee:04:3f:dd:c9:33: c6:b2:6d:bd:93:ea:ae:ba:02:68:56:0f:18:88:0e:63:5e:14: 26:42:7c:71:90:0d:06:d4:3c:63:70:bc:ad:9e:6a:c3:48:38: 83:6d:c3:5c:39:83:e1:5d:fa:57:5f:64:66:6c:3f:dc:f3:78: cf:28:e5:87:4c:c8:a2:3d:b5:72:a2:f8:7f:7a:e1:70:6d:e6: 42:25:5a:a4:71:31:42:04:d8:f5:75:6b:7e:e8:e6:5a:ba:ec: 51:e7:a3:3b:a6:21:60:d0:b4:69:39:cf:2d:c0:fd:bd:22:87: c2:2a:30:81:bc:89:cd:b0:11:f1:5a:5f:84:48:fc:f5:af:5a: e2:47:0d:9a:3f:67:88:2d:46:ca:f3:58:6b:0d:be:b5:34:21: 88:db:5f:48:94:19:9c:0c:6d:e7:21:e5:af:32:22:33:fa:33: d9:49:77:11:b1:bd:17:e2:bf:b9:b3:1a:dc:22:18:bc:63:82: 21:24:5c:3f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEdadioHLiJAqblNHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkyNzEzMDA0MVoXDTI0MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk YjM0MWQzN2UtYTdkNy00OTE2LTlmNzYtYTA4MDQ4NzNkZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOQNNb7xIpwK39WUzAo5ob+VyJ0JvlBeXCRd GtxVc6mqcxNd6nsU37/gjZXCGRmmHXbiVfIqCQ8ZRxB1Uzhkc3q3yAMMo7wdCsfI eTQRkdB5Rpt/AfeJmidqA8ZKx0TPLoGJsAZAmmAN7ViOFTl0sSVEDjdlH9HFk6HX ilajeh9K3K3IPnqiow3lmUaiXlCy3o8JcK3TuvX4h6C0YCNTPGEvMlyuxzH6J+21 LgD29cnxReUDekxHQeO+REzY4FTRhZddD9hFRFup4lOXROZDTDRhjjaKyHTKF7Yk eN1M5cVn20IDcmjRdLYREjBzM9+vLKH8/8Zxrt9XVskxr2DHGwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNrnw5z40nSQtLTRIWvXaqGJ07AlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTllMmM3OWQtMjRhMC0z MzAwLWE0MTYtN2YyNGFiNTE3YTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB4GDJAJlrsL7gq1FVxmZsQtP0TR7lxzr9HabjH TfaSwO7UkZHMXiHTVlooa+dWe7wKBWqDl00GoBNHYpls6pOLrH/uBD/dyTPGsm29 k+quugJoVg8YiA5jXhQmQnxxkA0G1DxjcLytnmrDSDiDbcNcOYPhXfpXX2RmbD/c 83jPKOWHTMiiPbVyovh/euFwbeZCJVqkcTFCBNj1dWt+6OZauuxR56M7piFg0LRp Oc8twP29IofCKjCBvInNsBHxWl+ESPz1r1riRw2aP2eILUbK81hrDb61NCGI219I lBmcDG3nIeWvMiIz+jPZSXcRsb0X4r+5sxrcIhi8Y4IhJFw/ -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:47 2024 by rpki-client on console-fra.rpki-client.org