$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec742843-d253-3a6b-9952-4646f89e3124.roa File: ec742843-d253-3a6b-9952-4646f89e3124.roa (raw, json) Hash identifier: gpgo9r9eoOiP+Yz8RReR9YSmKpZs+olYUB7jF99snrE= Subject key identifier: 1D:99:B6:D1:82:7C:06:E3:FC:0D:3D:60:B2:4B:4E:B4:DE:A5:24:71 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285845B7AC025EBAC6B40BAB201690 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec742843-d253-3a6b-9952-4646f89e3124.roa Signing time: Tue 30 Apr 2024 12:45:35 +0000 ROA not before: Tue 30 Apr 2024 12:45:35 +0000 ROA not after: Mon 29 Jul 2024 12:45:35 +0000 asID: 7342 IP address blocks: 2620:74:41::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b7:ac:02:5e:ba:c6:b4:0b:ab:20:16:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 12:45:35 2024 GMT Not After : Jul 29 12:45:35 2024 GMT Subject: CN=6693e892-3467-4ae8-827c-592d88b39a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:27:36:6c:d7:0a:0c:03:49:6a:8f:9f:77:92: 1e:37:e1:d3:cf:6e:83:ad:d8:d5:17:3f:38:e8:1a: 31:65:23:fc:0d:f4:91:a6:5b:51:ce:ad:63:09:15: 71:b3:af:64:8c:ca:b8:93:cf:fd:f7:ca:d1:46:fb: 8d:59:88:4d:b6:23:25:15:2d:78:33:31:51:25:b5: c2:2b:32:aa:0e:67:79:ac:50:72:a4:70:83:c5:0b: 1e:f3:76:f1:37:aa:9b:69:33:9d:b9:b3:86:a6:9a: 6d:f6:d3:08:de:2d:9d:8f:d7:db:87:3f:44:c9:01: 62:0a:8c:a4:fe:5f:ee:4b:a8:14:b6:bc:21:2b:00: 7c:4b:3e:ea:d7:5c:6a:6f:60:94:00:3c:f3:38:6e: 97:f4:3f:56:bf:6e:c4:6c:9b:77:a2:1a:0d:08:63: b0:dd:aa:dc:eb:16:27:2c:55:30:da:ee:bf:65:49: a4:33:89:41:4a:9f:42:14:60:44:9e:cd:02:fa:7a: b7:5f:a6:d1:2b:46:f0:cb:47:87:3e:db:0e:6e:e1: 89:c5:43:99:67:87:07:11:86:52:79:c9:f9:f5:1a: e1:71:c6:cc:d7:ba:6b:4e:75:20:9f:a4:12:a6:31: cc:38:72:3b:f2:d5:74:37:6a:22:2a:ab:af:9c:04: 0a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:99:B6:D1:82:7C:06:E3:FC:0D:3D:60:B2:4B:4E:B4:DE:A5:24:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec742843-d253-3a6b-9952-4646f89e3124.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:41::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:82:22:bf:67:b3:ef:7f:ee:41:73:69:f7:3f:9a:1e:6b:c9: a8:06:43:a3:a8:3a:97:be:8f:cd:39:7b:a9:69:1d:ef:09:55: 21:dc:81:af:08:ac:35:1c:65:db:3a:63:42:f3:eb:6a:ac:41: fa:c4:db:b4:ee:29:e4:f9:ef:04:f7:c1:a4:e7:fa:11:61:d7: 52:6a:3c:92:84:03:27:48:a1:75:bf:6f:10:28:e7:20:3f:02: 7b:e7:2d:43:5c:d6:1b:d6:32:93:10:96:65:8f:4d:df:01:78: 78:2f:07:15:36:ba:48:8d:60:69:ee:1c:a4:87:f1:ad:76:28: 64:3f:0c:2d:c3:7e:03:6c:76:9c:e9:a4:83:d0:6f:3e:c9:b3: 80:55:0d:02:08:e3:b5:52:2e:cf:85:d6:c0:6e:85:55:4a:e0: 7d:11:44:01:fd:94:23:f5:59:a3:48:ef:64:4f:72:76:36:24: e6:51:dc:a7:21:8c:59:a6:81:3c:ec:e5:92:e5:93:9c:06:0b: 83:69:61:4f:ba:ea:76:e1:6d:20:05:d9:6f:5a:9d:b8:9d:17: fc:d1:e6:36:9c:c0:7c:e2:1d:bd:85:64:c1:24:0b:19:20:e9: 63:68:45:b4:59:72:ba:09:84:44:7f:bd:a7:c3:02:c4:69:c5: 0a:19:4a:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEW3rAJeusa0C6sgFpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDQzMDEyNDUzNVoXDTI0MDcyOTEyNDUzNVowLzEtMCsGA1UEAxMk NjY5M2U4OTItMzQ2Ny00YWU4LTgyN2MtNTkyZDg4YjM5YTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCc2bNcKDANJao+fd5IeN+HTz26DrdjVFz84 6BoxZSP8DfSRpltRzq1jCRVxs69kjMq4k8/998rRRvuNWYhNtiMlFS14MzFRJbXC KzKqDmd5rFBypHCDxQse83bxN6qbaTOdubOGpppt9tMI3i2dj9fbhz9EyQFiCoyk /l/uS6gUtrwhKwB8Sz7q11xqb2CUADzzOG6X9D9Wv27EbJt3ohoNCGOw3arc6xYn LFUw2u6/ZUmkM4lBSp9CFGBEns0C+nq3X6bRK0bwy0eHPtsObuGJxUOZZ4cHEYZS ecn59RrhccbM17prTnUgn6QSpjHMOHI78tV0N2oiKquvnAQKGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB2ZttGCfAbj/A09YLJLTrTepSRxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWM3NDI4NDMtZDI1My0z YTZiLTk5NTItNDY0NmY4OWUzMTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABWCIr9ns+9/7kFzafc/mh5ryagGQ6OoOpe+j805e6lpHe8JVSHc ga8IrDUcZds6Y0Lz62qsQfrE27TuKeT57wT3waTn+hFh11JqPJKEAydIoXW/bxAo 5yA/AnvnLUNc1hvWMpMQlmWPTd8BeHgvBxU2ukiNYGnuHKSH8a12KGQ/DC3DfgNs dpzppIPQbz7Js4BVDQII47VSLs+F1sBuhVVK4H0RRAH9lCP1WaNI72RPcnY2JOZR 3KchjFmmgTzs5ZLlk5wGC4NpYU+66nbhbSAF2W9anbidF/zR5jacwHziHb2FZMEk Cxkg6WNoRbRZcroJhER/vafDAsRpxQoZSiE= -----END CERTIFICATE-----Generated at Thu May 23 01:44:25 2024 by rpki-client on console-fra.rpki-client.org