$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/1806c907-f51b-3ddd-9700-176341f778ee.roa File: 1806c907-f51b-3ddd-9700-176341f778ee.roa (raw, json) Hash identifier: NXIjlnrSycBSTHdQCGr5lVTPR4ihhNDJiO5j2k4Mgq0= Subject key identifier: 12:67:32:F5:C0:1B:44:C2:7F:1B:EA:78:E0:1E:0D:66:D3:07:1A:F3 Certificate issuer: /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Certificate serial: 010D0C9F43285848A13609ABE7B2484A5ABA1740 Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/1806c907-f51b-3ddd-9700-176341f778ee.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 62597 IP address blocks: 2620:4d:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:09:ab:e7:b2:48:4a:5a:ba:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=0178d5ce-bc30-4bac-8fa5-210469496bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9f:8d:8b:fe:63:ac:6b:ce:46:d1:01:4a:99: 2f:3e:58:9b:e1:bc:62:18:4e:3b:1c:75:06:05:fb: 13:06:05:c0:96:dc:a3:ee:11:be:ce:78:18:c5:c0: 75:08:f3:8b:c0:2b:b6:d3:0a:93:53:bb:77:3a:91: 3b:da:91:7f:86:2e:0f:b2:9a:68:98:52:10:9a:e4: fa:e8:82:7d:9b:11:c2:d4:74:09:2c:34:a5:9c:d7: 39:d2:40:3b:f2:80:e0:b7:bb:d3:82:ef:ea:dd:d2: c2:87:24:b4:89:ef:1f:51:88:5d:7b:96:7f:c4:5c: 8d:42:03:e7:1e:82:7b:db:fe:0c:55:d1:15:3f:1d: 50:89:e1:ed:5e:27:07:5c:a0:de:9b:50:22:30:1a: a7:63:1d:0f:b6:36:fd:e1:23:1c:20:14:41:f6:42: c7:b2:c0:86:47:bc:cb:3a:8c:0d:b1:b4:d5:4b:1b: b6:d7:c4:71:ac:97:d5:f6:ad:b6:07:fd:25:f8:07: f3:31:49:72:2f:4f:c3:0b:d0:80:a0:3d:25:2f:50: f6:72:69:18:03:a5:e9:78:c1:19:87:70:ea:e8:7a: 55:5a:e3:b0:70:cb:1d:0e:54:f5:01:14:3b:1c:99: 32:38:b9:12:25:b8:e6:62:8a:cc:d3:65:28:0d:f1: 19:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:67:32:F5:C0:1B:44:C2:7F:1B:EA:78:E0:1E:0D:66:D3:07:1A:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/1806c907-f51b-3ddd-9700-176341f778ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl X509v3 Authority Key Identifier: keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer sbgp-ipAddrBlock: critical IPv6: 2620:4d:4000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:6c:7d:9f:93:50:4b:d0:df:e1:f7:6e:8f:67:41:e9:30:82: 1e:89:ae:f4:81:ff:e0:d5:e0:20:be:64:8a:f4:05:93:f1:d6: 56:56:a2:c6:ff:e7:9c:87:a9:07:d6:e5:33:8a:56:24:bd:0d: 2e:33:eb:d3:d5:17:ae:6e:cd:15:a7:65:2f:4c:0e:9b:da:f8: 67:f6:df:d5:3b:ab:d2:8d:f0:16:b8:e0:20:b8:88:9a:10:8e: c0:a7:cb:ce:8a:d1:bd:0b:8e:d8:4f:8a:92:84:41:62:1d:95: 3f:c0:14:37:0f:2f:7e:f2:99:1e:10:dc:19:d1:a9:6d:85:df: 8b:6a:69:21:9f:76:02:4b:9b:5b:e9:35:12:a9:37:45:d2:83: d4:98:e9:ab:17:63:db:03:f4:05:44:36:c8:32:30:19:7b:01: 4f:d3:8a:5e:cc:7f:d8:39:f2:e6:09:eb:1e:f5:36:8c:24:d5: ec:f0:44:56:ab:b2:fa:07:cc:ed:89:19:85:09:84:78:19:63: 39:0f:01:7a:84:39:38:47:6f:84:ee:89:65:5c:f3:e4:5e:42: 78:9a:75:e2:cc:e2:f2:02:73:5b:cf:d5:d6:2d:4b:09:d4:76: be:8d:9e:b5:c1:a9:13:25:af:99:71:b5:03:36:22:e1:5e:6c: 7f:a1:ec:f4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEihNgmr57JISlq6F0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEwYjU0ZDQtOTIxYS00MDVhLThjN2EtNmFhMWRjYjI2 M2VhMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk MDE3OGQ1Y2UtYmMzMC00YmFjLThmYTUtMjEwNDY5NDk2YmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup+Ni/5jrGvORtEBSpkvPlib4bxiGE47HHUG BfsTBgXAltyj7hG+zngYxcB1CPOLwCu20wqTU7t3OpE72pF/hi4PsppomFIQmuT6 6IJ9mxHC1HQJLDSlnNc50kA78oDgt7vTgu/q3dLChyS0ie8fUYhde5Z/xFyNQgPn HoJ72/4MVdEVPx1QieHtXicHXKDem1AiMBqnYx0Ptjb94SMcIBRB9kLHssCGR7zL OowNsbTVSxu218RxrJfV9q22B/0l+AfzMUlyL0/DC9CAoD0lL1D2cmkYA6XpeMEZ h3Dq6HpVWuOwcMsdDlT1ARQ7HJkyOLkSJbjmYorM02UoDfEZRQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBJnMvXAG0TCfxvqeOAeDWbTBxrzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBi NTRkNC05MjFhLTQwNWEtOGM3YS02YWExZGNiMjYzZWEvMTgwNmM5MDctZjUxYi0z ZGRkLTk3MDAtMTc2MzQxZjc3OGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwYjU0ZDQtOTIxYS00MDVhLThj N2EtNmFhMWRjYjI2M2VhL2RhMGI1NGQ0LTkyMWEtNDA1YS04YzdhLTZhYTFkY2Iy NjNlYS5jcmwwHwYDVR0jBBgwFoAUBL87a95hwed1KW8LcOgjFNgbvA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBiNTRkNC05MjFhLTQwNWEtOGM3YS02YWEx ZGNiMjYzZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiAATUAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAC2x9n5NQS9Df4fduj2dB6TCCHomu9IH/4NXgIL5kivQFk/HWVlai xv/nnIepB9blM4pWJL0NLjPr09UXrm7NFadlL0wOm9r4Z/bf1Tur0o3wFrjgILiI mhCOwKfLzorRvQuO2E+KkoRBYh2VP8AUNw8vfvKZHhDcGdGpbYXfi2ppIZ92Akub W+k1Eqk3RdKD1Jjpqxdj2wP0BUQ2yDIwGXsBT9OKXsx/2Dny5gnrHvU2jCTV7PBE Vquy+gfM7YkZhQmEeBljOQ8BeoQ5OEdvhO6JZVzz5F5CeJp14szi8gJzW8/V1i1L CdR2vo2etcGpEyWvmXG1AzYi4V5sf6Hs9A== -----END CERTIFICATE-----Generated at Thu Apr 10 16:39:52 2025 by rpki-client