$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/7711e710-d931-3d65-aa3c-e7e676c7e85e.roa File: 7711e710-d931-3d65-aa3c-e7e676c7e85e.roa (raw, json) Hash identifier: lh/jxo0kGmf95XCgVj5/6B9Oht3BTzkJS5RK2JMjK70= Subject key identifier: BB:AD:4E:57:DF:12:47:16:C3:49:92:06:C0:CB:34:3A:2A:B9:13:60 Certificate issuer: /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Certificate serial: 010D0C9F43285848A136095A95E3FD16D9F4DBC0 Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/7711e710-d931-3d65-aa3c-e7e676c7e85e.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 395403 IP address blocks: 2620:4d:400e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:09:5a:95:e3:fd:16:d9:f4:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=fd02c05b-e9bf-4858-8665-786daed4cf94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4f:ab:72:79:69:3a:c7:7b:21:b5:e0:d5:62: 5e:c6:71:44:bd:33:72:c8:6b:3c:ad:f9:17:48:1a: a5:de:74:4f:78:95:50:2c:f8:f2:aa:07:d4:d4:9b: 10:f0:b6:dc:41:11:db:29:4e:ab:07:30:35:cb:3b: 35:ee:0d:04:16:61:3b:b6:9a:d9:69:75:d9:70:1d: 2d:9d:e7:df:8d:84:a3:6d:70:a2:e0:91:05:dc:c5: 4c:c0:4f:88:31:8b:54:67:ee:5d:d3:9e:3e:ae:19: 1d:8d:50:fd:23:84:5a:f1:b1:54:94:69:11:9c:b2: 55:c1:5f:8e:a0:c1:56:5a:d0:7f:7d:64:57:a4:fd: 1e:3e:cf:39:16:79:59:83:f4:b2:11:84:2a:6f:c7: 08:4b:7f:32:f1:0c:d1:50:b6:45:84:1a:98:19:02: 50:38:7b:bb:fb:94:fd:db:c2:7d:31:43:be:6f:57: 85:f2:fb:09:81:4e:55:3d:59:8e:b6:e9:3c:9a:3a: 6c:3e:d9:ab:76:41:99:ff:ac:44:6c:f5:1e:f1:50: b3:09:a9:39:51:09:9b:cd:bf:ff:bc:99:66:15:d6: b9:27:f4:c3:df:8e:d9:66:f5:4c:a1:78:8d:4c:40: cf:0f:2a:d7:82:8b:69:37:87:7b:10:87:f9:bf:d6: 65:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AD:4E:57:DF:12:47:16:C3:49:92:06:C0:CB:34:3A:2A:B9:13:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/7711e710-d931-3d65-aa3c-e7e676c7e85e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl X509v3 Authority Key Identifier: keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer sbgp-ipAddrBlock: critical IPv6: 2620:4d:400e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:de:66:72:9b:9d:d5:3c:6f:82:b1:56:f8:2b:fb:3f:33:07: 12:96:a5:7e:f1:d2:5c:c3:a7:ba:4f:de:11:fe:f7:cb:3b:b8: 63:e6:a0:db:a5:83:91:b8:ce:2f:29:0d:12:61:59:41:9d:0d: ea:25:2d:95:2e:36:63:11:bc:35:4d:75:96:b0:e7:ed:e9:fc: e8:90:2d:e4:96:9b:fe:b7:d6:f0:4f:a3:6e:5b:6e:2c:bf:58: 46:ec:98:9a:df:b4:45:8a:98:25:16:69:40:61:cd:74:51:c2: eb:cb:af:81:9b:f7:ed:3d:e7:09:8c:52:9b:07:0f:f0:1c:fc: eb:89:31:05:b4:5b:a7:b6:1e:9e:c6:b3:79:9c:25:c3:68:bf: 41:0d:7f:8e:c8:66:36:2e:82:8a:0d:dc:5c:6c:6b:01:52:50: d8:1c:dd:86:b3:b4:12:73:14:a7:88:bf:b3:e9:79:1f:22:f0: f3:2d:2d:38:4f:ac:60:97:b8:00:67:6d:a8:33:10:89:4f:8d: f8:16:7c:ac:08:d5:71:19:89:f8:ea:ec:ac:99:74:0d:7a:ff: 79:98:ed:33:b6:68:b0:91:06:e3:7c:2d:6e:a4:f1:de:21:ad: 08:70:a8:7a:72:33:9f:98:3d:c2:7e:f9:66:da:09:6d:95:fc: 23:1e:c1:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNglaleP9Ftn028AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEwYjU0ZDQtOTIxYS00MDVhLThjN2EtNmFhMWRjYjI2 M2VhMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk ZmQwMmMwNWItZTliZi00ODU4LTg2NjUtNzg2ZGFlZDRjZjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU+rcnlpOsd7IbXg1WJexnFEvTNyyGs8rfkX SBql3nRPeJVQLPjyqgfU1JsQ8LbcQRHbKU6rBzA1yzs17g0EFmE7tprZaXXZcB0t neffjYSjbXCi4JEF3MVMwE+IMYtUZ+5d054+rhkdjVD9I4Ra8bFUlGkRnLJVwV+O oMFWWtB/fWRXpP0ePs85FnlZg/SyEYQqb8cIS38y8QzRULZFhBqYGQJQOHu7+5T9 28J9MUO+b1eF8vsJgU5VPVmOtuk8mjpsPtmrdkGZ/6xEbPUe8VCzCak5UQmbzb// vJlmFda5J/TD347ZZvVMoXiNTEDPDyrXgotpN4d7EIf5v9ZlFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLutTlffEkcWw0mSBsDLNDoquRNgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBi NTRkNC05MjFhLTQwNWEtOGM3YS02YWExZGNiMjYzZWEvNzcxMWU3MTAtZDkzMS0z ZDY1LWFhM2MtZTdlNjc2YzdlODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwYjU0ZDQtOTIxYS00MDVhLThj N2EtNmFhMWRjYjI2M2VhL2RhMGI1NGQ0LTkyMWEtNDA1YS04YzdhLTZhYTFkY2Iy NjNlYS5jcmwwHwYDVR0jBBgwFoAUBL87a95hwed1KW8LcOgjFNgbvA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBiNTRkNC05MjFhLTQwNWEtOGM3YS02YWEx ZGNiMjYzZWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAATUAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHHeZnKbndU8b4KxVvgr+z8zBxKWpX7x0lzDp7pP3hH+98s7uGPm oNulg5G4zi8pDRJhWUGdDeolLZUuNmMRvDVNdZaw5+3p/OiQLeSWm/631vBPo25b biy/WEbsmJrftEWKmCUWaUBhzXRRwuvLr4Gb9+095wmMUpsHD/Ac/OuJMQW0W6e2 Hp7Gs3mcJcNov0ENf47IZjYugooN3FxsawFSUNgc3YaztBJzFKeIv7PpeR8i8PMt LThPrGCXuABnbagzEIlPjfgWfKwI1XEZifjq7KyZdA16/3mY7TO2aLCRBuN8LW6k 8d4hrQhwqHpyM5+YPcJ++WbaCW2V/CMewQE= -----END CERTIFICATE-----Generated at Sat Apr 5 19:13:08 2025 by rpki-client