$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1a1c8cd4-86d7-3c34-bbeb-9c1e4b632348.roa File: 1a1c8cd4-86d7-3c34-bbeb-9c1e4b632348.roa (raw, json) Hash identifier: WncDVC7Q1/umBi78K4l0lyTVA3WAKCuX4t/OWufOVfA= Subject key identifier: A1:36:D6:27:98:2F:67:99:84:04:49:43:10:C3:EF:05:59:27:D2:1A Certificate issuer: /CN=1d25e0e4-3256-419b-9e99-0f045d2a1125 Certificate serial: 010D0C9F4328584854702568D19E116AADA3E5C0 Authority key identifier: E0:41:83:40:9B:53:F0:4A:26:F2:03:CA:E0:7B:11:29:54:E7:A4:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1a1c8cd4-86d7-3c34-bbeb-9c1e4b632348.roa Signing time: Thu 26 Dec 2024 02:00:40 +0000 ROA not before: Thu 26 Dec 2024 02:00:40 +0000 ROA not after: Wed 26 Mar 2025 01:00:40 +0000 asID: 25776 IP address blocks: 2620:0:2b20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1d25e0e4-3256-419b-9e99-0f045d2a1125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1d25e0e4-3256-419b-9e99-0f045d2a1125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:54:70:25:68:d1:9e:11:6a:ad:a3:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d25e0e4-3256-419b-9e99-0f045d2a1125 Validity Not Before: Dec 26 02:00:40 2024 GMT Not After : Mar 26 01:00:40 2025 GMT Subject: CN=3ef34e9c-8009-42f1-ae45-0b770d94a1da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cd:13:9c:8c:3b:59:5f:9f:e3:7c:ca:f6:11: 58:4a:2a:24:55:d1:b6:3d:6d:0e:60:15:31:3a:4e: c1:62:91:59:0d:91:0c:99:b9:69:27:59:28:a8:72: 02:65:cf:69:96:ed:39:95:f9:6c:e2:d5:34:84:61: e2:25:0c:02:67:04:a0:f7:03:ce:a1:f4:35:df:a7: 06:af:b2:d1:0d:e4:f6:86:c4:4c:6c:43:c8:1f:c1: 03:f9:17:ef:b5:bf:f7:f0:c3:33:ca:5e:bc:32:4f: 9d:f1:c0:cb:0f:09:14:9c:33:21:78:4b:50:27:df: 55:a4:30:79:02:4b:2b:39:1b:dc:29:07:5e:0f:15: 23:55:55:9f:87:e9:97:6d:6b:8d:7d:16:2e:a6:74: b1:e3:ca:8f:fc:c6:b6:7e:06:cd:b6:58:8f:e0:4b: cc:73:3b:b2:92:8b:f1:e6:7e:a5:68:6b:38:43:d7: f6:46:ad:34:ba:55:3b:fc:83:5b:6d:2d:12:37:cc: c3:77:81:ac:4f:ca:c5:bf:01:cd:f1:cd:85:16:55: e5:bd:63:34:93:5b:68:60:df:2b:03:e5:11:48:66: 82:b6:e5:77:f4:1c:71:60:13:08:4e:7c:9f:c3:40: 51:11:f4:a5:c6:0d:71:bd:59:9b:3e:79:12:b8:ac: d2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:36:D6:27:98:2F:67:99:84:04:49:43:10:C3:EF:05:59:27:D2:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1a1c8cd4-86d7-3c34-bbeb-9c1e4b632348.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1d25e0e4-3256-419b-9e99-0f045d2a1125.crl X509v3 Authority Key Identifier: keyid:E0:41:83:40:9B:53:F0:4A:26:F2:03:CA:E0:7B:11:29:54:E7:A4:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:2b20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:fc:a2:17:99:2a:30:85:ab:e1:e3:0b:e9:b9:ad:c3:01:a6: 69:50:2d:80:7e:e7:4b:e1:dc:c7:c0:22:e3:28:fd:31:6a:19: a6:b9:bc:c2:29:76:f5:86:1d:1a:2c:f1:d3:8f:03:e1:49:96: 36:cb:65:24:b9:86:3e:1e:54:2e:cd:b6:f9:7e:14:fd:18:98: ff:09:42:76:7f:72:91:8d:64:59:0b:ae:ec:00:45:e7:1e:fb: 44:2d:96:67:8a:aa:72:7d:ef:30:5a:e3:f7:19:cb:30:66:fc: 14:d1:e9:2b:1b:fc:43:08:06:5b:57:c3:50:10:58:be:f2:4e: aa:b8:d6:04:19:22:8f:43:81:59:58:c7:c6:0a:a0:82:10:2a: 50:89:e0:a5:f5:70:c7:0a:f8:18:23:af:5b:1a:28:30:90:36: fa:bc:5e:49:ad:d4:60:fe:82:90:1a:20:81:19:50:3c:e6:0c: cb:a9:3b:f5:20:89:5e:e2:22:3c:54:3a:d5:a7:55:99:03:d3: 3b:75:29:ff:92:95:a6:2a:cd:22:a3:0b:b9:76:6f:b8:c8:d9: 20:bd:84:3a:aa:d9:94:c1:c5:c2:bb:10:d8:f2:91:c0:e2:56: 82:85:10:af:0e:cd:7d:fd:22:6d:84:fe:3c:9c:a3:7d:8e:5c: 82:02:85:88 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhUcCVo0Z4Raq2j5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyNWUwZTQtMzI1Ni00MTliLTllOTktMGYwNDVkMmEx MTI1MB4XDTI0MTIyNjAyMDA0MFoXDTI1MDMyNjAxMDA0MFowLzEtMCsGA1UEAxMk M2VmMzRlOWMtODAwOS00MmYxLWFlNDUtMGI3NzBkOTRhMWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA180TnIw7WV+f43zK9hFYSiokVdG2PW0OYBUx Ok7BYpFZDZEMmblpJ1koqHICZc9plu05lfls4tU0hGHiJQwCZwSg9wPOofQ136cG r7LRDeT2hsRMbEPIH8ED+Rfvtb/38MMzyl68Mk+d8cDLDwkUnDMheEtQJ99VpDB5 AksrORvcKQdeDxUjVVWfh+mXbWuNfRYupnSx48qP/Ma2fgbNtliP4EvMczuykovx 5n6laGs4Q9f2Rq00ulU7/INbbS0SN8zDd4GsT8rFvwHN8c2FFlXlvWM0k1toYN8r A+URSGaCtuV39BxxYBMITnyfw0BREfSlxg1xvVmbPnkSuKzSSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKE21ieYL2eZhARJQxDD7wVZJ9IaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDI1 ZTBlNC0zMjU2LTQxOWItOWU5OS0wZjA0NWQyYTExMjUvMWExYzhjZDQtODZkNy0z YzM0LWJiZWItOWMxZTRiNjMyMzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyNWUwZTQtMzI1Ni00MTliLTll OTktMGYwNDVkMmExMTI1LzFkMjVlMGU0LTMyNTYtNDE5Yi05ZTk5LTBmMDQ1ZDJh MTEyNS5jcmwwHwYDVR0jBBgwFoAU4EGDQJtT8Eom8gPK4HsRKVTnpJ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDI1ZTBlNC0zMjU2LTQxOWItOWU5OS0wZjA0 NWQyYTExMjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAACsg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEL8oheZKjCFq+HjC+m5rcMBpmlQLYB+50vh3MfAIuMo/TFqGaa5 vMIpdvWGHRos8dOPA+FJljbLZSS5hj4eVC7Ntvl+FP0YmP8JQnZ/cpGNZFkLruwA Rece+0QtlmeKqnJ97zBa4/cZyzBm/BTR6Ssb/EMIBltXw1AQWL7yTqq41gQZIo9D gVlYx8YKoIIQKlCJ4KX1cMcK+Bgjr1saKDCQNvq8Xkmt1GD+gpAaIIEZUDzmDMup O/UgiV7iIjxUOtWnVZkD0zt1Kf+SlaYqzSKjC7l2b7jI2SC9hDqq2ZTBxcK7ENjy kcDiVoKFEK8OzX39Im2E/jyco32OXIIChYg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:01 2025 by rpki-client