$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/0c811ec7-f1c5-3b86-9972-66b65965ab83.roa File: 0c811ec7-f1c5-3b86-9972-66b65965ab83.roa (raw, json) Hash identifier: 9FJCuIZlqwSCT4u6nkyLbskOt1u/J3eOeFVKbEQ7tj0= Subject key identifier: 07:33:6C:C6:2A:E6:95:91:CD:74:9C:EB:4E:97:30:F5:B7:E9:FE:E2 Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F432858489340A60C6BB98B512423E600 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/0c811ec7-f1c5-3b86-9972-66b65965ab83.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 5769 IP address blocks: 2607:fa4d::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:a6:0c:6b:b9:8b:51:24:23:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=83bc0ddb-f80f-475a-a40c-5cc6096a9b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:10:2b:60:c9:9f:81:39:48:e6:ac:84:18:ee: 13:cb:b0:eb:b0:08:62:27:38:35:b9:73:a8:00:42: 75:00:d3:3a:01:cf:af:38:44:0b:07:60:dd:1a:3d: cc:77:16:4c:9e:74:c5:09:f8:85:b3:06:ce:5b:9e: ef:cd:19:e5:41:1e:26:8c:ee:b2:73:20:6a:9a:06: b2:2f:c5:09:ee:2f:08:90:8c:c3:84:fd:f2:84:d3: 0b:bf:e6:49:0c:c0:99:66:5b:14:1a:3f:00:aa:49: 17:cf:20:a6:52:17:5f:52:23:05:0e:35:f3:6b:8b: ac:44:87:aa:4a:50:64:22:27:51:46:95:66:a2:2c: d8:d8:dd:be:67:da:37:a1:fb:b6:da:35:0f:12:60: ae:ed:1c:80:87:4c:a8:96:16:40:30:b6:b6:67:cf: 1a:d2:8f:4a:2a:d3:71:54:a9:47:c6:a0:42:60:ed: cd:a0:0b:67:9d:51:83:b3:0a:0a:7c:75:4a:86:6e: 69:07:97:23:30:5f:09:9c:f3:fe:ff:0c:64:dc:fb: a7:1f:35:b8:17:89:f6:cf:b6:17:d2:c8:65:fd:d2: 10:ec:ed:a3:1d:d2:61:1a:d7:c1:99:f5:a7:12:be: a4:6a:3f:c0:6e:7b:62:81:3e:de:82:cf:2a:fe:ae: c9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:33:6C:C6:2A:E6:95:91:CD:74:9C:EB:4E:97:30:F5:B7:E9:FE:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/0c811ec7-f1c5-3b86-9972-66b65965ab83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv6: 2607:fa4d::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:4c:b5:1c:bf:40:0e:72:78:19:31:d7:bd:19:c2:72:20:9a: 4b:bb:39:b6:eb:b0:a7:24:5b:3d:8d:14:50:f6:38:3b:cb:7b: bf:92:c6:41:39:a4:71:22:00:7c:d8:09:f6:1c:d9:f8:cf:40: b3:47:6c:14:0d:88:50:9f:03:fe:3f:b9:18:09:27:9f:01:cf: 86:a9:24:08:2a:76:47:7f:73:ef:5c:96:ef:e5:22:76:72:6b: 11:92:27:d3:cb:57:8e:97:4c:dc:da:8a:3f:ad:a4:13:cb:5d: c4:53:86:a1:83:6d:23:04:42:27:ae:a7:30:b5:91:30:e0:dd: 35:05:53:82:12:f8:f1:3b:c2:f4:3b:50:f7:e9:ef:4c:83:ac: 6b:2e:04:e7:3e:d2:55:13:03:fe:83:7b:6a:51:02:cf:b6:54: 53:be:17:bb:3d:24:1c:e2:8d:30:d6:84:09:25:00:e7:d2:3f: 9f:20:98:63:c6:6a:17:1e:04:ad:33:bc:f0:18:f1:98:cb:20: c9:ce:63:d8:52:dc:47:d9:2f:38:53:fd:78:7e:04:c0:e6:07: dd:69:65:de:2e:c1:9c:b8:73:91:aa:0c:52:95:b3:b9:66:9d: 6b:c9:82:1c:c4:58:e7:7c:32:fb:eb:b8:22:f8:9e:ab:ad:c6: 75:0c:22:16 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiTQKYMa7mLUSQj5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk ODNiYzBkZGItZjgwZi00NzVhLWE0MGMtNWNjNjA5NmE5YjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxArYMmfgTlI5qyEGO4Ty7DrsAhiJzg1uXOo AEJ1ANM6Ac+vOEQLB2DdGj3MdxZMnnTFCfiFswbOW57vzRnlQR4mjO6ycyBqmgay L8UJ7i8IkIzDhP3yhNMLv+ZJDMCZZlsUGj8AqkkXzyCmUhdfUiMFDjXza4usRIeq SlBkIidRRpVmoizY2N2+Z9o3ofu22jUPEmCu7RyAh0yolhZAMLa2Z88a0o9KKtNx VKlHxqBCYO3NoAtnnVGDswoKfHVKhm5pB5cjMF8JnPP+/wxk3PunHzW4F4n2z7YX 0shl/dIQ7O2jHdJhGtfBmfWnEr6kaj/AbntigT7egs8q/q7JVQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAczbMYq5pWRzXSc606XMPW36f7iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvMGM4MTFlYzctZjFjNS0z Yjg2LTk5NzItNjZiNjU5NjVhYjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf6TTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAmTLUcv0AOcngZMde9GcJyIJpLuzm267CnJFs9jRRQ9jg7y3u/ksZB OaRxIgB82An2HNn4z0CzR2wUDYhQnwP+P7kYCSefAc+GqSQIKnZHf3PvXJbv5SJ2 cmsRkifTy1eOl0zc2oo/raQTy13EU4ahg20jBEInrqcwtZEw4N01BVOCEvjxO8L0 O1D36e9Mg6xrLgTnPtJVEwP+g3tqUQLPtlRTvhe7PSQc4o0w1oQJJQDn0j+fIJhj xmoXHgStM7zwGPGYyyDJzmPYUtxH2S84U/14fgTA5gfdaWXeLsGcuHORqgxSlbO5 Zp1ryYIcxFjnfDL767gi+J6rrcZ1DCIW -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:01 2025 by rpki-client