$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/29c887b8-e882-31b0-872e-a0c5f4ed9554.roa File: 29c887b8-e882-31b0-872e-a0c5f4ed9554.roa (raw, json) Hash identifier: 9armTGC2xaVvDK/GUqyAUZRjYTkoTBvdNJJrp+w347Q= Subject key identifier: 24:9F:5B:6E:77:59:D6:B2:56:F7:6A:B3:51:27:32:0E:AD:C6:C1:90 Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F43285848AF2B8167C351ADC162E87E80 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/29c887b8-e882-31b0-872e-a0c5f4ed9554.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 3477 IP address blocks: 2601:a007::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:81:67:c3:51:ad:c1:62:e8:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=f15be466-bc20-41b6-bb11-4064d9537675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3a:18:e8:c5:46:b0:7c:62:a1:00:e7:07:b0: d6:1a:b2:88:59:70:59:37:8e:af:24:1e:24:af:26: d3:5b:eb:6f:89:3a:ae:1a:5a:1d:1d:75:a7:08:eb: 5d:64:02:20:f9:a0:5a:e0:11:8e:56:73:c0:1b:58: 88:d2:cc:8d:53:56:3a:47:72:0a:e1:14:03:e3:29: 4f:f4:1e:8b:f2:61:93:67:d2:01:1f:a4:bc:11:6b: 25:88:e4:70:c0:7b:cb:5a:d2:3d:24:17:05:3d:68: 8b:1b:f8:6a:d7:8b:dd:15:0c:78:2e:3d:8f:16:02: 85:ff:d8:71:4f:9e:90:0c:31:14:2e:70:44:09:9c: f3:aa:3a:e0:df:d2:3b:35:b9:06:63:8f:0f:53:72: ff:bc:24:15:4e:a3:6b:a8:56:6a:2e:6e:c5:e2:e3: 1e:36:dd:7c:02:2a:0c:e1:80:2e:b9:51:0f:ea:06: 36:69:c6:fa:8d:5f:06:be:20:3a:1b:94:a3:64:a9: 76:69:56:6a:4c:c1:37:97:c8:65:b0:7f:85:5f:ed: 0d:9c:00:b1:b5:52:d1:17:8c:2b:8c:eb:cf:de:98: d5:4b:f5:93:a1:e9:2d:0a:d0:b3:77:0e:31:e2:f2: 02:e8:fd:99:49:c5:67:86:e3:f7:2b:f7:4e:f8:66: fb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9F:5B:6E:77:59:D6:B2:56:F7:6A:B3:51:27:32:0E:AD:C6:C1:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/29c887b8-e882-31b0-872e-a0c5f4ed9554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2601:a007::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:cf:da:05:b9:5c:a6:f3:2b:54:28:e9:9c:4a:63:26:c4:20: cb:c3:6b:44:bd:3e:36:bf:5c:32:9d:c6:2e:eb:e5:3c:c5:2f: 0d:8b:6f:54:86:c2:9b:d8:74:38:d0:30:d7:9b:b1:10:cf:d7: 1a:6d:6b:87:b5:ff:f5:d8:53:46:03:d8:15:70:b1:80:27:24: 8e:b9:55:2b:a4:e0:d6:0b:fb:71:51:d7:3a:3d:b5:50:67:04: 32:4c:b9:fd:e5:e5:64:8e:6e:a3:bd:15:3c:10:7f:58:8f:a6: 53:f9:97:e4:2b:54:6a:8a:a5:3d:df:8c:38:df:b6:a9:9b:ec: f5:c3:cc:f4:51:50:f0:4e:9a:e6:60:8e:28:72:9f:f5:70:77: 88:fd:fd:af:6a:30:52:2d:bd:9a:b7:0e:4d:6f:18:2d:c6:fd: df:4c:c9:91:8f:0a:ec:cb:e0:91:81:9a:cd:af:38:87:bc:bf: 38:3b:03:dd:86:47:7f:4f:ec:9f:53:f7:96:5d:7a:bc:39:aa: 69:00:35:34:e1:e4:d1:fd:a2:ed:70:ee:ff:fd:79:59:9d:62: c0:13:db:cc:45:fa:06:c7:84:79:92:5b:61:62:ed:6a:16:f0: de:22:55:91:2c:cf:d3:74:e0:36:58:7a:a8:8e:a7:6e:cf:9a: 27:9f:2e:fa -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEivK4Fnw1GtwWLofoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk ZjE1YmU0NjYtYmMyMC00MWI2LWJiMTEtNDA2NGQ5NTM3Njc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDoY6MVGsHxioQDnB7DWGrKIWXBZN46vJB4k rybTW+tviTquGlodHXWnCOtdZAIg+aBa4BGOVnPAG1iI0syNU1Y6R3IK4RQD4ylP 9B6L8mGTZ9IBH6S8EWsliORwwHvLWtI9JBcFPWiLG/hq14vdFQx4Lj2PFgKF/9hx T56QDDEULnBECZzzqjrg39I7NbkGY48PU3L/vCQVTqNrqFZqLm7F4uMeNt18AioM 4YAuuVEP6gY2acb6jV8GviA6G5SjZKl2aVZqTME3l8hlsH+FX+0NnACxtVLRF4wr jOvP3pjVS/WToektCtCzdw4x4vIC6P2ZScVnhuP3K/dO+Gb7awIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCSfW253WdayVvdqs1EnMg6txsGQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvMjljODg3YjgtZTg4Mi0z MWIwLTg3MmUtYTBjNWY0ZWQ5NTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgGgBzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCbz9oFuVym8ytUKOmcSmMmxCDLw2tEvT42v1wyncYu6+U8xS8Ni29U hsKb2HQ40DDXm7EQz9cabWuHtf/12FNGA9gVcLGAJySOuVUrpODWC/txUdc6PbVQ ZwQyTLn95eVkjm6jvRU8EH9Yj6ZT+ZfkK1RqiqU934w437apm+z1w8z0UVDwTprm YI4ocp/1cHeI/f2vajBSLb2atw5Nbxgtxv3fTMmRjwrsy+CRgZrNrziHvL84OwPd hkd/T+yfU/eWXXq8OappADU04eTR/aLtcO7//XlZnWLAE9vMRfoGx4R5klthYu1q FvDeIlWRLM/TdOA2WHqojqduz5onny76 -----END CERTIFICATE-----Generated at Sat Apr 5 03:54:27 2025 by rpki-client