$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/0ba20da9-894c-3074-8646-2dce7b9bd518.roa File: 0ba20da9-894c-3074-8646-2dce7b9bd518.roa (raw, json) Hash identifier: RtaBYACi0ShNoS8u8G4bvfShGuObhqglDe8JNo/8kv0= Subject key identifier: D2:16:D1:39:DB:33:2E:16:F3:60:F5:15:AE:59:7A:8E:52:E5:49:45 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F432858487A2080327805F4F2DB62CC00 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/0ba20da9-894c-3074-8646-2dce7b9bd518.roa Signing time: Wed 08 Jan 2025 14:00:51 +0000 ROA not before: Wed 08 Jan 2025 14:00:51 +0000 ROA not after: Tue 08 Apr 2025 13:00:51 +0000 asID: 14618 IP address blocks: 2620:147::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:20:80:32:78:05:f4:f2:db:62:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Jan 8 14:00:51 2025 GMT Not After : Apr 8 13:00:51 2025 GMT Subject: CN=ef2f081a-4dd9-41fc-95b8-7cf817e282a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b1:13:3a:96:e6:fe:64:50:69:fd:ba:16:41: 26:d4:3b:6e:93:fa:98:ba:f3:4e:3b:a8:a7:20:31: 40:fa:ed:89:d0:9b:b1:ce:0c:42:b3:1b:1d:8b:10: 85:b8:30:f7:2f:85:08:4f:84:32:0c:59:a3:eb:60: a9:a9:1c:26:54:2f:96:f2:7c:da:a7:f6:fe:e6:97: 7f:62:51:c7:60:04:f0:61:1e:13:d6:fc:81:69:31: c0:0e:ca:dc:72:4a:b6:23:c4:de:e6:1f:ba:56:7e: 87:07:a4:c7:e3:78:a5:53:f6:b5:4d:89:b3:e7:7b: d0:03:ca:11:e6:13:70:d3:de:d7:38:71:ae:e2:04: 56:d9:72:04:51:35:9e:6d:ac:02:fc:e8:af:7e:22: 73:fc:97:36:48:44:de:27:92:b9:a6:d1:78:d6:55: 9e:e6:9e:be:7e:3c:75:d9:ac:c6:71:32:56:44:23: 65:b5:86:62:ca:8b:c8:fa:9a:d1:37:aa:68:ab:a3: c7:c1:b0:3c:4b:1d:57:22:03:e1:bb:e3:56:fa:77: c0:1b:8c:4c:42:4e:b5:c1:99:c3:1a:f3:28:74:72: 8a:94:c1:1c:f9:89:58:0a:c0:9a:d7:41:6a:8f:81: 00:85:05:a8:d4:91:6a:ab:86:21:0d:22:ea:b0:d4: 47:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:16:D1:39:DB:33:2E:16:F3:60:F5:15:AE:59:7A:8E:52:E5:49:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/0ba20da9-894c-3074-8646-2dce7b9bd518.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2620:147::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:36:0f:95:d9:8a:1c:f0:6a:6d:9b:53:44:ab:78:fe:4f:a6: ed:41:45:a6:89:96:f6:64:0d:99:b7:f7:3e:36:c4:d2:c2:3e: 7d:02:30:ae:e5:16:e7:9d:10:44:44:1b:e6:07:11:31:83:ec: 2b:eb:00:b9:c9:91:eb:ae:7e:ce:67:5b:41:71:ad:20:09:50: c9:2b:d0:38:3c:53:c5:04:51:24:8a:c7:b1:e2:bc:0b:6c:df: b3:c1:9a:ff:e8:b1:b2:68:64:33:82:9b:9b:80:19:2e:c5:81: dd:1c:5f:39:36:54:3d:8e:4d:68:81:9c:9a:90:cd:9c:f6:a0: ea:cf:fe:d4:fa:ba:48:7e:86:cf:72:0f:57:d6:f0:d2:42:d7: b6:3e:28:9e:d6:5f:a9:f6:23:5e:86:98:5f:83:e4:47:8b:73: 77:47:97:13:86:f1:2f:2f:c1:43:de:86:d1:4f:a6:62:65:82: e8:18:9f:dd:a5:92:16:ce:c0:17:cb:6f:3c:67:fe:9f:a1:a9: 47:d2:9d:02:be:4c:80:4e:25:5e:6d:74:44:43:2d:8b:f6:68: 23:44:6b:b3:ff:b5:98:3d:d0:d7:5c:30:f1:6c:5d:64:3a:fd: 38:78:2d:63:bf:66:94:a3:29:70:52:4f:f2:4c:7a:b0:4b:e2: b0:f2:13:a3 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEh6IIAyeAX08ttizAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk ZWYyZjA4MWEtNGRkOS00MWZjLTk1YjgtN2NmODE3ZTI4MmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8rETOpbm/mRQaf26FkEm1Dtuk/qYuvNOO6in IDFA+u2J0JuxzgxCsxsdixCFuDD3L4UIT4QyDFmj62CpqRwmVC+W8nzap/b+5pd/ YlHHYATwYR4T1vyBaTHADsrcckq2I8Te5h+6Vn6HB6TH43ilU/a1TYmz53vQA8oR 5hNw097XOHGu4gRW2XIEUTWebawC/OivfiJz/Jc2SETeJ5K5ptF41lWe5p6+fjx1 2azGcTJWRCNltYZiyovI+prRN6poq6PHwbA8Sx1XIgPhu+NW+nfAG4xMQk61wZnD GvModHKKlMEc+YlYCsCa10Fqj4EAhQWo1JFqq4YhDSLqsNRHoQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNIW0TnbMy4W82D1Fa5Zeo5S5UlFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvMGJhMjBkYTktODk0Yy0z MDc0LTg2NDYtMmRjZTdiOWJkNTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJiABRwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAdTYPldmKHPBqbZtTRKt4/k+m7UFFpomW9mQNmbf3PjbE0sI+fQIw ruUW550QREQb5gcRMYPsK+sAucmR665+zmdbQXGtIAlQySvQODxTxQRRJIrHseK8 C2zfs8Ga/+ixsmhkM4Kbm4AZLsWB3RxfOTZUPY5NaIGcmpDNnPag6s/+1Pq6SH6G z3IPV9bw0kLXtj4ontZfqfYjXoaYX4PkR4tzd0eXE4bxLy/BQ96G0U+mYmWC6Bif 3aWSFs7AF8tvPGf+n6GpR9KdAr5MgE4lXm10REMti/ZoI0Rrs/+1mD3Q11ww8Wxd ZDr9OHgtY79mlKMpcFJP8kx6sEvisPITow== -----END CERTIFICATE-----Generated at Fri Mar 14 10:26:40 2025 by rpki-client