$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/467eb60f-e4f8-3d6d-b68d-4c2a254400a1.roa File: 467eb60f-e4f8-3d6d-b68d-4c2a254400a1.roa (raw, json) Hash identifier: 6eHHJzX1n4R5G9p/Ap1rWwQ4chZLCTW/DVHpsjIaFEQ= Subject key identifier: 48:55:FB:2A:C6:AC:FE:35:9C:5F:DE:3A:2D:1C:4A:C7:86:83:5B:D7 Certificate issuer: /CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1 Certificate serial: 010D0C9F432858488AE09D2A2DBD086AC7BC6500 Authority key identifier: D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/467eb60f-e4f8-3d6d-b68d-4c2a254400a1.roa Signing time: Tue 14 Jan 2025 14:00:51 +0000 ROA not before: Tue 14 Jan 2025 14:00:51 +0000 ROA not after: Mon 14 Apr 2025 13:00:51 +0000 asID: 26661 IP address blocks: 2620:12b:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8a:e0:9d:2a:2d:bd:08:6a:c7:bc:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1 Validity Not Before: Jan 14 14:00:51 2025 GMT Not After : Apr 14 13:00:51 2025 GMT Subject: CN=9bad0478-c10b-4327-8d92-48ab26319730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0a:42:50:10:7f:de:24:52:f3:7a:a2:00:9f: 18:e5:b7:72:df:1e:f1:36:37:d3:e1:85:c6:75:84: 58:f5:25:10:29:40:38:ba:a7:ca:7e:9d:aa:06:61: 49:fe:0f:88:a4:8f:4c:c4:67:20:ef:cf:b1:0c:2f: af:29:e4:0c:50:d2:a5:cb:4c:70:24:6d:87:2d:1b: 18:fe:31:78:a7:fa:b9:d9:a4:66:61:37:01:6e:31: 99:ab:40:d2:28:b2:2d:43:39:40:d2:23:59:f7:6c: 27:67:bc:fa:87:a9:ea:53:47:61:83:c1:23:ca:06: 7e:89:21:97:97:ff:39:47:51:73:75:29:3b:ff:c6: 63:fb:10:78:20:f8:65:a7:25:f4:2f:a4:5c:c2:65: aa:ae:00:2d:ae:8b:c5:ba:3e:4b:a4:8a:8f:94:5f: 64:2a:7f:a5:4e:b5:75:97:08:a6:f2:e8:c3:dc:fa: a2:99:77:9b:20:c4:01:1b:cd:dc:cd:54:58:20:15: e0:1f:56:bd:73:c8:3e:37:4f:6b:83:c0:8c:2c:ba: b0:f6:e3:15:8a:af:88:4e:57:c8:97:ba:05:18:27: 10:65:e4:ab:44:2b:9a:a3:9c:8b:e9:b0:01:d0:04: d4:79:c5:48:1e:96:58:2c:f2:d0:b5:73:11:1a:1c: 5c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:55:FB:2A:C6:AC:FE:35:9C:5F:DE:3A:2D:1C:4A:C7:86:83:5B:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/467eb60f-e4f8-3d6d-b68d-4c2a254400a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.crl X509v3 Authority Key Identifier: keyid:D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer sbgp-ipAddrBlock: critical IPv6: 2620:12b:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:8d:05:63:0a:b7:3b:81:1d:7b:14:0b:b4:18:fb:bb:02:e3: 10:7f:1b:7e:21:5b:cb:e5:14:89:8c:eb:56:55:9a:f2:4e:34: 05:af:cb:cd:0c:da:db:c7:e8:90:14:2f:90:d4:0f:64:d4:b6: ac:dc:8d:f3:e3:c5:9e:a4:f4:83:a1:c6:03:db:fb:70:99:8a: 62:a6:fb:f7:3e:d2:a7:20:bf:34:3d:10:4b:68:f9:d1:cc:fc: 05:23:f8:84:44:12:0e:14:c3:6d:bb:f2:e3:d0:04:0b:e5:bd: 46:54:d5:5b:d1:8d:f6:37:68:18:fd:58:bd:15:02:6f:19:fe: 9f:15:31:24:e9:85:0e:25:74:f8:29:64:7d:fe:95:58:5d:1b: 52:0e:5e:c9:8c:78:86:b1:b3:63:f5:32:f8:27:c6:b0:77:4b: ef:f6:91:33:84:02:df:99:6d:07:cd:98:31:25:25:3b:33:f1: 06:9d:c7:dd:db:f4:12:80:af:c2:1b:93:e8:07:a9:42:38:c3: c6:d5:d7:ca:99:d8:49:5d:cd:4c:a3:77:0b:f1:23:17:d1:0e: df:8b:4f:f2:5b:99:7a:87:ae:27:b3:b0:bd:22:b4:b2:72:34: 9a:a9:c3:00:ae:49:99:5f:89:d4:ca:8a:9d:d5:e2:e0:4c:17: 84:12:68:28 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEiK4J0qLb0Iase8ZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlMDBjNWMtNWU2Ni00ZDY5LTgxNzMtYjAzYzgyODgw YmMxMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk OWJhZDA0NzgtYzEwYi00MzI3LThkOTItNDhhYjI2MzE5NzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QpCUBB/3iRS83qiAJ8Y5bdy3x7xNjfT4YXG dYRY9SUQKUA4uqfKfp2qBmFJ/g+IpI9MxGcg78+xDC+vKeQMUNKly0xwJG2HLRsY /jF4p/q52aRmYTcBbjGZq0DSKLItQzlA0iNZ92wnZ7z6h6nqU0dhg8EjygZ+iSGX l/85R1FzdSk7/8Zj+xB4IPhlpyX0L6RcwmWqrgAtrovFuj5LpIqPlF9kKn+lTrV1 lwim8ujD3PqimXebIMQBG83czVRYIBXgH1a9c8g+N09rg8CMLLqw9uMViq+ITlfI l7oFGCcQZeSrRCuao5yL6bAB0ATUecVIHpZYLPLQtXMRGhxclQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEhV+yrGrP41nF/eOi0cSseGg1vXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hM2Uw MGM1Yy01ZTY2LTRkNjktODE3My1iMDNjODI4ODBiYzEvNDY3ZWI2MGYtZTRmOC0z ZDZkLWI2OGQtNGMyYTI1NDQwMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTNlMDBjNWMtNWU2Ni00ZDY5LTgx NzMtYjAzYzgyODgwYmMxL2EzZTAwYzVjLTVlNjYtNGQ2OS04MTczLWIwM2M4Mjg4 MGJjMS5jcmwwHwYDVR0jBBgwFoAU1HTYrbN5gAQQpAT67BDKKcFJU+MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hM2UwMGM1Yy01ZTY2LTRkNjktODE3My1iMDNj ODI4ODBiYzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABKyAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANY0FYwq3O4EdexQLtBj7uwLjEH8bfiFby+UUiYzrVlWa8k40Ba/L zQza28fokBQvkNQPZNS2rNyN8+PFnqT0g6HGA9v7cJmKYqb79z7SpyC/ND0QS2j5 0cz8BSP4hEQSDhTDbbvy49AEC+W9RlTVW9GN9jdoGP1YvRUCbxn+nxUxJOmFDiV0 +Clkff6VWF0bUg5eyYx4hrGzY/Uy+CfGsHdL7/aRM4QC35ltB82YMSUlOzPxBp3H 3dv0EoCvwhuT6AepQjjDxtXXypnYSV3NTKN3C/EjF9EO34tP8luZeoeuJ7OwvSK0 snI0mqnDAK5JmV+J1MqKndXi4EwXhBJoKA== -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:29 2025 by rpki-client