$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/95f415e9-f520-3499-9401-200ef544c860.roa File: 95f415e9-f520-3499-9401-200ef544c860.roa (raw, json) Hash identifier: 9Bz3JtxpffTb6iR4rrUCMGLSn2pmryrfw3/tKSGaeNs= Subject key identifier: A9:6C:2A:B8:F8:E0:37:26:70:25:43:6E:B3:C2:1B:F8:7B:2F:B3:0E Certificate issuer: /CN=e13a5b98-c410-4224-be84-d8a01047fa5b Certificate serial: 010D0C9F432858489075EC33B91C155AFEEC8500 Authority key identifier: 07:34:FC:70:C9:43:E2:BF:27:D4:A5:DF:F4:64:39:7D:28:7E:65:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/95f415e9-f520-3499-9401-200ef544c860.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 14041 IP address blocks: 2620:123:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/e13a5b98-c410-4224-be84-d8a01047fa5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/e13a5b98-c410-4224-be84-d8a01047fa5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:75:ec:33:b9:1c:15:5a:fe:ec:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e13a5b98-c410-4224-be84-d8a01047fa5b Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=e54392ed-305d-4345-9654-806a4e460987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6f:5c:69:e5:02:0b:64:0c:7f:ed:7f:53:75: d1:b4:44:04:92:74:d1:b7:5b:8d:3d:a3:7b:11:00: 4d:5b:3c:63:23:ea:06:1a:ca:c1:d2:b0:79:5a:e3: 04:df:50:7a:5a:66:f2:46:15:1f:c0:3e:27:b5:21: 69:e1:23:c0:77:80:78:1d:64:b3:d1:60:68:e0:d7: fc:df:c8:f2:64:ee:50:67:47:08:b3:7a:71:2f:1f: ba:65:3e:6d:5b:bd:ea:9c:2c:16:7e:c2:a8:27:12: 22:23:90:d1:03:31:ee:6a:b9:cd:c7:37:c6:ed:1d: 51:6e:03:58:ff:75:e2:4a:50:5d:2f:5b:51:08:03: f2:76:15:b7:c4:22:21:27:83:19:9f:d4:30:2d:f2: 43:c9:3a:a7:18:18:c6:a5:6f:12:07:d6:7b:ba:31: 1b:d7:f9:e5:8f:f7:12:2b:c7:31:2d:d5:2b:fd:08: 49:b4:bf:30:69:1e:0b:36:d9:c2:03:9f:47:28:e4: 46:0c:c0:23:ec:09:ab:6f:61:a2:5e:75:9f:13:1e: 8e:e9:66:72:81:93:1b:eb:92:06:73:26:dc:48:80: 2d:f3:bf:34:1f:c3:f9:6a:79:b4:9b:34:9a:98:f5: 54:47:1a:e4:b7:54:ee:55:69:cf:a7:28:05:a4:bd: 1c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6C:2A:B8:F8:E0:37:26:70:25:43:6E:B3:C2:1B:F8:7B:2F:B3:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/95f415e9-f520-3499-9401-200ef544c860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/e13a5b98-c410-4224-be84-d8a01047fa5b.crl X509v3 Authority Key Identifier: keyid:07:34:FC:70:C9:43:E2:BF:27:D4:A5:DF:F4:64:39:7D:28:7E:65:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b.cer sbgp-ipAddrBlock: critical IPv6: 2620:123:5000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:1e:78:cb:35:a9:46:42:4f:9f:39:64:ae:f3:6a:c6:77:9e: 58:ce:7b:2e:e7:06:64:8e:06:de:dc:93:1b:36:7e:79:26:bb: b9:27:26:96:e0:ce:35:32:e7:2b:75:ab:b8:a2:3c:1b:0e:03: 93:da:1d:dc:d9:34:5f:63:7b:25:14:2a:a7:61:60:19:4f:92: 84:a9:64:2f:b6:24:55:bd:7d:ef:66:8d:a5:e8:c3:28:de:31: 14:d7:24:7c:cd:a4:0a:36:e8:d5:b7:9f:0f:f0:ad:65:95:14: 1d:c3:3b:56:77:78:20:f1:9d:98:b7:30:7b:5a:d0:28:75:c8: 80:c5:f3:0a:79:de:f7:da:7e:34:a9:56:f3:80:1a:d9:ff:81: 9e:97:9d:84:31:cb:5e:6a:46:51:2f:47:a9:5e:00:06:6c:9f: f1:d3:f9:9c:83:6c:77:b6:a5:55:a0:e9:9a:b9:d0:08:d3:7e: 58:92:1e:b4:e0:ca:31:7d:55:2f:81:7f:a9:a2:03:12:1d:b6: a3:13:0e:ce:86:c4:20:14:46:30:7f:f8:90:d2:09:6d:b8:01: 86:08:e5:74:ae:42:de:c0:e1:14:7e:24:3e:30:bb:89:58:c2: 85:2d:62:fd:0c:11:36:92:f4:46:1d:0b:16:87:3a:5e:39:5b: 76:33:dd:31 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEiQdewzuRwVWv7shQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTEzYTViOTgtYzQxMC00MjI0LWJlODQtZDhhMDEwNDdm YTViMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk ZTU0MzkyZWQtMzA1ZC00MzQ1LTk2NTQtODA2YTRlNDYwOTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG9caeUCC2QMf+1/U3XRtEQEknTRt1uNPaN7 EQBNWzxjI+oGGsrB0rB5WuME31B6WmbyRhUfwD4ntSFp4SPAd4B4HWSz0WBo4Nf8 38jyZO5QZ0cIs3pxLx+6ZT5tW73qnCwWfsKoJxIiI5DRAzHuarnNxzfG7R1RbgNY /3XiSlBdL1tRCAPydhW3xCIhJ4MZn9QwLfJDyTqnGBjGpW8SB9Z7ujEb1/nlj/cS K8cxLdUr/QhJtL8waR4LNtnCA59HKORGDMAj7Amrb2GiXnWfEx6O6WZygZMb65IG cybcSIAt8780H8P5anm0mzSamPVURxrkt1TuVWnPpygFpL0ctQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKlsKrj44DcmcCVDbrPCG/h7L7MOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMTNh NWI5OC1jNDEwLTQyMjQtYmU4NC1kOGEwMTA0N2ZhNWIvOTVmNDE1ZTktZjUyMC0z NDk5LTk0MDEtMjAwZWY1NDRjODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTEzYTViOTgtYzQxMC00MjI0LWJl ODQtZDhhMDEwNDdmYTViL2UxM2E1Yjk4LWM0MTAtNDIyNC1iZTg0LWQ4YTAxMDQ3 ZmE1Yi5jcmwwHwYDVR0jBBgwFoAUBzT8cMlD4r8n1KXf9GQ5fSh+ZXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMTNhNWI5OC1jNDEwLTQyMjQtYmU4NC1kOGEw MTA0N2ZhNWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABI1Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAMB54yzWpRkJPnzlkrvNqxneeWM57LucGZI4G3tyTGzZ+eSa7uScm luDONTLnK3WruKI8Gw4Dk9od3Nk0X2N7JRQqp2FgGU+ShKlkL7YkVb1972aNpejD KN4xFNckfM2kCjbo1befD/CtZZUUHcM7Vnd4IPGdmLcwe1rQKHXIgMXzCnne99p+ NKlW84Aa2f+BnpedhDHLXmpGUS9HqV4ABmyf8dP5nINsd7alVaDpmrnQCNN+WJIe tODKMX1VL4F/qaIDEh22oxMOzobEIBRGMH/4kNIJbbgBhgjldK5C3sDhFH4kPjC7 iVjChS1i/QwRNpL0Rh0LFoc6XjlbdjPdMQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:24 2025 by rpki-client