$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/bef997ff-d1a4-374c-b453-c9348e59c5c4.roa File: bef997ff-d1a4-374c-b453-c9348e59c5c4.roa (raw, json) Hash identifier: ExCvzzTP/ReR5n9DlTv3TwZf83OVIHMDrQMmHw7gVK8= Subject key identifier: 5C:E0:D5:F2:26:43:B5:45:FA:77:74:36:D1:4E:4C:08:2C:4A:A3:B4 Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Certificate serial: 010D0C9F43285848AF2B7D96DAFFADDD5BFACEE1 Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/bef997ff-d1a4-374c-b453-c9348e59c5c4.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 396982 IP address blocks: 2604:a940:302::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:7d:96:da:ff:ad:dd:5b:fa:ce:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=96d74148-c614-48e3-afb1-a7898ad057b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:6b:4c:6a:a7:7c:ab:2e:41:86:1c:29:f3:67: b3:27:44:62:8d:e7:00:5e:45:a0:f0:a7:9e:ec:4b: 32:13:19:4d:db:02:16:f5:7b:c7:a1:ff:bd:63:48: 06:97:db:30:c7:c8:b3:e8:61:dd:43:70:91:04:55: 00:54:dc:97:a5:83:fe:8e:a6:91:44:45:15:e6:25: 63:94:02:e2:2c:ec:ce:15:55:05:8b:f5:dd:db:10: c6:70:aa:08:64:bb:de:0d:4e:dd:52:46:d7:34:2e: 49:e6:d6:c6:c9:7e:ae:6d:c7:f0:91:e5:f7:cd:6f: 88:ad:9a:f4:b1:5a:67:3a:4a:80:97:87:af:f0:18: 58:f8:5f:19:22:f3:de:df:5d:89:67:be:14:b1:5e: 39:7a:4b:44:df:ba:c3:34:4f:bd:1e:0f:49:f9:77: ac:a8:e2:ee:0a:7d:b9:25:90:ff:21:cf:e8:50:8e: ed:43:c0:74:99:df:c3:19:a7:52:46:cb:fd:0e:d1: 34:fc:de:d4:f2:68:9a:35:29:ec:bc:8e:cb:22:b0: 36:29:67:3c:ff:08:40:8a:b1:b6:20:e4:d4:eb:af: 5a:0d:93:e8:cf:63:39:68:5b:57:cb:96:9f:95:c9: 38:81:b9:31:97:10:27:a1:be:ad:de:e3:19:b9:20: 07:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E0:D5:F2:26:43:B5:45:FA:77:74:36:D1:4E:4C:08:2C:4A:A3:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/bef997ff-d1a4-374c-b453-c9348e59c5c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl X509v3 Authority Key Identifier: keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer sbgp-ipAddrBlock: critical IPv6: 2604:a940:302::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:6b:dd:b3:09:27:39:0a:19:90:80:ea:7a:25:88:48:9b:8d: d6:31:4a:ed:e7:a6:e9:42:7a:75:8b:7c:75:4f:7a:1b:f3:bc: 6f:12:c1:15:14:ff:45:d6:fb:c9:fb:33:1f:e8:4d:f1:10:62: 09:98:8e:39:fb:67:29:40:d7:1c:cb:ef:0d:03:b0:2d:fc:c6: 7b:dc:af:e4:f0:a4:ed:c8:18:ff:9d:7e:35:e6:9b:3f:8e:89: 1c:05:cc:22:24:f0:1f:b3:8f:83:0b:98:1c:bd:78:8f:15:97: 0e:25:55:9c:06:65:39:f0:c0:a5:65:85:59:c6:47:d0:ee:5b: 42:35:05:4c:14:1b:76:df:42:69:e5:af:4b:b9:01:6d:64:44: c2:e4:02:69:98:35:78:82:a7:21:05:52:ae:9a:38:f6:29:e7: 3f:72:6e:2a:aa:5f:1a:35:80:e9:d9:af:d8:5a:eb:2e:0c:3a: d4:8d:42:25:3e:2c:04:89:d8:7c:30:1e:24:6f:9c:8f:aa:a0: 56:64:51:c9:72:62:9b:70:11:27:71:97:31:6b:3f:cd:74:bc: 0d:14:47:52:9a:d5:75:97:da:44:db:91:e0:cf:2d:58:66:a9: 4a:02:05:07:0b:fd:02:ea:e7:43:6f:52:bf:0f:74:bc:0f:cc: 12:e1:bf:cc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEivK32W2v+t3Vv6zuEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk OWU3MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk OTZkNzQxNDgtYzYxNC00OGUzLWFmYjEtYTc4OThhZDA1N2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA82tMaqd8qy5Bhhwp82ezJ0RijecAXkWg8Kee 7EsyExlN2wIW9XvHof+9Y0gGl9swx8iz6GHdQ3CRBFUAVNyXpYP+jqaRREUV5iVj lALiLOzOFVUFi/Xd2xDGcKoIZLveDU7dUkbXNC5J5tbGyX6ubcfwkeX3zW+IrZr0 sVpnOkqAl4ev8BhY+F8ZIvPe312JZ74UsV45ektE37rDNE+9Hg9J+XesqOLuCn25 JZD/Ic/oUI7tQ8B0md/DGadSRsv9DtE0/N7U8miaNSnsvI7LIrA2KWc8/whAirG2 IOTU669aDZPoz2M5aFtXy5aflck4gbkxlxAnob6t3uMZuSAHxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFzg1fImQ7VF+nd0NtFOTAgsSqO0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvYmVmOTk3ZmYtZDFhNC0z NzRjLWI0NTMtYzkzNDhlNTljNWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3 M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4 ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5 NDc5OGQ5ZTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgSpQAMC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABJr3bMJJzkKGZCA6noliEibjdYxSu3npulCenWLfHVPehvzvG8S wRUU/0XW+8n7Mx/oTfEQYgmYjjn7ZylA1xzL7w0DsC38xnvcr+TwpO3IGP+dfjXm mz+OiRwFzCIk8B+zj4MLmBy9eI8Vlw4lVZwGZTnwwKVlhVnGR9DuW0I1BUwUG3bf Qmnlr0u5AW1kRMLkAmmYNXiCpyEFUq6aOPYp5z9ybiqqXxo1gOnZr9ha6y4MOtSN QiU+LASJ2HwwHiRvnI+qoFZkUclyYptwESdxlzFrP810vA0UR1Ka1XWX2kTbkeDP LVhmqUoCBQcL/QLq50NvUr8PdLwPzBLhv8w= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:29 2025 by rpki-client