$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f89d5cb3-e413-3537-9cbd-032860d2eb44.roa File: f89d5cb3-e413-3537-9cbd-032860d2eb44.roa (raw, json) Hash identifier: zxpRYXVQpEOudy1skq2PHZ2KH4AlXXH7mHH/t9wFszc= Subject key identifier: 30:D8:19:09:69:03:E5:F3:79:4D:F4:3B:63:82:60:51:C1:B4:EB:9C Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584889023FAA4BC6883CB91AB250 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f89d5cb3-e413-3537-9cbd-032860d2eb44.roa Signing time: Mon 13 Jan 2025 21:57:10 +0000 ROA not before: Mon 13 Jan 2025 21:57:10 +0000 ROA not after: Sun 13 Apr 2025 20:57:10 +0000 asID: 8987 IP address blocks: 2605:4300:2c1f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:89:02:3f:aa:4b:c6:88:3c:b9:1a:b2:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jan 13 21:57:10 2025 GMT Not After : Apr 13 20:57:10 2025 GMT Subject: CN=6c3953a2-70eb-4b76-9c5c-18623a98801c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:69:d9:1c:c4:a9:19:f6:19:c4:eb:9c:be:25: db:82:c5:86:0b:b9:45:35:f4:d4:dc:9f:c9:c3:ef: fa:e7:aa:37:45:39:14:75:16:ab:e0:3d:c7:5c:06: 7e:d3:32:48:d3:f2:46:2c:61:79:45:c3:39:bf:7d: 2d:a2:27:63:6f:db:3c:a5:75:6e:ae:a1:3d:65:a9: 78:d0:85:7d:22:d9:6d:aa:31:92:48:17:e7:42:76: ba:34:55:ed:c2:82:0c:ac:be:41:85:9e:82:28:17: d7:57:f9:1a:11:12:ce:b3:0e:09:92:c8:92:f3:de: 5d:21:cf:4f:1f:35:f1:56:a5:bc:d7:d9:d1:5d:6d: db:7f:52:53:17:f7:dc:ef:a2:e4:74:e8:44:23:dd: 75:87:a9:97:15:f4:e8:1f:fa:78:b4:11:e4:6f:05: f8:2d:d8:e5:57:63:8d:fe:20:d1:db:3b:a0:62:d7: 50:23:fd:e6:3c:82:d3:a7:a3:73:65:ff:3c:b8:df: 91:07:10:06:9c:78:07:e0:7b:48:ac:3f:06:c5:7f: b0:bc:6d:d1:27:97:50:e5:a5:5d:aa:4e:ca:ed:92: a8:0a:99:19:98:cd:83:67:c2:1e:9e:87:7e:f8:36: fc:90:86:8a:c9:b7:a4:d6:21:ae:5a:c8:fe:69:c9: 7b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D8:19:09:69:03:E5:F3:79:4D:F4:3B:63:82:60:51:C1:B4:EB:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f89d5cb3-e413-3537-9cbd-032860d2eb44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv6: 2605:4300:2c1f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:a3:df:04:15:69:84:e3:fe:2e:f4:ce:f0:92:53:a6:8d:d2: 42:34:dc:7f:54:ee:d7:b9:c9:af:c1:1c:c7:01:1c:f7:7c:f2: a8:ae:12:19:b3:9c:06:71:66:e2:34:19:55:ad:ef:e8:33:60: 07:2d:81:5e:5c:4d:21:c7:2c:9d:3f:eb:f4:de:c0:01:96:42: 79:86:8d:4e:b9:f7:07:32:b4:bd:5d:12:f5:51:c6:5b:cf:f1: e9:51:24:bf:2c:79:8a:17:a0:e5:44:d2:65:aa:d3:0c:a7:43: 73:33:d8:9f:34:89:81:41:6f:6e:c7:d5:f9:47:bc:e1:25:52: 11:a2:dc:ff:96:ff:bc:b9:fd:5f:b3:da:03:dc:62:a5:3d:f6: 10:b6:a5:f4:20:e7:f0:d7:2c:c1:34:dc:de:18:cd:04:00:16: be:48:81:a0:f3:0f:64:62:68:c6:aa:0c:8a:41:d7:59:55:d8: 22:7c:f3:81:32:4f:6f:6c:ec:70:7a:68:61:46:3d:1c:5a:f8: a3:93:5a:ed:4a:b6:58:4b:a6:68:68:28:c3:b3:62:2e:f5:07: ae:e1:29:aa:b3:33:c2:8a:b3:ca:fc:6b:b9:9d:1c:54:de:b3: ee:73:3e:9c:2f:cd:26:8c:e0:fd:50:3f:7a:4e:40:69:98:eb: 62:6b:a5:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiJAj+qS8aIPLkaslAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDExMzIxNTcxMFoXDTI1MDQxMzIwNTcxMFowLzEtMCsGA1UEAxMk NmMzOTUzYTItNzBlYi00Yjc2LTljNWMtMTg2MjNhOTg4MDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2nZHMSpGfYZxOucviXbgsWGC7lFNfTU3J/J w+/656o3RTkUdRar4D3HXAZ+0zJI0/JGLGF5RcM5v30toidjb9s8pXVurqE9Zal4 0IV9ItltqjGSSBfnQna6NFXtwoIMrL5BhZ6CKBfXV/kaERLOsw4JksiS895dIc9P HzXxVqW819nRXW3bf1JTF/fc76LkdOhEI911h6mXFfToH/p4tBHkbwX4LdjlV2ON /iDR2zugYtdQI/3mPILTp6NzZf88uN+RBxAGnHgH4HtIrD8GxX+wvG3RJ5dQ5aVd qk7K7ZKoCpkZmM2DZ8Ienod++Db8kIaKybek1iGuWsj+acl73wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDDYGQlpA+XzeU30O2OCYFHBtOucMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZjg5ZDVjYjMtZTQxMy0z NTM3LTljYmQtMDMyODYwZDJlYjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVDACwf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGij3wQVaYTj/i70zvCSU6aN0kI03H9U7te5ya/BHMcBHPd88qiu EhmznAZxZuI0GVWt7+gzYActgV5cTSHHLJ0/6/TewAGWQnmGjU659wcytL1dEvVR xlvP8elRJL8seYoXoOVE0mWq0wynQ3Mz2J80iYFBb27H1flHvOElUhGi3P+W/7y5 /V+z2gPcYqU99hC2pfQg5/DXLME03N4YzQQAFr5IgaDzD2RiaMaqDIpB11lV2CJ8 84EyT29s7HB6aGFGPRxa+KOTWu1KtlhLpmhoKMOzYi71B67hKaqzM8KKs8r8a7md HFTes+5zPpwvzSaM4P1QP3pOQGmY62JrpYI= -----END CERTIFICATE-----Generated at Wed Feb 5 15:45:30 2025 by rpki-client