$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/169bd61c-d77a-3a5d-aea1-eb8034fc7dc9.roa File: 169bd61c-d77a-3a5d-aea1-eb8034fc7dc9.roa (raw, json) Hash identifier: Z8ofISGyEVxKV4A7emq9tyJ1uCwT243AWU83dc0EWnw= Subject key identifier: 56:84:AC:B4:A3:26:18:EA:A9:C3:9B:51:7E:B0:D1:92:81:5C:6D:80 Certificate issuer: /CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8 Certificate serial: 010D0C9F43285848ADC60D31A6E9F834CE8F3500 Authority key identifier: 4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/169bd61c-d77a-3a5d-aea1-eb8034fc7dc9.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 7057 IP address blocks: 2600:dc00::/28 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:0d:31:a6:e9:f8:34:ce:8f:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=80dc38fd-fe26-4a46-96a5-3d79c5d3d43c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e3:ac:5c:63:f3:d7:ba:fd:9b:8e:9f:1d:0e: 23:c0:c5:b7:9c:33:02:08:df:ae:2f:83:04:86:10: 5d:5a:af:4a:8e:40:86:52:a0:32:92:ba:e4:22:85: 61:7b:d1:5c:28:23:de:ef:7c:02:a1:eb:a0:d5:b5: 15:60:2e:28:f4:05:fd:25:ef:b3:20:4c:4b:dd:5e: 13:3d:b2:49:6f:61:e0:07:92:4d:ab:c8:20:c1:3a: e4:7b:bf:d7:31:11:f8:bb:2f:41:c8:ae:d0:a7:a6: 98:a8:a1:68:77:7c:eb:9f:01:60:35:31:26:39:45: 74:bf:a9:2c:5a:c6:47:6f:c5:23:48:3b:ca:3a:96: 79:5b:2f:9c:af:a0:d0:e9:98:fd:3f:b8:b2:2b:4a: c1:c3:d5:ac:94:44:0b:ae:f6:fe:7e:16:3e:21:22: fd:a7:e1:08:59:bb:9b:f8:49:36:92:91:c5:f7:a2: 94:73:19:82:11:38:7a:f8:2f:b9:60:08:ce:a1:5f: 57:c5:9b:f9:a4:df:b7:45:06:d5:eb:67:49:83:03: 1e:10:4c:f9:4a:27:9a:61:79:a6:07:55:59:11:a1: 4b:fd:56:05:6a:9b:66:dc:5c:1c:b1:79:d8:12:a7: 69:54:a9:73:76:ce:63:2a:1f:94:6c:c1:aa:c9:1c: 1a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:84:AC:B4:A3:26:18:EA:A9:C3:9B:51:7E:B0:D1:92:81:5C:6D:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/169bd61c-d77a-3a5d-aea1-eb8034fc7dc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl X509v3 Authority Key Identifier: keyid:4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer sbgp-ipAddrBlock: critical IPv6: 2600:dc00::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:38:21:70:53:85:fd:37:cb:36:12:8e:02:87:b7:01:07:33: c4:ca:22:6f:56:0e:ad:5c:00:c6:c3:75:2c:a0:e0:0b:4a:54: fc:bd:79:ab:9a:b1:23:f3:a2:ac:73:97:3b:11:ce:ed:2e:50: c0:da:33:75:35:88:3a:0a:8d:b0:08:df:16:11:1b:73:ec:31: 2e:01:6e:21:2a:f5:c0:69:3c:cf:f0:e1:8f:83:04:b2:21:ba: f7:09:47:0e:12:d0:88:72:59:04:f7:27:92:d5:d1:7a:1f:dc: ef:10:58:9d:c0:cd:c0:f2:38:8f:fd:17:95:e0:4e:cd:5c:cb: 89:17:3c:a9:1d:9b:f2:8f:c2:9c:11:42:d2:a5:43:1f:ed:29: 0d:be:d3:c4:56:fc:68:2b:2f:82:eb:ea:b8:4f:14:01:08:e5: 33:d4:c5:91:af:6e:7a:21:48:3e:64:f0:04:9c:9f:04:00:9e: 0c:d8:39:90:7c:c8:51:57:8e:37:b5:c9:61:3a:ff:58:a9:f7: 40:ce:f5:17:4c:a3:36:9f:99:39:9d:c9:b1:42:d0:b4:6e:77: f5:d9:b4:e2:73:13:f4:38:6a:c0:4b:c9:32:ac:32:23:b7:de: 51:1e:17:59:d3:ca:2b:29:87:eb:86:46:09:d8:64:b8:6d:ff: c2:27:db:d0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEitxg0xpun4NM6PNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU3YmMyOGQtMzdlNC00Yzc2LTg0ZDQtODQzMWRjOTIz OWM4MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk ODBkYzM4ZmQtZmUyNi00YTQ2LTk2YTUtM2Q3OWM1ZDNkNDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOOsXGPz17r9m46fHQ4jwMW3nDMCCN+uL4ME hhBdWq9KjkCGUqAykrrkIoVhe9FcKCPe73wCoeug1bUVYC4o9AX9Je+zIExL3V4T PbJJb2HgB5JNq8ggwTrke7/XMRH4uy9ByK7Qp6aYqKFod3zrnwFgNTEmOUV0v6ks WsZHb8UjSDvKOpZ5Wy+cr6DQ6Zj9P7iyK0rBw9WslEQLrvb+fhY+ISL9p+EIWbub +Ek2kpHF96KUcxmCETh6+C+5YAjOoV9XxZv5pN+3RQbV62dJgwMeEEz5SieaYXmm B1VZEaFL/VYFaptm3FwcsXnYEqdpVKlzds5jKh+UbMGqyRwa0wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFaErLSjJhjqqcObUX6w0ZKBXG2AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTdi YzI4ZC0zN2U0LTRjNzYtODRkNC04NDMxZGM5MjM5YzgvMTY5YmQ2MWMtZDc3YS0z YTVkLWFlYTEtZWI4MDM0ZmM3ZGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWU3YmMyOGQtMzdlNC00Yzc2LTg0 ZDQtODQzMWRjOTIzOWM4LzFlN2JjMjhkLTM3ZTQtNGM3Ni04NGQ0LTg0MzFkYzky MzljOC5jcmwwHwYDVR0jBBgwFoAUT2hGCOzA/DWcXU1xd+vJ0MqBG1QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTdiYzI4ZC0zN2U0LTRjNzYtODRkNC04NDMx ZGM5MjM5YzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgDcADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCGOCFwU4X9N8s2Eo4Ch7cBBzPEyiJvVg6tXADGw3UsoOALSlT8vXmr mrEj86Ksc5c7Ec7tLlDA2jN1NYg6Co2wCN8WERtz7DEuAW4hKvXAaTzP8OGPgwSy Ibr3CUcOEtCIclkE9yeS1dF6H9zvEFidwM3A8jiP/ReV4E7NXMuJFzypHZvyj8Kc EULSpUMf7SkNvtPEVvxoKy+C6+q4TxQBCOUz1MWRr256IUg+ZPAEnJ8EAJ4M2DmQ fMhRV443tclhOv9YqfdAzvUXTKM2n5k5ncmxQtC0bnf12bTicxP0OGrAS8kyrDIj t95RHhdZ08orKYfrhkYJ2GS4bf/CJ9vQ -----END CERTIFICATE-----Generated at Fri Mar 14 11:09:50 2025 by rpki-client