$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/f85ac2d0-4807-355a-b171-4743292ce05e.roa File: f85ac2d0-4807-355a-b171-4743292ce05e.roa (raw, json) Hash identifier: cZqlXb+VnRGoy/q+y7qC0cvVmudMvgr/lXOyF3n9NGI= Subject key identifier: B9:83:6B:D2:9B:23:4E:DC:BA:96:CA:B2:D7:3A:6C:BF:CA:1A:8D:B0 Certificate issuer: /CN=233d8eef-51df-487b-9edb-f16ba403f442 Certificate serial: 010D0C9F43285848E16BE5506811CA2AF5E4A200 Authority key identifier: 56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/f85ac2d0-4807-355a-b171-4743292ce05e.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 395766 IP address blocks: 2607:3380::/40 maxlen: 40 2607:3380:1200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:e5:50:68:11:ca:2a:f5:e4:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233d8eef-51df-487b-9edb-f16ba403f442 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=b2a097fb-8715-460f-9c90-be2a304be3dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cb:5b:e9:89:cc:7a:14:4e:ad:50:f9:6a:8a: ef:1e:52:1f:9b:24:56:b6:48:2e:ad:5f:45:b0:a3: 46:d5:d5:98:33:93:7d:64:9b:2f:7e:e5:3c:85:f8: 4c:0d:34:54:a9:db:7b:a2:65:36:ff:32:d7:34:24: f3:9b:95:b3:b4:eb:5f:9b:ae:a2:79:50:f5:f3:ae: 9a:35:eb:3b:ae:74:d1:e8:92:ea:f7:a2:cd:a9:e2: a9:0b:de:1e:6d:56:02:86:ca:40:2b:c7:31:83:4c: f0:c2:19:cb:09:e1:65:b9:33:4e:c6:45:af:29:a7: f6:09:da:d3:53:e2:a1:4f:81:4f:8d:f4:7c:0a:0d: 62:46:7c:92:d6:4f:f0:f7:c6:e0:b0:0f:21:be:8c: 92:f3:3c:5b:96:99:ed:ae:05:c7:1d:a9:14:69:c2: 66:0d:1f:ed:73:6f:75:e4:7d:fe:71:eb:10:76:72: 33:bc:b1:ec:ff:f8:6d:f2:ed:6a:6c:f1:c2:4a:1e: 42:e6:6f:74:86:ce:c4:a4:62:d5:58:2d:d1:f1:2a: 0f:42:e0:2d:a1:30:7d:ae:6e:84:0b:7f:d4:16:9a: 18:bd:0f:df:8d:14:f2:0c:e3:72:7a:09:70:cd:92: 11:52:0c:24:4f:1e:c8:0b:81:a2:af:cc:08:eb:f3: d9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:83:6B:D2:9B:23:4E:DC:BA:96:CA:B2:D7:3A:6C:BF:CA:1A:8D:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/f85ac2d0-4807-355a-b171-4743292ce05e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl X509v3 Authority Key Identifier: keyid:56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer sbgp-ipAddrBlock: critical IPv6: 2607:3380::/40 2607:3380:1200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:67:86:2a:e3:3f:f1:20:e2:8d:24:66:9e:d1:c4:27:29:7c: 25:b8:b4:a8:6b:2c:81:e7:b2:20:9a:f3:be:ef:1c:1d:98:ae: 55:c5:16:81:06:5d:ee:ec:21:c1:f1:a3:2f:65:88:ed:10:0e: 5a:74:a5:dc:73:94:2a:ce:a5:7b:4e:a9:c9:64:4c:30:2b:36: bb:56:c7:5a:2f:b2:b1:e6:b9:59:f3:36:24:13:b8:0f:80:f1: 4b:59:cb:18:aa:87:cc:4e:cc:d5:91:2b:5e:e3:3d:bb:3c:ad: 25:f9:22:bf:52:18:79:05:34:44:0b:9c:69:45:56:52:35:00: 94:35:ee:a1:4a:b7:56:dc:97:f6:e3:37:4b:96:f8:8a:68:2e: 39:74:39:a7:f8:bd:11:22:93:f7:73:0e:95:ad:44:4b:eb:9b: cd:dc:a9:26:1b:6b:d5:7c:4e:46:96:af:41:08:cd:ec:fe:80: 4d:4e:aa:10:0c:08:22:b0:68:4f:85:09:e3:8a:9c:35:68:50: d3:2c:4f:e9:82:96:cb:d6:f8:f9:86:2b:7e:0c:6c:e3:87:39: bc:a6:c0:81:db:76:6c:c4:0a:60:e3:2e:e5:fe:ab:f2:1b:9b: e1:b0:bd:93:b8:b7:7e:5a:6c:52:62:ca:52:2a:3c:41:e7:2b: 97:3f:02:64 -----BEGIN CERTIFICATE----- MIIGTTCCBTWgAwIBAgIUAQ0Mn0MoWEjha+VQaBHKKvXkogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjMzZDhlZWYtNTFkZi00ODdiLTllZGItZjE2YmE0MDNm NDQyMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk YjJhMDk3ZmItODcxNS00NjBmLTljOTAtYmUyYTMwNGJlM2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMtb6YnMehROrVD5aorvHlIfmyRWtkgurV9F sKNG1dWYM5N9ZJsvfuU8hfhMDTRUqdt7omU2/zLXNCTzm5WztOtfm66ieVD1866a Nes7rnTR6JLq96LNqeKpC94ebVYChspAK8cxg0zwwhnLCeFluTNOxkWvKaf2CdrT U+KhT4FPjfR8Cg1iRnyS1k/w98bgsA8hvoyS8zxblpntrgXHHakUacJmDR/tc291 5H3+cesQdnIzvLHs//ht8u1qbPHCSh5C5m90hs7EpGLVWC3R8SoPQuAtoTB9rm6E C3/UFpoYvQ/fjRTyDONyeglwzZIRUgwkTx7IC4Gir8wI6/PZ/QIDAQABo4IDXzCC A1swHQYDVR0OBBYEFLmDa9KbI07cupbKstc6bL/KGo2wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzNk OGVlZi01MWRmLTQ4N2ItOWVkYi1mMTZiYTQwM2Y0NDIvZjg1YWMyZDAtNDgwNy0z NTVhLWIxNzEtNDc0MzI5MmNlMDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjMzZDhlZWYtNTFkZi00ODdiLTll ZGItZjE2YmE0MDNmNDQyLzIzM2Q4ZWVmLTUxZGYtNDg3Yi05ZWRiLWYxNmJhNDAz ZjQ0Mi5jcmwwHwYDVR0jBBgwFoAUVoUG6oo0R7YSsaIf3t1ae2CBbzkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzNkOGVlZi01MWRmLTQ4N2ItOWVkYi1mMTZi YTQwM2Y0NDIuY2VyMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYAJgczgAAD BgAmBzOAEjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQDdZ4Yq4z/xIOKNJGae0cQnKXwluLSoayyB57IgmvO+ 7xwdmK5VxRaBBl3u7CHB8aMvZYjtEA5adKXcc5QqzqV7TqnJZEwwKza7VsdaL7Kx 5rlZ8zYkE7gPgPFLWcsYqofMTszVkSte4z27PK0l+SK/Uhh5BTREC5xpRVZSNQCU Ne6hSrdW3Jf24zdLlviKaC45dDmn+L0RIpP3cw6VrURL65vN3KkmG2vVfE5Glq9B CM3s/oBNTqoQDAgisGhPhQnjipw1aFDTLE/pgpbL1vj5hit+DGzjhzm8psCB23Zs xApg4y7l/qvyG5vhsL2TuLd+WmxSYspSKjxB5yuXPwJk -----END CERTIFICATE-----Generated at Sun Feb 16 15:46:10 2025 by rpki-client