$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e2a1bc6e-0c22-304f-89b0-643bd458ed8b.roa File: e2a1bc6e-0c22-304f-89b0-643bd458ed8b.roa (raw, json) Hash identifier: qMyM4M2rEtSMcEiBJbDXskd+bQ+nN2JVWS0SkT88VVg= Subject key identifier: 78:73:00:60:CB:7C:9C:89:AA:12:CB:11:B1:52:6F:E4:C6:9E:54:42 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F432858485F9ADBCD7FF73084DEF58380 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e2a1bc6e-0c22-304f-89b0-643bd458ed8b.roa Signing time: Mon 30 Dec 2024 02:00:39 +0000 ROA not before: Mon 30 Dec 2024 02:00:39 +0000 ROA not after: Sun 30 Mar 2025 01:00:39 +0000 asID: 394996 IP address blocks: 2604:a880:803::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:9a:db:cd:7f:f7:30:84:de:f5:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Dec 30 02:00:39 2024 GMT Not After : Mar 30 01:00:39 2025 GMT Subject: CN=bf9cab42-ca22-4ef8-bce6-cc298e5c89ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:16:2b:b8:8a:ef:1b:51:14:ff:3c:ef:88:d5: d9:f3:58:e5:d1:2e:df:50:39:15:49:c9:d0:ff:00: f6:70:ae:66:b3:7f:ec:88:27:81:10:cf:2a:8e:c6: b5:ba:c0:12:b8:87:0d:06:21:25:45:97:d9:90:5f: b1:52:83:81:20:66:25:67:5f:38:7e:a3:ed:2b:89: 75:e1:68:79:40:41:01:0c:d3:91:d4:83:70:e2:52: 82:ad:7a:11:c8:17:3b:63:da:14:2b:b2:4c:03:a7: fb:fe:ef:76:32:48:f3:85:7b:93:17:4d:01:78:00: f8:2e:fb:23:5b:c2:1f:aa:5c:20:23:38:d0:74:d5: b1:4b:97:b2:16:f4:d7:80:12:78:24:62:e4:2f:b4: c9:ea:35:a7:f6:7a:6c:2c:4a:ce:50:85:f7:93:83: 04:54:32:cf:d7:1b:0e:2a:fa:7e:08:d1:82:29:d1: 90:05:4f:a5:33:1f:0e:47:0c:31:45:77:fc:fc:1e: 18:3b:79:f5:83:ca:41:5d:3a:ed:c6:66:b5:b1:8a: 0a:71:4c:a3:f3:65:14:8f:50:4b:c9:ad:58:3e:44: 18:3a:83:ab:b6:df:2a:b8:38:23:9a:7c:ae:eb:2d: a7:6c:cd:d5:30:20:41:f1:8b:a4:e7:53:17:1e:fd: 4a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:73:00:60:CB:7C:9C:89:AA:12:CB:11:B1:52:6F:E4:C6:9E:54:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e2a1bc6e-0c22-304f-89b0-643bd458ed8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv6: 2604:a880:803::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:23:62:15:0c:70:ec:57:0c:9d:a4:48:16:69:9b:9d:0a:59: 39:12:25:5c:be:e3:08:e5:38:42:98:1b:a4:2f:61:9c:4a:8d: 6b:84:a6:34:5e:f6:5c:43:b5:39:e7:33:4c:36:46:72:cb:1e: 3d:0c:ac:fc:1e:b0:16:11:11:86:78:84:08:b7:01:cf:53:d6: b2:39:fd:48:1b:89:4b:9c:92:d6:d9:88:64:43:95:0e:86:ae: 5c:c0:1b:74:66:12:c6:f3:9b:4c:04:00:28:82:70:63:51:7e: d0:c1:e1:08:42:d5:8b:9a:44:97:b7:1a:be:54:9f:29:b8:c0: 5e:ab:0b:e3:6f:e0:2d:51:55:34:d1:1a:83:a8:01:66:94:c3: 0f:94:b4:9d:e6:78:78:b8:6b:dc:bf:07:93:7a:e1:cd:df:ea: d2:f4:2a:f9:02:a7:4a:af:06:52:9d:08:ac:78:dc:fe:a9:0a: 7b:d4:70:13:27:55:41:a1:55:86:1b:6b:ce:37:8f:ac:44:ff: 81:0c:fe:f0:0e:c4:9b:7a:28:1b:db:27:f8:74:be:e0:c3:30: f1:96:4f:13:2c:66:6d:46:1b:fb:7d:de:da:8a:1f:ab:b2:92: 2b:90:8b:9a:5f:27:be:c0:70:2e:41:c0:64:df:fd:51:47:1e: 5e:e6:53:8d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhfmtvNf/cwhN71g4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk YmY5Y2FiNDItY2EyMi00ZWY4LWJjZTYtY2MyOThlNWM4OWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhYruIrvG1EU/zzviNXZ81jl0S7fUDkVScnQ /wD2cK5ms3/siCeBEM8qjsa1usASuIcNBiElRZfZkF+xUoOBIGYlZ184fqPtK4l1 4Wh5QEEBDNOR1INw4lKCrXoRyBc7Y9oUK7JMA6f7/u92MkjzhXuTF00BeAD4Lvsj W8IfqlwgIzjQdNWxS5eyFvTXgBJ4JGLkL7TJ6jWn9npsLErOUIX3k4MEVDLP1xsO Kvp+CNGCKdGQBU+lMx8ORwwxRXf8/B4YO3n1g8pBXTrtxma1sYoKcUyj82UUj1BL ya1YPkQYOoOrtt8quDgjmnyu6y2nbM3VMCBB8Yuk51MXHv1KOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHhzAGDLfJyJqhLLEbFSb+TGnlRCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvZTJhMWJjNmUtMGMyMi0z MDRmLTg5YjAtNjQzYmQ0NThlZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgSogAgD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAQjYhUMcOxXDJ2kSBZpm50KWTkSJVy+4wjlOEKYG6QvYZxKjWuE pjRe9lxDtTnnM0w2RnLLHj0MrPwesBYREYZ4hAi3Ac9T1rI5/UgbiUucktbZiGRD lQ6GrlzAG3RmEsbzm0wEACiCcGNRftDB4QhC1YuaRJe3Gr5Unym4wF6rC+Nv4C1R VTTRGoOoAWaUww+UtJ3meHi4a9y/B5N64c3f6tL0KvkCp0qvBlKdCKx43P6pCnvU cBMnVUGhVYYba843j6xE/4EM/vAOxJt6KBvbJ/h0vuDDMPGWTxMsZm1GG/t93tqK H6uykiuQi5pfJ77AcC5BwGTf/VFHHl7mU40= -----END CERTIFICATE-----Generated at Fri Mar 14 11:15:20 2025 by rpki-client