$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2e103ad3-eb2d-3740-9c54-04a4beea00a7.roa File: 2e103ad3-eb2d-3740-9c54-04a4beea00a7.roa (raw, json) Hash identifier: OMoPCNfD71S/w4aixre0QLGI91BN8nNIl2xkAHpEnS0= Subject key identifier: 02:83:20:83:5D:01:12:72:1A:3B:08:F7:D3:87:1E:51:C6:C5:70:35 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584869606B3E950EF5921D1DEE97 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2e103ad3-eb2d-3740-9c54-04a4beea00a7.roa Signing time: Thu 02 Jan 2025 14:00:52 +0000 ROA not before: Thu 02 Jan 2025 14:00:52 +0000 ROA not after: Wed 02 Apr 2025 13:00:52 +0000 asID: 20473 IP address blocks: 2606:f180:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:69:60:6b:3e:95:0e:f5:92:1d:1d:ee:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Jan 2 14:00:52 2025 GMT Not After : Apr 2 13:00:52 2025 GMT Subject: CN=a275955b-4d9a-4718-b4fa-70b6da1fdfe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5b:b7:f1:1f:7c:ba:d8:34:79:69:29:61:fb: 35:9e:61:8c:65:90:6e:a6:26:05:38:75:98:d3:1d: 9f:d9:c0:36:f7:9a:83:af:25:d1:3d:a7:38:ba:f7: ca:5f:48:57:df:4b:ef:35:fc:d9:08:67:a7:e4:cf: e1:f8:2e:9e:cc:e4:a0:20:34:a8:b0:86:dc:10:90: 91:7c:d8:6f:e4:03:8b:a9:a8:1b:50:98:14:81:54: cb:7a:12:b5:f5:3d:5f:19:95:a4:92:08:7d:63:98: b8:b4:da:2b:67:42:88:fc:2f:83:9a:0f:11:e9:ab: cf:1a:c0:08:2b:a9:e8:be:24:e5:5a:8d:5a:97:b9: 11:89:61:e8:ee:ea:2c:64:62:82:dd:eb:32:bc:3a: df:db:b7:8b:29:b3:83:2a:32:ff:cf:2e:e9:f2:b7: d3:19:e9:b5:5c:89:24:7d:68:e0:8d:59:52:8c:4c: 66:35:9c:93:d1:a3:c3:e7:cd:d2:a2:39:86:41:e5: 77:c8:e2:c0:6a:4c:8c:8a:e2:73:40:6c:2e:44:04: b4:55:dc:a2:ac:dd:02:05:7e:0f:01:6f:55:98:31: 8c:cb:86:cb:85:2c:4b:a1:e8:cb:bd:cf:26:67:fd: 1e:8c:ff:41:28:0c:9e:94:eb:06:0b:de:1d:1c:a2: 6b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:83:20:83:5D:01:12:72:1A:3B:08:F7:D3:87:1E:51:C6:C5:70:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2e103ad3-eb2d-3740-9c54-04a4beea00a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv6: 2606:f180:17::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:c6:72:77:80:26:85:de:a9:2a:4b:d6:4c:0f:b7:5c:4c:e4: d9:23:11:00:b1:5f:f5:ed:59:ff:c6:17:fb:b5:16:f1:89:84: a4:49:5e:9a:6b:7e:8d:8b:f4:d7:c1:13:3f:db:83:82:57:55: 99:61:74:80:e5:83:c8:9a:ed:21:1d:ca:8f:93:c0:ee:b9:ff: 64:e9:9e:10:c4:b4:58:b1:62:14:31:40:4f:1e:3e:32:c8:6c: a6:46:f6:8f:0b:6d:97:60:9b:90:0a:75:7e:48:70:b1:44:61: ba:8b:1a:ce:7e:79:9e:58:dc:51:50:f7:61:a3:08:2e:72:b3: e1:96:e1:9c:c6:95:7b:90:ea:55:99:43:dd:2a:0f:b5:01:48: 18:5f:d2:29:d3:d9:b5:46:72:30:6a:f5:73:5a:15:c5:bf:1f: 61:8d:7b:c6:f0:6a:bb:54:09:47:64:20:fb:cf:19:3c:40:28: ca:89:89:d1:22:cd:db:e4:76:bf:c1:be:19:67:46:ab:37:59: db:22:bf:45:73:fe:0c:92:27:68:20:d2:92:bd:56:28:d1:d8: 3b:af:2d:88:9c:b8:3d:6c:ff:d2:b5:dc:c8:d5:58:32:dd:13: 9f:af:d2:2d:c6:c5:8f:42:d9:2b:0d:c5:6f:69:bc:89:03:d9: 4a:e3:66:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhpYGs+lQ71kh0d7pcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk YTI3NTk1NWItNGQ5YS00NzE4LWI0ZmEtNzBiNmRhMWZkZmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilu38R98utg0eWkpYfs1nmGMZZBupiYFOHWY 0x2f2cA295qDryXRPac4uvfKX0hX30vvNfzZCGen5M/h+C6ezOSgIDSosIbcEJCR fNhv5AOLqagbUJgUgVTLehK19T1fGZWkkgh9Y5i4tNorZ0KI/C+Dmg8R6avPGsAI K6noviTlWo1al7kRiWHo7uosZGKC3esyvDrf27eLKbODKjL/zy7p8rfTGem1XIkk fWjgjVlSjExmNZyT0aPD583SojmGQeV3yOLAakyMiuJzQGwuRAS0VdyirN0CBX4P AW9VmDGMy4bLhSxLoejLvc8mZ/0ejP9BKAyelOsGC94dHKJrUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAKDIINdARJyGjsI99OHHlHGxXA1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvMmUxMDNhZDMtZWIyZC0z NzQwLTljNTQtMDRhNGJlZWEwMGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgbxgAAX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKjGcneAJoXeqSpL1kwPt1xM5NkjEQCxX/XtWf/GF/u1FvGJhKRJ Xpprfo2L9NfBEz/bg4JXVZlhdIDlg8ia7SEdyo+TwO65/2TpnhDEtFixYhQxQE8e PjLIbKZG9o8LbZdgm5AKdX5IcLFEYbqLGs5+eZ5Y3FFQ92GjCC5ys+GW4ZzGlXuQ 6lWZQ90qD7UBSBhf0inT2bVGcjBq9XNaFcW/H2GNe8bwartUCUdkIPvPGTxAKMqJ idEizdvkdr/BvhlnRqs3Wdsiv0Vz/gySJ2gg0pK9VijR2DuvLYicuD1s/9K13MjV WDLdE5+v0i3GxY9C2SsNxW9pvIkD2UrjZgc= -----END CERTIFICATE-----Generated at Fri Mar 14 13:47:13 2025 by rpki-client