$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/a99233be-1207-3ee2-bad9-d47dffd5091c.roa File: a99233be-1207-3ee2-bad9-d47dffd5091c.roa (raw, json) Hash identifier: mvkq6yn39Pf0LwpVlJj5Hvzd8Mv/7mVIeBGUuabbWWw= Subject key identifier: 63:D6:4A:D5:A6:77:2C:C2:A8:8E:35:D2:46:4B:36:D9:35:F5:E8:60 Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F432858487F15386CBF644C0FFF90EEC0 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/a99233be-1207-3ee2-bad9-d47dffd5091c.roa Signing time: Fri 10 Jan 2025 08:37:18 +0000 ROA not before: Fri 10 Jan 2025 08:37:18 +0000 ROA not after: Thu 10 Apr 2025 07:37:18 +0000 asID: 1288 IP address blocks: 2620:171:a5::/48 maxlen: 48 2620:171:a6::/47 maxlen: 48 2620:171:a8::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7f:15:38:6c:bf:64:4c:0f:ff:90:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: Jan 10 08:37:18 2025 GMT Not After : Apr 10 07:37:18 2025 GMT Subject: CN=881e1228-093a-4462-879f-e38d596788eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c9:bb:5c:23:24:ce:fc:cc:29:be:5f:50:c5: 24:47:de:d7:de:71:74:70:2f:82:f3:62:4a:1f:7c: 0f:9a:67:ed:80:02:22:fd:6f:a7:42:90:1b:8b:65: a4:b2:03:70:86:c9:ce:49:69:5e:01:33:65:d5:05: ef:39:c6:61:d1:13:84:3d:55:28:74:75:8b:2e:b4: ff:36:12:ee:76:1c:15:f9:6b:39:27:1f:09:1b:7a: 6b:79:c2:2f:30:1a:27:f8:2a:c1:78:74:3f:9a:25: bf:1f:12:74:62:a5:97:3c:61:10:d6:55:cf:26:c9: e1:a2:20:79:69:33:f6:6e:92:3e:9b:e5:32:8e:a7: ed:8a:f3:80:fa:b8:8d:a8:85:d1:70:2b:5e:51:f5: fe:01:80:40:e5:37:e4:db:b7:4e:ae:cf:77:8c:a4: 9a:e4:92:27:ae:0d:3d:ed:0a:ce:bb:c1:1b:fe:90: 80:6c:20:c1:7a:86:77:31:dc:34:9d:01:24:99:86: 49:c5:81:d8:77:64:42:ed:cf:78:9e:8e:d1:45:36: af:55:f7:a7:a5:5f:fc:f3:fb:4d:51:bf:a4:4f:dd: 66:67:fe:9c:66:dc:23:2c:3a:2c:ac:cc:e0:05:09: f7:65:37:40:35:6b:f1:a0:50:a2:25:ed:50:3b:38: 6c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D6:4A:D5:A6:77:2C:C2:A8:8E:35:D2:46:4B:36:D9:35:F5:E8:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/a99233be-1207-3ee2-bad9-d47dffd5091c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv6: 2620:171:a5::-2620:171:a9:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:1c:2e:79:33:71:b0:b4:5b:d2:01:db:1f:b5:22:f7:c6:a9: 89:88:1a:95:57:28:8f:0d:4d:6d:e7:20:2d:0e:13:28:13:8b: 7b:86:4e:d1:ec:fd:6f:87:d5:86:b7:3e:77:93:ed:dc:ef:37: e1:a5:04:96:0f:14:f8:1b:7c:36:a5:f4:f7:fb:44:f3:11:04: 24:8a:d4:4f:bf:4b:82:34:c4:e7:59:bc:f3:16:36:3d:dc:ad: 9c:21:8d:83:6d:54:a2:67:90:e0:d8:a2:9a:c7:f2:7a:2d:c5: b3:9b:d7:67:ad:6a:3c:66:17:ad:da:00:6d:14:11:f4:e8:fb: 9e:ed:3e:6d:7b:53:0d:cf:42:a3:9a:06:7d:87:f1:fe:f1:4f: f6:8c:f6:5a:8f:54:65:ac:2b:14:72:1a:0e:52:25:21:cd:a3: d5:cc:4b:db:c0:b4:58:c3:8e:af:51:4a:42:21:33:36:88:ba: d8:cc:0b:51:a1:ab:ec:cf:a6:c2:dc:08:4e:ce:66:a9:9e:45: c8:28:c9:11:5b:c3:a5:1a:59:c3:f7:1d:51:6f:e0:58:d2:83: b0:87:9c:42:26:29:ab:0d:df:d3:d7:77:11:64:21:4f:b5:d8: 7e:5c:16:e4:5c:18:cd:6a:63:bc:5a:24:7f:13:6e:64:1e:7c: 0f:d0:85:a2 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEh/FThsv2RMD/+Q7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI1MDExMDA4MzcxOFoXDTI1MDQxMDA3MzcxOFowLzEtMCsGA1UEAxMk ODgxZTEyMjgtMDkzYS00NDYyLTg3OWYtZTM4ZDU5Njc4OGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Mm7XCMkzvzMKb5fUMUkR97X3nF0cC+C82JK H3wPmmftgAIi/W+nQpAbi2WksgNwhsnOSWleATNl1QXvOcZh0ROEPVUodHWLLrT/ NhLudhwV+Ws5Jx8JG3precIvMBon+CrBeHQ/miW/HxJ0YqWXPGEQ1lXPJsnhoiB5 aTP2bpI+m+UyjqftivOA+riNqIXRcCteUfX+AYBA5Tfk27dOrs93jKSa5JInrg09 7QrOu8Eb/pCAbCDBeoZ3Mdw0nQEkmYZJxYHYd2RC7c94no7RRTavVfenpV/88/tN Ub+kT91mZ/6cZtwjLDosrMzgBQn3ZTdANWvxoFCiJe1QOzhs6wIDAQABo4IDYzCC A18wHQYDVR0OBBYEFGPWStWmdyzCqI410kZLNtk19ehgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvYTk5MjMzYmUtMTIwNy0z ZWUyLWJhZDktZDQ3ZGZmZDUwOTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmIAFx AKUDBwEmIAFxAKgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAbhwueTNxsLRb0gHbH7Ui98apiYgalVcojw1N becgLQ4TKBOLe4ZO0ez9b4fVhrc+d5Pt3O834aUElg8U+Bt8NqX09/tE8xEEJIrU T79LgjTE51m88xY2PdytnCGNg21UomeQ4Niimsfyei3Fs5vXZ61qPGYXrdoAbRQR 9Oj7nu0+bXtTDc9Co5oGfYfx/vFP9oz2Wo9UZawrFHIaDlIlIc2j1cxL28C0WMOO r1FKQiEzNoi62MwLUaGr7M+mwtwITs5mqZ5FyCjJEVvDpRpZw/cdUW/gWNKDsIec QiYpqw3f09d3EWQhT7XYflwW5FwYzWpjvFokfxNuZB58D9CFog== -----END CERTIFICATE-----Generated at Wed Feb 19 20:45:28 2025 by rpki-client