$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/b01a6fd0-5038-3515-9519-e4df95bc9b9a.roa File: b01a6fd0-5038-3515-9519-e4df95bc9b9a.roa (raw, json) Hash identifier: PVsgi4fd+dHb7YVrGLJ0awiEZ0hJ+EJSdd+tquMi+Q4= Subject key identifier: 78:E9:09:BA:5B:A2:55:2F:63:05:73:1F:D3:32:B4:19:C4:9A:9F:70 Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F432858480BDA63CDD9DC0A4C1CBCC800 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/b01a6fd0-5038-3515-9519-e4df95bc9b9a.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 187 IP address blocks: 2620:171:d00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:63:cd:d9:dc:0a:4c:1c:bc:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=1f8e9290-4d7b-4182-879f-359a239679f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:24:5e:02:8a:b5:b0:5a:41:a0:74:d4:2f:39: fb:cd:cf:bf:e2:a6:2a:49:0b:0e:6f:4a:a0:10:3e: 60:6c:6d:2d:d7:40:b2:07:03:d5:2b:ed:cd:0c:d3: 03:92:78:28:eb:2e:64:2e:40:27:b2:00:6f:3f:cf: c2:78:2c:e3:04:05:b0:51:c9:96:18:4e:b4:b9:d3: 6d:23:0f:94:18:e9:97:95:b1:42:c6:51:fc:1b:19: 3f:a0:b9:d1:db:c6:97:e2:e4:0b:6e:72:4f:bb:75: 33:68:3f:81:86:15:62:a4:2e:d9:ed:73:d4:94:f4: 44:61:ea:13:3b:00:b7:54:0e:85:f4:8a:ad:83:fb: 9b:37:0f:40:52:66:e1:ea:1d:42:68:37:29:93:2d: 24:ed:72:a8:ae:2d:69:3a:13:67:6f:74:b4:49:b0: fb:eb:e6:e1:52:7a:28:53:ed:47:0b:42:e2:97:21: fe:4a:f5:39:68:a9:81:56:39:44:c0:6d:17:03:3e: ad:a2:8e:1f:fd:5c:24:40:72:a3:37:e7:74:b6:e4: 15:d8:52:4b:72:97:b0:c8:57:f4:d7:2e:ff:3a:57: 83:67:f0:90:89:6b:c6:6f:df:19:15:d6:58:02:dc: dc:a4:63:74:91:8f:7d:d2:87:08:a1:c5:9b:f7:9c: 78:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E9:09:BA:5B:A2:55:2F:63:05:73:1F:D3:32:B4:19:C4:9A:9F:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/b01a6fd0-5038-3515-9519-e4df95bc9b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv6: 2620:171:d00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:4c:d4:3a:0c:96:f2:37:3d:e6:f8:66:2d:43:a6:d0:d5:95: 6a:18:64:ca:6d:74:dc:59:d6:c9:04:10:5f:b7:57:e3:6e:b9: 32:22:92:23:04:f5:26:01:1f:28:e8:0d:7b:2e:80:7a:10:4b: 97:92:53:ab:49:05:80:f6:b2:89:8b:cb:00:25:9f:d0:69:79: cf:96:7a:22:df:35:db:eb:93:c7:cc:b8:fb:8c:ed:0c:ae:7c: 31:53:f6:3f:3c:f7:39:6f:1d:29:70:6d:90:23:db:5d:cd:2f: f8:01:77:72:1f:be:3e:c3:c6:c2:f7:17:0d:c7:e4:ea:90:c4: 20:d7:ec:98:69:8f:a5:7e:79:45:06:55:2e:b9:0b:63:bb:b8: ca:44:29:60:f2:1b:b0:6f:af:97:11:13:5e:e0:48:e7:c5:a6: 35:af:79:7b:91:af:fb:c5:c8:3b:7b:d3:d1:cc:c3:df:ce:0c: 99:86:9a:5f:4c:8f:9e:67:12:39:e1:1c:bd:60:8c:af:34:9b: e2:16:71:92:9f:c6:05:de:38:b1:f4:47:f0:ce:dc:c4:57:aa: fc:8f:22:54:f5:6a:fa:d0:8b:ec:d7:4d:d7:44:42:7f:de:27: 1e:dc:b3:de:b3:67:43:c1:04:0f:52:e4:85:5e:cf:6a:30:7c: 85:2d:34:d0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEgL2mPN2dwKTBy8yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk MWY4ZTkyOTAtNGQ3Yi00MTgyLTg3OWYtMzU5YTIzOTY3OWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliReAoq1sFpBoHTULzn7zc+/4qYqSQsOb0qg ED5gbG0t10CyBwPVK+3NDNMDkngo6y5kLkAnsgBvP8/CeCzjBAWwUcmWGE60udNt Iw+UGOmXlbFCxlH8Gxk/oLnR28aX4uQLbnJPu3UzaD+BhhVipC7Z7XPUlPREYeoT OwC3VA6F9Iqtg/ubNw9AUmbh6h1CaDcpky0k7XKori1pOhNnb3S0SbD76+bhUnoo U+1HC0LilyH+SvU5aKmBVjlEwG0XAz6too4f/VwkQHKjN+d0tuQV2FJLcpewyFf0 1y7/OleDZ/CQiWvGb98ZFdZYAtzcpGN0kY990ocIocWb95x4+QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHjpCbpbolUvYwVzH9MytBnEmp9wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvYjAxYTZmZDAtNTAzOC0z NTE1LTk1MTktZTRkZjk1YmM5YjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABcQ0w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARkzUOgyW8jc95vhmLUOm0NWVahhkym103FnWyQQQX7dX4265MiKS IwT1JgEfKOgNey6AehBLl5JTq0kFgPayiYvLACWf0Gl5z5Z6It812+uTx8y4+4zt DK58MVP2Pzz3OW8dKXBtkCPbXc0v+AF3ch++PsPGwvcXDcfk6pDEINfsmGmPpX55 RQZVLrkLY7u4ykQpYPIbsG+vlxETXuBI58WmNa95e5Gv+8XIO3vT0czD384MmYaa X0yPnmcSOeEcvWCMrzSb4hZxkp/GBd44sfRH8M7cxFeq/I8iVPVq+tCL7NdN10RC f94nHtyz3rNnQ8EED1LkhV7PajB8hS000A== -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:39 2025 by rpki-client