$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/c1be6e65-98e4-3db0-9c6b-e982162e2022.roa File: c1be6e65-98e4-3db0-9c6b-e982162e2022.roa (raw, json) Hash identifier: TIUsUjL4d8lo0IvTe5ruIvPOE/akFZ4Oh1EzGPJs4ZM= Subject key identifier: EE:40:6C:32:96:9C:CC:7C:7D:AD:AD:73:CE:CC:0E:1B:B7:47:94:E2 Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F43285848E16BE642C63F1AE759977A00 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/c1be6e65-98e4-3db0-9c6b-e982162e2022.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 42 IP address blocks: 2001:500:15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:e6:42:c6:3f:1a:e7:59:97:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=f05d0175-c542-4d2c-9043-4fc132a15666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:da:94:71:5c:48:f0:51:22:c1:79:25:68:a0: fa:f9:43:71:95:ba:a8:21:25:37:a2:81:7b:81:5c: 5b:d8:a5:18:36:5b:74:de:1b:6a:9c:fe:9b:26:e2: 41:a2:e6:73:cb:7f:a5:fb:18:8d:88:a7:9e:16:9f: e5:83:8b:b5:48:60:f5:ad:02:a7:82:17:25:f1:e4: 46:a2:f1:47:59:63:46:f6:b0:ee:c1:4c:48:ba:ff: 76:39:d6:ef:5c:7d:d9:73:cd:8b:d6:81:3a:0a:2e: f8:fe:43:63:75:e0:87:c5:08:c0:4a:9f:8f:f8:26: dc:81:68:18:2e:12:24:09:5b:66:36:12:a0:f7:44: 9e:39:e1:34:67:0f:b7:8c:1e:d0:c7:0f:7f:2d:f7: b1:d2:b9:38:66:7c:f1:1e:ab:be:98:9b:8c:ca:cf: d9:fe:9a:3a:29:b6:0a:8e:0b:ae:0c:9c:d2:e3:5d: c3:56:ea:3a:6e:8c:aa:67:de:ac:b7:e2:1c:0b:39: 9b:44:b1:6c:35:d0:b0:e5:09:0b:4f:bb:ef:42:53: a6:f7:9a:a5:9b:46:5e:dc:af:30:b2:f2:48:47:80: ab:4a:c0:da:b0:0b:f3:05:6b:5d:39:57:23:18:3a: 8e:05:09:29:c5:b0:5a:56:fc:fe:4f:a0:1e:3a:29: dd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:40:6C:32:96:9C:CC:7C:7D:AD:AD:73:CE:CC:0E:1B:B7:47:94:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/c1be6e65-98e4-3db0-9c6b-e982162e2022.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:15::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:0f:8c:da:ca:bb:41:5a:88:6a:b2:54:bb:11:2b:be:68:0e: ef:d8:c4:47:39:e9:1d:da:f3:df:54:01:e4:d8:07:e8:33:97: 9f:91:18:d3:e6:30:cc:3b:9b:c8:9a:58:6b:25:40:f8:f9:96: 8f:f0:3a:d5:ab:08:a6:b9:79:8a:fa:fe:3b:e1:27:90:96:25: b6:45:33:1c:2f:9e:f4:1d:0e:0a:16:37:24:38:ea:d7:ba:72: 73:2f:49:86:b8:5c:95:1f:ad:e6:22:b4:2e:45:c8:e9:ec:91: 53:af:ee:84:d5:0a:e3:f5:47:eb:34:0d:53:c6:af:a1:e5:01: da:70:78:05:1a:59:1e:82:cc:d9:b3:cf:4f:fb:ac:ac:c6:ca: 75:d3:a9:a2:7b:a6:d0:c7:31:35:15:a1:9a:7e:be:1e:5a:5d: 8d:d2:18:b2:c3:a8:f8:db:e8:e8:19:6e:84:56:b1:6c:32:12: b5:28:ea:29:36:65:7b:86:6b:58:b4:8b:57:44:82:1e:58:fa: b6:89:e6:14:78:98:25:c3:90:a8:ba:c0:fe:60:a4:2c:1e:97: 79:19:37:0b:f7:9d:a2:58:57:4f:26:dd:26:c6:12:34:d5:de: 59:82:2c:f2:d0:ae:e5:2e:cf:1f:3a:be:a0:fb:97:e1:fb:b8: 60:e0:13:dd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjha+ZCxj8a51mXegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjA1ZDAxNzUtYzU0Mi00ZDJjLTkwNDMtNGZjMTMyYTE1NjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstqUcVxI8FEiwXklaKD6+UNxlbqoISU3ooF7 gVxb2KUYNlt03htqnP6bJuJBouZzy3+l+xiNiKeeFp/lg4u1SGD1rQKnghcl8eRG ovFHWWNG9rDuwUxIuv92OdbvXH3Zc82L1oE6Ci74/kNjdeCHxQjASp+P+CbcgWgY LhIkCVtmNhKg90SeOeE0Zw+3jB7Qxw9/Lfex0rk4ZnzxHqu+mJuMys/Z/po6KbYK jguuDJzS413DVuo6boyqZ96st+IcCzmbRLFsNdCw5QkLT7vvQlOm95qlm0Ze3K8w svJIR4CrSsDasAvzBWtdOVcjGDqOBQkpxbBaVvz+T6AeOindPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO5AbDKWnMx8fa2tc87MDhu3R5TiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvYzFiZTZlNjUtOThlNC0z ZGIwLTljNmItZTk4MjE2MmUyMDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH8PjNrKu0FaiGqyVLsRK75oDu/YxEc56R3a899UAeTYB+gzl5+R GNPmMMw7m8iaWGslQPj5lo/wOtWrCKa5eYr6/jvhJ5CWJbZFMxwvnvQdDgoWNyQ4 6te6cnMvSYa4XJUfreYitC5FyOnskVOv7oTVCuP1R+s0DVPGr6HlAdpweAUaWR6C zNmzz0/7rKzGynXTqaJ7ptDHMTUVoZp+vh5aXY3SGLLDqPjb6OgZboRWsWwyErUo 6ik2ZXuGa1i0i1dEgh5Y+raJ5hR4mCXDkKi6wP5gpCwel3kZNwv3naJYV08m3SbG EjTV3lmCLPLQruUuzx86vqD7l+H7uGDgE90= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:37 2025 by rpki-client