$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/337b4a41-4259-3b79-b057-759503f23ee8.roa File: 337b4a41-4259-3b79-b057-759503f23ee8.roa (raw, json) Hash identifier: OTuPqw9vcrGVakcTlSHjwGD+kjJccn4wW7r3pWvoCI0= Subject key identifier: 9C:B7:2F:83:07:13:5F:1C:D5:3A:70:33:3D:01:A4:18:A9:C9:43:F5 Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F432858489340A8F4291D344D01F1B8C0 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/337b4a41-4259-3b79-b057-759503f23ee8.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 16509 IP address blocks: 2607:fb90:c150::/48 maxlen: 48 2607:fb90:c151::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:a8:f4:29:1d:34:4d:01:f1:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=59d61264-db76-4bbc-bf0e-5a411bff7963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ed:aa:b4:b0:d5:76:72:21:35:0b:37:6b:b1: 21:e8:98:c1:b0:e0:70:d3:1e:f5:9d:6d:fe:9f:a1: 5c:a8:65:ae:d9:02:71:f2:e1:7d:41:d5:9e:80:f2: 98:d2:0d:7d:9a:d8:c4:4f:2b:9f:e9:ec:fa:81:dc: 39:cd:d3:60:4c:46:f0:52:05:62:e5:9b:0f:83:c7: 38:f0:95:d0:eb:39:e9:20:9d:3b:3d:80:62:a5:1c: 5b:b3:52:e4:63:ed:b4:8f:3e:20:b6:ff:ae:d4:05: aa:e8:21:dc:01:ea:8a:52:f6:ce:04:58:fa:00:3f: f7:97:75:01:de:ea:8b:e5:f0:3d:9f:19:d7:69:26: 76:ac:8d:78:21:60:6c:32:81:c6:01:8e:f5:d6:1b: ef:4e:58:24:99:47:65:b4:05:49:5d:7d:90:96:a1: 24:12:18:21:11:a2:66:80:15:54:ee:20:19:b5:5d: 0f:36:dd:eb:67:cb:73:97:4b:50:c5:be:15:07:54: 81:9b:89:9c:12:b1:ec:c9:92:2a:5e:aa:41:96:75: 06:58:4f:e1:3c:ba:c1:9a:2b:8a:7d:5b:e1:29:4b: ea:a3:f1:17:78:d8:0a:ec:78:d3:e5:3d:22:56:1d: dc:4d:4a:a2:b4:81:ea:1c:0d:24:9a:2d:31:0b:5e: d9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B7:2F:83:07:13:5F:1C:D5:3A:70:33:3D:01:A4:18:A9:C9:43:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/337b4a41-4259-3b79-b057-759503f23ee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv6: 2607:fb90:c150::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:64:d2:cb:c3:00:89:6a:79:71:5b:e6:f8:06:48:45:03:e0: 28:ff:d1:2f:d0:07:10:9f:88:ce:df:f3:56:31:60:7d:82:4c: af:05:7b:0f:67:8a:30:bd:52:6d:1d:37:a3:88:52:fc:7a:48: 23:60:21:49:f8:12:43:c3:14:34:64:09:51:aa:6e:a2:f2:0e: 80:a0:55:80:d6:c1:e9:01:59:7c:e2:1d:a0:c7:e9:c3:9d:a3: d4:eb:4b:ab:1b:77:10:43:b9:27:8e:e8:fb:d2:12:a2:5b:0f: 35:af:fd:93:0c:2b:de:b2:84:45:96:01:a1:01:9e:b1:a5:67: 29:d2:44:59:75:68:8e:96:8b:fc:56:e5:0d:23:d3:43:6b:37: bd:43:cb:b1:c8:a7:c6:34:4b:96:20:c9:38:93:0c:5d:64:c2: 6d:64:07:29:91:21:80:4f:f9:a1:e4:34:36:2c:a2:1c:36:9c: ff:f7:6e:66:4e:85:0a:95:31:06:e7:c5:ad:8b:9e:14:f7:29: 3e:b8:87:5f:a1:01:48:eb:cc:43:1c:7b:f6:94:a0:16:bf:43: a4:5f:17:de:30:79:cd:3c:af:a7:87:7e:42:fd:e2:e1:03:81: d3:b1:d3:36:9d:d9:cb:5f:9a:8b:95:fa:e3:39:d0:72:f8:1f: 10:fc:40:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiTQKj0KR00TQHxuMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk NTlkNjEyNjQtZGI3Ni00YmJjLWJmMGUtNWE0MTFiZmY3OTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAme2qtLDVdnIhNQs3a7Eh6JjBsOBw0x71nW3+ n6FcqGWu2QJx8uF9QdWegPKY0g19mtjETyuf6ez6gdw5zdNgTEbwUgVi5ZsPg8c4 8JXQ6znpIJ07PYBipRxbs1LkY+20jz4gtv+u1AWq6CHcAeqKUvbOBFj6AD/3l3UB 3uqL5fA9nxnXaSZ2rI14IWBsMoHGAY711hvvTlgkmUdltAVJXX2QlqEkEhghEaJm gBVU7iAZtV0PNt3rZ8tzl0tQxb4VB1SBm4mcErHsyZIqXqpBlnUGWE/hPLrBmiuK fVvhKUvqo/EXeNgK7HjT5T0iVh3cTUqitIHqHA0kmi0xC17ZvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJy3L4MHE18c1TpwMz0BpBipyUP1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvMzM3YjRhNDEtNDI1OS0z Yjc5LWIwNTctNzU5NTAzZjIzZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgf7kMFQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACRk0svDAIlqeXFb5vgGSEUD4Cj/0S/QBxCfiM7f81YxYH2CTK8F ew9nijC9Um0dN6OIUvx6SCNgIUn4EkPDFDRkCVGqbqLyDoCgVYDWwekBWXziHaDH 6cOdo9TrS6sbdxBDuSeO6PvSEqJbDzWv/ZMMK96yhEWWAaEBnrGlZynSRFl1aI6W i/xW5Q0j00NrN71Dy7HIp8Y0S5YgyTiTDF1kwm1kBymRIYBP+aHkNDYsohw2nP/3 bmZOhQqVMQbnxa2LnhT3KT64h1+hAUjrzEMce/aUoBa/Q6RfF94wec08r6eHfkL9 4uEDgdOx0zad2ctfmouV+uM50HL4HxD8QM4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:51 2025 by rpki-client