$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/5a304464-d84e-3409-9b0a-6cdb94040d27.roa File: 5a304464-d84e-3409-9b0a-6cdb94040d27.roa (raw, json) Hash identifier: 56ZcVR5zOAJIHLZwR0iG3D7BFXbX3mzGRYt0OyUT8E0= Subject key identifier: 88:55:43:D5:C1:D7:13:D2:A4:59:33:45:37:9D:8C:4C:A7:43:31:70 Certificate issuer: /CN=91b93de6-6446-4623-a181-5425af4f85cb Certificate serial: 010D0C9F43285848A1360F73E0625310F0F3B100 Authority key identifier: FF:17:C4:E9:06:5A:45:02:E5:72:C0:A9:7E:3D:59:08:C6:24:D3:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/5a304464-d84e-3409-9b0a-6cdb94040d27.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 54113 IP address blocks: 2606:50c0:8000::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/91b93de6-6446-4623-a181-5425af4f85cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/91b93de6-6446-4623-a181-5425af4f85cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:0f:73:e0:62:53:10:f0:f3:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91b93de6-6446-4623-a181-5425af4f85cb Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=fa655d17-6023-4ac7-9e9e-b0286d6118cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:36:fb:89:b3:d8:04:82:61:3c:96:28:c3:68: 3a:60:7f:38:9f:fd:e3:2e:50:68:2e:ab:ea:30:9d: 07:5d:6e:a3:09:96:46:f2:da:35:14:82:df:71:a3: 9c:c4:1f:c0:2c:dd:92:d6:a2:1e:9f:56:ef:16:42: da:2c:20:b1:bc:dd:5a:f4:f5:86:0e:fa:cb:3b:5c: 58:be:f8:d3:a1:c8:7b:13:e2:ba:85:07:54:20:a0: da:07:4a:e8:6e:da:c4:f2:68:0c:5e:71:33:34:65: 7b:a9:f4:43:1b:0c:5d:bc:67:59:8f:7e:f4:0f:0c: a9:ae:0b:1c:c5:07:c6:0f:9a:97:28:fd:49:8f:0a: df:a2:9a:d2:b0:32:a0:9c:02:60:b5:7d:bb:86:9f: 55:cd:0d:30:d9:ab:c9:ee:d1:95:f8:76:ac:71:9c: b9:00:b0:e8:e9:04:b4:c6:e2:85:63:1a:14:db:e9: cf:07:27:03:67:66:ab:4b:ce:9b:7c:be:cb:80:15: 46:66:34:f3:79:02:77:dc:f5:be:cb:59:8b:a8:26: 65:f2:7f:92:d8:44:b0:81:1e:fd:24:b6:5f:a6:63: d9:f7:ec:2c:7e:41:6b:d1:e0:56:47:16:1c:e8:2d: ea:df:ab:5c:98:9a:1c:d1:96:7c:a1:b2:50:b8:5a: 86:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:55:43:D5:C1:D7:13:D2:A4:59:33:45:37:9D:8C:4C:A7:43:31:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/5a304464-d84e-3409-9b0a-6cdb94040d27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/91b93de6-6446-4623-a181-5425af4f85cb.crl X509v3 Authority Key Identifier: keyid:FF:17:C4:E9:06:5A:45:02:E5:72:C0:A9:7E:3D:59:08:C6:24:D3:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb.cer sbgp-ipAddrBlock: critical IPv6: 2606:50c0:8000::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:d2:1a:5e:1c:0c:89:a2:be:ef:ad:cf:e9:e5:7e:b3:2e:22: 89:4f:83:4c:d4:09:b3:40:da:a6:0a:54:bf:72:0b:b3:0f:57: fc:2d:95:4c:d0:34:9b:09:c3:d4:0a:ef:1a:e9:d9:94:53:0d: 99:ae:2a:2c:5f:6f:4d:c8:04:1c:ee:6b:ec:8d:78:49:24:67: 42:4b:2a:4b:69:ed:89:9d:0e:e5:6c:25:b1:ee:21:1a:b3:e1: 16:3a:ee:a8:c2:30:88:76:09:50:01:e2:e7:62:02:57:46:7f: f0:34:57:40:1c:8f:71:b5:8f:b5:d1:61:39:9f:2d:cc:9e:76: 4f:20:1b:b9:6c:0a:8f:1b:2b:2a:bd:63:b3:b9:74:be:70:ef: 4e:57:d2:29:81:01:ec:a1:7d:ac:eb:62:cf:dd:59:28:63:b5: 73:49:07:03:2e:c4:62:f7:98:40:d3:f1:31:d5:b6:bb:6f:cd: e5:e5:7c:d9:90:54:18:8a:47:b3:fa:6a:81:93:73:45:c1:2f: aa:5d:38:21:a8:10:21:d1:6f:20:94:c6:6e:41:ae:20:47:3b: 82:87:13:54:54:db:a8:a5:43:37:ab:21:26:0e:57:81:65:5e: 17:54:f1:84:b4:d1:30:8a:ce:80:61:89:bb:b9:d4:ed:cd:20: 4c:91:19:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNg9z4GJTEPDzsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFiOTNkZTYtNjQ0Ni00NjIzLWExODEtNTQyNWFmNGY4 NWNiMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk ZmE2NTVkMTctNjAyMy00YWM3LTllOWUtYjAyODZkNjExOGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzb7ibPYBIJhPJYow2g6YH84n/3jLlBoLqvq MJ0HXW6jCZZG8to1FILfcaOcxB/ALN2S1qIen1bvFkLaLCCxvN1a9PWGDvrLO1xY vvjToch7E+K6hQdUIKDaB0robtrE8mgMXnEzNGV7qfRDGwxdvGdZj370Dwyprgsc xQfGD5qXKP1JjwrfoprSsDKgnAJgtX27hp9VzQ0w2avJ7tGV+HascZy5ALDo6QS0 xuKFYxoU2+nPBycDZ2arS86bfL7LgBVGZjTzeQJ33PW+y1mLqCZl8n+S2ESwgR79 JLZfpmPZ9+wsfkFr0eBWRxYc6C3q36tcmJoc0ZZ8obJQuFqGaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIhVQ9XB1xPSpFkzRTedjEynQzFwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MWI5 M2RlNi02NDQ2LTQ2MjMtYTE4MS01NDI1YWY0Zjg1Y2IvNWEzMDQ0NjQtZDg0ZS0z NDA5LTliMGEtNmNkYjk0MDQwZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTFiOTNkZTYtNjQ0Ni00NjIzLWEx ODEtNTQyNWFmNGY4NWNiLzkxYjkzZGU2LTY0NDYtNDYyMy1hMTgxLTU0MjVhZjRm ODVjYi5jcmwwHwYDVR0jBBgwFoAU/xfE6QZaRQLlcsCpfj1ZCMYk09cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85MWI5M2RlNi02NDQ2LTQ2MjMtYTE4MS01NDI1 YWY0Zjg1Y2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgZQwIAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJHSGl4cDImivu+tz+nlfrMuIolPg0zUCbNA2qYKVL9yC7MPV/wt lUzQNJsJw9QK7xrp2ZRTDZmuKixfb03IBBzua+yNeEkkZ0JLKktp7YmdDuVsJbHu IRqz4RY67qjCMIh2CVAB4udiAldGf/A0V0Acj3G1j7XRYTmfLcyedk8gG7lsCo8b Kyq9Y7O5dL5w705X0imBAeyhfazrYs/dWShjtXNJBwMuxGL3mEDT8THVtrtvzeXl fNmQVBiKR7P6aoGTc0XBL6pdOCGoECHRbyCUxm5BriBHO4KHE1RU26ilQzerISYO V4FlXhdU8YS00TCKzoBhibu51O3NIEyRGeg= -----END CERTIFICATE-----Generated at Sun Feb 16 16:00:59 2025 by rpki-client