$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/21945cb7-acae-3edc-9a34-60c668bc2e9b.roa File: 21945cb7-acae-3edc-9a34-60c668bc2e9b.roa (raw, json) Hash identifier: l4bemMSi6jBRXbMM68kH+sjErjTCPSZCDp508zshoRs= Subject key identifier: 42:C2:CC:5A:39:D4:B6:36:0E:C0:5E:C7:AD:16:A9:96:82:4E:47:B0 Certificate issuer: /CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd Certificate serial: 010D0C9F43285848E59BC5FB077FC54049BEA940 Authority key identifier: 31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/21945cb7-acae-3edc-9a34-60c668bc2e9b.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 395287 IP address blocks: 2620:128:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:c5:fb:07:7f:c5:40:49:be:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=afe9039b-c636-4adb-a632-5b225db055fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c8:61:75:62:08:11:58:29:19:11:8d:12:7b: 0e:d2:05:b9:cd:67:e3:6f:48:1f:d8:81:e5:ec:74: 94:af:f3:8a:9b:ab:97:07:73:64:54:61:71:4a:14: 91:85:0d:30:16:93:2f:98:8b:ff:66:29:99:7d:a7: 66:18:12:ea:5c:f8:5c:51:37:e0:82:0a:45:71:64: 0d:d9:19:67:07:19:8b:3d:d5:6b:dc:61:4a:ad:40: 49:9e:f0:e7:87:2f:7c:f6:fb:14:95:51:fb:34:8d: f0:33:2e:8d:1e:53:5a:1c:d4:f7:3b:42:80:21:30: 7d:6c:e7:e4:99:7a:78:f1:a6:f3:f5:5a:07:85:83: 6d:17:fd:ad:56:cb:f2:6a:d5:c6:ba:67:38:d9:d9: 39:06:f2:5e:25:b2:22:3e:17:8f:f8:ed:d8:7a:47: f5:5e:68:6f:b9:36:02:7b:8c:7c:3f:63:9a:73:04: 69:92:86:de:66:24:07:93:ef:61:b7:63:3e:25:c5: 6d:8e:c1:8f:96:73:a1:b8:a8:dc:1a:d4:57:a6:28: 27:32:f2:ad:33:0d:1e:2c:8c:0c:98:a6:35:bd:93: 47:e5:dd:26:79:0c:88:e9:c7:9a:df:92:0d:96:5b: 38:7c:c6:e6:03:fe:59:89:c2:5e:8e:a3:9e:85:0f: e4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C2:CC:5A:39:D4:B6:36:0E:C0:5E:C7:AD:16:A9:96:82:4E:47:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/21945cb7-acae-3edc-9a34-60c668bc2e9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl X509v3 Authority Key Identifier: keyid:31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer sbgp-ipAddrBlock: critical IPv6: 2620:128:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:68:fc:5a:a1:d0:14:d0:10:87:c0:48:b9:d2:6b:73:cf:f1: 93:1b:38:71:44:7e:90:90:fa:76:97:52:9c:f2:a1:e2:be:b6: e7:de:3f:31:38:70:71:33:86:56:07:85:b4:79:17:33:0b:95: db:42:d0:ad:46:33:8f:2e:08:a7:7f:3f:ea:e1:a7:49:33:98: 23:cd:fb:a4:e2:0d:cb:bf:ec:21:9a:1e:36:f6:49:cf:52:6e: 6d:71:be:8d:0b:ed:ad:dd:c3:46:1f:56:2f:d4:e1:bf:80:71: 22:da:b3:23:6d:45:6e:66:be:a9:50:42:9b:a6:dc:17:c5:a1: cd:a8:50:c3:4b:24:e1:41:50:5f:27:5f:6e:6d:06:11:fd:c0: 7d:b3:e4:4c:c9:2a:88:b7:ce:c7:6e:89:b8:3c:07:7e:81:d2: 5b:c8:3c:ba:db:db:ca:71:1d:36:da:9e:0b:fc:16:9b:03:db: 70:5c:63:e4:8d:60:b1:5e:87:c4:40:66:2e:90:51:63:78:c3: 2e:0b:a9:62:a8:bc:82:8f:10:32:91:6a:70:ff:ce:29:f1:7b: 7c:f9:35:21:38:e1:52:f2:3f:e5:0c:1e:b6:fa:85:1a:29:f2: af:83:8c:ff:69:8c:a4:1d:d2:fd:31:34:80:71:7c:95:32:1b: 4f:66:43:bb -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjlm8X7B3/FQEm+qUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzZGExY2EtYTMwMi00MzZhLWJkNWYtMGE1Yjc1YmFl YWRkMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk YWZlOTAzOWItYzYzNi00YWRiLWE2MzItNWIyMjVkYjA1NWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkchhdWIIEVgpGRGNEnsO0gW5zWfjb0gf2IHl 7HSUr/OKm6uXB3NkVGFxShSRhQ0wFpMvmIv/ZimZfadmGBLqXPhcUTfgggpFcWQN 2RlnBxmLPdVr3GFKrUBJnvDnhy989vsUlVH7NI3wMy6NHlNaHNT3O0KAITB9bOfk mXp48abz9VoHhYNtF/2tVsvyatXGumc42dk5BvJeJbIiPheP+O3Yekf1XmhvuTYC e4x8P2OacwRpkobeZiQHk+9ht2M+JcVtjsGPlnOhuKjcGtRXpignMvKtMw0eLIwM mKY1vZNH5d0meQyI6cea35INlls4fMbmA/5ZicJejqOehQ/kKwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFELCzFo51LY2DsBex60WqZaCTkewMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYjNk YTFjYS1hMzAyLTQzNmEtYmQ1Zi0wYTViNzViYWVhZGQvMjE5NDVjYjctYWNhZS0z ZWRjLTlhMzQtNjBjNjY4YmMyZTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWIzZGExY2EtYTMwMi00MzZhLWJk NWYtMGE1Yjc1YmFlYWRkL2FiM2RhMWNhLWEzMDItNDM2YS1iZDVmLTBhNWI3NWJh ZWFkZC5jcmwwHwYDVR0jBBgwFoAUMV8Eih+UqKCCJUdeQgChhx+oiTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYjNkYTFjYS1hMzAyLTQzNmEtYmQ1Zi0wYTVi NzViYWVhZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABKCAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAmmj8WqHQFNAQh8BIudJrc8/xkxs4cUR+kJD6dpdSnPKh4r62594/ MThwcTOGVgeFtHkXMwuV20LQrUYzjy4Ip38/6uGnSTOYI837pOINy7/sIZoeNvZJ z1JubXG+jQvtrd3DRh9WL9Thv4BxItqzI21Fbma+qVBCm6bcF8WhzahQw0sk4UFQ Xydfbm0GEf3AfbPkTMkqiLfOx26JuDwHfoHSW8g8utvbynEdNtqeC/wWmwPbcFxj 5I1gsV6HxEBmLpBRY3jDLgupYqi8go8QMpFqcP/OKfF7fPk1ITjhUvI/5QwetvqF Ginyr4OM/2mMpB3S/TE0gHF8lTIbT2ZDuw== -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:54 2025 by rpki-client