$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d869b923-37f4-3265-841d-116bf10b31a8.roa File: d869b923-37f4-3265-841d-116bf10b31a8.roa (raw, json) Hash identifier: rJENCvLzePHb/httVpkhAE6E6vCtEMu6t4t3GcV49y8= Subject key identifier: 67:91:B1:9A:A7:48:85:DD:F9:4F:0C:91:C9:71:15:0D:A8:2C:E3:4F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858473B5D3AB3A7A58FC6C047B120 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d869b923-37f4-3265-841d-116bf10b31a8.roa Signing time: Sun 15 Sep 2024 12:00:00 +0000 ROA not before: Sun 15 Sep 2024 12:00:00 +0000 ROA not after: Fri 19 Dec 2025 05:00:00 +0000 asID: 13335 IP address blocks: 2606:4700:4034::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3b:5d:3a:b3:a7:a5:8f:c6:c0:47:b1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 15 12:00:00 2024 GMT Not After : Dec 19 05:00:00 2025 GMT Subject: CN=75310b7a-0471-45b2-9a71-821a0bc3343d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:53:1a:51:79:f4:15:34:00:2c:ed:1b:1b:83: 9b:3e:6b:8a:f9:3f:c3:8c:43:61:c7:1c:a1:62:82: 04:e9:40:55:f7:ea:23:43:1a:a8:40:37:b2:60:eb: 08:18:f7:f0:ef:c7:14:e5:80:ed:39:02:c6:ee:d2: 36:ee:97:25:4b:84:98:09:bc:9a:89:95:47:b4:61: b7:0c:de:54:fe:48:74:3e:ec:61:88:47:c4:d8:88: 40:22:fe:f0:bc:5d:e8:f5:4b:ee:c8:3f:41:ab:70: ce:13:1d:d9:1f:7a:e0:d3:a0:97:39:bf:5c:52:aa: 68:14:b4:40:28:24:28:4f:4a:4c:03:9e:33:78:3a: 5d:b0:44:40:6e:b9:a6:b9:c5:22:2c:b7:aa:65:b6: f8:a1:f2:76:b0:96:0b:4a:14:cb:6a:a6:ad:9c:6c: e6:af:3f:fd:53:7b:c6:97:65:72:60:a5:51:74:2e: 8d:33:8a:2f:e8:0f:70:50:d2:83:32:a3:21:d4:03: b2:74:4c:1e:be:4b:1c:b0:02:c3:96:19:ae:30:31: e8:7e:4a:46:60:25:3b:da:87:07:78:67:7d:00:c1: cf:3b:49:67:fb:60:a8:40:9c:7f:84:4d:02:30:37: 8a:0c:1c:2e:7a:b6:ad:41:21:f5:bf:2d:49:c9:d4: c6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:91:B1:9A:A7:48:85:DD:F9:4F:0C:91:C9:71:15:0D:A8:2C:E3:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d869b923-37f4-3265-841d-116bf10b31a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:4034::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:15:d9:4a:ca:33:af:de:04:53:64:a7:0c:c4:20:75:5a:00: 6f:5c:ac:28:95:43:b4:a2:01:7d:f5:3b:bd:7c:a2:58:6f:93: e6:85:be:7d:02:b7:8d:9f:2c:02:34:d5:a0:ee:94:34:fa:3a: b1:b7:6f:9c:4a:0c:57:b9:59:df:0b:e3:c0:0e:da:f1:7d:c3: 5f:c5:9c:3a:d0:46:9f:38:3c:4d:66:fa:2c:44:29:eb:d0:00: 2f:a5:0f:cb:4f:65:78:ee:00:2a:c8:06:d9:e4:2a:a1:d2:55: 58:80:d9:56:7c:98:56:59:82:3a:d7:a4:10:ce:d7:5c:a8:bd: fd:cd:bd:ff:e7:eb:ba:45:51:b3:17:9f:c3:bd:8a:0c:da:d6: 80:17:ee:54:2a:e8:b4:c5:78:d2:03:ea:f7:89:b5:4b:dc:73: 68:55:55:94:2b:9d:50:a9:bc:4b:a7:41:6d:72:c9:a0:b8:db: 3e:98:f5:f4:3d:b4:e2:66:6e:8d:38:e0:5b:90:b4:49:24:f2: 4d:ac:63:f8:bf:5a:88:ef:92:ed:f8:75:ae:e7:3b:29:68:3c: 54:ed:36:c6:f4:2a:25:55:34:34:4b:3b:60:57:f7:83:82:76: 25:a9:44:1b:21:2a:ed:ec:1b:d4:bc:b7:39:e3:c4:bc:67:36: 44:c1:0d:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc7XTqzp6WPxsBHsSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDkxNTEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk NzUzMTBiN2EtMDQ3MS00NWIyLTlhNzEtODIxYTBiYzMzNDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1MaUXn0FTQALO0bG4ObPmuK+T/DjENhxxyh YoIE6UBV9+ojQxqoQDeyYOsIGPfw78cU5YDtOQLG7tI27pclS4SYCbyaiZVHtGG3 DN5U/kh0PuxhiEfE2IhAIv7wvF3o9UvuyD9Bq3DOEx3ZH3rg06CXOb9cUqpoFLRA KCQoT0pMA54zeDpdsERAbrmmucUiLLeqZbb4ofJ2sJYLShTLaqatnGzmrz/9U3vG l2VyYKVRdC6NM4ov6A9wUNKDMqMh1AOydEwevkscsALDlhmuMDHofkpGYCU72ocH eGd9AMHPO0ln+2CoQJx/hE0CMDeKDBwueratQSH1vy1JydTGrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGeRsZqnSIXd+U8MkclxFQ2oLONPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDg2OWI5MjMtMzdmNC0z MjY1LTg0MWQtMTE2YmYxMGIzMWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAEA0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGMV2UrKM6/eBFNkpwzEIHVaAG9crCiVQ7SiAX31O718olhvk+aF vn0Ct42fLAI01aDulDT6OrG3b5xKDFe5Wd8L48AO2vF9w1/FnDrQRp84PE1m+ixE KevQAC+lD8tPZXjuACrIBtnkKqHSVViA2VZ8mFZZgjrXpBDO11yovf3Nvf/n67pF UbMXn8O9igza1oAX7lQq6LTFeNID6veJtUvcc2hVVZQrnVCpvEunQW1yyaC42z6Y 9fQ9tOJmbo044FuQtEkk8k2sY/i/Wojvku34da7nOyloPFTtNsb0KiVVNDRLO2BX 94OCdiWpRBshKu3sG9S8tznjxLxnNkTBDZc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:58 2025 by rpki-client