$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bac42415-fae2-3af2-804e-7915f8309a0d.roa File: bac42415-fae2-3af2-804e-7915f8309a0d.roa (raw, json) Hash identifier: qHXsZlni+XjJOUB1YJSy8BBNxKB1CGP02yWd9rY5amE= Subject key identifier: 01:DA:7F:B9:B3:1E:43:CA:75:E5:29:D2:4C:15:0F:DF:1B:70:48:27 Certificate issuer: /CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5 Certificate serial: 010D0C9F432858484C1035F873F5B449B2D4F8C0 Authority key identifier: 95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bac42415-fae2-3af2-804e-7915f8309a0d.roa Signing time: Mon 23 Dec 2024 02:00:40 +0000 ROA not before: Mon 23 Dec 2024 02:00:40 +0000 ROA not after: Sun 23 Mar 2025 01:00:40 +0000 asID: 1207 IP address blocks: 2001:5e8:ffff:3::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4c:10:35:f8:73:f5:b4:49:b2:d4:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5 Validity Not Before: Dec 23 02:00:40 2024 GMT Not After : Mar 23 01:00:40 2025 GMT Subject: CN=0bc34395-a2cb-460d-99b0-29ed7fce07a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dd:a3:5c:e5:bc:24:f4:1f:d4:83:08:8d:aa: c5:0e:53:5e:96:e3:f3:76:f8:dd:b8:66:0a:f1:ec: 27:ff:c9:e2:50:da:1e:98:30:90:ba:13:69:6c:e7: 32:97:5d:01:5e:02:b5:ba:cd:a3:05:f5:5a:36:d9: 66:95:84:d0:58:37:8a:a1:b1:74:f8:a9:c6:b0:e8: c9:47:08:33:28:83:2b:61:2a:97:0c:e5:e8:d7:58: d7:7b:92:73:85:ad:b1:16:74:e6:4e:6d:79:2c:0f: b5:ca:7e:8c:8e:94:32:e9:74:78:ca:6d:ea:3e:6b: 92:c9:2e:8b:bb:be:43:62:0b:ab:5a:29:44:04:a0: ce:ce:e0:c4:4c:ed:dc:9d:28:3f:1c:23:37:25:ec: 34:16:2a:f8:a0:ce:31:1d:89:ef:49:fc:e1:a2:93: af:39:b9:ec:de:ac:65:0c:ff:e1:4f:78:79:a9:9d: 0a:f5:77:f9:f5:df:09:b5:4f:51:5d:f9:ef:b4:b7: 98:7a:3a:a4:2f:61:47:f7:3b:a3:c0:13:4f:d0:ff: 51:2d:65:66:f8:24:ef:02:17:2b:01:19:e2:5c:e8: 2e:23:67:68:70:64:38:cd:56:db:37:d3:5a:83:8e: 89:4c:c6:15:49:d1:8c:62:21:6a:a4:aa:1f:ee:3c: 80:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:DA:7F:B9:B3:1E:43:CA:75:E5:29:D2:4C:15:0F:DF:1B:70:48:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bac42415-fae2-3af2-804e-7915f8309a0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl X509v3 Authority Key Identifier: keyid:95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer sbgp-ipAddrBlock: critical IPv6: 2001:5e8:ffff:3::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:28:26:c3:86:16:b9:bb:a3:77:82:b9:63:19:2b:41:f4:4b: f4:6b:a3:34:74:8b:d5:5a:ab:55:df:9a:d3:98:0b:07:a7:47: d3:21:b3:1b:b1:c3:be:bf:35:3e:f1:8f:5f:21:e1:b5:3a:22: 94:dc:55:1b:d7:19:4a:05:bb:ed:62:0a:56:57:44:32:56:a5: 4d:0e:12:c8:51:28:22:ef:4a:90:5c:24:0e:d0:8b:f3:3c:7d: 73:e5:ff:ff:08:ed:16:f0:e6:96:70:66:1a:0e:27:f6:39:b9: 8e:7c:30:2f:c1:ad:aa:f9:fe:cf:d7:a1:a7:5c:98:4b:c7:0d: 2f:a4:5a:a3:98:47:be:33:67:03:55:dc:bc:01:43:96:25:16: d0:eb:9e:30:7a:55:ad:06:3b:db:ee:2c:24:28:29:e1:55:33: 92:24:19:0a:b3:51:88:90:7e:52:db:ba:48:a4:2a:f8:eb:26: 4e:18:4f:41:d6:27:8e:da:b8:a6:26:46:09:cd:23:a6:6b:33: 8a:b8:9b:63:25:49:ba:b2:2c:b2:18:e4:3a:3d:d2:ff:11:58: 35:2e:09:d8:bc:f8:44:64:d9:62:fb:fb:d7:71:76:ba:9e:5b: 2b:3b:68:a5:b3:b4:fd:01:f0:63:73:6b:f0:72:b5:59:73:57: db:a2:44:64 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEhMEDX4c/W0SbLU+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzZDhjZjAtZThjNS00YmZlLWE4YTctMjhlYTYxOGJj YWY1MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk MGJjMzQzOTUtYTJjYi00NjBkLTk5YjAtMjllZDdmY2UwN2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut2jXOW8JPQf1IMIjarFDlNeluPzdvjduGYK 8ewn/8niUNoemDCQuhNpbOcyl10BXgK1us2jBfVaNtlmlYTQWDeKobF0+KnGsOjJ RwgzKIMrYSqXDOXo11jXe5Jzha2xFnTmTm15LA+1yn6MjpQy6XR4ym3qPmuSyS6L u75DYgurWilEBKDOzuDETO3cnSg/HCM3Jew0Fir4oM4xHYnvSfzhopOvObns3qxl DP/hT3h5qZ0K9Xf59d8JtU9RXfnvtLeYejqkL2FH9zujwBNP0P9RLWVm+CTvAhcr ARniXOguI2docGQ4zVbbN9Nag46JTMYVSdGMYiFqpKof7jyAvQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFAHaf7mzHkPKdeUp0kwVD98bcEgnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iYzNk OGNmMC1lOGM1LTRiZmUtYThhNy0yOGVhNjE4YmNhZjUvYmFjNDI0MTUtZmFlMi0z YWYyLTgwNGUtNzkxNWY4MzA5YTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmMzZDhjZjAtZThjNS00YmZlLWE4 YTctMjhlYTYxOGJjYWY1L2JjM2Q4Y2YwLWU4YzUtNGJmZS1hOGE3LTI4ZWE2MThi Y2FmNS5jcmwwHwYDVR0jBBgwFoAUla16vo9wLw2EVMgJKfVXK3GdClcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iYzNkOGNmMC1lOGM1LTRiZmUtYThhNy0yOGVh NjE4YmNhZjUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEF6P// AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAUigmw4YWubujd4K5YxkrQfRL9GujNHSL1VqrVd+a05gLB6dH 0yGzG7HDvr81PvGPXyHhtToilNxVG9cZSgW77WIKVldEMlalTQ4SyFEoIu9KkFwk DtCL8zx9c+X//wjtFvDmlnBmGg4n9jm5jnwwL8Gtqvn+z9ehp1yYS8cNL6Rao5hH vjNnA1XcvAFDliUW0OueMHpVrQY72+4sJCgp4VUzkiQZCrNRiJB+Utu6SKQq+Osm ThhPQdYnjtq4piZGCc0jpmsziribYyVJurIsshjkOj3S/xFYNS4J2Lz4RGTZYvv7 13F2up5bKztopbO0/QHwY3Nr8HK1WXNX26JEZA== -----END CERTIFICATE-----Generated at Sun Feb 16 15:46:56 2025 by rpki-client