$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/d770de6c-e795-3458-b3fa-76797a8fc14c.roa File: d770de6c-e795-3458-b3fa-76797a8fc14c.roa (raw, json) Hash identifier: tOWX6c0MOb8w/SDhrDygt/WaU9PsISQQuxhyqQ61qXA= Subject key identifier: A8:5D:B6:FA:AF:EC:6A:A5:6D:23:DF:0F:E1:3B:73:99:A3:0D:7A:48 Certificate issuer: /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d Certificate serial: 010D0C9F43285848960B52CA0207D0B820F2F7E0 Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/d770de6c-e795-3458-b3fa-76797a8fc14c.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 229 IP address blocks: 2001:48a8:68f7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:52:ca:02:07:d0:b8:20:f2:f7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=9cab18e2-ac3d-48ae-9c64-b5ec259adc65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5e:fb:b1:15:0c:cb:f4:26:47:55:53:a5:9c: e1:48:91:5e:d4:08:6c:c0:2b:7e:f2:c3:d6:03:14: 1d:85:22:28:de:1d:87:6a:32:51:32:91:c5:eb:ff: c4:54:8c:c3:a5:c7:47:43:3c:cc:95:fc:c3:18:af: f9:4a:91:25:13:c9:36:ee:a1:65:80:46:ff:aa:21: f7:9f:e0:4c:cf:c1:43:ac:68:6e:4b:7c:a1:ef:4e: 05:1e:e2:eb:84:d5:38:6e:e1:35:f2:14:9a:31:76: 7d:ac:d1:93:da:aa:c3:61:30:b1:eb:0f:b2:59:f1: 1d:da:1b:64:ba:6f:fa:ca:f5:09:65:69:37:51:01: d0:db:83:f5:7f:64:86:d9:d4:4e:9b:f2:56:a8:28: 69:d9:5b:f0:4c:44:94:a4:ef:74:56:c0:34:18:dd: e6:06:1e:5f:56:b6:39:54:7e:f4:d5:c4:44:28:91: e7:e2:0f:20:37:90:45:dc:ab:4e:f7:6a:52:93:1d: b2:54:09:1d:ba:7e:ba:23:dc:75:db:c1:7d:9d:a9: 72:80:3b:e0:d9:0d:f8:8f:c3:4a:4e:7c:9f:4e:49: 3f:14:41:4d:7a:1f:25:46:b5:cd:46:90:9f:d9:59: d3:d7:d9:e9:27:b0:13:a4:23:6e:40:89:13:94:fb: af:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5D:B6:FA:AF:EC:6A:A5:6D:23:DF:0F:E1:3B:73:99:A3:0D:7A:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/d770de6c-e795-3458-b3fa-76797a8fc14c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl X509v3 Authority Key Identifier: keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer sbgp-ipAddrBlock: critical IPv6: 2001:48a8:68f7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:8f:c9:aa:49:b3:34:40:45:22:79:22:58:04:22:c7:52:38: cc:70:ec:f7:03:ea:52:88:1a:4d:43:1c:01:56:ab:7b:88:03: bd:de:07:18:2e:98:fa:90:58:31:0c:d7:ef:05:49:7b:e4:12: 48:ba:7b:92:ec:f9:72:1c:37:2a:d0:e6:8e:2d:d6:e0:81:45: b0:ea:4d:50:1d:9c:b1:a3:7d:61:7d:8b:7f:bb:6a:5d:74:7a: 19:d3:a3:08:32:1e:bf:48:1a:0f:7f:06:c4:34:c8:c2:9a:b0: b4:ec:33:59:b9:20:05:49:a9:8e:49:1b:7c:dd:e6:3d:fd:71: 1d:65:16:d3:cf:22:db:fb:bc:45:08:f1:ed:31:6a:88:b5:b4: 44:ae:f2:59:46:33:20:53:3c:e9:f7:9f:e3:8f:b6:de:0b:e5: cf:ca:5f:ba:22:70:f7:c4:cb:29:c9:c1:89:e5:99:b4:f9:35: ed:7f:54:3a:aa:83:bb:df:c2:7e:12:bc:5e:71:e6:66:9b:27: f1:2f:5a:96:7a:50:c6:21:bd:bc:bd:9e:3e:e3:ab:17:b8:db: aa:34:3f:aa:f1:2f:04:2a:2c:9c:0b:22:82:a8:27:4f:9c:b2: 90:5c:c2:0c:14:54:e4:76:c2:44:28:c6:c2:9c:87:80:41:64: 8a:b5:d9:6e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiWC1LKAgfQuCDy9+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0OGJhYTgtNmM4My00NWViLWIwOWItNWZiZDFlNDJj NTdkMB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk OWNhYjE4ZTItYWMzZC00OGFlLTljNjQtYjVlYzI1OWFkYzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgF77sRUMy/QmR1VTpZzhSJFe1AhswCt+8sPW AxQdhSIo3h2HajJRMpHF6//EVIzDpcdHQzzMlfzDGK/5SpElE8k27qFlgEb/qiH3 n+BMz8FDrGhuS3yh704FHuLrhNU4buE18hSaMXZ9rNGT2qrDYTCx6w+yWfEd2htk um/6yvUJZWk3UQHQ24P1f2SG2dROm/JWqChp2VvwTESUpO90VsA0GN3mBh5fVrY5 VH701cREKJHn4g8gN5BF3KtO92pSkx2yVAkdun66I9x128F9nalygDvg2Q34j8NK TnyfTkk/FEFNeh8lRrXNRpCf2VnT19npJ7ATpCNuQIkTlPuvAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKhdtvqv7GqlbSPfD+E7c5mjDXpIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4 YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJkMWU0MmM1N2QvZDc3MGRlNmMtZTc5NS0z NDU4LWIzZmEtNzY3OTdhOGZjMTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2I0OGJhYTgtNmM4My00NWViLWIw OWItNWZiZDFlNDJjNTdkL2NiNDhiYWE4LTZjODMtNDVlYi1iMDliLTVmYmQxZTQy YzU3ZC5jcmwwHwYDVR0jBBgwFoAU6TbcWGb8aAK/ppnetN0TXkzRJ84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJk MWU0MmM1N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIqGj3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEyPyapJszRARSJ5IlgEIsdSOMxw7PcD6lKIGk1DHAFWq3uIA73e BxgumPqQWDEM1+8FSXvkEki6e5Ls+XIcNyrQ5o4t1uCBRbDqTVAdnLGjfWF9i3+7 al10ehnTowgyHr9IGg9/BsQ0yMKasLTsM1m5IAVJqY5JG3zd5j39cR1lFtPPItv7 vEUI8e0xaoi1tESu8llGMyBTPOn3n+OPtt4L5c/KX7oicPfEyynJwYnlmbT5Ne1/ VDqqg7vfwn4SvF5x5mabJ/EvWpZ6UMYhvby9nj7jqxe426o0P6rxLwQqLJwLIoKo J0+cspBcwgwUVOR2wkQoxsKch4BBZIq12W4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:06 2025 by rpki-client