$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/1020aa92-2f16-3a75-a96f-1eb7d6bfaac9.roa File: 1020aa92-2f16-3a75-a96f-1eb7d6bfaac9.roa (raw, json) Hash identifier: GztdYbCHNs846Sa23XhEVXjxsDrmM1aXYABasoSD/b8= Subject key identifier: 5B:3B:8B:86:02:29:12:BD:AB:87:D1:1A:F3:5E:C2:07:D5:BB:6F:84 Certificate issuer: /CN=2531a4ba-6abc-447c-add8-67edc3c483ab Certificate serial: 010D0C9F432858487B85B742D678C793232F6580 Authority key identifier: 9E:3A:9F:74:F9:6C:64:ED:63:9F:AC:81:F2:E4:37:43:2E:F6:3B:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/1020aa92-2f16-3a75-a96f-1eb7d6bfaac9.roa Signing time: Thu 09 Jan 2025 02:00:40 +0000 ROA not before: Thu 09 Jan 2025 02:00:40 +0000 ROA not after: Wed 09 Apr 2025 01:00:40 +0000 asID: 8075 IP address blocks: 2620:12a:c0a3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7b:85:b7:42:d6:78:c7:93:23:2f:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2531a4ba-6abc-447c-add8-67edc3c483ab Validity Not Before: Jan 9 02:00:40 2025 GMT Not After : Apr 9 01:00:40 2025 GMT Subject: CN=7020790d-cd95-4d06-a3a0-42c118890df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cd:f5:34:19:61:01:57:f9:5f:d3:71:c6:87: b2:77:a0:f3:38:6b:30:1e:bc:a8:3a:54:91:37:31: 0c:94:e0:47:ea:21:b2:e0:3d:ad:df:46:42:f2:37: 83:82:30:6b:e8:f0:dd:e4:4b:de:d2:af:b5:63:d3: 9e:bf:58:2e:d6:93:20:5b:8d:a5:9f:65:5b:da:04: ee:46:12:5f:24:af:1e:58:ee:8b:09:7c:d6:3f:9a: 8c:f8:6c:73:e7:e6:7e:db:ec:db:d8:7c:86:84:52: 20:29:fe:2e:91:7d:2f:63:72:20:c2:39:ed:3f:ad: b9:d7:a3:9a:ff:b6:0e:c7:e6:b4:21:c7:a7:1e:f4: 8d:25:03:0d:f0:02:66:38:3f:01:ba:b5:da:a2:cf: d6:f8:34:5c:c4:ea:44:dd:f5:ce:62:c2:62:fa:d6: fd:b3:9a:46:f8:8a:02:ae:ae:5e:24:fe:90:b8:f0: b7:08:41:44:d8:27:09:e8:88:a6:59:34:44:b7:e6: 32:f7:c7:6e:5d:ad:c6:8a:a1:8c:56:5e:8f:1a:50: bd:1e:71:b8:69:3b:d5:8b:06:c1:f0:99:16:45:00: d3:bb:c0:84:f6:c7:ee:fc:cf:a2:18:71:42:f8:85: 1e:7b:c3:e4:84:e7:1d:52:b2:0d:12:2c:01:47:50: 73:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:3B:8B:86:02:29:12:BD:AB:87:D1:1A:F3:5E:C2:07:D5:BB:6F:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/1020aa92-2f16-3a75-a96f-1eb7d6bfaac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.crl X509v3 Authority Key Identifier: keyid:9E:3A:9F:74:F9:6C:64:ED:63:9F:AC:81:F2:E4:37:43:2E:F6:3B:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer sbgp-ipAddrBlock: critical IPv6: 2620:12a:c0a3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:98:87:02:52:ab:88:6a:b7:9e:26:a8:a2:17:59:c6:95:12: 30:9c:e3:9f:da:c6:6f:43:68:8e:03:bb:9a:78:75:9c:90:e0: d2:aa:8e:28:bc:8a:cc:66:b5:af:01:93:53:c4:3d:25:aa:79: a5:2a:cd:32:3b:17:09:53:d9:9b:60:5f:e4:f4:0d:c6:12:8d: 9a:51:3f:51:a7:2c:fe:ea:c6:7f:74:46:31:d6:c7:52:6a:3b: c1:d4:48:eb:c4:55:f6:fb:62:c7:77:12:5c:34:f8:64:f2:0a: 9e:40:68:43:69:33:b4:f2:17:2b:42:f6:26:fb:ff:2c:1b:89: e0:87:64:8f:67:d6:31:9b:ea:54:76:8b:fb:c1:2d:23:78:85: fd:82:a9:10:df:da:c9:98:00:7e:e8:69:5e:bb:b0:85:a9:66: 9c:6a:05:e1:08:e5:cf:34:ad:35:a9:e2:1c:63:4d:43:62:97: 54:fa:86:a2:b4:b0:a6:f7:06:79:8b:93:34:db:eb:55:d9:66: e2:eb:74:70:49:9c:54:6c:59:90:9f:b3:4a:bd:4c:1d:ca:d3: f2:f5:ae:6c:f4:5f:1d:aa:af:b8:53:3f:be:db:8b:65:f8:0d: 94:69:92:e6:67:50:a4:72:43:3e:37:54:67:bd:70:4b:a5:23: 0b:d2:b0:be -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEh7hbdC1njHkyMvZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzMWE0YmEtNmFiYy00NDdjLWFkZDgtNjdlZGMzYzQ4 M2FiMB4XDTI1MDEwOTAyMDA0MFoXDTI1MDQwOTAxMDA0MFowLzEtMCsGA1UEAxMk NzAyMDc5MGQtY2Q5NS00ZDA2LWEzYTAtNDJjMTE4ODkwZGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjc31NBlhAVf5X9Nxxoeyd6DzOGswHryoOlSR NzEMlOBH6iGy4D2t30ZC8jeDgjBr6PDd5Eve0q+1Y9Oev1gu1pMgW42ln2Vb2gTu RhJfJK8eWO6LCXzWP5qM+Gxz5+Z+2+zb2HyGhFIgKf4ukX0vY3IgwjntP62516Oa /7YOx+a0IcenHvSNJQMN8AJmOD8BurXaos/W+DRcxOpE3fXOYsJi+tb9s5pG+IoC rq5eJP6QuPC3CEFE2CcJ6IimWTREt+Yy98duXa3GiqGMVl6PGlC9HnG4aTvViwbB 8JkWRQDTu8CE9sfu/M+iGHFC+IUee8PkhOcdUrINEiwBR1BzHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFs7i4YCKRK9q4fRGvNewgfVu2+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNTMx YTRiYS02YWJjLTQ0N2MtYWRkOC02N2VkYzNjNDgzYWIvMTAyMGFhOTItMmYxNi0z YTc1LWE5NmYtMWViN2Q2YmZhYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjUzMWE0YmEtNmFiYy00NDdjLWFk ZDgtNjdlZGMzYzQ4M2FiLzI1MzFhNGJhLTZhYmMtNDQ3Yy1hZGQ4LTY3ZWRjM2M0 ODNhYi5jcmwwHwYDVR0jBBgwFoAUnjqfdPlsZO1jn6yB8uQ3Qy72OwowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yNTMxYTRiYS02YWJjLTQ0N2MtYWRkOC02N2Vk YzNjNDgzYWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABKsCj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD2YhwJSq4hqt54mqKIXWcaVEjCc45/axm9DaI4Du5p4dZyQ4NKq jii8isxmta8Bk1PEPSWqeaUqzTI7FwlT2ZtgX+T0DcYSjZpRP1GnLP7qxn90RjHW x1JqO8HUSOvEVfb7Ysd3Elw0+GTyCp5AaENpM7TyFytC9ib7/ywbieCHZI9n1jGb 6lR2i/vBLSN4hf2CqRDf2smYAH7oaV67sIWpZpxqBeEI5c80rTWp4hxjTUNil1T6 hqK0sKb3BnmLkzTb61XZZuLrdHBJnFRsWZCfs0q9TB3K0/L1rmz0Xx2qr7hTP77b i2X4DZRpkuZnUKRyQz43VGe9cEulIwvSsL4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:03:47 2025 by rpki-client