$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/c3612ddb-d94b-3760-b29f-8208b6011a68.roa File: c3612ddb-d94b-3760-b29f-8208b6011a68.roa (raw, json) Hash identifier: Ds50+1wj2YdaaYJA6++E38va9ZxUt9vRny6xNqVcZHw= Subject key identifier: 7B:16:94:B8:84:EA:2B:3A:05:A5:C1:AA:74:86:15:CE:EA:28:22:3E Certificate issuer: /CN=34b1000a-ddde-44a7-ad9c-12d049acde17 Certificate serial: 010D0C9F43285848265FF80043A67936BF2960A0 Authority key identifier: 1E:EC:0F:F6:F1:1D:87:A6:13:F3:A1:DB:28:93:B5:87:3E:C7:B7:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/c3612ddb-d94b-3760-b29f-8208b6011a68.roa Signing time: Mon 09 Dec 2024 14:00:51 +0000 ROA not before: Mon 09 Dec 2024 14:00:51 +0000 ROA not after: Sun 09 Mar 2025 13:00:51 +0000 asID: 17103 IP address blocks: 2620:1b::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:26:5f:f8:00:43:a6:79:36:bf:29:60:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b1000a-ddde-44a7-ad9c-12d049acde17 Validity Not Before: Dec 9 14:00:51 2024 GMT Not After : Mar 9 13:00:51 2025 GMT Subject: CN=ae071b2e-9b4d-462f-8d80-9eb040ded041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cf:f0:a7:43:05:2b:e8:ab:02:c8:ec:6c:93: c8:ea:f1:4e:83:c5:04:aa:4e:a1:bb:d2:48:03:ff: 64:3f:a0:1a:50:bc:2f:06:67:16:ff:9b:f7:fe:ad: 1b:4b:68:21:24:aa:ba:46:b3:23:71:a2:2f:a1:d2: a6:cb:38:18:bc:a1:c4:82:11:47:b8:3e:e2:a1:51: 37:8d:85:f2:3a:c4:09:66:8d:d7:3c:16:47:c8:f5: bf:c7:0b:bb:31:d8:a2:29:69:b4:13:a9:21:76:09: 93:52:1c:80:f1:8f:56:23:2d:5b:b8:ef:68:69:77: 05:e4:e4:34:01:8b:f3:e2:65:0f:37:55:4a:10:8e: f2:43:87:eb:b7:cd:a2:31:c1:53:88:36:bf:ba:cf: 0f:ab:ea:7b:52:5a:1d:3a:94:46:b6:0f:38:90:9a: 81:5f:fa:4a:dc:70:7b:c6:4b:9e:99:6f:55:70:a6: d5:c9:78:be:c5:19:2b:62:33:42:e8:d2:5b:8d:92: cb:cd:0a:9d:b7:b8:b2:cf:65:fe:14:38:b7:d3:0a: 45:7c:04:f9:b0:7a:f0:3a:39:13:c9:78:8f:b3:04: 1b:37:d9:19:93:64:6b:13:34:78:4e:0f:29:35:73: 93:d6:84:32:9b:d5:95:2e:96:10:73:57:6d:30:d6: 48:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:16:94:B8:84:EA:2B:3A:05:A5:C1:AA:74:86:15:CE:EA:28:22:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/c3612ddb-d94b-3760-b29f-8208b6011a68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.crl X509v3 Authority Key Identifier: keyid:1E:EC:0F:F6:F1:1D:87:A6:13:F3:A1:DB:28:93:B5:87:3E:C7:B7:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer sbgp-ipAddrBlock: critical IPv6: 2620:1b::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:6c:a2:df:40:12:47:e3:a2:ee:0e:4e:11:36:b4:96:8f:38: 97:e1:aa:d3:44:e4:79:e3:06:c1:e1:13:04:91:9b:d2:20:b3: 2d:05:10:be:82:c1:df:06:b4:ee:1d:f7:75:6a:45:a3:b8:a4: fb:19:92:29:4f:99:00:75:6d:53:4f:81:0d:e7:2e:f8:1c:88: 72:fc:d0:2e:62:52:07:40:4d:b7:c4:55:46:09:28:32:25:56: 8d:9f:c7:b4:2f:d3:6d:68:4d:bc:3a:bd:93:e0:20:74:fe:66: d2:5a:fa:b3:c3:ee:ec:8d:ba:02:70:de:30:60:2f:ef:8b:8d: 41:7d:fc:cb:52:4a:e5:76:1b:09:64:06:dc:e8:b5:07:3e:1f: 88:93:e1:ff:ad:1d:4b:7a:b1:f7:9f:6b:da:85:5e:4a:31:01: 77:43:7a:cc:2f:68:3c:6c:f4:92:3f:d2:90:7b:52:8f:77:83: 97:a0:04:bb:d8:68:a0:3d:f7:63:a9:f5:a3:f9:73:76:b5:a0: cf:4e:78:fc:d9:59:4d:7e:5b:f3:89:0c:8b:6f:aa:89:b7:38: 71:91:d7:7d:fe:2c:26:5e:1a:39:db:38:d7:42:b2:0a:06:fd: 82:5a:0f:7b:85:49:4c:9b:6c:79:8b:4d:1a:7c:4d:4c:11:3a: d8:89:33:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgmX/gAQ6Z5Nr8pYKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiMTAwMGEtZGRkZS00NGE3LWFkOWMtMTJkMDQ5YWNk ZTE3MB4XDTI0MTIwOTE0MDA1MVoXDTI1MDMwOTEzMDA1MVowLzEtMCsGA1UEAxMk YWUwNzFiMmUtOWI0ZC00NjJmLThkODAtOWViMDQwZGVkMDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2s/wp0MFK+irAsjsbJPI6vFOg8UEqk6hu9JI A/9kP6AaULwvBmcW/5v3/q0bS2ghJKq6RrMjcaIvodKmyzgYvKHEghFHuD7ioVE3 jYXyOsQJZo3XPBZHyPW/xwu7MdiiKWm0E6khdgmTUhyA8Y9WIy1buO9oaXcF5OQ0 AYvz4mUPN1VKEI7yQ4frt82iMcFTiDa/us8Pq+p7UlodOpRGtg84kJqBX/pK3HB7 xkuemW9VcKbVyXi+xRkrYjNC6NJbjZLLzQqdt7iyz2X+FDi30wpFfAT5sHrwOjkT yXiPswQbN9kZk2RrEzR4Tg8pNXOT1oQym9WVLpYQc1dtMNZIfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHsWlLiE6is6BaXBqnSGFc7qKCI+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNGIx MDAwYS1kZGRlLTQ0YTctYWQ5Yy0xMmQwNDlhY2RlMTcvYzM2MTJkZGItZDk0Yi0z NzYwLWIyOWYtODIwOGI2MDExYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzRiMTAwMGEtZGRkZS00NGE3LWFk OWMtMTJkMDQ5YWNkZTE3LzM0YjEwMDBhLWRkZGUtNDRhNy1hZDljLTEyZDA0OWFj ZGUxNy5jcmwwHwYDVR0jBBgwFoAUHuwP9vEdh6YT86HbKJO1hz7Ht4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNGIxMDAwYS1kZGRlLTQ0YTctYWQ5Yy0xMmQw NDlhY2RlMTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAGwAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKdsot9AEkfjou4OThE2tJaPOJfhqtNE5HnjBsHhEwSRm9Igsy0F EL6Cwd8GtO4d93VqRaO4pPsZkilPmQB1bVNPgQ3nLvgciHL80C5iUgdATbfEVUYJ KDIlVo2fx7Qv021oTbw6vZPgIHT+ZtJa+rPD7uyNugJw3jBgL++LjUF9/MtSSuV2 GwlkBtzotQc+H4iT4f+tHUt6sfefa9qFXkoxAXdDeswvaDxs9JI/0pB7Uo93g5eg BLvYaKA992Op9aP5c3a1oM9OePzZWU1+W/OJDItvqom3OHGR133+LCZeGjnbONdC sgoG/YJaD3uFSUybbHmLTRp8TUwROtiJMzM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:58 2025 by rpki-client