$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/e0e99561-e212-3132-9e8b-78a6db5e8bf9.roa File: e0e99561-e212-3132-9e8b-78a6db5e8bf9.roa (raw, json) Hash identifier: zk0m8WblpBZInfVbst+9lSGNcmxv7wH+lpRUfFaC4TQ= Subject key identifier: 44:E0:82:95:0E:44:90:A3:46:E2:CE:81:60:86:D5:AA:67:2C:7D:41 Certificate issuer: /CN=3e08da12-c2b8-4581-b1af-e8322645d15e Certificate serial: 010D0C9F432858481F65384DADFCE4DF14E22170 Authority key identifier: 8F:4F:2B:58:DA:5E:57:32:56:2B:F7:97:33:18:32:3C:17:29:0D:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/e0e99561-e212-3132-9e8b-78a6db5e8bf9.roa Signing time: Sat 07 Dec 2024 02:00:39 +0000 ROA not before: Sat 07 Dec 2024 02:00:39 +0000 ROA not after: Fri 07 Mar 2025 02:00:39 +0000 asID: 398448 IP address blocks: 2607:a340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/3e08da12-c2b8-4581-b1af-e8322645d15e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/3e08da12-c2b8-4581-b1af-e8322645d15e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1f:65:38:4d:ad:fc:e4:df:14:e2:21:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e08da12-c2b8-4581-b1af-e8322645d15e Validity Not Before: Dec 7 02:00:39 2024 GMT Not After : Mar 7 02:00:39 2025 GMT Subject: CN=1460b778-4582-452d-ba9d-5f7db5c7e2ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e9:eb:e6:79:dc:55:fc:c1:f9:1a:d6:5c:16: 1b:63:09:ce:3b:b5:ae:f9:42:fb:fe:b5:bc:94:fb: 10:5e:8b:d8:25:2e:05:db:ea:32:f1:c9:a7:f6:34: bf:25:23:72:73:33:8e:d8:06:61:2d:d5:ca:45:46: 68:cc:97:d5:f6:27:dd:22:d8:1f:db:59:6b:9a:12: ae:8d:b4:f3:3d:6a:4c:b3:90:29:2e:da:7b:56:5a: da:4a:d8:8a:7b:76:f8:3e:02:72:a1:5b:63:8d:f3: 5d:08:2b:ff:6f:0a:71:87:3e:c4:07:f3:a3:52:f5: 3f:ad:d8:34:c0:b2:35:bc:70:d0:76:49:16:da:87: 11:cd:67:d2:78:33:0b:2a:e9:0c:21:cb:54:15:ce: 58:5d:86:12:c4:e4:fa:36:63:4a:64:bb:f8:c0:8d: 36:83:ce:8a:e9:7f:d4:40:ca:f0:30:00:dc:05:e5: 93:5c:d8:7e:b5:8c:64:fc:b4:46:86:d4:83:b3:5f: 69:d6:fa:1e:f9:3e:b3:fe:4f:1c:25:bf:46:75:1a: e3:eb:a4:2a:b6:3a:5f:a2:64:97:e0:da:26:14:a9: a1:79:2b:c8:7a:9a:fb:f1:90:9b:73:71:bd:ec:56: b8:17:22:60:1c:6d:b7:d3:c9:99:40:13:df:8b:aa: f5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E0:82:95:0E:44:90:A3:46:E2:CE:81:60:86:D5:AA:67:2C:7D:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/e0e99561-e212-3132-9e8b-78a6db5e8bf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/3e08da12-c2b8-4581-b1af-e8322645d15e.crl X509v3 Authority Key Identifier: keyid:8F:4F:2B:58:DA:5E:57:32:56:2B:F7:97:33:18:32:3C:17:29:0D:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e.cer sbgp-ipAddrBlock: critical IPv6: 2607:a340::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:31:91:21:25:14:5e:94:d2:7d:95:9a:82:8b:19:30:48:2f: 82:4b:cd:c6:b4:9d:e5:89:9b:89:41:2e:09:08:57:ab:22:7b: d4:1e:90:40:7d:c3:e4:98:90:40:a2:aa:d0:0a:e2:56:d2:71: 7d:60:12:d9:c5:f1:8a:62:0e:4d:ce:b7:50:70:55:e7:5f:3f: 61:46:73:2d:9e:f6:23:77:08:31:7f:02:f9:df:7e:b5:95:81: e7:23:ff:66:e2:8d:43:b5:42:97:76:c1:f5:e5:a3:dc:71:23: 7f:60:ff:9a:82:ca:a5:cc:3c:da:14:f6:bd:f2:3b:83:3f:ac: 80:ec:03:4b:59:ee:9c:ac:3f:4e:2b:11:ba:0c:ca:20:b3:45: fc:84:f9:75:dd:4c:c7:cb:dc:22:2f:d4:d9:4d:87:d3:d5:81: ca:cd:fc:c6:41:2f:27:d2:f4:4b:ad:84:96:40:e4:9b:65:a6: c0:ea:fd:39:97:da:51:e0:41:ee:2f:58:56:eb:a1:ef:64:53: 8e:e5:f5:6c:9c:49:d8:0f:9f:5b:78:84:3f:68:85:b3:cd:bf: 81:2a:cc:5b:d9:59:35:b8:18:a4:4f:99:31:9f:46:2c:ac:b2: 12:da:03:e5:07:9c:ad:81:a9:42:f8:8b:73:6b:ad:2f:4a:4d: e8:3b:49:0b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgfZThNrfzk3xTiIXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UwOGRhMTItYzJiOC00NTgxLWIxYWYtZTgzMjI2NDVk MTVlMB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk MTQ2MGI3NzgtNDU4Mi00NTJkLWJhOWQtNWY3ZGI1YzdlMmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOnr5nncVfzB+RrWXBYbYwnOO7Wu+UL7/rW8 lPsQXovYJS4F2+oy8cmn9jS/JSNyczOO2AZhLdXKRUZozJfV9ifdItgf21lrmhKu jbTzPWpMs5ApLtp7VlraStiKe3b4PgJyoVtjjfNdCCv/bwpxhz7EB/OjUvU/rdg0 wLI1vHDQdkkW2ocRzWfSeDMLKukMIctUFc5YXYYSxOT6NmNKZLv4wI02g86K6X/U QMrwMADcBeWTXNh+tYxk/LRGhtSDs19p1voe+T6z/k8cJb9GdRrj66QqtjpfomSX 4NomFKmheSvIepr78ZCbc3G97Fa4FyJgHG2308mZQBPfi6r1mwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFETggpUORJCjRuLOgWCG1apnLH1BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZTA4 ZGExMi1jMmI4LTQ1ODEtYjFhZi1lODMyMjY0NWQxNWUvZTBlOTk1NjEtZTIxMi0z MTMyLTllOGItNzhhNmRiNWU4YmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2UwOGRhMTItYzJiOC00NTgxLWIx YWYtZTgzMjI2NDVkMTVlLzNlMDhkYTEyLWMyYjgtNDU4MS1iMWFmLWU4MzIyNjQ1 ZDE1ZS5jcmwwHwYDVR0jBBgwFoAUj08rWNpeVzJWK/eXMxgyPBcpDUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZTA4ZGExMi1jMmI4LTQ1ODEtYjFhZi1lODMy MjY0NWQxNWUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgejQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAOMZEhJRRelNJ9lZqCixkwSC+CS83GtJ3liZuJQS4JCFerInvUHpBA fcPkmJBAoqrQCuJW0nF9YBLZxfGKYg5NzrdQcFXnXz9hRnMtnvYjdwgxfwL53361 lYHnI/9m4o1DtUKXdsH15aPccSN/YP+agsqlzDzaFPa98juDP6yA7ANLWe6crD9O KxG6DMogs0X8hPl13UzHy9wiL9TZTYfT1YHKzfzGQS8n0vRLrYSWQOSbZabA6v05 l9pR4EHuL1hW66HvZFOO5fVsnEnYD59beIQ/aIWzzb+BKsxb2Vk1uBikT5kxn0Ys rLIS2gPlB5ytgalC+Itza60vSk3oO0kL -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:07 2025 by rpki-client