$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa File: 0f4421e9-f24b-3fb4-80a3-278119725959.roa (raw, json) Hash identifier: BLb/5Qi9/9RuvvpqHTIzTScSNGbKB8NYoWbuvP9Qij0= Subject key identifier: 1A:23:99:49:9F:65:F8:90:07:08:99:1B:30:85:27:50:59:D0:13:E0 Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F43285848B4C0D0DED0C1A023166DB180 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 4213 IP address blocks: 2607:f820::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:d0:de:d0:c1:a0:23:16:6d:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=fe6daac2-45ad-4741-82ed-cfa962ecdd3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:32:9c:b4:bc:87:bc:be:25:f1:6e:26:93:45: 9a:00:e8:42:81:b3:1a:cb:8f:1c:9c:d4:36:ec:cb: 11:20:d1:62:52:bd:dc:d7:34:80:32:22:df:72:df: cc:9c:10:00:bb:32:f3:51:e1:6c:64:b5:a6:34:34: 27:25:f9:27:1b:8a:8e:2e:de:ff:8e:56:5a:89:00: e0:70:51:b7:1b:be:c9:65:fe:7f:c5:f7:41:00:c7: d3:55:d1:ec:a1:c2:04:d9:d0:d1:f8:e9:e5:3e:8c: c1:d7:e5:13:2e:82:84:65:7d:07:73:b0:c4:9e:6c: 06:60:ac:b3:b0:53:67:40:78:a5:ef:6b:ad:93:ac: d3:32:ba:2f:b2:2a:8a:bb:bb:58:e8:a3:0f:48:99: ad:3e:62:5b:85:02:11:27:34:bc:12:a6:b6:05:e0: 8f:1b:de:49:33:02:17:4a:b7:c1:b7:f3:31:0d:84: 71:04:92:a9:88:a9:77:91:13:3a:10:56:01:e3:b9: b7:5d:ff:3e:20:2b:e1:cd:44:81:db:38:a7:c6:05: e8:59:83:46:a3:00:19:95:d5:be:1c:51:ca:68:aa: b5:f9:19:e5:d5:ba:d1:f0:77:89:ed:f1:6f:f2:1c: d2:48:f8:3e:71:b9:71:f2:bf:fb:f2:9c:79:3a:12: 5b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:23:99:49:9F:65:F8:90:07:08:99:1B:30:85:27:50:59:D0:13:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv6: 2607:f820::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:a1:56:ae:8c:5e:9a:c4:17:ef:bc:1e:32:24:31:ce:ae:38: 44:48:19:d6:08:70:ea:12:36:f9:32:a3:bf:a2:72:e0:25:59: 45:37:a0:0c:20:76:7c:00:ef:45:a1:97:30:e0:ca:ac:62:0c: 60:f6:d5:91:7b:d2:b3:81:bc:34:82:9a:b9:60:e1:a1:a6:2b: fb:4f:25:35:df:4e:ec:9e:0c:05:98:f7:54:d4:10:d0:86:8b: 6c:9e:0a:63:a7:49:bf:a8:91:b3:a7:e1:80:da:aa:62:aa:89: 4f:72:eb:89:61:bb:6c:d0:45:e1:9b:6d:24:d8:a3:51:c8:97: 54:51:5c:4b:93:e9:14:9d:b3:13:86:e1:aa:a7:50:41:bf:7f: 18:24:9c:39:7e:1a:be:1d:16:ee:49:bd:59:b6:ab:4d:7b:4b: 02:e6:04:84:24:df:b0:c2:2b:8b:89:b5:b2:63:06:02:13:85: d4:98:bd:1e:3c:43:43:1d:5d:44:d3:0d:23:ea:91:97:37:29: 4e:cc:2f:f6:17:cd:a8:7f:55:c4:66:6b:4f:e8:c9:db:7a:e0: ae:e5:31:ef:ee:87:73:6f:b7:8a:38:b5:df:53:c1:74:dc:c6: 6e:59:53:19:cf:e3:fa:cd:db:24:b6:ba:e8:f4:08:8c:67:94: e1:10:08:bd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi0wNDe0MGgIxZtsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk ZmU2ZGFhYzItNDVhZC00NzQxLTgyZWQtY2ZhOTYyZWNkZDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTKctLyHvL4l8W4mk0WaAOhCgbMay48cnNQ2 7MsRINFiUr3c1zSAMiLfct/MnBAAuzLzUeFsZLWmNDQnJfknG4qOLt7/jlZaiQDg cFG3G77JZf5/xfdBAMfTVdHsocIE2dDR+OnlPozB1+UTLoKEZX0Hc7DEnmwGYKyz sFNnQHil72utk6zTMrovsiqKu7tY6KMPSJmtPmJbhQIRJzS8Eqa2BeCPG95JMwIX SrfBt/MxDYRxBJKpiKl3kRM6EFYB47m3Xf8+ICvhzUSB2zinxgXoWYNGowAZldW+ HFHKaKq1+Rnl1brR8HeJ7fFv8hzSSPg+cblx8r/78px5OhJbHwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBojmUmfZfiQBwiZGzCFJ1BZ0BPgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvMGY0NDIxZTktZjI0Yi0z ZmI0LTgwYTMtMjc4MTE5NzI1OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf4IDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB6oVaujF6axBfvvB4yJDHOrjhESBnWCHDqEjb5MqO/onLgJVlFN6AM IHZ8AO9FoZcw4MqsYgxg9tWRe9Kzgbw0gpq5YOGhpiv7TyU1307sngwFmPdU1BDQ hotsngpjp0m/qJGzp+GA2qpiqolPcuuJYbts0EXhm20k2KNRyJdUUVxLk+kUnbMT huGqp1BBv38YJJw5fhq+HRbuSb1ZtqtNe0sC5gSEJN+wwiuLibWyYwYCE4XUmL0e PENDHV1E0w0j6pGXNylOzC/2F82of1XEZmtP6MnbeuCu5THv7odzb7eKOLXfU8F0 3MZuWVMZz+P6zdsktrro9AiMZ5ThEAi9 -----END CERTIFICATE-----Generated at Sat Apr 5 00:21:10 2025 by rpki-client