$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/7215f95f-6e55-3b15-8e6e-10d97b2f7823.roa File: 7215f95f-6e55-3b15-8e6e-10d97b2f7823.roa (raw, json) Hash identifier: P86uCtd9NTGS7Zcj4roNhdD2BR4On9x4eermCNAEFAg= Subject key identifier: C0:74:9D:CC:EB:11:78:87:7A:5B:DC:EA:78:DD:48:E2:78:F6:0D:64 Certificate issuer: /CN=4c6110af-3017-4d96-90e3-d18a76894aa0 Certificate serial: 010D0C9F43285848DA70F7D51426F4B927318000 Authority key identifier: 1D:4E:47:BB:5F:EB:81:68:82:A9:C5:B9:31:12:69:9E:F7:7D:28:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/7215f95f-6e55-3b15-8e6e-10d97b2f7823.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 394333 IP address blocks: 2604:51c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/4c6110af-3017-4d96-90e3-d18a76894aa0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/4c6110af-3017-4d96-90e3-d18a76894aa0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:70:f7:d5:14:26:f4:b9:27:31:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c6110af-3017-4d96-90e3-d18a76894aa0 Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=907b7929-94b1-4c9d-a35e-3046a3b93fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:52:90:d3:7b:31:0e:79:2e:d0:ac:65:65:f2: 4b:53:5d:a2:0f:53:e6:1e:69:f5:5b:6f:32:06:a9: 4d:c8:bb:fb:29:02:a7:60:31:45:3c:63:21:4a:27: 15:91:b8:33:22:11:68:b0:4c:c5:b7:22:24:7a:d7: 99:f7:11:34:c2:58:5c:ae:e3:b2:00:f7:f5:d8:75: 55:2d:4b:1d:8e:e1:5e:ea:d9:3e:eb:99:bc:85:7f: 48:6f:13:19:e6:b5:d1:04:06:06:ab:2d:a9:b7:58: f9:b4:04:7e:a7:62:8e:7c:83:9c:de:da:51:b0:a6: 09:d8:59:92:46:f3:50:23:c6:af:e4:33:a3:fd:df: 7a:77:17:5d:8a:b8:f0:95:fb:03:ee:8c:4d:78:7c: 16:21:70:2b:3b:fa:b8:4a:c0:ae:00:6b:d3:b9:70: d7:3d:3a:73:84:a1:e5:82:e9:4f:f3:27:f1:e5:d0: d6:7f:5a:d9:bd:fa:f9:bc:fd:11:9f:6c:61:38:0d: 56:0a:23:8d:d8:f5:7a:8f:69:be:af:7e:40:4d:73: 6f:68:c0:fb:77:00:bc:16:88:24:6d:06:7f:e4:8a: 04:1b:83:a6:fb:de:fa:78:4f:bd:98:29:05:86:11: 80:33:1c:90:66:b4:86:08:47:46:4b:37:59:26:ae: fe:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:74:9D:CC:EB:11:78:87:7A:5B:DC:EA:78:DD:48:E2:78:F6:0D:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/7215f95f-6e55-3b15-8e6e-10d97b2f7823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/4c6110af-3017-4d96-90e3-d18a76894aa0.crl X509v3 Authority Key Identifier: keyid:1D:4E:47:BB:5F:EB:81:68:82:A9:C5:B9:31:12:69:9E:F7:7D:28:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0.cer sbgp-ipAddrBlock: critical IPv6: 2604:51c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:aa:c8:c2:d8:93:69:10:34:5e:eb:1b:77:70:ac:5a:bc:45: 22:97:0e:de:18:e4:cb:a4:d6:ce:7a:27:2c:6b:78:bd:e0:61: d3:cc:14:e9:d0:6e:94:78:ff:03:e1:c8:79:d0:a7:b8:f8:8f: fb:1d:42:77:9f:26:89:37:12:2e:ac:6f:5e:b5:cb:0f:2a:d8: 10:1f:17:8d:bc:63:43:f3:c7:f5:91:40:59:e8:d3:88:89:9a: e9:d5:cd:a7:1b:e8:b1:86:4c:ca:0e:b1:bc:36:bc:37:b8:e1: 57:b8:82:26:79:d5:8b:3d:df:3b:2e:ae:0a:a7:7d:58:36:1f: 76:0a:f9:7c:1c:31:99:b1:36:c4:64:01:f1:cc:b9:76:3f:fb: fc:d8:ef:64:a5:f6:ff:15:50:43:ea:c3:40:a0:19:03:ee:07: 6b:2e:a8:07:a5:1c:a5:26:97:88:36:40:07:57:12:71:ca:74: e2:c5:61:16:cd:f2:de:37:26:00:13:28:d0:db:4e:b7:38:74: 42:3a:41:81:a1:af:d5:95:bd:c9:5b:94:65:ad:94:4a:7c:ea: 64:b8:05:7e:48:df:2f:ab:d4:d9:c1:e7:d7:7e:56:bd:6f:67: 65:28:4c:69:74:da:dc:c7:5d:d8:98:2e:28:41:e4:e7:91:2b: e2:08:9e:ee -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjacPfVFCb0uScxgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM2MTEwYWYtMzAxNy00ZDk2LTkwZTMtZDE4YTc2ODk0 YWEwMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk OTA3Yjc5MjktOTRiMS00YzlkLWEzNWUtMzA0NmEzYjkzZmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1KQ03sxDnku0KxlZfJLU12iD1PmHmn1W28y BqlNyLv7KQKnYDFFPGMhSicVkbgzIhFosEzFtyIketeZ9xE0wlhcruOyAPf12HVV LUsdjuFe6tk+65m8hX9IbxMZ5rXRBAYGqy2pt1j5tAR+p2KOfIOc3tpRsKYJ2FmS RvNQI8av5DOj/d96dxddirjwlfsD7oxNeHwWIXArO/q4SsCuAGvTuXDXPTpzhKHl gulP8yfx5dDWf1rZvfr5vP0Rn2xhOA1WCiON2PV6j2m+r35ATXNvaMD7dwC8Fogk bQZ/5IoEG4Om+976eE+9mCkFhhGAMxyQZrSGCEdGSzdZJq7+XwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMB0nczrEXiHelvc6njdSOJ49g1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzYx MTBhZi0zMDE3LTRkOTYtOTBlMy1kMThhNzY4OTRhYTAvNzIxNWY5NWYtNmU1NS0z YjE1LThlNmUtMTBkOTdiMmY3ODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGM2MTEwYWYtMzAxNy00ZDk2LTkw ZTMtZDE4YTc2ODk0YWEwLzRjNjExMGFmLTMwMTctNGQ5Ni05MGUzLWQxOGE3Njg5 NGFhMC5jcmwwHwYDVR0jBBgwFoAUHU5Hu1/rgWiCqcW5MRJpnvd9KHgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzYxMTBhZi0zMDE3LTRkOTYtOTBlMy1kMThh NzY4OTRhYTAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRRwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAtqsjC2JNpEDRe6xt3cKxavEUilw7eGOTLpNbOeicsa3i94GHTzBTp 0G6UeP8D4ch50Ke4+I/7HUJ3nyaJNxIurG9etcsPKtgQHxeNvGND88f1kUBZ6NOI iZrp1c2nG+ixhkzKDrG8Nrw3uOFXuIImedWLPd87Lq4Kp31YNh92Cvl8HDGZsTbE ZAHxzLl2P/v82O9kpfb/FVBD6sNAoBkD7gdrLqgHpRylJpeINkAHVxJxynTixWEW zfLeNyYAEyjQ2063OHRCOkGBoa/Vlb3JW5RlrZRKfOpkuAV+SN8vq9TZwefXfla9 b2dlKExpdNrcx13YmC4oQeTnkSviCJ7u -----END CERTIFICATE-----Generated at Sun Feb 16 15:11:47 2025 by rpki-client