$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5035ba57-51dc-4236-9c7b-a50de543037c/99573561-9852-3d94-add7-2e0af0d7d22a.roa File: 99573561-9852-3d94-add7-2e0af0d7d22a.roa (raw, json) Hash identifier: /+4cwYApugXD14zugN+3VoXW8pwIWmphZ1DGvkFX7p4= Subject key identifier: 42:56:55:FB:75:5F:AF:50:91:FE:A0:B0:CF:59:55:A5:E4:F2:F1:51 Certificate issuer: /CN=5035ba57-51dc-4236-9c7b-a50de543037c Certificate serial: 010D0C9F4328584891DB2D80A4F8EE916C831600 Authority key identifier: 7F:B8:49:DA:3F:20:5C:C7:E5:5B:D6:86:82:42:3B:19:37:28:F0:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5035ba57-51dc-4236-9c7b-a50de543037c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5035ba57-51dc-4236-9c7b-a50de543037c/99573561-9852-3d94-add7-2e0af0d7d22a.roa Signing time: Fri 17 Jan 2025 02:00:40 +0000 ROA not before: Fri 17 Jan 2025 02:00:40 +0000 ROA not after: Thu 17 Apr 2025 01:00:40 +0000 asID: 7850 IP address blocks: 2605:3bc0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5035ba57-51dc-4236-9c7b-a50de543037c/5035ba57-51dc-4236-9c7b-a50de543037c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5035ba57-51dc-4236-9c7b-a50de543037c/5035ba57-51dc-4236-9c7b-a50de543037c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5035ba57-51dc-4236-9c7b-a50de543037c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:91:db:2d:80:a4:f8:ee:91:6c:83:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5035ba57-51dc-4236-9c7b-a50de543037c Validity Not Before: Jan 17 02:00:40 2025 GMT Not After : Apr 17 01:00:40 2025 GMT Subject: CN=c289cfa9-ef18-47b4-a33f-d3ee1339153a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8c:ef:54:13:14:1d:00:cc:bc:3c:a1:b7:45: 17:15:db:7b:ff:5a:e2:07:e5:4c:f8:34:29:8c:ce: 10:58:be:cf:a2:30:15:1e:24:75:95:8a:62:a5:01: b7:cb:aa:42:e9:7e:5a:0d:0b:7e:82:55:90:30:cf: 6f:e7:9f:a8:7c:6c:4f:a5:7f:9d:95:1b:30:e3:e0: 6d:78:da:b7:6f:1d:48:04:14:85:57:74:bc:44:53: 86:a8:77:51:e9:39:54:3c:7c:ca:b5:ea:5e:20:ac: ba:42:06:5e:38:c1:d3:b9:07:20:b6:10:be:ca:0c: 0f:43:f9:ba:e1:61:06:1f:0c:00:5e:f4:58:23:26: 57:ab:00:0e:aa:e8:e8:0c:7f:88:90:29:12:f9:54: b3:ba:67:2a:d1:be:12:1f:d1:ee:46:c0:e4:85:d0: cd:ba:5b:67:57:d5:e5:64:2e:6a:4e:9c:b1:04:b5: d3:b7:ec:88:7f:75:ee:5a:21:30:f7:17:c6:33:83: 36:cb:64:2d:93:2d:3f:f7:f7:f8:d1:6c:b2:fb:4c: e0:c7:ac:da:b3:de:3d:a8:a3:7c:91:21:b4:2a:64: d6:57:bd:b2:ba:a0:a7:9e:6c:f8:e1:d7:46:02:21: b9:11:34:df:d3:4f:1a:98:ff:73:b0:22:c9:bb:9c: 89:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:56:55:FB:75:5F:AF:50:91:FE:A0:B0:CF:59:55:A5:E4:F2:F1:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5035ba57-51dc-4236-9c7b-a50de543037c/99573561-9852-3d94-add7-2e0af0d7d22a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5035ba57-51dc-4236-9c7b-a50de543037c/5035ba57-51dc-4236-9c7b-a50de543037c.crl X509v3 Authority Key Identifier: keyid:7F:B8:49:DA:3F:20:5C:C7:E5:5B:D6:86:82:42:3B:19:37:28:F0:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5035ba57-51dc-4236-9c7b-a50de543037c.cer sbgp-ipAddrBlock: critical IPv6: 2605:3bc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:af:b0:8b:cc:57:81:b2:a2:e8:0d:ee:38:c3:c2:2e:71:c9: 0c:bf:36:e0:ff:76:55:ae:df:12:76:e6:f3:0d:d2:c7:fb:42: ac:d7:80:be:91:c5:05:83:10:8e:f8:26:c8:51:c1:7e:f7:64: 14:a2:0a:cd:1f:de:c6:9a:19:37:df:8e:4d:d0:57:f7:6b:28: 8c:ce:f1:98:52:29:7e:95:55:86:42:05:49:09:59:cb:60:cd: ea:c2:e1:a9:20:9e:ce:bc:5a:12:40:14:22:f0:52:8f:5e:da: bb:37:6c:c9:4d:73:e7:b1:13:a6:3e:0e:20:1e:15:08:69:a0: 3f:8f:9d:b7:80:2c:86:63:45:f0:df:29:e4:e2:00:fa:79:cf: 2a:41:fb:0d:09:36:58:2f:ab:2e:b5:48:0a:f8:e5:d7:76:5c: 9d:f0:2d:38:c7:f2:43:90:29:bd:84:78:ec:8e:39:c1:73:28: 61:74:28:fd:3b:56:bc:b1:70:cb:06:a7:06:13:4f:df:93:eb: 24:2b:41:84:ad:3b:ed:93:44:0b:93:df:ca:ee:d6:dc:38:d3: 42:6d:37:f3:cf:20:e6:8e:5b:bf:d2:91:01:2b:9d:2e:ce:42: 7c:a3:35:a3:59:66:60:e4:68:cf:de:46:0b:2b:a6:a4:27:ce: a6:a4:92:a4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiR2y2ApPjukWyDFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAzNWJhNTctNTFkYy00MjM2LTljN2ItYTUwZGU1NDMw MzdjMB4XDTI1MDExNzAyMDA0MFoXDTI1MDQxNzAxMDA0MFowLzEtMCsGA1UEAxMk YzI4OWNmYTktZWYxOC00N2I0LWEzM2YtZDNlZTEzMzkxNTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIzvVBMUHQDMvDyht0UXFdt7/1riB+VM+DQp jM4QWL7PojAVHiR1lYpipQG3y6pC6X5aDQt+glWQMM9v55+ofGxPpX+dlRsw4+Bt eNq3bx1IBBSFV3S8RFOGqHdR6TlUPHzKtepeIKy6QgZeOMHTuQcgthC+ygwPQ/m6 4WEGHwwAXvRYIyZXqwAOqujoDH+IkCkS+VSzumcq0b4SH9HuRsDkhdDNultnV9Xl ZC5qTpyxBLXTt+yIf3XuWiEw9xfGM4M2y2Qtky0/9/f40Wyy+0zgx6zas949qKN8 kSG0KmTWV72yuqCnnmz44ddGAiG5ETTf008amP9zsCLJu5yJ1wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEJWVft1X69Qkf6gsM9ZVaXk8vFRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81MDM1 YmE1Ny01MWRjLTQyMzYtOWM3Yi1hNTBkZTU0MzAzN2MvOTk1NzM1NjEtOTg1Mi0z ZDk0LWFkZDctMmUwYWYwZDdkMjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTAzNWJhNTctNTFkYy00MjM2LTlj N2ItYTUwZGU1NDMwMzdjLzUwMzViYTU3LTUxZGMtNDIzNi05YzdiLWE1MGRlNTQz MDM3Yy5jcmwwHwYDVR0jBBgwFoAUf7hJ2j8gXMflW9aGgkI7GTco8K0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81MDM1YmE1Ny01MWRjLTQyMzYtOWM3Yi1hNTBk ZTU0MzAzN2MuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgU7wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQApr7CLzFeBsqLoDe44w8IucckMvzbg/3ZVrt8SdubzDdLH+0Ks14C+ kcUFgxCO+CbIUcF+92QUogrNH97Gmhk3345N0Ff3ayiMzvGYUil+lVWGQgVJCVnL YM3qwuGpIJ7OvFoSQBQi8FKPXtq7N2zJTXPnsROmPg4gHhUIaaA/j523gCyGY0Xw 3ynk4gD6ec8qQfsNCTZYL6sutUgK+OXXdlyd8C04x/JDkCm9hHjsjjnBcyhhdCj9 O1a8sXDLBqcGE0/fk+skK0GErTvtk0QLk9/K7tbcONNCbTfzzyDmjlu/0pEBK50u zkJ8ozWjWWZg5GjP3kYLK6akJ86mpJKk -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:12 2025 by rpki-client