$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/b20b8405-c0e6-324c-b6f1-03d0a83140b0.roa File: b20b8405-c0e6-324c-b6f1-03d0a83140b0.roa (raw, json) Hash identifier: Fwuc3kj2bDRePh3iXP8ExRH4od5aXXG8oYFMRMT14Nk= Subject key identifier: B0:96:E4:0F:C0:47:1A:B5:07:0B:C9:9B:6A:42:D5:5B:4B:33:39:81 Certificate issuer: /CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99 Certificate serial: 010D0C9F4328584851A581F5F1645C941D2A0F00 Authority key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/b20b8405-c0e6-324c-b6f1-03d0a83140b0.roa Signing time: Wed 25 Dec 2024 02:00:38 +0000 ROA not before: Wed 25 Dec 2024 02:00:38 +0000 ROA not after: Tue 25 Mar 2025 01:00:38 +0000 asID: 396982 IP address blocks: 2607:9f40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:51:a5:81:f5:f1:64:5c:94:1d:2a:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99 Validity Not Before: Dec 25 02:00:38 2024 GMT Not After : Mar 25 01:00:38 2025 GMT Subject: CN=84e8743b-8067-4398-89d4-ea75c49669cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6e:31:d2:85:66:6b:e6:c8:f4:31:7d:82:87: f8:7e:91:ab:0d:21:35:ca:d8:01:68:33:7e:01:9d: 74:58:57:24:df:b0:cb:e2:42:27:90:12:70:be:41: 92:67:38:28:87:ff:e1:ed:ec:e3:81:71:a3:7a:25: 0c:a3:05:fb:00:d2:0e:c2:4e:3c:5b:3a:12:5e:7f: 2b:94:8b:ee:63:71:94:31:34:22:9f:fd:02:0a:84: 77:92:5c:3b:ee:79:c5:6f:97:83:0b:4f:f7:bc:34: 20:20:06:da:22:97:c5:ce:0a:cf:b7:94:99:50:dc: 3c:47:53:b5:3e:b3:1a:ee:73:3e:32:86:77:e4:99: 4b:09:49:f0:f2:4b:21:a6:6c:25:f4:ba:d6:bb:10: c1:fe:f6:fb:10:33:2a:ae:85:69:4b:94:5e:e8:e7: 65:5e:fa:ef:be:34:a1:08:ae:3a:83:95:17:40:80: 6e:ec:68:c6:67:6a:4e:c3:d7:c0:72:7e:61:54:24: b7:24:fe:12:d8:91:11:b0:a5:2e:65:4d:57:6b:12: 74:c2:c2:ba:af:b4:18:7e:3e:2c:46:2a:c2:0d:98: b0:8e:10:52:74:4f:d3:29:cc:6a:fe:24:e9:db:66: 82:f8:df:ff:50:6a:5b:a4:87:55:fd:de:87:9a:a2: 4e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:96:E4:0F:C0:47:1A:B5:07:0B:C9:9B:6A:42:D5:5B:4B:33:39:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/b20b8405-c0e6-324c-b6f1-03d0a83140b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl X509v3 Authority Key Identifier: keyid:29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer sbgp-ipAddrBlock: critical IPv6: 2607:9f40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:11:b3:d1:77:55:f9:b4:f2:a5:c1:23:4b:37:6e:4e:e6:88: cc:7e:b3:3b:52:07:b8:9e:15:15:60:d8:35:05:2c:03:99:b4: 93:7b:9a:6f:95:80:f4:10:fe:37:15:6d:e6:e8:54:6d:e4:1b: f7:88:cd:79:36:40:31:5d:dd:5a:60:9a:0e:60:f5:ca:48:9b: 93:2e:42:3e:b7:85:37:fd:b7:37:68:bf:c3:5c:fb:0a:b2:38: 3d:25:00:3e:97:8a:fa:bc:de:bd:34:58:d9:91:d9:87:1f:69: a1:40:86:03:d0:77:a9:62:9f:f9:ba:31:39:8c:af:00:86:61: 4d:0a:32:3f:a6:e2:77:24:39:f4:60:de:07:7f:95:be:f1:f7: c1:72:c4:27:cb:ae:79:27:99:c9:ab:d2:9d:af:e6:c0:45:ce: 16:b4:10:6f:17:ff:64:95:1b:35:32:15:27:9d:7e:0a:cc:55: 5e:81:db:5b:f2:28:74:26:78:cf:63:0a:c4:a2:f3:53:cd:4a: 1f:d3:8c:ca:a9:87:2d:1e:c6:b7:21:f9:b2:10:3a:15:a4:be: 20:65:14:ce:5c:58:f4:b4:7a:3c:35:d3:a3:10:6d:12:3c:1a: 95:e1:5b:0f:14:46:e0:a9:3e:dd:28:2e:d8:60:64:c8:2d:e0: ad:0f:d5:4d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhRpYH18WRclB0qDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JiZWU5YjEtMWIzMy00OTUxLWE2MTctZWNiODBkOWJh ZDk5MB4XDTI0MTIyNTAyMDAzOFoXDTI1MDMyNTAxMDAzOFowLzEtMCsGA1UEAxMk ODRlODc0M2ItODA2Ny00Mzk4LTg5ZDQtZWE3NWM0OTY2OWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG4x0oVma+bI9DF9gof4fpGrDSE1ytgBaDN+ AZ10WFck37DL4kInkBJwvkGSZzgoh//h7ezjgXGjeiUMowX7ANIOwk48WzoSXn8r lIvuY3GUMTQin/0CCoR3klw77nnFb5eDC0/3vDQgIAbaIpfFzgrPt5SZUNw8R1O1 PrMa7nM+MoZ35JlLCUnw8kshpmwl9LrWuxDB/vb7EDMqroVpS5Re6OdlXvrvvjSh CK46g5UXQIBu7GjGZ2pOw9fAcn5hVCS3JP4S2JERsKUuZU1XaxJ0wsK6r7QYfj4s RirCDZiwjhBSdE/TKcxq/iTp22aC+N//UGpbpIdV/d6HmqJO9QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLCW5A/ARxq1BwvJm2pC1VtLMzmBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83YmJl ZTliMS0xYjMzLTQ5NTEtYTYxNy1lY2I4MGQ5YmFkOTkvYjIwYjg0MDUtYzBlNi0z MjRjLWI2ZjEtMDNkMGE4MzE0MGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvN2JiZWU5YjEtMWIzMy00OTUxLWE2 MTctZWNiODBkOWJhZDk5LzdiYmVlOWIxLTFiMzMtNDk1MS1hNjE3LWVjYjgwZDli YWQ5OS5jcmwwHwYDVR0jBBgwFoAUKSL34vJ0kytfzKQDs/xSZeeGwpowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83YmJlZTliMS0xYjMzLTQ5NTEtYTYxNy1lY2I4 MGQ5YmFkOTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgefQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCJEbPRd1X5tPKlwSNLN25O5ojMfrM7Uge4nhUVYNg1BSwDmbSTe5pv lYD0EP43FW3m6FRt5Bv3iM15NkAxXd1aYJoOYPXKSJuTLkI+t4U3/bc3aL/DXPsK sjg9JQA+l4r6vN69NFjZkdmHH2mhQIYD0HepYp/5ujE5jK8AhmFNCjI/puJ3JDn0 YN4Hf5W+8ffBcsQny655J5nJq9Kdr+bARc4WtBBvF/9klRs1MhUnnX4KzFVegdtb 8ih0JnjPYwrEovNTzUof04zKqYctHsa3IfmyEDoVpL4gZRTOXFj0tHo8NdOjEG0S PBqV4VsPFEbgqT7dKC7YYGTILeCtD9VN -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:18 2025 by rpki-client