$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/2278ed48-ebd6-3528-b97b-a1b2aea80dab.roa File: 2278ed48-ebd6-3528-b97b-a1b2aea80dab.roa (raw, json) Hash identifier: moTsDJzxXK2ivIxsJPmT4vQOlRsxuPp90wXfwlTpAH4= Subject key identifier: 21:6F:88:04:BD:20:A1:79:1F:1F:75:50:D9:83:D5:2E:3A:43:27:08 Certificate issuer: /CN=bc9d2aef-2dd9-4387-b47c-98bb910e52fe Certificate serial: 010D0C9F43285848C41B7EECC71DCCC89F54F400 Authority key identifier: 5F:0C:BB:1B:2F:ED:25:26:3B:25:9E:EF:CB:2B:49:E2:EB:09:40:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/2278ed48-ebd6-3528-b97b-a1b2aea80dab.roa Signing time: Tue 04 Feb 2025 02:00:40 +0000 ROA not before: Tue 04 Feb 2025 02:00:40 +0000 ROA not after: Mon 05 May 2025 01:00:40 +0000 asID: 20206 IP address blocks: 2001:504:13a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c4:1b:7e:ec:c7:1d:cc:c8:9f:54:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc9d2aef-2dd9-4387-b47c-98bb910e52fe Validity Not Before: Feb 4 02:00:40 2025 GMT Not After : May 5 01:00:40 2025 GMT Subject: CN=e48fc222-25cf-406a-b82c-1d9f2fc019f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f5:b4:d7:42:aa:07:40:2d:fb:1c:7e:3c:91: b5:01:d7:f4:89:ee:4f:71:aa:8d:43:21:f4:a2:05: c5:33:0c:e0:91:89:d5:24:fb:49:9f:74:ab:ac:ec: 59:cc:45:f2:5a:a2:e8:f4:85:94:43:29:2c:cd:2b: 67:ce:db:0e:de:c3:4b:31:35:ed:3e:f1:70:81:a9: 2d:8b:fb:e7:ab:e2:1f:16:48:0f:da:fd:2a:18:f1: 61:ea:f7:38:6a:8a:39:a7:cc:7d:ec:42:75:46:e8: 2d:0f:d9:81:33:69:2a:8a:ee:28:1a:f6:d8:64:96: 3d:de:00:ea:2c:7b:ff:04:e4:9a:27:44:02:ce:39: 8e:0b:2b:93:90:fc:78:98:9a:ad:64:86:fa:12:93: 40:a6:98:ce:a9:c9:03:f9:74:de:48:63:1d:6c:4b: fd:c2:9a:d3:85:d6:6c:08:87:c7:d4:f7:58:e0:b3: 02:ed:81:d7:f0:e1:fc:22:07:34:f4:75:b2:ab:60: d7:cf:51:7a:ef:d6:9f:b7:67:85:84:f7:a3:e0:6b: 59:ea:00:a5:d0:6e:1a:2b:4d:29:09:2c:c2:9d:6d: 76:40:af:7f:e9:77:82:af:0e:bc:c7:fe:79:24:f2: 1e:11:12:7a:8b:7f:7f:10:60:25:0e:fd:27:92:89: c0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:6F:88:04:BD:20:A1:79:1F:1F:75:50:D9:83:D5:2E:3A:43:27:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/2278ed48-ebd6-3528-b97b-a1b2aea80dab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.crl X509v3 Authority Key Identifier: keyid:5F:0C:BB:1B:2F:ED:25:26:3B:25:9E:EF:CB:2B:49:E2:EB:09:40:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:13a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:00:6b:cc:36:77:30:15:bb:78:6e:57:52:47:94:f9:d7:aa: b0:ad:c3:4a:4b:cd:47:66:34:44:71:72:b0:f4:29:db:ae:57: 13:c7:b7:17:6a:90:85:a6:1e:32:57:d9:87:40:c5:ad:a7:c4: 47:64:af:e7:8c:cb:1d:4e:ba:6f:00:ea:66:c8:57:a0:18:5d: fe:64:d8:2a:bc:0b:4f:4b:68:34:cb:6f:4e:19:fb:70:2d:80: bf:87:c7:04:fc:75:c9:47:9c:4e:00:b0:33:e3:ec:11:52:b0: 56:0e:b0:df:98:29:b2:41:36:b3:5b:58:33:4d:82:d9:f4:6e: 6a:ce:33:13:6e:07:80:55:5c:ac:3a:82:4c:73:84:a4:8e:1c: c2:c2:90:0f:42:84:b9:e5:fe:7b:87:45:73:76:3c:5e:f0:f3: e4:ad:30:d3:76:95:2e:2c:a4:8e:15:43:41:6b:ae:ce:e4:19: 82:c2:88:9b:ae:f0:9e:2a:1a:46:c4:7d:4d:bf:e9:58:ac:e1: 76:cc:b0:0a:54:7e:b3:d6:ee:78:a7:64:d8:c6:52:00:a7:b3: 2e:4b:40:df:11:5e:49:53:a6:e9:c5:af:01:ee:ca:a0:8e:29: 67:52:14:f1:07:4b:f1:31:0b:2e:df:26:38:05:26:c6:ba:65: ec:19:6b:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjEG37sxx3MyJ9U9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmM5ZDJhZWYtMmRkOS00Mzg3LWI0N2MtOThiYjkxMGU1 MmZlMB4XDTI1MDIwNDAyMDA0MFoXDTI1MDUwNTAxMDA0MFowLzEtMCsGA1UEAxMk ZTQ4ZmMyMjItMjVjZi00MDZhLWI4MmMtMWQ5ZjJmYzAxOWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfW010KqB0At+xx+PJG1Adf0ie5PcaqNQyH0 ogXFMwzgkYnVJPtJn3SrrOxZzEXyWqLo9IWUQykszStnztsO3sNLMTXtPvFwgakt i/vnq+IfFkgP2v0qGPFh6vc4aoo5p8x97EJ1RugtD9mBM2kqiu4oGvbYZJY93gDq LHv/BOSaJ0QCzjmOCyuTkPx4mJqtZIb6EpNAppjOqckD+XTeSGMdbEv9wprThdZs CIfH1PdY4LMC7YHX8OH8Igc09HWyq2DXz1F679aft2eFhPej4GtZ6gCl0G4aK00p CSzCnW12QK9/6XeCrw68x/55JPIeERJ6i39/EGAlDv0nkonA1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCFviAS9IKF5Hx91UNmD1S46QycIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYzlk MmFlZi0yZGQ5LTQzODctYjQ3Yy05OGJiOTEwZTUyZmUvMjI3OGVkNDgtZWJkNi0z NTI4LWI5N2ItYTFiMmFlYTgwZGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmM5ZDJhZWYtMmRkOS00Mzg3LWI0 N2MtOThiYjkxMGU1MmZlL2JjOWQyYWVmLTJkZDktNDM4Ny1iNDdjLTk4YmI5MTBl NTJmZS5jcmwwHwYDVR0jBBgwFoAUXwy7Gy/tJSY7JZ7vyytJ4usJQNswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iYzlkMmFlZi0yZGQ5LTQzODctYjQ3Yy05OGJi OTEwZTUyZmUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAE6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACYAa8w2dzAVu3huV1JHlPnXqrCtw0pLzUdmNERxcrD0KduuVxPH txdqkIWmHjJX2YdAxa2nxEdkr+eMyx1Oum8A6mbIV6AYXf5k2Cq8C09LaDTLb04Z +3AtgL+HxwT8dclHnE4AsDPj7BFSsFYOsN+YKbJBNrNbWDNNgtn0bmrOMxNuB4BV XKw6gkxzhKSOHMLCkA9ChLnl/nuHRXN2PF7w8+StMNN2lS4spI4VQ0Frrs7kGYLC iJuu8J4qGkbEfU2/6Vis4XbMsApUfrPW7ninZNjGUgCnsy5LQN8RXklTpunFrwHu yqCOKWdSFPEHS/ExCy7fJjgFJsa6ZewZa1Y= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:21 2025 by rpki-client