$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6/7f497e5b-71be-3635-8250-53cfd646e02c.roa File: 7f497e5b-71be-3635-8250-53cfd646e02c.roa (raw, json) Hash identifier: ywIHxHitXdE8mMZ9HvvliJXUR59393TYYQqIboMWHtU= Subject key identifier: 5D:2E:61:C3:BC:E5:5E:26:C7:98:FA:B3:60:F7:7C:70:E9:99:FC:15 Certificate issuer: /CN=faa26853-2597-4aa9-8c42-c61cf2081ff6 Certificate serial: 010D0C9F432858482D5A93CC9B66080564064080 Authority key identifier: 23:DF:F3:38:56:68:8A:EC:76:A7:53:D1:44:56:10:1D:A7:0E:BE:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6/7f497e5b-71be-3635-8250-53cfd646e02c.roa Signing time: Thu 12 Dec 2024 02:00:38 +0000 ROA not before: Thu 12 Dec 2024 02:00:38 +0000 ROA not after: Wed 12 Mar 2025 01:00:38 +0000 asID: 21515 IP address blocks: 2604:9800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6/faa26853-2597-4aa9-8c42-c61cf2081ff6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6/faa26853-2597-4aa9-8c42-c61cf2081ff6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2d:5a:93:cc:9b:66:08:05:64:06:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faa26853-2597-4aa9-8c42-c61cf2081ff6 Validity Not Before: Dec 12 02:00:38 2024 GMT Not After : Mar 12 01:00:38 2025 GMT Subject: CN=5c6f72a9-3fc3-475f-8dd6-3305d3e3111a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:84:93:f1:d3:9b:d1:8e:60:a1:21:43:3d:5c: d5:3e:de:e7:32:3e:7e:0f:94:ef:db:81:ea:af:82: 9e:c5:bb:97:65:51:ca:18:90:6e:45:62:5b:ac:ca: ae:09:82:f4:fd:73:a5:87:98:ea:67:f9:80:63:8a: 23:83:6b:d4:9e:03:e5:71:69:bd:ff:5a:74:11:83: e6:f8:ca:c9:7c:7e:1f:7d:e8:cb:ff:c9:57:f2:b1: fa:01:99:e9:b1:dd:c9:0a:34:ac:fa:4e:05:7c:2e: 45:1e:e3:5f:92:d5:bf:06:b5:21:4a:3f:3d:ba:b4: c1:c3:51:35:31:24:45:2c:74:78:a5:c4:3a:e5:fb: e2:38:8e:ed:d6:e3:b1:d8:a6:4f:d5:b2:e4:a2:54: c0:81:9e:6a:72:7e:92:88:e5:c4:a8:89:b5:79:ba: 63:a3:8d:b8:59:40:d8:68:b5:8b:78:bc:59:36:0e: 3a:ac:33:e8:21:b0:8d:47:d0:8c:6f:f4:5b:40:1f: b6:de:3e:8d:6e:7a:45:81:19:e7:8d:d5:c5:24:35: b5:92:c8:c5:1b:f5:00:a0:ef:20:dc:9c:37:22:0d: 78:23:99:1b:a0:c1:26:db:47:d7:f1:59:9e:7a:5e: 97:b1:80:3c:8f:83:bf:64:22:96:71:d1:03:3e:4b: 60:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2E:61:C3:BC:E5:5E:26:C7:98:FA:B3:60:F7:7C:70:E9:99:FC:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6/7f497e5b-71be-3635-8250-53cfd646e02c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6/faa26853-2597-4aa9-8c42-c61cf2081ff6.crl X509v3 Authority Key Identifier: keyid:23:DF:F3:38:56:68:8A:EC:76:A7:53:D1:44:56:10:1D:A7:0E:BE:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6.cer sbgp-ipAddrBlock: critical IPv6: 2604:9800::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:38:52:92:87:6e:57:19:3a:34:ef:42:51:e7:b1:6e:4d:28: 0f:08:36:de:dd:c8:ce:8f:5a:d9:a3:c6:38:dc:23:6b:cf:0c: 14:00:ba:d1:dd:9c:46:fc:a2:b4:ec:90:a6:1b:9a:b1:1e:2a: 0b:39:5b:cf:89:ff:f9:ea:04:2a:cc:03:9a:6e:5b:5b:3c:37: 06:8c:64:9a:f6:3c:fa:d7:1a:52:50:79:6b:72:72:d0:73:68: 58:82:76:25:f4:ff:55:33:0a:38:d4:76:5e:33:53:37:e4:07: b2:ed:b4:e0:45:0d:26:f6:ec:23:68:b1:38:2e:de:73:44:34: 24:e2:4b:c6:4c:b9:65:fa:c4:a5:48:d8:e6:a1:e3:78:cf:4f: 01:4b:0e:f2:8d:bf:3e:c7:2d:f3:6a:43:a7:2d:13:72:39:d0: 01:16:9a:a5:d5:fc:cb:34:71:62:09:67:ca:e6:11:c7:6a:ba: 19:60:29:4b:80:90:b6:d3:85:54:52:9a:69:e2:ae:e9:db:b7: 91:38:54:3c:02:a9:39:5d:16:0a:ad:a8:94:76:d6:cd:52:f0: 80:94:7f:86:31:18:c3:a2:3d:d6:b7:92:a5:39:ad:7f:f0:3e: 48:cc:53:f3:dd:b6:6f:7a:51:cf:c8:9f:2c:f7:fb:52:08:23: 04:ec:5d:92 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgtWpPMm2YIBWQGQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFhMjY4NTMtMjU5Ny00YWE5LThjNDItYzYxY2YyMDgx ZmY2MB4XDTI0MTIxMjAyMDAzOFoXDTI1MDMxMjAxMDAzOFowLzEtMCsGA1UEAxMk NWM2ZjcyYTktM2ZjMy00NzVmLThkZDYtMzMwNWQzZTMxMTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYST8dOb0Y5goSFDPVzVPt7nMj5+D5Tv24Hq r4KexbuXZVHKGJBuRWJbrMquCYL0/XOlh5jqZ/mAY4ojg2vUngPlcWm9/1p0EYPm +MrJfH4ffejL/8lX8rH6AZnpsd3JCjSs+k4FfC5FHuNfktW/BrUhSj89urTBw1E1 MSRFLHR4pcQ65fviOI7t1uOx2KZP1bLkolTAgZ5qcn6SiOXEqIm1ebpjo424WUDY aLWLeLxZNg46rDPoIbCNR9CMb/RbQB+23j6NbnpFgRnnjdXFJDW1ksjFG/UAoO8g 3Jw3Ig14I5kboMEm20fX8Vmeel6XsYA8j4O/ZCKWcdEDPktg1QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF0uYcO85V4mx5j6s2D3fHDpmfwVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYWEy Njg1My0yNTk3LTRhYTktOGM0Mi1jNjFjZjIwODFmZjYvN2Y0OTdlNWItNzFiZS0z NjM1LTgyNTAtNTNjZmQ2NDZlMDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmFhMjY4NTMtMjU5Ny00YWE5LThj NDItYzYxY2YyMDgxZmY2L2ZhYTI2ODUzLTI1OTctNGFhOS04YzQyLWM2MWNmMjA4 MWZmNi5jcmwwHwYDVR0jBBgwFoAUI9/zOFZoiux2p1PRRFYQHacOvsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYWEyNjg1My0yNTk3LTRhYTktOGM0Mi1jNjFj ZjIwODFmZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSYADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB5OFKSh25XGTo070JR57FuTSgPCDbe3cjOj1rZo8Y43CNrzwwUALrR 3ZxG/KK07JCmG5qxHioLOVvPif/56gQqzAOabltbPDcGjGSa9jz61xpSUHlrcnLQ c2hYgnYl9P9VMwo41HZeM1M35Aey7bTgRQ0m9uwjaLE4Lt5zRDQk4kvGTLll+sSl SNjmoeN4z08BSw7yjb8+xy3zakOnLRNyOdABFpql1fzLNHFiCWfK5hHHaroZYClL gJC204VUUppp4q7p27eROFQ8Aqk5XRYKraiUdtbNUvCAlH+GMRjDoj3Wt5KlOa1/ 8D5IzFPz3bZvelHPyJ8s9/tSCCME7F2S -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:14 2025 by rpki-client