$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/f1770e4c-16cb-301a-aac8-ba7ec98b8e25.roa File: f1770e4c-16cb-301a-aac8-ba7ec98b8e25.roa (raw, json) Hash identifier: ZxDXTwkDAbmwj+XwBGgWxenS6wRw+ZV6DuwvD3QXvz4= Subject key identifier: CB:2D:11:53:AB:D4:32:1F:E5:2F:6D:96:FE:B6:D1:9C:3C:C9:DA:3D Certificate issuer: /CN=13fecd24-0da7-4140-9636-71a72de851ec Certificate serial: 010D0C9F43285848A996299B81D7F20A56C47D00 Authority key identifier: 71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/f1770e4c-16cb-301a-aac8-ba7ec98b8e25.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 396871 IP address blocks: 2604:d0c0::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:29:9b:81:d7:f2:0a:56:c4:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13fecd24-0da7-4140-9636-71a72de851ec Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=879b1354-aee2-4c6a-b0e3-7864179d9721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bd:25:af:61:c4:99:f9:3f:5c:1e:bb:63:b3: 91:c5:65:47:43:1f:41:80:f7:42:a3:a2:c0:f7:cb: 12:64:9a:a6:92:08:93:6a:1e:e2:81:ba:43:fa:a8: de:35:fd:c4:4f:fd:4c:d4:39:03:9e:77:49:62:24: 30:6c:e1:42:7c:65:f7:cc:91:50:01:b8:65:5e:0b: c7:61:73:58:ae:a0:23:81:13:48:80:8c:0b:49:06: f1:45:c4:bd:9a:07:8e:8a:a0:7d:7a:89:0a:3f:09: 04:b6:d4:9d:99:2d:2a:95:44:0e:f0:ab:14:54:e0: ad:2f:00:9e:ba:1a:3b:f0:f2:d4:c3:18:2c:74:08: 4a:56:ab:3c:52:cd:84:46:34:b5:f8:c6:b4:b4:77: b0:51:87:f1:85:aa:1a:dd:c3:f8:3b:34:b1:e5:f1: 91:57:ea:ca:a5:35:41:5d:4d:3b:39:90:be:d3:6f: ac:05:f4:7e:f4:20:93:50:03:6d:38:e7:59:4f:5c: 0e:18:9f:1b:52:50:d3:dc:75:a0:39:3b:0c:9d:93: 87:fd:69:31:0b:68:e8:d2:10:3c:0d:eb:35:10:8b: a5:98:4b:86:cc:0c:62:d5:11:48:f1:b2:5e:7d:8c: 00:08:8d:7d:49:76:38:36:ea:9a:b6:20:38:e8:e7: b9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2D:11:53:AB:D4:32:1F:E5:2F:6D:96:FE:B6:D1:9C:3C:C9:DA:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/f1770e4c-16cb-301a-aac8-ba7ec98b8e25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl X509v3 Authority Key Identifier: keyid:71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer sbgp-ipAddrBlock: critical IPv6: 2604:d0c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:59:a0:b8:b5:cf:46:84:26:48:20:af:9d:bd:1a:e4:d7:9c: fd:4f:ac:b0:39:41:2d:35:0e:ad:fc:e9:2c:bb:fc:c4:9a:d8: f6:5a:57:11:11:30:00:d4:fb:0e:04:d0:af:d8:01:c7:9e:24: 40:22:b7:0e:ae:5d:21:26:ed:ff:4c:e2:37:1c:02:ca:e0:d5: 96:aa:54:b7:23:c8:19:3e:4a:7a:34:7a:06:86:29:d1:5d:0a: 83:c2:6f:44:87:da:f8:c4:eb:35:02:12:58:f2:7f:8f:c1:cc: 8c:2b:d7:9d:de:f0:a6:ba:7f:4d:3c:58:c4:f9:46:29:0a:68: 43:e2:0b:fa:4f:bb:41:89:6e:a8:fb:c6:32:3c:70:38:94:79: 76:99:6b:09:03:45:b8:0c:d4:38:06:ca:3b:70:55:0e:e6:fb: 27:3f:62:e5:91:cc:f3:ef:18:88:b7:ce:64:cf:69:72:4d:85: a5:6c:8e:cc:a5:f7:3c:c7:8e:94:a2:4c:5f:d9:6a:b4:07:0b: f5:ae:8d:41:bb:e0:bb:ab:f5:f6:d6:88:a0:2a:05:81:0f:93: 67:4a:a8:63:37:db:31:b1:8c:6e:42:1b:c6:6c:f6:3b:ec:0a: a5:ab:64:bc:ce:b9:77:4c:93:e7:fe:c1:d9:2e:a6:d4:ce:d7: 10:ec:81:99 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiplimbgdfyClbEfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTNmZWNkMjQtMGRhNy00MTQwLTk2MzYtNzFhNzJkZTg1 MWVjMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ODc5YjEzNTQtYWVlMi00YzZhLWIwZTMtNzg2NDE3OWQ5NzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp70lr2HEmfk/XB67Y7ORxWVHQx9BgPdCo6LA 98sSZJqmkgiTah7igbpD+qjeNf3ET/1M1DkDnndJYiQwbOFCfGX3zJFQAbhlXgvH YXNYrqAjgRNIgIwLSQbxRcS9mgeOiqB9eokKPwkEttSdmS0qlUQO8KsUVOCtLwCe uho78PLUwxgsdAhKVqs8Us2ERjS1+Ma0tHewUYfxhaoa3cP4OzSx5fGRV+rKpTVB XU07OZC+02+sBfR+9CCTUANtOOdZT1wOGJ8bUlDT3HWgOTsMnZOH/WkxC2jo0hA8 Des1EIulmEuGzAxi1RFI8bJefYwACI19SXY4NuqatiA46Oe5aQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMstEVOr1DIf5S9tlv620Zw8ydo9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xM2Zl Y2QyNC0wZGE3LTQxNDAtOTYzNi03MWE3MmRlODUxZWMvZjE3NzBlNGMtMTZjYi0z MDFhLWFhYzgtYmE3ZWM5OGI4ZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTNmZWNkMjQtMGRhNy00MTQwLTk2 MzYtNzFhNzJkZTg1MWVjLzEzZmVjZDI0LTBkYTctNDE0MC05NjM2LTcxYTcyZGU4 NTFlYy5jcmwwHwYDVR0jBBgwFoAUcfsH7Jbduh5RSiTnSMg1VDbRFH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xM2ZlY2QyNC0wZGE3LTQxNDAtOTYzNi03MWE3 MmRlODUxZWMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTQwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBvWaC4tc9GhCZIIK+dvRrk15z9T6ywOUEtNQ6t/Oksu/zEmtj2WlcR ETAA1PsOBNCv2AHHniRAIrcOrl0hJu3/TOI3HALK4NWWqlS3I8gZPkp6NHoGhinR XQqDwm9Eh9r4xOs1AhJY8n+PwcyMK9ed3vCmun9NPFjE+UYpCmhD4gv6T7tBiW6o +8YyPHA4lHl2mWsJA0W4DNQ4Bso7cFUO5vsnP2Llkczz7xiIt85kz2lyTYWlbI7M pfc8x46Uokxf2Wq0Bwv1ro1Bu+C7q/X21oigKgWBD5NnSqhjN9sxsYxuQhvGbPY7 7Aqlq2S8zrl3TJPn/sHZLqbUztcQ7IGZ -----END CERTIFICATE-----Generated at Sun Apr 6 11:05:58 2025 by rpki-client