$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/297d9ec4-5733-38f2-8685-313d37d499f0.roa File: 297d9ec4-5733-38f2-8685-313d37d499f0.roa (raw, json) Hash identifier: a0H9zC4uIdUk6ITPo3fw5AaOssDDiuIxr/AwA3eNatA= Subject key identifier: 69:23:8A:93:0D:92:61:93:E3:BE:53:BD:6C:C3:01:0A:36:03:18:DB Certificate issuer: /CN=29c52fab-59b0-46f8-851d-6644aaf1eaa7 Certificate serial: 010D0C9F432858483455637C0B927F9C65D99A00 Authority key identifier: 16:91:F3:75:E2:28:B8:9D:74:5C:35:5B:A9:12:2E:B2:87:25:FE:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/297d9ec4-5733-38f2-8685-313d37d499f0.roa Signing time: Sat 14 Dec 2024 14:00:52 +0000 ROA not before: Sat 14 Dec 2024 14:00:52 +0000 ROA not after: Fri 14 Mar 2025 13:00:52 +0000 asID: 25593 IP address blocks: 2604:9880::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/29c52fab-59b0-46f8-851d-6644aaf1eaa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/29c52fab-59b0-46f8-851d-6644aaf1eaa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:34:55:63:7c:0b:92:7f:9c:65:d9:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29c52fab-59b0-46f8-851d-6644aaf1eaa7 Validity Not Before: Dec 14 14:00:52 2024 GMT Not After : Mar 14 13:00:52 2025 GMT Subject: CN=8f6e0606-7c9c-4f39-a6d2-12bbc870a564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:73:88:0b:00:6f:ae:0d:9c:9f:3f:69:31:22: b3:ca:29:96:b4:16:76:b6:96:d8:eb:08:6d:35:48: 8a:f4:00:b7:d2:2c:9d:d2:2d:f0:fb:c8:a8:be:8c: 5e:e4:21:72:c9:9e:f8:78:cf:6e:bd:c2:3a:34:29: d4:b9:d8:de:95:dd:38:1d:f6:1b:12:f8:bf:57:d4: d3:42:ae:41:81:a9:8b:01:e5:2a:a2:b7:6b:0c:a7: 12:2c:34:d1:93:08:a0:54:13:8d:38:2e:95:ed:ac: 47:af:c6:d8:af:1e:c2:09:04:d0:b2:21:7a:76:72: 7b:41:cd:96:f0:c6:e0:44:47:d4:ca:10:8d:10:68: 3b:4e:22:c1:1d:6d:c0:7c:cb:94:90:c8:53:80:58: ae:62:1c:2b:cb:50:3c:42:37:66:c2:c2:b2:02:52: 61:34:cd:5e:84:9e:60:9b:36:21:07:0c:fb:db:5d: 29:d7:3f:d9:3e:db:54:0d:25:7b:43:3c:fa:ed:14: df:80:5b:cc:3c:56:17:dc:c9:52:7c:d7:bc:29:4d: 97:81:eb:6a:b1:3c:93:29:51:b0:3d:49:ea:42:12: b3:3d:23:0b:7e:ab:0e:ff:53:5a:50:a5:44:19:15: 40:15:6c:e1:8f:36:82:6d:bc:84:61:3b:64:93:85: 5e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:23:8A:93:0D:92:61:93:E3:BE:53:BD:6C:C3:01:0A:36:03:18:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/297d9ec4-5733-38f2-8685-313d37d499f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/29c52fab-59b0-46f8-851d-6644aaf1eaa7.crl X509v3 Authority Key Identifier: keyid:16:91:F3:75:E2:28:B8:9D:74:5C:35:5B:A9:12:2E:B2:87:25:FE:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7.cer sbgp-ipAddrBlock: critical IPv6: 2604:9880::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:b6:80:6c:55:71:9b:4a:f3:c9:ad:3e:79:df:d1:e4:e8:58: 12:fd:94:de:4b:87:fb:d2:66:19:74:59:f2:79:68:ec:60:79: 85:1b:28:97:79:82:86:85:f8:b1:42:4e:f5:e8:40:7c:48:a0: 03:09:cb:0e:d2:18:55:29:d8:ef:71:13:69:e0:af:58:17:d5: ff:0f:26:3f:68:c6:5d:cc:12:36:95:5a:e7:fe:fa:bd:f6:4b: c0:f3:80:bd:c1:11:1e:98:ec:3c:ae:71:8e:69:85:ae:7b:56: 25:2f:57:b3:e1:f7:5b:ef:1d:f6:28:41:34:23:34:33:cc:72: 5f:86:3c:96:23:4a:6e:6c:ae:ae:bd:d0:d8:62:e0:c8:93:f5: 00:8b:f5:1b:fd:10:d5:ab:12:73:d6:29:f7:8f:c6:04:37:ac: e9:24:ad:f4:fd:c8:39:47:9f:4d:fd:2b:87:3d:1a:88:73:47: 01:52:9d:4e:80:b1:63:29:51:92:81:c0:b5:41:dd:4b:2e:c3: 70:c5:bf:69:37:ff:89:f6:6b:06:f2:e6:ac:09:0f:61:d1:5e: 23:7c:f7:46:5d:b7:26:2f:93:b8:52:c3:85:9c:e9:e2:d6:58: bf:a1:c8:a1:8e:35:96:2c:75:a6:78:a0:1e:7c:03:e5:5d:70: a2:7c:8b:4a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEg0VWN8C5J/nGXZmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjljNTJmYWItNTliMC00NmY4LTg1MWQtNjY0NGFhZjFl YWE3MB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk OGY2ZTA2MDYtN2M5Yy00ZjM5LWE2ZDItMTJiYmM4NzBhNTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHOICwBvrg2cnz9pMSKzyimWtBZ2tpbY6wht NUiK9AC30iyd0i3w+8iovoxe5CFyyZ74eM9uvcI6NCnUudjeld04HfYbEvi/V9TT Qq5BgamLAeUqordrDKcSLDTRkwigVBONOC6V7axHr8bYrx7CCQTQsiF6dnJ7Qc2W 8MbgREfUyhCNEGg7TiLBHW3AfMuUkMhTgFiuYhwry1A8QjdmwsKyAlJhNM1ehJ5g mzYhBwz7210p1z/ZPttUDSV7Qzz67RTfgFvMPFYX3MlSfNe8KU2XgetqsTyTKVGw PUnqQhKzPSMLfqsO/1NaUKVEGRVAFWzhjzaCbbyEYTtkk4VerQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGkjipMNkmGT475TvWzDAQo2AxjbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yOWM1 MmZhYi01OWIwLTQ2ZjgtODUxZC02NjQ0YWFmMWVhYTcvMjk3ZDllYzQtNTczMy0z OGYyLTg2ODUtMzEzZDM3ZDQ5OWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjljNTJmYWItNTliMC00NmY4LTg1 MWQtNjY0NGFhZjFlYWE3LzI5YzUyZmFiLTU5YjAtNDZmOC04NTFkLTY2NDRhYWYx ZWFhNy5jcmwwHwYDVR0jBBgwFoAUFpHzdeIouJ10XDVbqRIusocl/vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yOWM1MmZhYi01OWIwLTQ2ZjgtODUxZC02NjQ0 YWFmMWVhYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgSYgAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXbaAbFVxm0rzya0+ed/R5OhYEv2U3kuH+9JmGXRZ8nlo7GB5hRso l3mChoX4sUJO9ehAfEigAwnLDtIYVSnY73ETaeCvWBfV/w8mP2jGXcwSNpVa5/76 vfZLwPOAvcERHpjsPK5xjmmFrntWJS9Xs+H3W+8d9ihBNCM0M8xyX4Y8liNKbmyu rr3Q2GLgyJP1AIv1G/0Q1asSc9Yp94/GBDes6SSt9P3IOUefTf0rhz0aiHNHAVKd ToCxYylRkoHAtUHdSy7DcMW/aTf/ifZrBvLmrAkPYdFeI3z3Rl23Ji+TuFLDhZzp 4tZYv6HIoY41lix1pnigHnwD5V1wonyLSg== -----END CERTIFICATE-----Generated at Sun Feb 16 20:31:00 2025 by rpki-client