$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/433031db-4285-39e5-accd-f6fb29f9770e.roa File: 433031db-4285-39e5-accd-f6fb29f9770e.roa (raw, json) Hash identifier: 4QMjeBS/OA0sNQgqtSbRwC9E1vbRevYOTF7Rp8uhzZ8= Subject key identifier: 17:DC:7F:E4:95:A8:6F:9A:4D:13:7D:35:E6:7D:0D:EB:6C:52:14:C3 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584886B07709925C9E2272AAFA00 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/433031db-4285-39e5-accd-f6fb29f9770e.roa Signing time: Mon 13 Jan 2025 02:00:40 +0000 ROA not before: Mon 13 Jan 2025 02:00:40 +0000 ROA not after: Sun 13 Apr 2025 01:00:40 +0000 asID: 16509 IP address blocks: 2606:7bc0:1064::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:86:b0:77:09:92:5c:9e:22:72:aa:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Jan 13 02:00:40 2025 GMT Not After : Apr 13 01:00:40 2025 GMT Subject: CN=1068b3e1-ad52-46b5-917c-d001a9930a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:81:a7:2c:ea:6d:d1:c5:e3:4e:ab:56:c5:0f: f8:59:c0:30:5b:60:b9:75:a4:68:7b:6d:37:16:08: b3:3e:7c:1c:3b:7e:5c:14:99:b8:32:f6:04:a8:6c: cf:61:68:d9:a7:f9:4a:1a:be:7a:36:08:30:3d:96: 47:b8:b1:01:14:50:9a:d4:80:04:9a:13:fd:bc:62: 4b:20:4c:6e:ee:da:88:ba:63:19:d4:e7:2e:4e:b7: 1b:2c:30:28:1c:ab:ec:65:ba:4b:48:15:45:54:d3: e6:53:71:41:99:67:37:99:46:26:84:2a:a8:40:4b: 1d:9c:4f:47:d6:37:e2:0b:f5:8a:07:86:ca:93:1c: 5e:a1:00:37:79:e1:f3:5b:93:0d:5c:81:86:64:f5: 9b:24:ce:78:1a:ce:a5:92:a2:21:41:c1:e6:fd:c8: 6a:02:18:4e:2f:72:6f:b2:27:a0:ce:12:be:80:e2: d3:08:30:af:b8:c5:ca:97:04:67:2b:46:2c:89:dd: c9:81:f2:bf:0f:14:e7:10:52:e1:08:88:a3:aa:97: 6f:c6:76:2b:56:c3:ab:62:2c:7d:20:48:7e:ff:6f: 41:53:60:f5:58:12:95:60:4f:34:fd:72:0f:38:51: 6b:6e:fb:3b:fc:55:f0:8e:b7:80:88:f4:92:d1:f1: 51:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DC:7F:E4:95:A8:6F:9A:4D:13:7D:35:E6:7D:0D:EB:6C:52:14:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/433031db-4285-39e5-accd-f6fb29f9770e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv6: 2606:7bc0:1064::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:60:02:36:56:ca:39:63:eb:89:35:3c:3a:58:6e:31:78:fc: 45:38:7f:41:7d:bf:28:77:8c:69:43:2a:48:d7:a2:3d:e1:00: ef:fe:1a:ed:6f:36:c9:c5:58:86:7e:01:dc:60:2f:8e:17:f5: 88:23:9d:ef:16:fb:34:d1:b3:c1:e0:71:46:2c:54:07:08:67: d8:9a:5e:9f:53:8a:28:e0:9a:1a:7c:97:29:73:1a:95:b4:6a: ed:0a:86:32:c4:a8:eb:02:7f:45:5b:0f:3e:68:40:52:5c:ae: b8:bc:e7:68:ea:f3:a7:8f:ef:02:64:15:4f:da:4d:3b:40:3e: 7b:b8:ea:9c:bd:1b:eb:7c:e9:13:d6:f3:de:77:cb:67:81:8a: 8b:19:24:1f:d7:d9:94:09:3a:43:89:76:76:5a:84:b8:b0:ce: d1:29:64:d6:bb:ea:e5:36:1f:e6:82:bb:97:73:e8:27:91:8b: 3e:5a:33:18:0f:6e:ef:4b:b4:71:9d:88:06:73:7b:b1:d9:0d: e1:f1:f4:72:77:8b:00:40:8e:6e:12:52:bc:98:4b:e7:67:ab: 70:82:bd:8a:63:34:02:cd:1a:31:4c:75:d9:94:86:a0:f3:76: fe:aa:86:21:91:74:18:db:42:e2:6b:73:69:5f:b2:c9:92:34: 7b:19:89:e5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiGsHcJklyeInKq+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDExMzAyMDA0MFoXDTI1MDQxMzAxMDA0MFowLzEtMCsGA1UEAxMk MTA2OGIzZTEtYWQ1Mi00NmI1LTkxN2MtZDAwMWE5OTMwYThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4GnLOpt0cXjTqtWxQ/4WcAwW2C5daRoe203 FgizPnwcO35cFJm4MvYEqGzPYWjZp/lKGr56NggwPZZHuLEBFFCa1IAEmhP9vGJL IExu7tqIumMZ1OcuTrcbLDAoHKvsZbpLSBVFVNPmU3FBmWc3mUYmhCqoQEsdnE9H 1jfiC/WKB4bKkxxeoQA3eeHzW5MNXIGGZPWbJM54Gs6lkqIhQcHm/chqAhhOL3Jv siegzhK+gOLTCDCvuMXKlwRnK0Ysid3JgfK/DxTnEFLhCIijqpdvxnYrVsOrYix9 IEh+/29BU2D1WBKVYE80/XIPOFFrbvs7/FXwjreAiPSS0fFRnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBfcf+SVqG+aTRN9NeZ9DetsUhTDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNDMzMDMxZGItNDI4NS0z OWU1LWFjY2QtZjZmYjI5Zjk3NzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ7wBBk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIZgAjZWyjlj64k1PDpYbjF4/EU4f0F9vyh3jGlDKkjXoj3hAO/+ Gu1vNsnFWIZ+AdxgL44X9Ygjne8W+zTRs8HgcUYsVAcIZ9iaXp9Tiijgmhp8lylz GpW0au0KhjLEqOsCf0VbDz5oQFJcrri852jq86eP7wJkFU/aTTtAPnu46py9G+t8 6RPW8953y2eBiosZJB/X2ZQJOkOJdnZahLiwztEpZNa76uU2H+aCu5dz6CeRiz5a MxgPbu9LtHGdiAZze7HZDeHx9HJ3iwBAjm4SUryYS+dnq3CCvYpjNALNGjFMddmU hqDzdv6qhiGRdBjbQuJrc2lfssmSNHsZieU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:18 2025 by rpki-client