$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c625fd72-037d-34e0-acb3-3db086a6a8b9.roa File: c625fd72-037d-34e0-acb3-3db086a6a8b9.roa (raw, json) Hash identifier: Nr6qtrDuHP/fQTBFvu4Jd2PFOrkfvAbAy5gxXNriNKk= Subject key identifier: D8:FA:3A:67:24:DF:C8:87:EB:73:E2:46:68:A9:1F:74:59:D9:C1:B5 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584875F058E4F81C8D6B87B3F180 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c625fd72-037d-34e0-acb3-3db086a6a8b9.roa Signing time: Tue 07 Jan 2025 02:00:39 +0000 ROA not before: Tue 07 Jan 2025 02:00:39 +0000 ROA not after: Mon 07 Apr 2025 01:00:39 +0000 asID: 14618 IP address blocks: 2606:7bc0:1065::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:75:f0:58:e4:f8:1c:8d:6b:87:b3:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Jan 7 02:00:39 2025 GMT Not After : Apr 7 01:00:39 2025 GMT Subject: CN=f3a8d1f0-726b-4f27-a6e2-c88156d99756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:83:0f:fc:b1:01:06:15:a4:7a:a5:5d:9f:95: c3:df:f2:92:51:64:0b:5b:bb:41:10:ee:f4:ee:f7: 95:ce:e4:36:d6:ea:92:cb:50:47:a9:d3:2e:52:61: 7e:cc:da:7c:16:93:8e:5f:3f:8f:01:99:66:6c:7f: 0b:e5:78:5c:34:32:11:ca:0a:93:f0:b3:62:c2:d6: c2:0f:52:c4:4f:79:cb:c5:21:48:06:32:19:7f:6d: 37:cd:9f:32:87:67:fe:1f:23:e3:e0:e3:38:3c:c2: b4:71:90:1c:f2:85:4f:72:b4:9b:15:05:52:35:c4: b0:d8:7c:26:2a:4b:d5:18:b7:6d:36:e8:1d:aa:bf: 94:dc:45:e2:9e:58:87:8d:d0:5b:0d:1c:63:f7:24: c2:e4:e2:08:63:41:51:8a:ee:e5:cd:3f:64:dd:b3: 47:22:fd:76:21:25:1f:d0:b6:4f:90:d5:2f:3b:24: a0:55:75:49:91:c5:b3:df:f9:2a:0b:79:96:93:6a: 8e:12:88:5f:71:3a:34:5e:7d:c5:99:eb:04:5c:f8: 1f:7d:8a:ce:d8:82:b9:12:98:f3:19:ba:3a:a9:d3: a5:d2:f0:58:9e:c0:d6:4a:6e:af:0a:0b:d8:68:e1: 2d:10:74:e9:78:97:44:ee:58:31:81:3d:0c:c6:a4: 6d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FA:3A:67:24:DF:C8:87:EB:73:E2:46:68:A9:1F:74:59:D9:C1:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c625fd72-037d-34e0-acb3-3db086a6a8b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv6: 2606:7bc0:1065::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:af:0e:48:a7:07:1d:ec:15:f7:f2:3a:0c:b1:68:6d:b0:0d: 0f:6f:f2:53:31:f4:85:29:9b:a8:3a:bc:53:d2:dc:15:31:fa: 83:22:df:56:fc:83:ec:1e:95:66:61:a8:4a:b7:0f:27:37:f1: 6f:a4:5e:e7:c8:19:f8:fd:c7:05:fd:4a:37:a9:bb:3e:82:3c: 80:9b:8e:4b:5d:74:a4:16:a4:ca:c3:70:ea:e9:9f:87:0c:9c: 70:a2:a8:e8:6d:aa:05:ab:c8:cc:d8:b5:b1:cd:53:2f:f3:6e: 26:f2:38:1d:d2:74:bc:fd:e1:98:9e:e2:e8:b8:0e:6f:7a:be: a9:f5:9e:54:78:ef:e8:a8:86:02:93:d4:4c:b7:c6:05:80:36: ca:98:fb:20:fc:e0:51:ef:a9:b9:e6:eb:b6:e4:e4:c6:71:42: d6:00:ff:39:68:65:9b:64:f2:d0:11:45:8e:70:c8:e6:3a:b0: a4:2f:50:2d:06:af:9e:ad:e2:8b:17:aa:17:ef:68:88:7d:ea: cf:5a:d5:65:c6:f9:11:7a:6a:5c:51:55:87:a4:04:c3:41:ee: f1:95:92:c1:d8:ba:6a:49:2c:09:38:33:4b:ba:ae:d1:33:5a: cb:c3:a8:26:69:ff:de:50:91:f7:0a:a7:43:5e:c9:60:0e:f6: 37:21:45:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEh18Fjk+ByNa4ez8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDEwNzAyMDAzOVoXDTI1MDQwNzAxMDAzOVowLzEtMCsGA1UEAxMk ZjNhOGQxZjAtNzI2Yi00ZjI3LWE2ZTItYzg4MTU2ZDk5NzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoMP/LEBBhWkeqVdn5XD3/KSUWQLW7tBEO70 7veVzuQ21uqSy1BHqdMuUmF+zNp8FpOOXz+PAZlmbH8L5XhcNDIRygqT8LNiwtbC D1LET3nLxSFIBjIZf203zZ8yh2f+HyPj4OM4PMK0cZAc8oVPcrSbFQVSNcSw2Hwm KkvVGLdtNugdqr+U3EXinliHjdBbDRxj9yTC5OIIY0FRiu7lzT9k3bNHIv12ISUf 0LZPkNUvOySgVXVJkcWz3/kqC3mWk2qOEohfcTo0Xn3FmesEXPgffYrO2IK5Epjz Gbo6qdOl0vBYnsDWSm6vCgvYaOEtEHTpeJdE7lgxgT0MxqRtEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNj6Omck38iH63PiRmipH3RZ2cG1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvYzYyNWZkNzItMDM3ZC0z NGUwLWFjYjMtM2RiMDg2YTZhOGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ7wBBl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGWvDkinBx3sFffyOgyxaG2wDQ9v8lMx9IUpm6g6vFPS3BUx+oMi 31b8g+welWZhqEq3Dyc38W+kXufIGfj9xwX9Sjepuz6CPICbjktddKQWpMrDcOrp n4cMnHCiqOhtqgWryMzYtbHNUy/zbibyOB3SdLz94Zie4ui4Dm96vqn1nlR47+io hgKT1Ey3xgWANsqY+yD84FHvqbnm67bk5MZxQtYA/zloZZtk8tARRY5wyOY6sKQv UC0Gr56t4osXqhfvaIh96s9a1WXG+RF6alxRVYekBMNB7vGVksHYumpJLAk4M0u6 rtEzWsvDqCZp/95QkfcKp0NeyWAO9jchRVg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:29 2025 by rpki-client