$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/4b8dc84a-2b50-3661-a858-cd3c92400224.roa File: 4b8dc84a-2b50-3661-a858-cd3c92400224.roa (raw, json) Hash identifier: V7i5cF+hzAtHmX2aSQGz6G6CTNpmnXd1TwN9BNZR0rY= Subject key identifier: 9F:2C:CA:67:29:7D:00:B9:B7:16:58:5A:61:0C:FD:95:01:07:8E:58 Certificate issuer: /CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e Certificate serial: 010D0C9F432858484D758ADD665D688E67F9CDE0 Authority key identifier: 22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/4b8dc84a-2b50-3661-a858-cd3c92400224.roa Signing time: Mon 23 Dec 2024 14:00:51 +0000 ROA not before: Mon 23 Dec 2024 14:00:51 +0000 ROA not after: Sun 23 Mar 2025 13:00:51 +0000 asID: 26223 IP address blocks: 2605:c900::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4d:75:8a:dd:66:5d:68:8e:67:f9:cd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e Validity Not Before: Dec 23 14:00:51 2024 GMT Not After : Mar 23 13:00:51 2025 GMT Subject: CN=f5216373-da66-491a-861a-6bbf61adeb91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c6:c7:55:2c:67:da:c3:fb:a1:21:f6:7d:3b: 35:2a:13:89:e6:b7:79:9a:1c:e6:99:34:c3:87:6e: da:d3:b4:7d:67:e4:63:43:df:e2:17:b2:1f:ed:8c: 98:6b:85:77:9d:78:77:4a:59:92:39:82:45:50:0a: a8:2e:bb:6a:06:71:53:11:e1:8d:dc:e3:db:ed:d2: 01:c9:3f:2e:e6:dc:7b:22:80:47:d9:c6:c7:af:fa: a9:9c:16:96:0e:0e:c1:32:71:d3:79:23:13:cb:16: cf:31:9c:73:53:c3:66:9b:53:5f:d6:cc:cb:46:5b: 54:12:1d:b3:63:4a:05:59:a8:50:c8:c9:0f:96:00: b1:dc:cb:28:8b:87:23:2f:f0:33:85:9c:fe:06:85: 84:0e:bc:4c:8e:71:e5:77:28:57:26:38:54:00:6b: a9:fa:8a:65:a5:de:d1:c5:c7:e2:c5:90:0e:d7:5b: d6:2e:22:b5:8d:d0:68:03:60:c4:a3:fd:9b:d5:fc: 98:74:47:3a:75:43:ef:5d:38:26:06:6c:cd:71:56: b4:c4:9f:b1:15:bb:2f:81:b0:20:f7:8b:0d:86:de: f8:a1:24:b1:fe:1e:e2:8c:7a:df:43:d0:4d:bb:93: 0b:76:ca:ff:dc:bc:43:d9:f6:42:19:70:2a:a9:bd: ab:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2C:CA:67:29:7D:00:B9:B7:16:58:5A:61:0C:FD:95:01:07:8E:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/4b8dc84a-2b50-3661-a858-cd3c92400224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.crl X509v3 Authority Key Identifier: keyid:22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer sbgp-ipAddrBlock: critical IPv6: 2605:c900::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:fa:34:75:4e:2e:e6:6f:14:e4:3b:49:bc:23:58:79:c0:b1: 10:79:67:e9:ca:b2:69:6f:1f:de:e4:50:80:1d:03:ae:88:e7: ea:e9:33:1f:fb:38:5c:09:6f:45:9a:a9:4f:29:8c:36:f5:16: fe:c7:e8:59:16:ab:a9:cb:4c:4b:d8:c0:6f:46:7f:c9:4e:a0: a6:b2:e9:44:b4:0b:20:d8:bc:25:33:eb:6d:01:8f:b0:99:fb: c2:2d:cc:64:be:67:2c:d1:ca:b0:f8:c8:5c:fd:a5:50:ed:b3: 8f:33:90:ce:0a:55:9c:61:99:f6:f5:b5:cc:cd:c7:90:08:4f: d5:a1:69:6b:1f:04:87:21:77:40:86:29:9b:4c:00:9a:d1:dd: 6d:e9:50:8b:94:02:bb:40:d2:cb:66:f3:f2:f3:ce:63:01:5f: d5:55:b2:ca:7c:77:f7:06:8f:be:10:9a:26:c1:22:af:04:8a: 78:e2:40:d2:20:d7:76:24:aa:9b:9b:4c:10:9d:ea:dc:6d:83: c9:e6:3f:d4:0b:f6:25:4d:2b:83:29:89:76:f8:6b:49:43:5e: 40:92:2a:ab:07:4f:29:e6:bc:ef:de:1d:71:ff:4c:29:9d:a3: 87:f9:02:bd:e6:b8:4b:d0:21:ca:d9:40:2d:02:d6:bf:98:81: 20:a0:1e:44 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhNdYrdZl1ojmf5zeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y2YmMwNmEtMGE0Mi00NzU4LTg2MjktOGM5MGVjZjJm ODJlMB4XDTI0MTIyMzE0MDA1MVoXDTI1MDMyMzEzMDA1MVowLzEtMCsGA1UEAxMk ZjUyMTYzNzMtZGE2Ni00OTFhLTg2MWEtNmJiZjYxYWRlYjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcbHVSxn2sP7oSH2fTs1KhOJ5rd5mhzmmTTD h27a07R9Z+RjQ9/iF7If7YyYa4V3nXh3SlmSOYJFUAqoLrtqBnFTEeGN3OPb7dIB yT8u5tx7IoBH2cbHr/qpnBaWDg7BMnHTeSMTyxbPMZxzU8Nmm1Nf1szLRltUEh2z Y0oFWahQyMkPlgCx3Msoi4cjL/AzhZz+BoWEDrxMjnHldyhXJjhUAGup+oplpd7R xcfixZAO11vWLiK1jdBoA2DEo/2b1fyYdEc6dUPvXTgmBmzNcVa0xJ+xFbsvgbAg 94sNht74oSSx/h7ijHrfQ9BNu5MLdsr/3LxD2fZCGXAqqb2rrwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ8symcpfQC5txZYWmEM/ZUBB45YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZjZi YzA2YS0wYTQyLTQ3NTgtODYyOS04YzkwZWNmMmY4MmUvNGI4ZGM4NGEtMmI1MC0z NjYxLWE4NTgtY2QzYzkyNDAwMjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y2YmMwNmEtMGE0Mi00NzU4LTg2 MjktOGM5MGVjZjJmODJlLzdmNmJjMDZhLTBhNDItNDc1OC04NjI5LThjOTBlY2Yy ZjgyZS5jcmwwHwYDVR0jBBgwFoAUIo7n+g4AQMW6PyBnd/o8Bb1vWs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjZiYzA2YS0wYTQyLTQ3NTgtODYyOS04Yzkw ZWNmMmY4MmUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXJADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAY+jR1Ti7mbxTkO0m8I1h5wLEQeWfpyrJpbx/e5FCAHQOuiOfq6TMf +zhcCW9FmqlPKYw29Rb+x+hZFqupy0xL2MBvRn/JTqCmsulEtAsg2LwlM+ttAY+w mfvCLcxkvmcs0cqw+Mhc/aVQ7bOPM5DOClWcYZn29bXMzceQCE/VoWlrHwSHIXdA himbTACa0d1t6VCLlAK7QNLLZvPy885jAV/VVbLKfHf3Bo++EJomwSKvBIp44kDS INd2JKqbm0wQnercbYPJ5j/UC/YlTSuDKYl2+GtJQ15AkiqrB08p5rzv3h1x/0wp naOH+QK95rhL0CHK2UAtAta/mIEgoB5E -----END CERTIFICATE-----Generated at Sun Feb 16 20:24:40 2025 by rpki-client