$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9df1b59d-30ae-3240-8467-d7e7914ccafc.roa File: 9df1b59d-30ae-3240-8467-d7e7914ccafc.roa (raw, json) Hash identifier: btCDScghOgPY7ZFPJDL8DQsQbqf+RvPjI0qCFeV8URQ= Subject key identifier: AE:23:F5:1A:71:F6:62:36:C4:37:47:90:99:0E:98:C6:B9:32:B4:64 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858482D5A99BC24748CFB858E5280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9df1b59d-30ae-3240-8467-d7e7914ccafc.roa Signing time: Thu 12 Dec 2024 02:00:38 +0000 ROA not before: Thu 12 Dec 2024 02:00:38 +0000 ROA not after: Wed 12 Mar 2025 01:00:38 +0000 asID: 22773 IP address blocks: 2600:880b:8000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2d:5a:99:bc:24:74:8c:fb:85:8e:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 12 02:00:38 2024 GMT Not After : Mar 12 01:00:38 2025 GMT Subject: CN=59f40e92-808d-4652-ae88-317dafa7d647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ff:b4:d7:82:4b:f1:62:64:84:4d:4e:b4:ae: 1e:ac:87:73:f8:c2:52:fa:f4:0d:47:32:a2:70:ef: 3f:b6:aa:3d:c6:6f:1d:33:1d:33:ee:f1:50:ce:2d: bf:d2:aa:62:9e:b4:1d:40:de:74:2c:3b:d9:e0:62: cf:bd:fb:26:ba:a2:78:a0:98:70:c2:81:d5:55:94: 4d:85:88:0a:27:3c:eb:39:69:59:43:c2:f7:ea:e3: 45:f2:aa:04:dd:16:a3:d7:6a:2f:d3:3d:c3:16:98: 37:42:eb:c0:8b:f6:f4:d3:42:d2:ad:8a:02:4a:f5: db:d4:24:88:e2:53:5c:32:3e:34:3e:58:98:fe:ce: 09:97:a0:62:4c:a0:08:72:c8:26:5c:8d:f6:2f:31: ba:75:24:d1:16:0c:29:d7:01:ee:27:46:fb:dd:42: de:c0:03:cf:14:b7:31:a2:26:85:e0:64:30:ba:6d: 99:90:4a:22:2c:83:eb:ec:19:db:bf:54:36:fb:78: b0:94:9a:f7:d3:ce:68:a5:c1:20:5d:ac:c3:b7:32: b3:e6:f9:c6:a2:ba:5c:cb:45:b4:7c:9e:8c:77:d3: 72:09:45:a2:fd:12:3c:8f:ef:3f:bb:d0:66:fa:83: 38:e3:bd:83:a9:e8:01:0a:d1:48:03:ed:66:bf:ce: 05:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:23:F5:1A:71:F6:62:36:C4:37:47:90:99:0E:98:C6:B9:32:B4:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9df1b59d-30ae-3240-8467-d7e7914ccafc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:880b:8000::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:a6:c8:72:7b:8d:a2:a8:b9:43:26:86:e4:7c:a2:79:0a:53: 33:bd:a8:81:55:77:73:72:16:4a:af:be:20:58:eb:cf:99:86: 44:18:c1:6a:b2:93:b4:de:87:14:1b:7a:79:0f:16:47:3d:fc: 7d:f2:7c:5b:59:96:66:ed:d8:69:8e:df:ff:2a:07:7f:a3:49: 84:32:78:e6:97:b6:c6:71:43:dd:03:66:de:54:10:17:12:86: c0:7a:04:98:d5:cd:3d:ae:e3:d0:a2:9e:01:5b:1d:cf:22:1e: 9f:c0:c7:f2:25:ea:90:19:87:8e:f0:8d:f5:cf:d7:3c:d1:88: a8:b2:14:c6:b5:c3:8e:68:3b:8c:e1:dc:e2:6e:a2:4f:98:63: b0:e4:9c:15:05:f5:b2:23:78:93:a5:9a:81:b3:d6:34:09:9a: 06:c6:9f:2b:15:2e:15:40:e5:c8:1f:79:df:63:bd:40:5b:81: 8e:3f:73:6a:af:2a:98:58:84:14:99:e5:6e:fe:b4:03:96:db: de:64:6c:ab:b9:d4:5d:5e:48:16:6c:ec:3c:0a:96:47:e2:e3: 8c:e0:6f:f7:92:3c:5f:be:cc:21:3c:1a:f6:a0:79:1e:bd:f4: cc:d9:d1:0c:ef:07:ed:62:3b:6b:1f:da:2e:95:4e:22:41:0e: 42:56:ea:34 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEgtWpm8JHSM+4WOUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI0MTIxMjAyMDAzOFoXDTI1MDMxMjAxMDAzOFowLzEtMCsGA1UEAxMk NTlmNDBlOTItODA4ZC00NjUyLWFlODgtMzE3ZGFmYTdkNjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxv+014JL8WJkhE1OtK4erIdz+MJS+vQNRzKi cO8/tqo9xm8dMx0z7vFQzi2/0qpinrQdQN50LDvZ4GLPvfsmuqJ4oJhwwoHVVZRN hYgKJzzrOWlZQ8L36uNF8qoE3Raj12ov0z3DFpg3QuvAi/b000LSrYoCSvXb1CSI 4lNcMj40PliY/s4Jl6BiTKAIcsgmXI32LzG6dSTRFgwp1wHuJ0b73ULewAPPFLcx oiaF4GQwum2ZkEoiLIPr7Bnbv1Q2+3iwlJr3085opcEgXazDtzKz5vnGorpcy0W0 fJ6Md9NyCUWi/RI8j+8/u9Bm+oM4472DqegBCtFIA+1mv84FCQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFK4j9Rpx9mI2xDdHkJkOmMa5MrRkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWRmMWI1OWQtMzBhZS0z MjQwLTg0NjctZDdlNzkxNGNjYWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgCIC4Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAV6bIcnuNoqi5QyaG5HyieQpTM72ogVV3c3IWSq++IFjrz5mGRBjB arKTtN6HFBt6eQ8WRz38ffJ8W1mWZu3YaY7f/yoHf6NJhDJ45pe2xnFD3QNm3lQQ FxKGwHoEmNXNPa7j0KKeAVsdzyIen8DH8iXqkBmHjvCN9c/XPNGIqLIUxrXDjmg7 jOHc4m6iT5hjsOScFQX1siN4k6WagbPWNAmaBsafKxUuFUDlyB9532O9QFuBjj9z aq8qmFiEFJnlbv60A5bb3mRsq7nUXV5IFmzsPAqWR+LjjOBv95I8X77MITwa9qB5 Hr30zNnRDO8H7WI7ax/aLpVOIkEOQlbqNA== -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:16 2025 by rpki-client