$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/397c8651-a597-3cf5-8c81-90307ce30cf8.roa File: 397c8651-a597-3cf5-8c81-90307ce30cf8.roa (raw, json) Hash identifier: YKyI0wWfYZYSpqcNXMIQy3LUWmHXjamV3wQOo12s9Rg= Subject key identifier: 88:0D:AF:88:DF:F0:83:6F:7D:4A:E1:A6:53:BA:19:15:49:7E:4B:1C Certificate issuer: /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Certificate serial: 010D0C9F43285848A1360908334C7F367CB64B00 Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/397c8651-a597-3cf5-8c81-90307ce30cf8.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 395403 IP address blocks: 2620:4d:4022::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:09:08:33:4c:7f:36:7c:b6:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=33a1de46-a7a5-4738-b7e1-1e0064af053d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:68:d1:0f:fa:3f:a0:16:a3:2b:f3:64:12:8d: c4:38:8c:89:de:36:31:7d:76:03:95:5e:fe:51:20: d8:05:fb:c7:ba:c4:e9:14:15:14:81:02:5b:2c:88: 0b:f3:5f:ea:fe:8f:2a:2a:3e:11:51:1a:af:13:4a: 5a:5e:2e:7a:69:13:27:ba:1a:e2:06:81:4c:3c:07: dd:cc:1d:8e:fb:35:bf:65:c7:85:ff:90:98:76:08: 27:b0:8f:ae:f1:36:68:dd:ea:c9:85:0e:0c:a4:4e: fe:46:0a:ae:3a:c5:e3:82:ef:49:70:07:78:a3:d6: 88:af:84:11:2d:d3:9a:fd:14:2d:28:ca:1d:0c:1f: bf:ea:ae:cf:00:c5:e4:89:03:2e:82:41:fe:92:b6: 0d:9b:b2:a9:a5:4e:48:b5:9a:0f:f1:ab:68:e5:49: 87:69:05:59:12:e6:94:20:de:d8:dc:8b:fb:98:d1: 1f:a8:c8:bf:a8:85:b1:95:44:fd:5c:13:fe:32:96: 72:7d:80:c9:6f:db:64:03:ac:34:a6:6a:b1:fe:ee: 13:2a:4f:27:9e:f4:72:3e:10:53:b5:81:66:8c:9a: d4:6b:40:16:87:21:15:a1:2b:fd:e5:e4:0f:89:e1: 01:56:e2:d9:62:be:b2:12:eb:4f:08:51:50:8f:46: 56:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0D:AF:88:DF:F0:83:6F:7D:4A:E1:A6:53:BA:19:15:49:7E:4B:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/397c8651-a597-3cf5-8c81-90307ce30cf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl X509v3 Authority Key Identifier: keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer sbgp-ipAddrBlock: critical IPv6: 2620:4d:4022::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:b7:0f:20:1e:82:44:a4:a6:a6:d4:f9:9c:a6:f7:0c:7a:95: 9d:85:74:2a:00:7e:c9:fb:69:f4:3c:6b:ff:5c:99:dc:66:87: d8:cf:4d:47:bb:5d:7b:55:29:f3:65:c7:86:5f:30:20:d8:ba: a7:0d:59:ab:2b:80:e8:1a:b2:68:de:5d:38:a8:93:b7:9d:e5: 80:10:2b:7f:72:ca:d7:52:63:8e:66:22:a4:10:c7:0d:90:5b: 9e:10:33:6a:97:f0:19:9a:55:be:3d:3d:32:38:a7:64:ff:8d: fc:50:20:64:78:70:da:1f:6b:90:b9:76:03:5a:cf:db:a0:d0: 43:32:55:56:e1:6c:ff:b6:72:95:21:8e:8c:bd:59:e9:93:f2: bf:8d:01:30:a5:8e:9a:29:db:f2:35:b9:fc:e0:fb:51:b1:cb: a1:96:f4:57:7d:63:ec:d4:95:e6:c7:cd:3e:63:cc:0e:a0:cc: c9:61:f0:36:ce:38:7e:00:37:0b:d9:e6:0f:8b:24:5b:33:f8: d1:57:5e:97:33:7f:59:09:9d:ed:b4:21:75:45:ff:fe:fd:b0: 5a:0b:60:26:e4:47:94:67:e9:c4:13:32:7c:7d:68:bb:dd:5f: b7:25:a6:d5:b8:e1:ab:54:00:c7:b1:3d:36:e7:8f:9e:de:53: 02:35:14:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNgkIM0x/Nny2SwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEwYjU0ZDQtOTIxYS00MDVhLThjN2EtNmFhMWRjYjI2 M2VhMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk MzNhMWRlNDYtYTdhNS00NzM4LWI3ZTEtMWUwMDY0YWYwNTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GjRD/o/oBajK/NkEo3EOIyJ3jYxfXYDlV7+ USDYBfvHusTpFBUUgQJbLIgL81/q/o8qKj4RURqvE0paXi56aRMnuhriBoFMPAfd zB2O+zW/ZceF/5CYdggnsI+u8TZo3erJhQ4MpE7+RgquOsXjgu9JcAd4o9aIr4QR LdOa/RQtKModDB+/6q7PAMXkiQMugkH+krYNm7KppU5ItZoP8ato5UmHaQVZEuaU IN7Y3Iv7mNEfqMi/qIWxlUT9XBP+MpZyfYDJb9tkA6w0pmqx/u4TKk8nnvRyPhBT tYFmjJrUa0AWhyEVoSv95eQPieEBVuLZYr6yEutPCFFQj0ZW5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIgNr4jf8INvfUrhplO6GRVJfkscMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBi NTRkNC05MjFhLTQwNWEtOGM3YS02YWExZGNiMjYzZWEvMzk3Yzg2NTEtYTU5Ny0z Y2Y1LThjODEtOTAzMDdjZTMwY2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwYjU0ZDQtOTIxYS00MDVhLThj N2EtNmFhMWRjYjI2M2VhL2RhMGI1NGQ0LTkyMWEtNDA1YS04YzdhLTZhYTFkY2Iy NjNlYS5jcmwwHwYDVR0jBBgwFoAUBL87a95hwed1KW8LcOgjFNgbvA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBiNTRkNC05MjFhLTQwNWEtOGM3YS02YWEx ZGNiMjYzZWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAATUAi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB+3DyAegkSkpqbU+Zym9wx6lZ2FdCoAfsn7afQ8a/9cmdxmh9jP TUe7XXtVKfNlx4ZfMCDYuqcNWasrgOgasmjeXTiok7ed5YAQK39yytdSY45mIqQQ xw2QW54QM2qX8BmaVb49PTI4p2T/jfxQIGR4cNofa5C5dgNaz9ug0EMyVVbhbP+2 cpUhjoy9WemT8r+NATCljpop2/I1ufzg+1Gxy6GW9Fd9Y+zUlebHzT5jzA6gzMlh 8DbOOH4ANwvZ5g+LJFsz+NFXXpczf1kJne20IXVF//79sFoLYCbkR5Rn6cQTMnx9 aLvdX7clptW44atUAMexPTbnj57eUwI1FLM= -----END CERTIFICATE-----Generated at Sun Feb 16 20:20:17 2025 by rpki-client