$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/9e126e2e-8a60-3127-b61c-462f3b3fd1c2.roa File: 9e126e2e-8a60-3127-b61c-462f3b3fd1c2.roa (raw, json) Hash identifier: i+/GLC9FAAV3fRUpJ3ZigckXmcfYa+erKVpgJrCTFpU= Subject key identifier: E9:FC:E9:BA:61:ED:BD:AB:C3:59:34:A3:FE:C7:37:93:1D:1C:FB:B7 Certificate issuer: /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Certificate serial: 010D0C9F43285848A13610567252BB091FE59E00 Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/9e126e2e-8a60-3127-b61c-462f3b3fd1c2.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 395403 IP address blocks: 2620:4d:4030::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:10:56:72:52:bb:09:1f:e5:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=75364fcc-f91f-47ab-9afe-39104475e613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2d:10:5b:d5:db:80:73:f7:1a:14:81:fd:f5: 93:55:27:46:f1:3a:94:e3:e1:5c:6a:d0:d3:f0:c2: 05:27:5a:8b:e9:fa:e0:cd:34:30:28:5b:20:7c:18: 94:d3:49:b8:bd:a3:91:b5:c2:c8:42:36:48:d1:0c: 88:3a:0c:d8:e0:76:76:ef:ff:57:57:75:a9:48:26: 00:df:d7:6f:ef:97:0f:b6:41:42:f6:bd:37:19:ca: 38:59:ff:25:28:85:9f:c9:76:d0:ed:12:01:30:79: a4:c3:36:9f:90:5a:2f:cc:83:02:96:70:08:59:67: 05:7e:ec:a9:e7:38:42:d9:0f:3f:99:7c:cb:cb:88: 77:29:9c:6e:df:af:81:f8:7e:c9:35:22:eb:2f:c5: f3:e7:99:dd:76:46:90:2c:13:5f:8b:d0:e8:64:31: 49:c3:09:14:d6:5f:13:5d:14:f9:61:51:f2:fc:1b: ee:76:0f:b2:ac:e1:67:b9:69:73:d3:a2:31:81:09: 7b:ce:94:7e:49:63:8c:37:0d:12:d3:29:81:86:43: bc:28:2c:cd:60:0b:e6:27:a1:e9:6f:d1:c8:9b:c5: 49:48:29:34:a1:4a:f6:fb:dc:1f:a6:d4:99:46:60: a0:6d:f3:96:90:8b:fb:08:54:37:79:49:6f:fd:93: 5a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FC:E9:BA:61:ED:BD:AB:C3:59:34:A3:FE:C7:37:93:1D:1C:FB:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/9e126e2e-8a60-3127-b61c-462f3b3fd1c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl X509v3 Authority Key Identifier: keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer sbgp-ipAddrBlock: critical IPv6: 2620:4d:4030::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:5a:b0:10:e7:5e:67:d4:b9:03:02:17:a0:f6:ed:65:f7:c5: 2d:6c:1f:db:85:fc:4c:f9:b9:86:28:6d:8c:41:7a:c8:e1:f9: 04:bf:96:6e:53:46:41:bd:08:d2:33:d4:70:db:d3:1c:f7:6c: 5a:1b:3d:6e:20:56:e3:6f:9c:77:1e:fd:1e:e3:7d:da:26:a6: 24:e7:ce:d2:c8:b5:6c:fc:fc:49:36:87:7e:52:e2:00:bf:bd: 8d:a6:e4:e9:7e:28:64:83:6e:c9:80:cb:6a:76:a1:18:e0:bb: 86:b0:ce:41:ab:0d:a9:a3:ef:62:36:13:96:3f:4d:bc:e0:e6: fd:c3:1a:51:d6:59:64:95:93:06:0a:c7:30:b8:81:dc:53:c6: c4:e8:72:c2:ea:6b:ff:ac:9c:46:40:bb:60:bf:7a:ee:33:f1: d5:ff:67:85:8d:3f:06:6c:46:89:29:ae:68:c5:7d:eb:bc:56: 45:95:c9:44:d7:b9:e0:ac:0d:ad:2a:8e:3a:3f:a5:f3:c7:21: 33:fb:74:2e:65:95:24:17:be:49:f7:8f:6b:ad:3e:25:72:8c: 00:e7:eb:e8:05:c4:05:ef:9c:45:f7:72:48:ba:93:17:d3:d6: 22:3e:61:b6:76:e9:5d:cb:f4:cc:e5:7c:c6:33:dc:6f:54:27: 54:8c:61:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNhBWclK7CR/lngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEwYjU0ZDQtOTIxYS00MDVhLThjN2EtNmFhMWRjYjI2 M2VhMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk NzUzNjRmY2MtZjkxZi00N2FiLTlhZmUtMzkxMDQ0NzVlNjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1i0QW9XbgHP3GhSB/fWTVSdG8TqU4+FcatDT 8MIFJ1qL6frgzTQwKFsgfBiU00m4vaORtcLIQjZI0QyIOgzY4HZ27/9XV3WpSCYA 39dv75cPtkFC9r03Gco4Wf8lKIWfyXbQ7RIBMHmkwzafkFovzIMClnAIWWcFfuyp 5zhC2Q8/mXzLy4h3KZxu36+B+H7JNSLrL8Xz55nddkaQLBNfi9DoZDFJwwkU1l8T XRT5YVHy/Bvudg+yrOFnuWlz06IxgQl7zpR+SWOMNw0S0ymBhkO8KCzNYAvmJ6Hp b9HIm8VJSCk0oUr2+9wfptSZRmCgbfOWkIv7CFQ3eUlv/ZNa+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOn86bph7b2rw1k0o/7HN5MdHPu3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBi NTRkNC05MjFhLTQwNWEtOGM3YS02YWExZGNiMjYzZWEvOWUxMjZlMmUtOGE2MC0z MTI3LWI2MWMtNDYyZjNiM2ZkMWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwYjU0ZDQtOTIxYS00MDVhLThj N2EtNmFhMWRjYjI2M2VhL2RhMGI1NGQ0LTkyMWEtNDA1YS04YzdhLTZhYTFkY2Iy NjNlYS5jcmwwHwYDVR0jBBgwFoAUBL87a95hwed1KW8LcOgjFNgbvA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBiNTRkNC05MjFhLTQwNWEtOGM3YS02YWEx ZGNiMjYzZWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAATUAw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACFasBDnXmfUuQMCF6D27WX3xS1sH9uF/Ez5uYYobYxBesjh+QS/ lm5TRkG9CNIz1HDb0xz3bFobPW4gVuNvnHce/R7jfdompiTnztLItWz8/Ek2h35S 4gC/vY2m5Ol+KGSDbsmAy2p2oRjgu4awzkGrDamj72I2E5Y/Tbzg5v3DGlHWWWSV kwYKxzC4gdxTxsTocsLqa/+snEZAu2C/eu4z8dX/Z4WNPwZsRokprmjFfeu8VkWV yUTXueCsDa0qjjo/pfPHITP7dC5llSQXvkn3j2utPiVyjADn6+gFxAXvnEX3cki6 kxfT1iI+YbZ26V3L9MzlfMYz3G9UJ1SMYaA= -----END CERTIFICATE-----Generated at Sun Feb 16 20:27:39 2025 by rpki-client