$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/8c63a25d-10b7-37dd-ac58-7130ee7f8d36.roa File: 8c63a25d-10b7-37dd-ac58-7130ee7f8d36.roa (raw, json) Hash identifier: TCJlivtRvGuNKOjM3sdVhGXyO+GYj3xvZets6IOChgk= Subject key identifier: CA:51:A7:A9:4C:54:FB:7F:45:C4:FC:10:96:2C:19:FC:DC:2C:46:EE Certificate issuer: /CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b Certificate serial: 010D0C9F4328584824FA7F2B4CB9E060A6301960 Authority key identifier: 56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/8c63a25d-10b7-37dd-ac58-7130ee7f8d36.roa Signing time: Mon 09 Dec 2024 02:00:40 +0000 ROA not before: Mon 09 Dec 2024 02:00:40 +0000 ROA not after: Sun 09 Mar 2025 02:00:40 +0000 asID: 14618 IP address blocks: 2606:7740:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:24:fa:7f:2b:4c:b9:e0:60:a6:30:19:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b Validity Not Before: Dec 9 02:00:40 2024 GMT Not After : Mar 9 02:00:40 2025 GMT Subject: CN=38bd0b44-56f8-4115-80ad-10ed8bde4b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e1:b1:85:64:58:07:d5:23:6b:d3:e8:33:9f: a7:cc:ee:7a:8f:b2:b2:09:d8:f7:f2:01:a9:a3:27: 1d:b5:be:54:f3:31:d2:06:6a:ab:46:10:60:19:8a: ca:6b:79:eb:cd:6c:9d:a4:6c:40:91:4a:2f:fd:97: 85:dd:dc:86:82:0c:db:05:da:9f:91:7f:bd:6e:6c: f6:44:cf:0e:51:17:5b:c0:4d:f3:61:e7:cd:ef:a0: 49:d5:5a:ce:4d:d9:93:32:05:4d:25:7a:96:c8:60: 70:38:13:5b:31:42:0e:c4:9b:86:0c:ab:49:52:61: 94:28:28:e3:fd:d7:9a:16:ba:6e:81:b2:b6:ae:13: 22:26:3f:5a:10:ce:e9:26:66:40:13:5a:28:e3:4b: ef:34:d9:cf:64:4e:f5:c6:59:9c:57:7f:ff:df:fb: 04:25:11:1e:d8:ab:4b:56:9f:fa:07:cc:5d:ea:33: cb:82:0a:02:75:5a:f4:c1:a9:46:1e:29:3d:29:4a: 2e:16:a9:fc:2e:d2:06:ce:41:e5:f6:17:ae:66:c6: 5d:b8:b7:e5:30:56:d5:dd:4e:bb:79:18:7b:1f:96: ad:48:37:99:e3:a6:e7:46:f6:77:f0:50:2d:36:d5: 39:64:fd:90:2e:75:de:0d:58:d1:89:d5:0b:bd:83: 0e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:51:A7:A9:4C:54:FB:7F:45:C4:FC:10:96:2C:19:FC:DC:2C:46:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/8c63a25d-10b7-37dd-ac58-7130ee7f8d36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl X509v3 Authority Key Identifier: keyid:56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer sbgp-ipAddrBlock: critical IPv6: 2606:7740:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:27:4d:e8:e7:f9:c4:d1:7e:af:f3:f1:bb:1f:32:a0:be:a8: 6d:cd:ef:2f:87:25:4a:23:6b:2d:23:99:92:21:35:a1:64:c6: 11:4d:07:18:13:bf:b6:f1:a4:39:fd:64:be:c2:e1:d1:03:a7: 8b:17:cc:bb:ed:aa:63:96:37:49:c3:59:dd:7e:50:9a:d1:87: 06:f2:9d:cf:0e:c0:34:69:91:46:0d:2e:4e:e0:aa:fe:80:49: 64:d1:d0:80:36:ec:a2:c4:9d:e7:b8:7d:3b:b5:69:82:4b:3b: 74:24:cd:0c:25:da:97:ab:08:a6:28:bb:13:ac:7a:f3:64:11: ab:69:0d:61:05:4d:27:90:c7:2c:21:48:29:47:75:09:27:db: 39:6e:de:fe:08:4a:38:21:1f:da:f8:ed:ba:a6:b9:de:26:ff: e9:98:ad:ea:5b:d5:97:9a:28:66:87:d8:c5:14:df:ae:26:ba: d0:0f:38:25:5b:4b:1b:60:32:2b:bb:4d:ee:8c:57:dd:d1:c8: 1c:85:9d:ef:af:c5:77:38:73:c5:6c:c7:36:ee:e6:e1:eb:3e: 58:52:ef:49:4f:fd:99:8b:9b:a7:e9:36:26:8a:42:8c:50:07: 06:91:a8:02:a0:b2:25:e4:08:44:fb:ed:d5:a3:f5:26:ec:f0: 22:16:68:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgk+n8rTLngYKYwGWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjEzYzI5OGUtMzE3OS00ZjM1LTllN2QtODg2ZWUzZjli ZTBiMB4XDTI0MTIwOTAyMDA0MFoXDTI1MDMwOTAyMDA0MFowLzEtMCsGA1UEAxMk MzhiZDBiNDQtNTZmOC00MTE1LTgwYWQtMTBlZDhiZGU0YjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+GxhWRYB9Uja9PoM5+nzO56j7KyCdj38gGp oycdtb5U8zHSBmqrRhBgGYrKa3nrzWydpGxAkUov/ZeF3dyGggzbBdqfkX+9bmz2 RM8OURdbwE3zYefN76BJ1VrOTdmTMgVNJXqWyGBwOBNbMUIOxJuGDKtJUmGUKCjj /deaFrpugbK2rhMiJj9aEM7pJmZAE1oo40vvNNnPZE71xlmcV3//3/sEJREe2KtL Vp/6B8xd6jPLggoCdVr0walGHik9KUouFqn8LtIGzkHl9heuZsZduLflMFbV3U67 eRh7H5atSDeZ46bnRvZ38FAtNtU5ZP2QLnXeDVjRidULvYMOGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMpRp6lMVPt/RcT8EJYsGfzcLEbuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMTNj Mjk4ZS0zMTc5LTRmMzUtOWU3ZC04ODZlZTNmOWJlMGIvOGM2M2EyNWQtMTBiNy0z N2RkLWFjNTgtNzEzMGVlN2Y4ZDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjEzYzI5OGUtMzE3OS00ZjM1LTll N2QtODg2ZWUzZjliZTBiL2YxM2MyOThlLTMxNzktNGYzNS05ZTdkLTg4NmVlM2Y5 YmUwYi5jcmwwHwYDVR0jBBgwFoAUVlbPxbTjRRY3+Rn6Z5c9Lkgn50IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMTNjMjk4ZS0zMTc5LTRmMzUtOWU3ZC04ODZl ZTNmOWJlMGIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ3QAAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIEnTejn+cTRfq/z8bsfMqC+qG3N7y+HJUojay0jmZIhNaFkxhFN BxgTv7bxpDn9ZL7C4dEDp4sXzLvtqmOWN0nDWd1+UJrRhwbync8OwDRpkUYNLk7g qv6ASWTR0IA27KLEnee4fTu1aYJLO3QkzQwl2perCKYouxOsevNkEatpDWEFTSeQ xywhSClHdQkn2zlu3v4ISjghH9r47bqmud4m/+mYrepb1ZeaKGaH2MUU364mutAP OCVbSxtgMiu7Te6MV93RyByFne+vxXc4c8Vsxzbu5uHrPlhS70lP/ZmLm6fpNiaK QoxQBwaRqAKgsiXkCET77dWj9Sbs8CIWaJE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:28 2025 by rpki-client