$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/d68caa82-7ee3-3b57-a8f9-90262d3791f7.roa File: d68caa82-7ee3-3b57-a8f9-90262d3791f7.roa (raw, json) Hash identifier: eTXbk9G373n6KUUBSF4r9xjZ51P9mXlaEKyMjt1q3J8= Subject key identifier: 16:E1:9D:DB:98:15:86:AB:63:EB:18:01:1C:0C:04:37:C7:86:DD:49 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F43285848100A9463E02AB318DBC66900 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/d68caa82-7ee3-3b57-a8f9-90262d3791f7.roa Signing time: Sun 01 Dec 2024 14:00:51 +0000 ROA not before: Sun 01 Dec 2024 14:00:51 +0000 ROA not after: Sat 01 Mar 2025 14:00:51 +0000 asID: 21743 IP address blocks: 2620:b9:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:10:0a:94:63:e0:2a:b3:18:db:c6:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Dec 1 14:00:51 2024 GMT Not After : Mar 1 14:00:51 2025 GMT Subject: CN=40f63a5b-e211-4326-944d-ffd43fec5acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a8:73:7b:47:76:8e:42:ef:b7:4f:a0:67:e8: 3a:42:1e:49:b7:15:6f:ab:0a:d7:f1:b2:bb:6c:8e: 4d:09:b4:41:9a:f2:24:14:1b:63:46:09:73:8a:b5: 14:0e:36:e7:73:1b:8b:b0:f7:19:98:ff:6d:e6:a1: 4d:4b:4a:96:65:05:c8:b4:89:3e:e2:61:dd:1e:26: 1f:5c:1b:ec:99:7f:3e:2b:33:04:de:fa:db:91:72: 1e:a8:17:9e:f0:fd:59:6e:02:65:4c:80:44:1a:7f: 60:52:5d:c9:1b:6b:33:94:85:86:81:9d:ec:66:08: 7e:2a:7f:b4:fe:19:cc:0d:18:a3:d0:fe:3b:d8:f2: e6:54:37:75:53:ed:81:2c:e9:07:43:1f:b8:22:9e: ff:67:a9:99:1c:8a:28:18:c4:c4:09:b4:d8:c9:fc: 61:40:59:17:2c:25:77:f5:43:60:e9:d1:3f:26:8f: f7:10:72:b0:4d:dc:5f:96:9c:e6:24:b0:31:47:c8: 22:c8:6c:b8:b6:fd:5a:30:a2:84:b0:00:51:75:f6: b8:7c:6f:41:69:1f:3a:cb:c1:60:6f:31:35:e9:42: 59:71:02:ea:c3:ed:87:45:b4:67:55:81:dd:f3:55: c5:28:7e:c4:4b:27:df:14:c8:3c:f3:fa:56:a2:49: 55:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E1:9D:DB:98:15:86:AB:63:EB:18:01:1C:0C:04:37:C7:86:DD:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/d68caa82-7ee3-3b57-a8f9-90262d3791f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv6: 2620:b9:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:77:76:5e:bd:f8:91:06:31:56:44:c1:26:60:5c:95:db:50: dc:d1:e6:30:7f:5b:2e:ec:e1:19:5a:0f:f5:75:d8:a3:f0:80: a2:a3:83:6b:1e:f6:13:f1:a7:45:eb:31:0e:54:07:0c:5c:c8: e2:35:9a:d6:ad:2a:19:3f:d5:ab:1c:ee:ec:14:32:d0:c4:c1: a5:36:21:29:3f:41:b3:0c:d5:9f:26:3e:14:69:d8:d6:16:bd: 73:c4:6c:2d:c2:58:e4:4f:f0:b6:1b:1a:63:7a:99:14:d6:97: ec:8f:d7:b2:79:7c:b3:dd:f8:83:88:e1:b6:3c:31:23:4d:28: 2e:8c:70:09:0f:c4:3d:7b:04:60:01:cb:40:00:a0:fc:e4:db: f2:0c:da:29:d3:39:4d:5f:0c:fa:ff:a7:93:7a:ce:e0:2c:9c: 63:f1:a2:5b:6f:20:b4:b9:90:eb:ee:32:2d:d6:fb:d0:de:fa: be:01:38:48:5a:ab:3f:a6:6b:5b:72:ee:6d:57:ab:cb:1d:4d: c5:27:2a:0f:b3:71:48:dc:4b:6d:ab:64:40:11:a5:9f:3f:b1: 80:9a:3f:4d:d2:dc:8d:a8:fd:8d:ab:46:82:e6:49:86:22:e4: 02:77:51:45:ec:6b:3d:4b:fb:2c:85:98:9c:16:dc:4b:a8:16: 8e:8d:50:2e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgQCpRj4CqzGNvGaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk NDBmNjNhNWItZTIxMS00MzI2LTk0NGQtZmZkNDNmZWM1YWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqhze0d2jkLvt0+gZ+g6Qh5JtxVvqwrX8bK7 bI5NCbRBmvIkFBtjRglzirUUDjbncxuLsPcZmP9t5qFNS0qWZQXItIk+4mHdHiYf XBvsmX8+KzME3vrbkXIeqBee8P1ZbgJlTIBEGn9gUl3JG2szlIWGgZ3sZgh+Kn+0 /hnMDRij0P472PLmVDd1U+2BLOkHQx+4Ip7/Z6mZHIooGMTECbTYyfxhQFkXLCV3 9UNg6dE/Jo/3EHKwTdxflpzmJLAxR8giyGy4tv1aMKKEsABRdfa4fG9BaR86y8Fg bzE16UJZcQLqw+2HRbRnVYHd81XFKH7ESyffFMg88/pWoklVjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBbhnduYFYarY+sYARwMBDfHht1JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvZDY4Y2FhODItN2VlMy0z YjU3LWE4ZjktOTAyNjJkMzc5MWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAueAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEZ3dl69+JEGMVZEwSZgXJXbUNzR5jB/Wy7s4RlaD/V12KPwgKKj g2se9hPxp0XrMQ5UBwxcyOI1mtatKhk/1asc7uwUMtDEwaU2ISk/QbMM1Z8mPhRp 2NYWvXPEbC3CWORP8LYbGmN6mRTWl+yP17J5fLPd+IOI4bY8MSNNKC6McAkPxD17 BGABy0AAoPzk2/IM2inTOU1fDPr/p5N6zuAsnGPxoltvILS5kOvuMi3W+9De+r4B OEhaqz+ma1ty7m1Xq8sdTcUnKg+zcUjcS22rZEARpZ8/sYCaP03S3I2o/Y2rRoLm SYYi5AJ3UUXsaz1L+yyFmJwW3EuoFo6NUC4= -----END CERTIFICATE-----Generated at Sun Feb 16 20:16:44 2025 by rpki-client