$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/424f26c4-887b-3d46-80f1-25fad32f836b.roa File: 424f26c4-887b-3d46-80f1-25fad32f836b.roa (raw, json) Hash identifier: SFXSvySEccrOEI8sDHJlkR2W/VOsjmcP8uom3yvEaKA= Subject key identifier: 98:28:13:86:E8:3E:0B:1B:93:61:F1:6B:19:7C:E9:CF:0F:0C:64:55 Certificate issuer: /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Certificate serial: 010D0C9F43285848F65BE7DD79D137E887B35600 Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/424f26c4-887b-3d46-80f1-25fad32f836b.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 397181 IP address blocks: 2604:c840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:e7:dd:79:d1:37:e8:87:b3:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=8b9228af-4b7d-44a6-9d87-7f9942a6ff6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:71:c0:6c:2e:3e:6e:7c:5e:fa:8b:41:7a:c2: 12:08:45:a8:a1:18:e5:6c:84:a0:fa:c4:fb:5f:29: 1c:30:48:42:cd:fc:30:c8:a8:dd:37:ba:d5:6b:49: 1d:b4:eb:9f:32:d4:d5:46:22:83:3f:78:f9:fd:98: d3:13:90:87:6d:c8:7c:2d:68:f6:60:b1:f6:53:3e: 5d:e8:ef:e9:14:fb:32:51:6a:68:54:b5:bd:d2:f5: 39:f6:c4:d9:2a:4d:d8:12:f5:dd:0a:ae:95:ae:56: 93:09:b9:43:eb:31:09:20:38:99:1b:5a:06:72:ea: e4:e4:ae:97:c9:6e:42:e1:2e:32:13:6d:af:e8:2a: c9:26:f6:2e:e2:e0:0d:c2:ce:a3:2b:b1:c0:df:9c: e6:20:5b:5e:c9:7f:31:a9:6b:68:d2:39:be:35:b1: c4:52:90:44:08:f2:e7:52:39:fd:85:d0:27:09:78: 18:4b:e1:79:a7:34:0e:96:45:44:04:8d:63:44:9a: 64:eb:17:bc:88:39:33:d3:95:70:60:78:96:e4:3c: 6e:27:fb:1a:ce:c6:df:cd:85:b6:77:86:43:71:3b: ee:8c:78:aa:96:05:2d:ef:b1:eb:f6:f4:8c:76:89: 9b:a4:4e:9f:10:f6:37:15:f4:a7:a6:b2:02:1f:2e: 20:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:28:13:86:E8:3E:0B:1B:93:61:F1:6B:19:7C:E9:CF:0F:0C:64:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/424f26c4-887b-3d46-80f1-25fad32f836b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl X509v3 Authority Key Identifier: keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer sbgp-ipAddrBlock: critical IPv6: 2604:c840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:f8:1e:66:60:41:c3:03:9e:7a:ea:98:c2:ec:0b:e9:8c:b2: f0:0f:3c:82:60:fe:08:c0:f5:18:b4:84:80:31:dc:c2:5c:30: 15:fc:81:ae:58:74:d7:ca:5a:d5:92:ad:f9:2d:df:ff:91:88: 7a:01:c7:c9:9f:60:c8:65:4e:da:d8:9c:53:79:ab:db:f0:f8: c4:d8:9b:c0:ba:13:d6:92:d6:3c:74:bf:29:b7:4d:98:90:31: 0f:63:e2:18:25:98:6d:24:ce:3b:46:e7:2f:66:b8:ff:9e:e2: 8f:34:dd:3b:0e:9c:17:fe:95:73:22:e2:56:0c:17:81:1f:d0: 19:9c:23:ba:11:d9:84:0d:85:d1:df:ca:80:b2:2e:1b:42:24: 1a:73:39:9b:3d:b3:7b:2e:62:71:e9:ce:bd:34:2d:9c:9a:ae: 56:fa:e6:44:e7:20:bd:4f:35:35:4c:d5:43:c4:81:98:d3:bf: f9:05:a2:4a:7c:5a:94:a2:68:de:a0:40:a2:30:a1:08:9e:e8: 94:44:d4:bb:a5:7a:f4:79:bc:55:71:8b:18:d5:f0:17:87:3b: 94:70:bb:f7:27:7c:1e:13:0e:8f:d0:7d:3a:de:2e:0f:33:55: 38:9e:28:7d:10:a3:83:bb:eb:2c:0b:69:5e:68:bf:ed:17:9b: 08:df:05:07 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEj2W+fdedE36IezVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhNzgzNmUtMjJlOS00NDRiLTlkMTMtNWQxMTM1OGJk NmFiMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk OGI5MjI4YWYtNGI3ZC00NGE2LTlkODctN2Y5OTQyYTZmZjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonHAbC4+bnxe+otBesISCEWooRjlbISg+sT7 XykcMEhCzfwwyKjdN7rVa0kdtOufMtTVRiKDP3j5/ZjTE5CHbch8LWj2YLH2Uz5d 6O/pFPsyUWpoVLW90vU59sTZKk3YEvXdCq6VrlaTCblD6zEJIDiZG1oGcurk5K6X yW5C4S4yE22v6CrJJvYu4uANws6jK7HA35zmIFteyX8xqWto0jm+NbHEUpBECPLn Ujn9hdAnCXgYS+F5pzQOlkVEBI1jRJpk6xe8iDkz05VwYHiW5DxuJ/sazsbfzYW2 d4ZDcTvujHiqlgUt77Hr9vSMdombpE6fEPY3FfSnprICHy4gTQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJgoE4boPgsbk2Hxaxl86c8PDGRVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3 ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDExMzU4YmQ2YWIvNDI0ZjI2YzQtODg3Yi0z ZDQ2LTgwZjEtMjVmYWQzMmY4MzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGFhNzgzNmUtMjJlOS00NDRiLTlk MTMtNWQxMTM1OGJkNmFiLzBhYTc4MzZlLTIyZTktNDQ0Yi05ZDEzLTVkMTEzNThi ZDZhYi5jcmwwHwYDVR0jBBgwFoAUqlfEKeVqHdSvVp6kbUWYDSZ96RcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDEx MzU4YmQ2YWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTIQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBs+B5mYEHDA5566pjC7AvpjLLwDzyCYP4IwPUYtISAMdzCXDAV/IGu WHTXylrVkq35Ld//kYh6AcfJn2DIZU7a2JxTeavb8PjE2JvAuhPWktY8dL8pt02Y kDEPY+IYJZhtJM47RucvZrj/nuKPNN07DpwX/pVzIuJWDBeBH9AZnCO6EdmEDYXR 38qAsi4bQiQaczmbPbN7LmJx6c69NC2cmq5W+uZE5yC9TzU1TNVDxIGY07/5BaJK fFqUomjeoECiMKEInuiURNS7pXr0ebxVcYsY1fAXhzuUcLv3J3weEw6P0H063i4P M1U4nih9EKODu+ssC2leaL/tF5sI3wUH -----END CERTIFICATE-----Generated at Sun Apr 6 04:37:44 2025 by rpki-client