$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0da19735-40c4-31c3-a739-88e03152a67a.roa File: 0da19735-40c4-31c3-a739-88e03152a67a.roa (raw, json) Hash identifier: sulY4T1ZywSNL9fk89v4KUmek78Mv9O5kgKA1RvdIME= Subject key identifier: F9:B5:C6:D7:A3:85:58:15:42:C7:2D:52:2E:D5:67:25:B0:35:E7:83 Certificate issuer: /CN=0cb0d156-0906-405d-9cea-d599952bae65 Certificate serial: 010D0C9F432858489340B29FED8A2B227B82C711 Authority key identifier: 61:75:AD:68:36:B0:9C:A3:C5:D3:D2:C7:09:97:B5:B6:3A:1E:AC:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0da19735-40c4-31c3-a739-88e03152a67a.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 20303 IP address blocks: 2605:ed80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0cb0d156-0906-405d-9cea-d599952bae65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0cb0d156-0906-405d-9cea-d599952bae65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:b2:9f:ed:8a:2b:22:7b:82:c7:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cb0d156-0906-405d-9cea-d599952bae65 Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=ebc26625-0bcf-4511-b768-44535d5ff1e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:eb:d0:7a:e1:d2:64:33:8b:8d:ed:e4:e0:86: 70:30:45:3f:7b:24:69:d8:64:09:ec:1d:85:c5:c9: c2:ac:b8:77:ea:ac:29:7d:eb:34:dd:c8:47:20:93: 0e:e4:9c:27:cd:4c:fd:55:34:14:ee:4c:63:ff:43: 56:eb:f2:93:11:b7:83:d5:99:d1:02:a1:76:48:aa: 5e:65:37:ca:a7:10:45:4e:db:9b:38:48:33:bb:76: ad:45:a2:6c:23:c5:89:28:e2:d5:70:7a:2f:30:82: fc:ce:45:a2:b3:53:ce:7b:11:cd:b4:04:4a:7e:79: b5:0a:54:cb:8b:e2:78:ea:05:a8:27:47:62:d9:dc: ed:13:b8:78:ba:7b:86:66:25:bc:d4:68:26:4a:8b: f7:cf:b3:32:0e:2b:12:55:7b:0f:1d:92:61:fc:15: 64:e9:1d:3f:cb:82:a1:62:91:07:de:81:b2:6f:9b: 84:06:f5:5a:12:5a:c6:74:51:2f:09:42:80:54:8f: ad:c3:f4:f6:c8:09:7e:eb:b5:f0:37:d4:58:81:8f: 03:71:0c:db:84:09:f7:3f:a7:0c:32:ef:79:4e:e7: 95:ee:a5:52:0c:bd:25:a1:ea:a0:ae:a1:68:5f:b9: c4:b9:09:17:c6:58:dc:cf:f8:ff:3d:8c:d5:47:6c: 93:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B5:C6:D7:A3:85:58:15:42:C7:2D:52:2E:D5:67:25:B0:35:E7:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0da19735-40c4-31c3-a739-88e03152a67a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0cb0d156-0906-405d-9cea-d599952bae65.crl X509v3 Authority Key Identifier: keyid:61:75:AD:68:36:B0:9C:A3:C5:D3:D2:C7:09:97:B5:B6:3A:1E:AC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65.cer sbgp-ipAddrBlock: critical IPv6: 2605:ed80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:e9:67:a7:eb:ba:46:22:a7:da:9e:78:cf:05:38:e3:ee:1e: ec:ff:56:82:be:28:83:2a:79:5b:fd:5a:3c:f2:ad:39:77:3c: 3f:79:c0:9e:54:96:40:89:e7:4e:43:2f:9d:09:2f:58:9d:83: e1:77:52:b8:00:21:e8:08:88:03:3d:28:b8:01:d8:a7:6f:78: 17:3a:fa:5b:a0:84:5c:50:60:73:d4:49:86:c5:c0:8d:1c:ea: eb:ef:0a:80:64:9f:d2:e4:c8:19:b4:8d:47:f3:17:2f:de:d9: 82:2a:24:8c:e8:2a:52:4e:b9:36:ea:83:10:57:2e:8b:65:4c: fa:15:e9:23:f3:5c:d9:a5:21:d6:47:b7:7b:d1:85:b8:ec:42: 6c:24:4e:d1:41:a8:8e:37:99:38:16:38:6b:79:38:f9:05:c8: c3:f0:2b:41:90:c5:c5:d9:09:4b:8d:f9:d1:d5:a3:90:1e:77: 32:4d:d7:b9:45:f2:69:e5:9a:0d:d2:cc:51:b1:cf:15:f0:e6: 13:83:26:dc:ef:16:cf:82:66:9c:51:9e:7c:4a:01:c5:2d:5d: 4c:fd:ef:1b:24:30:8d:2e:7f:8d:4b:08:f8:80:7b:16:bd:45: da:fd:bc:d1:63:bf:01:cb:e2:65:52:4e:36:28:ad:ac:18:ef: 07:97:98:0a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiTQLKf7YorInuCxxEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGNiMGQxNTYtMDkwNi00MDVkLTljZWEtZDU5OTk1MmJh ZTY1MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk ZWJjMjY2MjUtMGJjZi00NTExLWI3NjgtNDQ1MzVkNWZmMWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuevQeuHSZDOLje3k4IZwMEU/eyRp2GQJ7B2F xcnCrLh36qwpfes03chHIJMO5JwnzUz9VTQU7kxj/0NW6/KTEbeD1ZnRAqF2SKpe ZTfKpxBFTtubOEgzu3atRaJsI8WJKOLVcHovMIL8zkWis1POexHNtARKfnm1ClTL i+J46gWoJ0di2dztE7h4unuGZiW81GgmSov3z7MyDisSVXsPHZJh/BVk6R0/y4Kh YpEH3oGyb5uEBvVaElrGdFEvCUKAVI+tw/T2yAl+67XwN9RYgY8DcQzbhAn3P6cM Mu95TueV7qVSDL0loeqgrqFoX7nEuQkXxljcz/j/PYzVR2yTnQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPm1xtejhVgVQsctUi7VZyWwNeeDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wY2Iw ZDE1Ni0wOTA2LTQwNWQtOWNlYS1kNTk5OTUyYmFlNjUvMGRhMTk3MzUtNDBjNC0z MWMzLWE3MzktODhlMDMxNTJhNjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGNiMGQxNTYtMDkwNi00MDVkLTlj ZWEtZDU5OTk1MmJhZTY1LzBjYjBkMTU2LTA5MDYtNDA1ZC05Y2VhLWQ1OTk5NTJi YWU2NS5jcmwwHwYDVR0jBBgwFoAUYXWtaDawnKPF09LHCZe1tjoerLIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wY2IwZDE1Ni0wOTA2LTQwNWQtOWNlYS1kNTk5 OTUyYmFlNjUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXtgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAa6Wen67pGIqfannjPBTjj7h7s/1aCviiDKnlb/Vo88q05dzw/ecCe VJZAiedOQy+dCS9YnYPhd1K4ACHoCIgDPSi4Adinb3gXOvpboIRcUGBz1EmGxcCN HOrr7wqAZJ/S5MgZtI1H8xcv3tmCKiSM6CpSTrk26oMQVy6LZUz6Fekj81zZpSHW R7d70YW47EJsJE7RQaiON5k4FjhreTj5BcjD8CtBkMXF2QlLjfnR1aOQHncyTde5 RfJp5ZoN0sxRsc8V8OYTgybc7xbPgmacUZ58SgHFLV1M/e8bJDCNLn+NSwj4gHsW vUXa/bzRY78By+JlUk42KK2sGO8Hl5gK -----END CERTIFICATE-----Generated at Fri Mar 14 09:17:54 2025 by rpki-client