$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/12feb772-5112-4009-90bd-0b1f4d0ef6af/bca3baf1-7449-3055-af52-925020b90825.roa File: bca3baf1-7449-3055-af52-925020b90825.roa (raw, json) Hash identifier: jK9fYhINOP3qva0MBBC1oaZe28VmF1Pi4eovQ6Htrh0= Subject key identifier: E1:63:54:2E:F0:B3:B4:78:10:01:20:7B:8C:90:E9:32:EB:1B:B0:EB Certificate issuer: /CN=12feb772-5112-4009-90bd-0b1f4d0ef6af Certificate serial: 010D0C9F4328584855D59DCEA6CCBD5311F59380 Authority key identifier: 36:54:09:1F:C8:17:3C:44:C9:CC:C7:72:B9:C8:16:CA:B4:DE:4E:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/12feb772-5112-4009-90bd-0b1f4d0ef6af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/12feb772-5112-4009-90bd-0b1f4d0ef6af/bca3baf1-7449-3055-af52-925020b90825.roa Signing time: Thu 26 Dec 2024 14:00:52 +0000 ROA not before: Thu 26 Dec 2024 14:00:52 +0000 ROA not after: Wed 26 Mar 2025 13:00:52 +0000 asID: 10497 IP address blocks: 2620:1ff::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/12feb772-5112-4009-90bd-0b1f4d0ef6af/12feb772-5112-4009-90bd-0b1f4d0ef6af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/12feb772-5112-4009-90bd-0b1f4d0ef6af/12feb772-5112-4009-90bd-0b1f4d0ef6af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/12feb772-5112-4009-90bd-0b1f4d0ef6af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:55:d5:9d:ce:a6:cc:bd:53:11:f5:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12feb772-5112-4009-90bd-0b1f4d0ef6af Validity Not Before: Dec 26 14:00:52 2024 GMT Not After : Mar 26 13:00:52 2025 GMT Subject: CN=b408a8a9-93e3-462f-b032-947aca802c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5d:45:da:14:98:68:1f:76:c0:8b:9f:72:1f: 4a:54:66:e5:f8:83:17:80:a5:ad:b2:89:9f:3c:93: d5:47:34:1e:db:aa:ac:d2:ae:5a:02:e9:91:ec:34: 62:35:c7:af:8a:f2:ff:e9:55:47:93:8f:91:7b:04: 2a:70:db:9e:3e:b9:b2:9a:1b:9e:f7:1b:d5:47:01: 3b:7c:b5:dc:de:fd:dc:a5:09:cb:2a:1e:80:c9:f8: 9d:08:6b:19:0a:ee:0e:49:73:bc:4b:f9:5f:b8:fe: b3:e8:18:76:1c:25:26:27:78:6c:bf:b6:18:be:74: 84:ad:89:25:d0:78:2e:2a:33:45:78:96:31:16:b8: d5:d6:1c:54:6e:70:30:80:e6:49:a4:fb:40:06:d8: 67:b9:3b:d1:1d:8a:e9:0f:74:f0:fb:bf:b6:3a:c9: 29:fe:fd:43:33:ac:ba:e2:9f:f3:76:6e:7d:1a:8d: 60:e0:15:7f:c0:9c:92:bd:51:fa:91:22:97:28:33: cb:52:93:ab:90:d1:7f:82:fe:fc:c2:0b:96:c7:70: 96:4f:f2:b3:dd:83:c0:9b:2d:f6:43:82:11:b8:76: f0:13:25:19:89:b8:a9:81:f0:29:85:fe:33:f1:20: d1:0d:86:e0:fd:43:1c:7d:6e:3f:6b:12:d5:9c:ca: 25:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:63:54:2E:F0:B3:B4:78:10:01:20:7B:8C:90:E9:32:EB:1B:B0:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/12feb772-5112-4009-90bd-0b1f4d0ef6af/bca3baf1-7449-3055-af52-925020b90825.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/12feb772-5112-4009-90bd-0b1f4d0ef6af/12feb772-5112-4009-90bd-0b1f4d0ef6af.crl X509v3 Authority Key Identifier: keyid:36:54:09:1F:C8:17:3C:44:C9:CC:C7:72:B9:C8:16:CA:B4:DE:4E:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/12feb772-5112-4009-90bd-0b1f4d0ef6af.cer sbgp-ipAddrBlock: critical IPv6: 2620:1ff::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:cd:2b:2a:2a:3d:aa:40:ad:54:28:1d:a2:bf:44:09:6f:1e: c0:41:74:f5:63:3b:cf:55:56:be:50:55:28:dd:ad:05:63:f9: f3:63:7a:bb:86:23:22:c6:af:c6:de:ce:4b:bf:03:04:3e:20: 26:4f:a7:f6:5b:d3:41:df:8f:3d:10:3c:df:48:62:12:c0:35: 38:1e:c7:68:63:cc:9e:b9:d1:fa:46:46:a1:39:63:37:71:be: cc:1f:e8:6e:0c:74:8a:4e:13:06:81:67:75:e6:a0:32:85:04: 53:27:d7:33:33:38:2f:20:90:11:63:da:e6:1c:dc:79:55:8c: 93:77:ae:09:8a:fe:a5:52:5e:4c:2e:3b:79:5e:18:8f:41:01: 21:03:9b:a1:d1:61:db:fd:bd:b0:3a:99:7f:68:49:51:58:f5: 16:26:77:92:c6:7f:e3:46:f1:41:54:da:91:9a:a7:01:df:54: 12:62:2e:d4:17:20:9f:57:48:0e:48:9f:86:d7:ba:f9:94:e1: db:c1:68:f9:70:0a:fe:b2:0c:dc:b0:80:64:ea:2f:e2:de:98: 6e:57:22:17:60:83:db:6b:19:5f:6b:de:50:fc:0e:a7:4b:cc: 12:a0:58:08:54:bd:f5:68:31:89:9d:5c:64:51:9a:73:6b:3e: 62:76:87:c2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEhV1Z3Opsy9UxH1k4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTJmZWI3NzItNTExMi00MDA5LTkwYmQtMGIxZjRkMGVm NmFmMB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk YjQwOGE4YTktOTNlMy00NjJmLWIwMzItOTQ3YWNhODAyYzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV1F2hSYaB92wIufch9KVGbl+IMXgKWtsomf PJPVRzQe26qs0q5aAumR7DRiNcevivL/6VVHk4+RewQqcNuePrmymhue9xvVRwE7 fLXc3v3cpQnLKh6AyfidCGsZCu4OSXO8S/lfuP6z6Bh2HCUmJ3hsv7YYvnSErYkl 0HguKjNFeJYxFrjV1hxUbnAwgOZJpPtABthnuTvRHYrpD3Tw+7+2Oskp/v1DM6y6 4p/zdm59Go1g4BV/wJySvVH6kSKXKDPLUpOrkNF/gv78wguWx3CWT/Kz3YPAmy32 Q4IRuHbwEyUZibipgfAphf4z8SDRDYbg/UMcfW4/axLVnMol9wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOFjVC7ws7R4EAEge4yQ6TLrG7DrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xMmZl Yjc3Mi01MTEyLTQwMDktOTBiZC0wYjFmNGQwZWY2YWYvYmNhM2JhZjEtNzQ0OS0z MDU1LWFmNTItOTI1MDIwYjkwODI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTJmZWI3NzItNTExMi00MDA5LTkw YmQtMGIxZjRkMGVmNmFmLzEyZmViNzcyLTUxMTItNDAwOS05MGJkLTBiMWY0ZDBl ZjZhZi5jcmwwHwYDVR0jBBgwFoAUNlQJH8gXPETJzMdyucgWyrTeTsEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xMmZlYjc3Mi01MTEyLTQwMDktOTBiZC0wYjFm NGQwZWY2YWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJiAB/wAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEASs0rKio9qkCtVCgdor9ECW8ewEF09WM7z1VWvlBVKN2tBWP582N6 u4YjIsavxt7OS78DBD4gJk+n9lvTQd+PPRA830hiEsA1OB7HaGPMnrnR+kZGoTlj N3G+zB/obgx0ik4TBoFndeagMoUEUyfXMzM4LyCQEWPa5hzceVWMk3euCYr+pVJe TC47eV4Yj0EBIQObodFh2/29sDqZf2hJUVj1FiZ3ksZ/40bxQVTakZqnAd9UEmIu 1Bcgn1dIDkifhte6+ZTh28Fo+XAK/rIM3LCAZOov4t6YblciF2CD22sZX2veUPwO p0vMEqBYCFS99WgxiZ1cZFGac2s+YnaHwg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:53 2025 by rpki-client