$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a42cd5dc-c9fb-3065-bfd3-17ce64eb897d.roa File: a42cd5dc-c9fb-3065-bfd3-17ce64eb897d.roa (raw, json) Hash identifier: nKSsRz7aO3O2eWhX21Wr4oERXl6y+XvOr3hg/4j758Y= Subject key identifier: BF:2D:67:5B:1D:25:2D:AE:A0:B8:49:E1:53:09:6D:87:80:0B:B7:24 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F43285848A1361BE1F86F73D592F4AFE0 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a42cd5dc-c9fb-3065-bfd3-17ce64eb897d.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 17378 IP address blocks: 2001:19b8::/32 maxlen: 48 2001:4970::/32 maxlen: 48 2600:2c00::/30 maxlen: 48 2604:7e00::/32 maxlen: 48 2604:7f80::/32 maxlen: 48 2606:a700::/32 maxlen: 48 2607:f1d0::/32 maxlen: 48 2607:f3f8::/32 maxlen: 48 2607:fc38::/32 maxlen: 48 2607:fdb8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:1b:e1:f8:6f:73:d5:92:f4:af:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=1a2d1a41-2eb1-4caa-af88-e2be283de640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6b:a0:62:27:93:03:e6:44:1e:01:76:4b:db: 0a:3c:e7:17:4d:cb:87:c1:15:bc:f0:cc:af:43:41: 8f:ad:fb:f2:3c:22:cb:63:ab:3f:dd:67:fb:69:50: 5f:8b:39:cb:e8:d9:b7:e8:fa:e6:f6:a6:61:fd:83: d5:3c:fe:2c:68:1c:1a:ed:39:53:e6:b4:dd:5b:33: ad:77:c5:71:79:b1:f4:bd:b5:c3:04:be:c3:77:92: b4:e5:c9:5d:c5:12:e7:b5:3a:a4:f4:c1:b6:f4:81: ab:cd:b5:4b:3f:fd:e8:ef:90:a4:f2:1c:4b:65:d9: f8:4e:77:61:b5:30:ef:20:29:20:e8:98:70:da:98: 2a:fe:f3:d5:55:57:20:38:90:35:42:71:f4:d1:e0: 83:ea:e6:03:f4:3d:3b:71:6c:49:19:3e:8e:31:22: 00:2c:ab:84:46:05:81:2c:ef:fb:cc:c2:79:94:4e: bb:bf:9d:8f:de:31:46:5e:53:31:18:4c:67:fe:ab: 8e:31:01:52:7f:b1:0e:41:c3:7d:24:0e:1b:63:6a: 43:bd:ff:42:04:2b:f0:21:d0:10:46:81:ac:34:26: ea:81:9b:af:07:96:e8:46:b7:4e:06:7a:9a:0a:ed: a9:76:93:a1:fb:31:cf:34:d4:e6:cd:64:54:ca:93: f1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:2D:67:5B:1D:25:2D:AE:A0:B8:49:E1:53:09:6D:87:80:0B:B7:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a42cd5dc-c9fb-3065-bfd3-17ce64eb897d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b8::/32 2001:4970::/32 2600:2c00::/30 2604:7e00::/32 2604:7f80::/32 2606:a700::/32 2607:f1d0::/32 2607:f3f8::/32 2607:fc38::/32 2607:fdb8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:df:06:9c:1b:e6:ff:26:41:fc:bd:28:27:93:6a:da:64:10: 59:97:93:19:26:df:d7:b9:fd:b9:58:fb:16:dd:6b:19:e9:e6: 9b:f1:34:5b:c5:a8:c4:3a:51:48:fe:68:e2:47:31:b8:1d:7b: 1d:86:a7:c6:a7:15:bf:01:ab:5c:65:b8:a5:d3:0f:ad:b2:4f: 39:6a:7a:8b:d9:06:f9:51:0c:ad:1e:7c:1c:d0:91:52:9c:2b: 27:f3:f9:33:59:5b:d7:9c:84:08:ad:f7:8c:81:09:d6:c0:f1: 81:1e:2f:e4:72:4e:35:1e:72:7d:b9:f3:25:fd:d2:11:9b:ac: 62:08:25:f7:42:d4:f7:fa:c6:a4:ec:d5:23:23:63:7f:50:8b: 85:92:d6:92:ca:a5:55:24:15:36:44:f6:e1:1e:9c:20:4b:9f: a9:71:cb:96:ec:c3:c4:56:29:ca:12:e8:89:9b:a2:41:f6:04: 79:45:da:46:57:b5:9b:da:63:16:7c:22:2f:fe:f9:79:05:99: 4f:86:08:c0:01:78:54:65:72:72:7c:4e:93:14:e0:ec:83:30: 8e:28:df:50:f1:7d:17:95:ba:18:c3:b8:2c:c6:38:2c:65:f6: 29:c5:9a:eb:4b:48:30:1d:ca:08:0f:27:26:79:f1:1b:91:57: a9:84:2b:f8 -----BEGIN CERTIFICATE----- MIIGgzCCBWugAwIBAgIUAQ0Mn0MoWEihNhvh+G9z1ZL0r+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk MWEyZDFhNDEtMmViMS00Y2FhLWFmODgtZTJiZTI4M2RlNjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmugYieTA+ZEHgF2S9sKPOcXTcuHwRW88Myv Q0GPrfvyPCLLY6s/3Wf7aVBfiznL6Nm36Prm9qZh/YPVPP4saBwa7TlT5rTdWzOt d8VxebH0vbXDBL7Dd5K05cldxRLntTqk9MG29IGrzbVLP/3o75Ck8hxLZdn4Tndh tTDvICkg6Jhw2pgq/vPVVVcgOJA1QnH00eCD6uYD9D07cWxJGT6OMSIALKuERgWB LO/7zMJ5lE67v52P3jFGXlMxGExn/quOMQFSf7EOQcN9JA4bY2pDvf9CBCvwIdAQ RoGsNCbqgZuvB5boRrdOBnqaCu2pdpOh+zHPNNTmzWRUypPxXwIDAQABo4IDlTCC A5EwHQYDVR0OBBYEFL8tZ1sdJS2uoLhJ4VMJbYeAC7ckMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYTQyY2Q1ZGMtYzlmYi0z MDY1LWJmZDMtMTdjZTY0ZWI4OTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAAjBGAwUAIAEZuAMF ACABSXADBQImACwAAwUAJgR+AAMFACYEf4ADBQAmBqcAAwUAJgfx0AMFACYH8/gD BQAmB/w4AwUAJgf9uDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAY3wacG+b/JkH8vSgnk2raZBBZl5MZJt/X uf25WPsW3WsZ6eab8TRbxajEOlFI/mjiRzG4HXsdhqfGpxW/AatcZbil0w+tsk85 anqL2Qb5UQytHnwc0JFSnCsn8/kzWVvXnIQIrfeMgQnWwPGBHi/kck41HnJ9ufMl /dIRm6xiCCX3QtT3+sak7NUjI2N/UIuFktaSyqVVJBU2RPbhHpwgS5+pccuW7MPE VinKEuiJm6JB9gR5RdpGV7Wb2mMWfCIv/vl5BZlPhgjAAXhUZXJyfE6TFODsgzCO KN9Q8X0XlboYw7gsxjgsZfYpxZrrS0gwHcoIDycmefEbkVephCv4 -----END CERTIFICATE-----Generated at Sat Apr 5 22:30:39 2025 by rpki-client