$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/3b3af7e2-11c3-3e13-92cd-19c2d291b483.roa File: 3b3af7e2-11c3-3e13-92cd-19c2d291b483.roa (raw, json) Hash identifier: LoKlbJ6+BvBMjkc/9eC2F6kQ+9l9FffZUtf6tKc37RY= Subject key identifier: D6:FD:4C:F4:50:29:09:AE:AF:50:17:F8:4E:FF:ED:68:10:01:BC:55 Certificate issuer: /CN=2e3e6646-7c99-49c0-9cb0-54b8e45788b8 Certificate serial: 010D0C9F4328584863CB0EC196FA2911499DAC00 Authority key identifier: 0C:C6:8F:60:53:31:AF:29:57:A9:ED:F1:D6:09:06:5D:47:66:84:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/3b3af7e2-11c3-3e13-92cd-19c2d291b483.roa Signing time: Tue 31 Dec 2024 14:00:53 +0000 ROA not before: Tue 31 Dec 2024 14:00:53 +0000 ROA not after: Mon 31 Mar 2025 13:00:53 +0000 asID: 63178 IP address blocks: 2607:6840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:63:cb:0e:c1:96:fa:29:11:49:9d:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e3e6646-7c99-49c0-9cb0-54b8e45788b8 Validity Not Before: Dec 31 14:00:53 2024 GMT Not After : Mar 31 13:00:53 2025 GMT Subject: CN=b90948a8-30e1-4ac6-a482-30778500f5b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:19:24:51:68:53:02:fa:0a:fb:6e:1a:a4:42: 17:34:64:cf:a3:04:4d:3b:fd:66:77:8d:33:c8:84: 3b:08:c8:1a:4c:63:c5:d4:83:70:85:f1:fa:af:dc: 33:11:7c:fd:93:85:d3:a6:ac:b7:29:68:77:aa:8c: 25:f5:f2:b0:c0:2a:56:16:78:f3:00:29:79:31:c1: f2:00:41:37:1b:bd:0f:de:99:d8:97:17:e9:7f:ee: 5b:23:6a:fd:eb:12:9f:47:f4:06:95:50:c3:50:7e: 8b:25:af:36:ef:29:99:f2:be:6f:ed:af:e8:10:ce: 73:9e:7a:c3:2f:bb:e7:e2:82:d0:5d:b4:4c:87:ac: 3d:81:7d:30:58:03:8d:52:35:00:74:4c:2e:b2:a5: 95:46:cc:0d:67:34:2a:b5:16:39:c5:e9:24:d2:03: dd:d3:df:d1:2a:c0:64:ab:7e:1b:4f:56:25:4f:58: c0:70:4b:4d:0a:dd:b9:9e:4b:db:49:39:4f:de:c1: fa:a7:1e:72:83:00:8a:d6:01:34:63:8c:f8:a5:9e: a4:35:f5:d2:b4:dd:70:13:49:33:0a:e1:98:cc:c8: c5:1a:ae:44:b5:43:42:52:93:d3:45:3e:e4:e0:98: 7d:a7:ad:fb:0f:46:36:63:33:0c:3f:f2:0e:2b:32: 63:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FD:4C:F4:50:29:09:AE:AF:50:17:F8:4E:FF:ED:68:10:01:BC:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/3b3af7e2-11c3-3e13-92cd-19c2d291b483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.crl X509v3 Authority Key Identifier: keyid:0C:C6:8F:60:53:31:AF:29:57:A9:ED:F1:D6:09:06:5D:47:66:84:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.cer sbgp-ipAddrBlock: critical IPv6: 2607:6840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:cb:47:1b:f4:0f:ca:69:3d:2d:72:41:59:d1:9d:c2:6b:44: af:21:7f:f3:6c:37:56:0b:94:b1:af:f6:c9:08:25:c9:81:eb: 5d:bd:df:47:90:59:79:e6:6f:60:10:de:03:42:e9:f0:62:1f: 41:9c:01:27:cd:19:36:62:4f:4c:16:c9:35:9a:9e:2b:b4:ca: a3:e6:a1:17:d0:28:1a:d7:ae:85:fe:85:0b:ae:67:59:0f:c2: 73:cc:f9:87:b9:b7:91:91:15:f3:68:71:ee:4d:86:f1:f5:eb: bc:b1:66:6c:3a:29:87:c6:f1:b3:f7:57:b9:41:61:8d:56:ab: 21:7f:52:45:71:b5:ea:33:53:1b:83:be:d9:ff:33:b7:eb:ef: 92:c3:ac:1b:88:d3:92:eb:ea:27:e0:0d:bb:4d:98:41:ac:56: ea:54:d7:2d:fb:20:cc:9c:c1:2f:15:54:ec:60:e8:10:62:97: a3:da:0c:79:17:53:00:b0:dc:02:58:cc:b5:2a:3c:de:e9:96: 43:69:d3:73:99:83:89:c7:13:92:e0:d6:af:88:16:c5:5d:a2: c7:9a:04:9f:e9:02:f6:ad:64:d4:13:f4:ec:cb:54:96:ac:8a: 30:52:bb:da:52:c8:20:1c:cc:95:4a:08:b5:83:2c:2a:5f:b9: f8:2b:d8:76 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhjyw7BlvopEUmdrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUzZTY2NDYtN2M5OS00OWMwLTljYjAtNTRiOGU0NTc4 OGI4MB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk YjkwOTQ4YTgtMzBlMS00YWM2LWE0ODItMzA3Nzg1MDBmNWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhkkUWhTAvoK+24apEIXNGTPowRNO/1md40z yIQ7CMgaTGPF1INwhfH6r9wzEXz9k4XTpqy3KWh3qowl9fKwwCpWFnjzACl5McHy AEE3G70P3pnYlxfpf+5bI2r96xKfR/QGlVDDUH6LJa827ymZ8r5v7a/oEM5znnrD L7vn4oLQXbRMh6w9gX0wWAONUjUAdEwusqWVRswNZzQqtRY5xekk0gPd09/RKsBk q34bT1YlT1jAcEtNCt25nkvbSTlP3sH6px5ygwCK1gE0Y4z4pZ6kNfXStN1wE0kz CuGYzMjFGq5EtUNCUpPTRT7k4Jh9p637D0Y2YzMMP/IOKzJjIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNb9TPRQKQmur1AX+E7/7WgQAbxVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZTNl NjY0Ni03Yzk5LTQ5YzAtOWNiMC01NGI4ZTQ1Nzg4YjgvM2IzYWY3ZTItMTFjMy0z ZTEzLTkyY2QtMTljMmQyOTFiNDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmUzZTY2NDYtN2M5OS00OWMwLTlj YjAtNTRiOGU0NTc4OGI4LzJlM2U2NjQ2LTdjOTktNDljMC05Y2IwLTU0YjhlNDU3 ODhiOC5jcmwwHwYDVR0jBBgwFoAUDMaPYFMxrylXqe3x1gkGXUdmhO0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZTNlNjY0Ni03Yzk5LTQ5YzAtOWNiMC01NGI4 ZTQ1Nzg4YjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdoQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB9y0cb9A/KaT0tckFZ0Z3Ca0SvIX/zbDdWC5Sxr/bJCCXJgetdvd9H kFl55m9gEN4DQunwYh9BnAEnzRk2Yk9MFsk1mp4rtMqj5qEX0Cga166F/oULrmdZ D8JzzPmHubeRkRXzaHHuTYbx9eu8sWZsOimHxvGz91e5QWGNVqshf1JFcbXqM1Mb g77Z/zO36++Sw6wbiNOS6+on4A27TZhBrFbqVNct+yDMnMEvFVTsYOgQYpej2gx5 F1MAsNwCWMy1Kjze6ZZDadNzmYOJxxOS4NaviBbFXaLHmgSf6QL2rWTUE/Tsy1SW rIowUrvaUsggHMyVSgi1gywqX7n4K9h2 -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:04 2025 by rpki-client