$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/11869df8-11c1-3bf1-903f-f89a2a459e6a.roa File: 11869df8-11c1-3bf1-903f-f89a2a459e6a.roa (raw, json) Hash identifier: lnVoRx1Lu7s7oelzEnQ+oZEfPRTKiYDyEFfYZfWdm+0= Subject key identifier: A3:26:CB:24:FA:A3:28:5B:7B:09:ED:D1:32:95:0C:EC:8E:1C:20:35 Certificate issuer: /CN=378928e8-c134-40aa-9858-3838053cbbe9 Certificate serial: 010D0C9F432858486C2B1423C998478D36D07000 Authority key identifier: 05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/11869df8-11c1-3bf1-903f-f89a2a459e6a.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 12261 IP address blocks: 2606:900::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:14:23:c9:98:47:8d:36:d0:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=378928e8-c134-40aa-9858-3838053cbbe9 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=9caa1275-2eeb-486d-ab5e-da648c450f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f4:64:fa:c7:3d:b1:ff:ba:d6:a7:16:a2:e6: 72:db:0a:d7:a6:9c:e7:ff:e9:a4:60:14:24:ee:c1: 6b:08:9f:eb:e8:05:64:b1:5c:7b:4c:d4:38:c9:f4: 21:44:58:46:2b:cc:dd:a5:24:cb:04:c1:02:01:d1: 6d:7b:33:38:3a:da:12:1c:3e:a2:b6:56:86:d2:72: 08:f7:bc:46:b3:cc:72:a9:34:f1:c3:3b:c2:d7:24: ad:2d:06:c4:0f:1e:5e:43:9c:73:a3:49:d8:ca:66: 98:6e:fb:d4:43:90:f8:71:11:31:89:66:66:a8:44: e4:93:00:ab:30:5b:21:8b:33:5d:33:29:34:5f:9f: 6c:8a:9f:22:96:f6:f9:42:97:e4:f4:d8:8b:0d:c5: 0b:86:cc:21:f9:8c:dd:ef:3e:93:ef:55:4c:f8:26: df:87:65:fb:41:a1:fd:fe:75:c9:a2:73:7c:6c:ca: 97:d1:68:e6:8f:d8:9c:6e:68:1c:22:89:3d:d1:7a: 5f:31:a0:43:20:12:30:7e:d7:44:33:37:b5:b9:bc: 09:61:09:58:b4:fd:ab:23:57:f1:1e:4e:ef:81:d9: 19:9f:5a:79:7d:42:7f:d5:c2:c0:fb:a4:02:26:20: bd:2d:72:ae:f1:e4:84:87:f0:53:04:32:09:ed:1f: 0e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:26:CB:24:FA:A3:28:5B:7B:09:ED:D1:32:95:0C:EC:8E:1C:20:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/11869df8-11c1-3bf1-903f-f89a2a459e6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl X509v3 Authority Key Identifier: keyid:05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer sbgp-ipAddrBlock: critical IPv6: 2606:900::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:84:73:07:c6:d2:14:02:0a:ee:de:62:42:5d:ac:c9:2b:95: e1:79:f3:e6:bf:d0:6c:ef:06:20:67:a5:a5:fd:22:ba:83:e8: f1:a9:ac:1d:46:ab:9d:4b:88:a0:7a:27:1e:91:4a:3a:58:81: 20:9c:3e:b7:55:95:93:9d:2e:1c:f8:a3:45:42:43:48:0c:23: e5:5a:66:49:f9:37:af:c7:f5:1d:6c:56:ad:19:8c:a6:d5:96: 4e:4a:dd:2b:23:33:64:ca:03:37:32:7d:96:fb:90:3a:52:b8: ec:dd:a0:3a:7f:88:44:17:74:d9:5d:9a:e1:0e:1f:7d:aa:2b: 0b:11:94:04:27:11:52:e0:1b:c9:d0:f1:41:8c:12:95:30:d5: b6:bc:38:2b:d8:64:c1:7e:44:27:66:44:2d:0a:46:62:f5:31: ea:d1:17:30:c7:9e:71:b7:42:bd:42:06:3e:4f:11:02:94:13: 40:81:f1:c3:f5:84:fd:1d:6d:57:35:5f:59:cf:ee:cb:cd:0e: b9:e4:e5:a8:2f:cf:45:3e:65:52:14:4f:b7:be:2c:02:f8:d5: 1c:3e:3c:ba:c6:3c:52:31:8c:43:12:61:f0:c3:cd:18:4e:ea: 01:b6:7e:0c:d0:0b:d3:fe:cd:a6:8c:96:9a:09:c6:ef:19:59: 9e:c4:54:bf -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhsKxQjyZhHjTbQcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc4OTI4ZTgtYzEzNC00MGFhLTk4NTgtMzgzODA1M2Ni YmU5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk OWNhYTEyNzUtMmVlYi00ODZkLWFiNWUtZGE2NDhjNDUwZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivRk+sc9sf+61qcWouZy2wrXppzn/+mkYBQk 7sFrCJ/r6AVksVx7TNQ4yfQhRFhGK8zdpSTLBMECAdFtezM4OtoSHD6itlaG0nII 97xGs8xyqTTxwzvC1yStLQbEDx5eQ5xzo0nYymaYbvvUQ5D4cRExiWZmqETkkwCr MFshizNdMyk0X59sip8ilvb5Qpfk9NiLDcULhswh+Yzd7z6T71VM+Cbfh2X7QaH9 /nXJonN8bMqX0Wjmj9icbmgcIok90XpfMaBDIBIwftdEMze1ubwJYQlYtP2rI1fx Hk7vgdkZn1p5fUJ/1cLA+6QCJiC9LXKu8eSEh/BTBDIJ7R8OrwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKMmyyT6oyhbewnt0TKVDOyOHCA1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNzg5 MjhlOC1jMTM0LTQwYWEtOTg1OC0zODM4MDUzY2JiZTkvMTE4NjlkZjgtMTFjMS0z YmYxLTkwM2YtZjg5YTJhNDU5ZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzc4OTI4ZTgtYzEzNC00MGFhLTk4 NTgtMzgzODA1M2NiYmU5LzM3ODkyOGU4LWMxMzQtNDBhYS05ODU4LTM4MzgwNTNj YmJlOS5jcmwwHwYDVR0jBBgwFoAUBYTnTjebSl6FC+Qck2G4ZCYVGJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNzg5MjhlOC1jMTM0LTQwYWEtOTg1OC0zODM4 MDUzY2JiZTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYJADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAuhHMHxtIUAgru3mJCXazJK5XhefPmv9Bs7wYgZ6Wl/SK6g+jxqawd RqudS4igeicekUo6WIEgnD63VZWTnS4c+KNFQkNIDCPlWmZJ+Tevx/UdbFatGYym 1ZZOSt0rIzNkygM3Mn2W+5A6Urjs3aA6f4hEF3TZXZrhDh99qisLEZQEJxFS4BvJ 0PFBjBKVMNW2vDgr2GTBfkQnZkQtCkZi9THq0Rcwx55xt0K9QgY+TxEClBNAgfHD 9YT9HW1XNV9Zz+7LzQ655OWoL89FPmVSFE+3viwC+NUcPjy6xjxSMYxDEmHww80Y TuoBtn4M0AvT/s2mjJaaCcbvGVmexFS/ -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:59 2025 by rpki-client