$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/069cdb94-57ea-3984-bc50-ad1a2d5591b6.roa File: 069cdb94-57ea-3984-bc50-ad1a2d5591b6.roa (raw, json) Hash identifier: H3e7lB81qQRsQnhDVXWLWzg38o0YmTp0AO/VZ80/50Y= Subject key identifier: CF:4C:3E:DC:C7:B3:83:3E:09:3E:9C:80:1E:C9:4F:5D:56:42:63:B9 Certificate issuer: /CN=6459964e-cb44-4be5-88da-03fac554e95c Certificate serial: 010D0C9F43285848D0ABB6A554579A6BF138B680 Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/069cdb94-57ea-3984-bc50-ad1a2d5591b6.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 32771 IP address blocks: 2620:111:800a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:b6:a5:54:57:9a:6b:f1:38:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=690f8f94-aa78-4ea4-8c8e-8c5465f1c92c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:23:ac:57:6b:ae:52:33:09:bc:e9:b8:66:bf: e9:9b:56:07:79:c9:43:a0:00:74:71:87:90:5f:3b: 04:36:af:69:3a:0c:c1:a5:66:21:05:d0:95:db:dd: 53:5b:b5:fb:04:1f:a4:6c:26:d5:b6:85:63:a1:78: 11:bc:66:f7:4c:c3:a8:08:71:f7:4f:6c:55:b2:85: 18:c5:df:5a:27:5f:29:86:dc:02:98:3a:04:dc:54: 27:99:64:a7:f0:2d:29:a3:eb:ca:d3:26:f5:7f:03: de:63:b6:02:f1:83:ba:f9:66:79:60:7a:32:0e:44: 82:61:fc:83:0c:27:59:c3:de:e0:cf:d6:f0:85:db: ee:15:1d:a1:89:5d:7e:02:3d:4b:0e:a1:0f:a1:98: ab:bc:6e:fd:8f:2f:8d:71:ef:e4:ab:04:d8:b4:28: 14:40:d2:c7:b7:af:6a:82:13:8c:8c:be:c3:8d:e4: 10:c4:10:93:3f:fd:9a:69:b5:39:33:f5:72:39:8b: 1e:80:f7:21:f9:82:83:46:cd:4f:df:6a:8b:f5:fb: 3d:26:91:82:1f:a1:0b:bd:b6:e9:cd:5e:33:fe:d2: 68:93:b0:c0:13:99:91:ba:9f:2f:50:8f:df:4d:61: bf:95:7b:e5:a2:37:b7:fc:53:6b:3b:da:d8:82:9a: 3e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4C:3E:DC:C7:B3:83:3E:09:3E:9C:80:1E:C9:4F:5D:56:42:63:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/069cdb94-57ea-3984-bc50-ad1a2d5591b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl X509v3 Authority Key Identifier: keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer sbgp-ipAddrBlock: critical IPv6: 2620:111:800a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:15:ae:d9:b8:92:ba:3a:f4:1d:88:73:38:49:ef:01:e9:3b: bf:e8:89:ac:77:a5:50:45:5d:b9:1a:83:63:d2:36:39:ac:e3: a6:9d:9d:6c:8d:29:76:8e:88:76:ba:0f:2b:9c:e6:44:48:a3: 9b:6b:a1:98:74:2f:a1:7a:8b:de:37:9c:df:48:3b:11:97:47: db:e3:e3:44:9a:d0:76:af:fb:4f:4e:4e:12:38:5a:60:82:7c: 13:62:e2:bf:e3:c3:11:79:c9:af:f8:b5:ea:52:3a:12:f4:8c: 17:d4:a1:cc:66:94:90:ae:89:32:6c:11:69:d3:01:e0:0f:99: 5f:d0:99:b1:3c:a7:c4:8a:b2:43:c3:7b:51:0e:47:95:30:34: 33:88:50:e4:e1:16:a0:2f:26:99:99:08:a0:52:09:d6:ce:23: c8:c0:8f:58:94:22:18:62:18:1e:47:5f:99:dd:84:03:31:f5: 99:fa:ef:21:52:dd:af:84:35:99:0b:2a:db:a9:d4:b6:1b:95: bf:1f:8e:66:33:1e:59:57:79:02:bf:7f:b7:a0:53:62:c4:00: 3a:0e:eb:22:3b:e9:63:cb:2f:27:4d:10:54:b5:af:da:5d:bb: 7f:ef:9c:b2:47:ad:2c:22:75:5d:ae:52:20:87:e6:68:21:01: 08:30:af:8f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjQq7alVFeaa/E4toAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl OTVjMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk NjkwZjhmOTQtYWE3OC00ZWE0LThjOGUtOGM1NDY1ZjFjOTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iOsV2uuUjMJvOm4Zr/pm1YHeclDoAB0cYeQ XzsENq9pOgzBpWYhBdCV291TW7X7BB+kbCbVtoVjoXgRvGb3TMOoCHH3T2xVsoUY xd9aJ18phtwCmDoE3FQnmWSn8C0po+vK0yb1fwPeY7YC8YO6+WZ5YHoyDkSCYfyD DCdZw97gz9bwhdvuFR2hiV1+Aj1LDqEPoZirvG79jy+Nce/kqwTYtCgUQNLHt69q ghOMjL7DjeQQxBCTP/2aabU5M/VyOYsegPch+YKDRs1P32qL9fs9JpGCH6ELvbbp zV4z/tJok7DAE5mRup8vUI/fTWG/lXvloje3/FNrO9rYgpo+NQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM9MPtzHs4M+CT6cgB7JT11WQmO5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5 OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvMDY5Y2RiOTQtNTdlYS0z OTg0LWJjNTAtYWQxYTJkNTU5MWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4 ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0 ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh YzU1NGU5NWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABEYAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADMVrtm4kro69B2IczhJ7wHpO7/oiax3pVBFXbkag2PSNjms46ad nWyNKXaOiHa6Dyuc5kRIo5troZh0L6F6i943nN9IOxGXR9vj40Sa0Hav+09OThI4 WmCCfBNi4r/jwxF5ya/4tepSOhL0jBfUocxmlJCuiTJsEWnTAeAPmV/QmbE8p8SK skPDe1EOR5UwNDOIUOThFqAvJpmZCKBSCdbOI8jAj1iUIhhiGB5HX5ndhAMx9Zn6 7yFS3a+ENZkLKtup1LYblb8fjmYzHllXeQK/f7egU2LEADoO6yI76WPLLydNEFS1 r9pdu3/vnLJHrSwidV2uUiCH5mghAQgwr48= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:19 2025 by rpki-client