$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/1a27f483-55e2-3798-a805-046502b1533b.roa File: 1a27f483-55e2-3798-a805-046502b1533b.roa (raw, json) Hash identifier: BlKm0JcyWfED2uKGfU3NAN0wDngv3uDQeIXPP5N+hfg= Subject key identifier: 77:C3:62:81:E0:E9:62:E7:59:C9:F5:09:F0:01:09:CD:4D:5E:E6:C2 Certificate issuer: /CN=c0094aab-7ad1-4889-853f-ce946552206b Certificate serial: 010D0C9F43285848B6261EC53CFC2E4849C40F80 Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/1a27f483-55e2-3798-a805-046502b1533b.roa Signing time: Thu 30 Jan 2025 02:00:40 +0000 ROA not before: Thu 30 Jan 2025 02:00:40 +0000 ROA not after: Wed 30 Apr 2025 01:00:40 +0000 asID: 198949 IP address blocks: 2001:420::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:26:1e:c5:3c:fc:2e:48:49:c4:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b Validity Not Before: Jan 30 02:00:40 2025 GMT Not After : Apr 30 01:00:40 2025 GMT Subject: CN=d370f71e-c0e3-440a-a9d0-57e4f9fa48c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:62:b5:cc:b6:88:9b:b9:67:96:e1:0d:aa:27: 5d:58:9e:b2:ac:56:80:67:fb:89:eb:8e:87:98:4d: 12:e4:0e:31:fa:fb:e5:d9:fe:7d:57:65:9a:b2:fd: c6:a0:ed:d9:ac:79:cd:cf:7b:a0:94:9e:fb:0c:65: b4:42:a3:be:a9:93:18:d5:36:81:e7:13:f6:e1:72: 4a:e6:35:23:2e:8d:55:ee:25:47:c0:a3:1f:d6:64: 96:fd:8c:8a:f3:6c:cc:ac:dd:4b:ea:a3:81:9e:6f: c1:40:66:e1:4c:f7:eb:06:db:bb:6c:2e:96:17:f4: 7b:07:9e:10:9f:26:3a:17:38:b4:cf:d9:4c:b9:f7: 87:5f:01:33:ba:5b:20:9f:58:9c:87:d9:36:1b:1d: 2d:f0:82:4e:43:0b:05:3d:b0:b7:a5:e8:2f:f8:26: e2:38:dc:2b:97:38:3c:7e:82:fd:fb:0b:6f:56:4e: 68:74:fa:ee:46:ec:c3:0b:ec:10:15:7a:24:bc:a4: d8:a5:0b:a2:14:33:06:52:23:f3:08:58:11:a7:a5: 3c:20:43:45:16:04:1f:49:72:31:47:5f:35:18:66: 45:dc:71:6e:c2:98:2a:46:35:7a:4f:46:59:44:c2: c4:e1:61:e3:db:f7:ec:99:d8:2c:72:8d:e4:84:16: 09:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C3:62:81:E0:E9:62:E7:59:C9:F5:09:F0:01:09:CD:4D:5E:E6:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/1a27f483-55e2-3798-a805-046502b1533b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl X509v3 Authority Key Identifier: keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer sbgp-ipAddrBlock: critical IPv6: 2001:420::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:af:28:be:b6:a0:c6:8a:6d:67:75:e1:14:f2:68:50:56:2a: 33:4c:d3:c0:58:49:dc:e4:96:87:20:14:1e:2e:7b:98:7c:2b: 08:55:6d:38:54:76:c2:69:fb:01:cc:f4:20:27:fd:1f:8d:b8: e7:30:af:f9:c3:4a:22:79:75:b8:fc:52:b5:eb:a3:a5:6b:8d: 9c:96:46:09:ec:f8:27:b7:80:19:61:41:d5:e7:0d:2b:bd:2f: d7:57:e1:5a:8d:eb:fe:7f:a0:12:2e:ed:54:3f:f5:bb:14:0c: ef:ee:d6:27:b4:5c:28:4c:18:cf:22:35:84:7a:a2:d2:c8:8d: 23:1e:96:5e:32:a1:b4:b8:47:98:5c:34:79:a6:c6:cc:b8:35: 1e:cc:12:06:ac:24:2e:f2:90:8d:38:0f:d6:3f:06:ed:f4:c4: 7c:21:bf:7e:47:c0:d2:2c:ab:33:b5:86:a4:3b:63:64:5d:4a: 3b:18:51:eb:b4:25:07:9d:1f:f0:9a:48:69:03:43:7e:8a:2a: 25:02:b3:8d:94:82:d0:28:d9:42:ad:fa:9c:b7:9b:ea:45:44: a8:01:df:30:ad:62:07:52:22:d2:61:59:54:7f:51:b7:b7:aa: d8:47:6f:4d:5d:4a:34:3b:fb:c5:0e:73:3f:b1:e9:89:4a:b2: 61:db:41:51 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi2Jh7FPPwuSEnED4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAwOTRhYWItN2FkMS00ODg5LTg1M2YtY2U5NDY1NTIy MDZiMB4XDTI1MDEzMDAyMDA0MFoXDTI1MDQzMDAxMDA0MFowLzEtMCsGA1UEAxMk ZDM3MGY3MWUtYzBlMy00NDBhLWE5ZDAtNTdlNGY5ZmE0OGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmK1zLaIm7lnluENqiddWJ6yrFaAZ/uJ646H mE0S5A4x+vvl2f59V2Wasv3GoO3ZrHnNz3uglJ77DGW0QqO+qZMY1TaB5xP24XJK 5jUjLo1V7iVHwKMf1mSW/YyK82zMrN1L6qOBnm/BQGbhTPfrBtu7bC6WF/R7B54Q nyY6Fzi0z9lMufeHXwEzulsgn1ich9k2Gx0t8IJOQwsFPbC3pegv+CbiONwrlzg8 foL9+wtvVk5odPruRuzDC+wQFXokvKTYpQuiFDMGUiPzCFgRp6U8IENFFgQfSXIx R181GGZF3HFuwpgqRjV6T0ZZRMLE4WHj2/fsmdgsco3khBYJqwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHfDYoHg6WLnWcn1CfABCc1NXubCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5 NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0NjU1MjIwNmIvMWEyN2Y0ODMtNTVlMi0z Nzk4LWE4MDUtMDQ2NTAyYjE1MzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzAwOTRhYWItN2FkMS00ODg5LTg1 M2YtY2U5NDY1NTIyMDZiL2MwMDk0YWFiLTdhZDEtNDg4OS04NTNmLWNlOTQ2NTUy MjA2Yi5jcmwwHwYDVR0jBBgwFoAUj3vgUXfanU4hkDXXgc3toQDHub4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0 NjU1MjIwNmIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEEIDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCAryi+tqDGim1ndeEU8mhQViozTNPAWEnc5JaHIBQeLnuYfCsIVW04 VHbCafsBzPQgJ/0fjbjnMK/5w0oieXW4/FK166Ola42clkYJ7Pgnt4AZYUHV5w0r vS/XV+Fajev+f6ASLu1UP/W7FAzv7tYntFwoTBjPIjWEeqLSyI0jHpZeMqG0uEeY XDR5psbMuDUezBIGrCQu8pCNOA/WPwbt9MR8Ib9+R8DSLKsztYakO2NkXUo7GFHr tCUHnR/wmkhpA0N+iiolArONlILQKNlCrfqct5vqRUSoAd8wrWIHUiLSYVlUf1G3 t6rYR29NXUo0O/vFDnM/semJSrJh20FR -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:57 2025 by rpki-client