$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/3d1824af-5e0a-30b8-9547-2f81c0164b04.roa File: 3d1824af-5e0a-30b8-9547-2f81c0164b04.roa (raw, json) Hash identifier: gCOe8xkhnOH4VZGbeC9FvpOjBRzz0aUhAEZrffi9034= Subject key identifier: A8:39:14:79:EC:C8:38:39:23:46:BD:11:7D:B7:2F:39:67:CC:D5:84 Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Certificate serial: 010D0C9F43285848696069044C8B9997290F1130 Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/3d1824af-5e0a-30b8-9547-2f81c0164b04.roa Signing time: Thu 02 Jan 2025 14:00:52 +0000 ROA not before: Thu 02 Jan 2025 14:00:52 +0000 ROA not after: Wed 02 Apr 2025 13:00:52 +0000 asID: 393885 IP address blocks: 2604:4a00:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:69:60:69:04:4c:8b:99:97:29:0f:11:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Validity Not Before: Jan 2 14:00:52 2025 GMT Not After : Apr 2 13:00:52 2025 GMT Subject: CN=17cc1798-04cc-40e1-b322-2959346945e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2a:5d:02:fc:9b:f6:83:4c:65:24:fa:cb:5e: 37:4d:7a:21:ae:1d:ce:f9:c5:28:3c:e3:3e:58:bc: a9:9e:2d:78:4c:b2:06:99:ed:ff:ef:49:52:6f:c6: a2:30:a3:d5:e6:fc:03:03:bb:10:b4:34:1a:51:fd: 3c:19:6a:c4:61:43:62:35:26:0c:2c:b9:1d:c6:cb: 64:82:f0:25:7b:02:68:1e:79:bc:1d:07:48:4f:ce: 7d:70:2a:26:f5:9c:42:e4:ad:80:f4:93:43:05:bc: de:27:ae:a8:d2:48:25:e4:40:31:7c:26:f2:19:a4: 31:51:aa:f7:eb:b4:17:23:bf:02:41:91:eb:9b:6f: b7:df:a0:77:10:8e:f3:92:de:e7:8b:43:05:d0:ca: 3a:5a:18:11:97:f3:5e:f3:4a:9a:65:f6:f9:17:67: 58:be:73:bc:35:09:19:78:6f:62:b2:db:2e:5d:68: c5:d6:25:bd:57:49:f3:d9:c1:8d:89:9d:81:66:4b: f9:b2:63:f5:fe:48:df:6f:d3:40:6f:e5:e2:83:dc: ac:6a:32:2c:02:d2:d0:f8:6b:15:53:6d:50:63:ee: a2:d5:40:e3:79:5b:9c:3d:3f:c1:7b:6f:38:79:9a: a8:93:e4:ae:2f:da:fb:fd:c1:b6:75:36:72:3d:49: a0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:39:14:79:EC:C8:38:39:23:46:BD:11:7D:B7:2F:39:67:CC:D5:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/3d1824af-5e0a-30b8-9547-2f81c0164b04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl X509v3 Authority Key Identifier: keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer sbgp-ipAddrBlock: critical IPv6: 2604:4a00:c000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:1d:4e:1e:28:f1:b4:e7:eb:78:12:26:3b:16:bb:83:1a:f3: 90:1d:84:0f:59:52:e7:47:a7:75:43:0c:f4:b1:b3:73:24:2a: 6c:0c:02:c7:c6:1d:82:4e:a8:f2:46:23:1d:8b:01:fe:2e:b3: 4b:9f:25:f9:b2:79:c4:6e:71:a6:1b:f2:94:07:ae:42:a2:19: db:07:05:80:70:f2:52:b6:19:67:b1:f4:46:8c:ae:a4:b4:d2: d8:ed:c5:6e:90:7f:16:3c:87:63:da:3b:15:2e:7b:8a:2a:52: ac:c4:0e:9f:64:17:65:05:1f:ee:62:cd:cd:ef:98:be:4b:09: 73:57:0e:36:c5:63:06:c8:39:8d:98:36:0e:f4:1b:d3:c4:a5: b4:2a:87:01:3f:f8:d7:19:00:ca:4a:44:95:bf:9e:7f:be:b1: dd:26:98:e4:7d:fd:8d:c6:14:b1:08:c1:2c:68:ca:78:89:89: ef:b5:97:5a:17:b3:ac:61:5e:88:cf:f8:2b:f3:4b:4f:84:b8: 89:19:19:50:74:ef:be:f6:8f:70:7d:c2:3a:0e:12:4a:0c:3f: 00:bb:91:4f:45:b3:49:32:3c:1e:ae:3a:3e:8d:b4:69:f2:b8: 29:de:76:82:5f:08:df:ce:bb:a0:1b:b7:72:da:53:48:83:92: 76:10:3f:f4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEhpYGkETIuZlykPETAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk NjZkMB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk MTdjYzE3OTgtMDRjYy00MGUxLWIzMjItMjk1OTM0Njk0NWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSpdAvyb9oNMZST6y143TXohrh3O+cUoPOM+ WLypni14TLIGme3/70lSb8aiMKPV5vwDA7sQtDQaUf08GWrEYUNiNSYMLLkdxstk gvAlewJoHnm8HQdIT859cCom9ZxC5K2A9JNDBbzeJ66o0kgl5EAxfCbyGaQxUar3 67QXI78CQZHrm2+336B3EI7zkt7ni0MF0Mo6WhgRl/Ne80qaZfb5F2dYvnO8NQkZ eG9istsuXWjF1iW9V0nz2cGNiZ2BZkv5smP1/kjfb9NAb+Xig9ysajIsAtLQ+GsV U21QY+6i1UDjeVucPT/Be284eZqok+SuL9r7/cG2dTZyPUmg6QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKg5FHnsyDg5I0a9EX23LzlnzNWEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvM2QxODI0YWYtNWUwYS0z MGI4LTk1NDctMmY4MWMwMTY0YjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1 ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh M2UzNWQ2NmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgRKAMAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAMx1OHijxtOfreBImOxa7gxrzkB2ED1lS50endUMM9LGzcyQqbAwC x8Ydgk6o8kYjHYsB/i6zS58l+bJ5xG5xphvylAeuQqIZ2wcFgHDyUrYZZ7H0Royu pLTS2O3FbpB/FjyHY9o7FS57iipSrMQOn2QXZQUf7mLNze+YvksJc1cONsVjBsg5 jZg2DvQb08SltCqHAT/41xkAykpElb+ef76x3SaY5H39jcYUsQjBLGjKeImJ77WX WhezrGFeiM/4K/NLT4S4iRkZUHTvvvaPcH3COg4SSgw/ALuRT0WzSTI8Hq46Po20 afK4Kd52gl8I3867oBu3ctpTSIOSdhA/9A== -----END CERTIFICATE-----Generated at Sun Feb 16 15:11:12 2025 by rpki-client