$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/ffce5557-acd7-3635-8203-19ad10e6eb7c.roa File: ffce5557-acd7-3635-8203-19ad10e6eb7c.roa (raw, json) Hash identifier: Q4VCan6bfxdFFe+THyZoa2nj6mPh3yHKImroDDjMOII= Subject key identifier: 57:B0:9B:87:01:D9:67:7B:F7:2C:81:D5:4A:B1:21:88:70:3C:C2:6B Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Certificate serial: 010D0C9F43285848696068576254A61005F4A700 Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/ffce5557-acd7-3635-8203-19ad10e6eb7c.roa Signing time: Thu 02 Jan 2025 14:00:52 +0000 ROA not before: Thu 02 Jan 2025 14:00:52 +0000 ROA not after: Wed 02 Apr 2025 13:00:52 +0000 asID: 393885 IP address blocks: 2604:4a00:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:69:60:68:57:62:54:a6:10:05:f4:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Validity Not Before: Jan 2 14:00:52 2025 GMT Not After : Apr 2 13:00:52 2025 GMT Subject: CN=21a6d906-fcc3-4b14-b146-0989c64d520c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:91:9d:b8:7d:62:40:ef:19:67:3f:78:db:9f: d9:13:10:f0:d7:ec:c3:a1:5c:c9:18:9a:c4:83:4a: e4:95:f5:ab:23:f7:32:9d:bd:e6:5f:1e:fa:58:90: 71:22:61:8f:da:81:ee:bc:f7:41:f6:cd:50:42:a3: aa:e2:c8:39:eb:30:9b:7d:f5:5b:4d:57:18:bb:10: cb:91:d2:c0:7e:1d:94:ee:df:9a:24:67:0e:2b:bf: b0:85:74:8e:fe:89:f7:d6:4c:05:3b:2f:4e:26:6a: 44:c3:f4:02:84:44:3e:62:a0:95:aa:cd:b5:f1:be: ca:e5:7e:53:03:be:91:73:23:33:0d:c8:43:26:d0: b4:38:08:fc:86:0d:ec:83:72:07:75:d9:34:38:1d: c2:25:8b:61:bd:4c:d2:2c:5f:35:e4:81:9d:32:57: 50:e8:8b:24:cf:f0:a1:98:8b:12:e2:cd:c1:b9:a9: c5:30:1a:d7:b0:6c:f8:50:ab:d2:b6:a5:2b:6f:2a: 8d:c6:79:e6:a0:e4:60:57:74:9c:56:c5:09:e0:f7: e3:6b:f2:f5:94:c7:2f:d0:a6:6c:f5:34:2c:fe:05: aa:54:37:c8:80:bb:86:84:a3:01:e0:ba:49:ca:36: 3e:8d:79:87:71:07:c9:6d:b6:e1:08:b2:a8:87:19: 07:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B0:9B:87:01:D9:67:7B:F7:2C:81:D5:4A:B1:21:88:70:3C:C2:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/ffce5557-acd7-3635-8203-19ad10e6eb7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl X509v3 Authority Key Identifier: keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer sbgp-ipAddrBlock: critical IPv6: 2604:4a00:1000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:d8:48:87:b9:c9:de:10:8f:db:5a:a0:80:a1:d9:f3:bc:4a: f3:32:aa:78:04:da:94:6f:80:96:3d:6b:fd:4f:32:19:0b:24: 53:1b:a4:04:4d:80:a3:ac:19:57:d2:22:4c:ea:ea:a0:39:05: c5:86:06:b5:0d:5b:80:0b:aa:30:55:9e:ac:6a:d8:2b:f5:5d: 5b:6f:4a:2b:a0:7b:00:8c:b9:73:34:8e:3c:4d:09:38:0a:4d: 96:65:43:c7:35:53:d7:bd:5f:28:b4:b0:6e:27:1a:63:8b:8a: 37:11:48:01:64:7c:c8:71:03:d6:64:44:25:ac:d7:8a:88:24: ab:06:9f:3c:8d:62:34:fc:fe:c8:ee:b8:13:ab:95:89:16:4a: 65:2e:73:33:b6:99:14:82:c9:be:66:d7:ec:65:7f:92:36:5a: b0:f2:c6:e0:e4:91:99:5b:4b:16:c4:47:45:1b:22:69:68:b0: ef:ad:a8:70:7a:3b:cb:c9:64:4b:ed:fe:d2:1e:37:e0:01:88: ea:2a:52:a6:3b:6b:29:15:31:b4:fd:a4:47:5c:94:78:99:68: 78:69:63:27:9b:ff:50:8b:78:ba:cf:26:58:d1:62:b6:11:26: ae:12:ac:0e:ec:05:74:c3:b6:de:20:dd:c8:70:7b:db:c6:c3: 1c:98:e0:c5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEhpYGhXYlSmEAX0pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk NjZkMB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk MjFhNmQ5MDYtZmNjMy00YjE0LWIxNDYtMDk4OWM2NGQ1MjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpGduH1iQO8ZZz9425/ZExDw1+zDoVzJGJrE g0rklfWrI/cynb3mXx76WJBxImGP2oHuvPdB9s1QQqOq4sg56zCbffVbTVcYuxDL kdLAfh2U7t+aJGcOK7+whXSO/on31kwFOy9OJmpEw/QChEQ+YqCVqs218b7K5X5T A76RcyMzDchDJtC0OAj8hg3sg3IHddk0OB3CJYthvUzSLF815IGdMldQ6Iskz/Ch mIsS4s3BuanFMBrXsGz4UKvStqUrbyqNxnnmoORgV3ScVsUJ4Pfja/L1lMcv0KZs 9TQs/gWqVDfIgLuGhKMB4LpJyjY+jXmHcQfJbbbhCLKohxkHQQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFewm4cB2Wd79yyB1UqxIYhwPMJrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvZmZjZTU1NTctYWNkNy0z NjM1LTgyMDMtMTlhZDEwZTZlYjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1 ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh M2UzNWQ2NmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgRKABAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAVdhIh7nJ3hCP21qggKHZ87xK8zKqeATalG+Alj1r/U8yGQskUxuk BE2Ao6wZV9IiTOrqoDkFxYYGtQ1bgAuqMFWerGrYK/VdW29KK6B7AIy5czSOPE0J OApNlmVDxzVT171fKLSwbicaY4uKNxFIAWR8yHED1mREJazXiogkqwafPI1iNPz+ yO64E6uViRZKZS5zM7aZFILJvmbX7GV/kjZasPLG4OSRmVtLFsRHRRsiaWiw762o cHo7y8lkS+3+0h434AGI6ipSpjtrKRUxtP2kR1yUeJloeGljJ5v/UIt4us8mWNFi thEmrhKsDuwFdMO23iDdyHB728bDHJjgxQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:48 2025 by rpki-client