$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/5a68ccb3-a625-3c55-a020-f3b83c1fc0b7.roa File: 5a68ccb3-a625-3c55-a020-f3b83c1fc0b7.roa (raw, json) Hash identifier: nhuc505s4Cg9N4jQZe7on1c4xW+XeL1yGm8Z2uGOQg8= Subject key identifier: 60:1C:FE:13:52:1A:DD:2A:F1:F0:97:7A:55:63:E6:0C:70:12:57:4D Certificate issuer: /CN=d6fb0d47-7125-4b91-9b01-2e308dad0d25 Certificate serial: 010D0C9F43285848494574F551BC844D9E64A100 Authority key identifier: F1:51:5C:12:74:E1:80:0B:3C:F8:ED:38:A6:09:04:6B:0C:6B:8E:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/5a68ccb3-a625-3c55-a020-f3b83c1fc0b7.roa Signing time: Sun 22 Dec 2024 02:00:39 +0000 ROA not before: Sun 22 Dec 2024 02:00:39 +0000 ROA not after: Sat 22 Mar 2025 01:00:39 +0000 asID: 16509 IP address blocks: 2601:1700:e100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/d6fb0d47-7125-4b91-9b01-2e308dad0d25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/d6fb0d47-7125-4b91-9b01-2e308dad0d25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:49:45:74:f5:51:bc:84:4d:9e:64:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6fb0d47-7125-4b91-9b01-2e308dad0d25 Validity Not Before: Dec 22 02:00:39 2024 GMT Not After : Mar 22 01:00:39 2025 GMT Subject: CN=801e79a4-f8f7-4064-a4ec-8c8d2da5457d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2d:85:d5:b9:89:9b:52:fb:cb:12:4a:dd:4e: 1a:3f:e1:c2:da:a3:f4:75:cf:2c:06:bb:60:75:45: 8c:8b:55:c9:5c:c1:68:e2:df:24:7d:a0:ea:e9:06: be:d8:32:60:b9:09:e2:51:e7:ce:19:f4:3e:b4:e1: 1e:8f:55:1d:b2:03:5e:c6:f4:ad:c5:5b:27:bb:ad: 97:64:b0:89:80:47:43:78:04:82:02:59:99:40:55: 1a:89:1f:c0:f1:e6:ab:f8:5f:7e:79:78:53:ba:80: 79:63:19:67:48:a0:d4:b7:01:84:09:53:e8:85:44: e6:bc:0f:0a:96:9a:96:3e:08:70:1f:f6:20:6b:11: 45:52:58:dc:97:b0:f3:0a:92:94:76:01:4e:c6:0b: 75:96:3e:24:08:03:66:e3:04:1f:95:2a:c0:e7:ab: a8:e3:e3:a8:14:d9:a6:b3:b9:c9:71:57:af:16:51: ff:36:b0:c3:d1:65:ee:5e:84:96:17:1c:bc:d4:e2: f1:40:4f:89:40:da:bc:32:0c:f9:83:9d:9c:7b:ab: 9a:76:fc:94:cf:96:a6:20:82:db:96:b6:68:01:90: 3a:45:cd:e9:51:b6:0d:5b:0b:84:65:69:3b:b6:9c: 60:4a:ab:9a:e0:8e:01:43:43:61:d0:00:dc:23:e1: ef:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1C:FE:13:52:1A:DD:2A:F1:F0:97:7A:55:63:E6:0C:70:12:57:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/5a68ccb3-a625-3c55-a020-f3b83c1fc0b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/d6fb0d47-7125-4b91-9b01-2e308dad0d25.crl X509v3 Authority Key Identifier: keyid:F1:51:5C:12:74:E1:80:0B:3C:F8:ED:38:A6:09:04:6B:0C:6B:8E:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25.cer sbgp-ipAddrBlock: critical IPv6: 2601:1700:e100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:a7:47:de:48:54:4b:5a:62:d1:64:20:39:99:43:af:89:63: 78:cc:a1:e1:fa:2e:a4:2f:7c:c0:fb:36:b2:2a:10:75:20:ef: 36:d9:1e:77:b3:68:bc:03:d5:af:8d:37:77:ed:0d:fa:48:78: 37:49:c4:af:d9:8a:f0:65:6d:bd:68:f0:a6:f0:72:96:e7:05: bf:59:6d:5e:0c:1e:0a:ab:ed:fd:3a:17:94:bb:76:98:8d:13: a0:97:ed:37:f9:58:59:15:1f:ab:08:ca:40:03:44:16:29:b6: cb:1a:82:c9:6f:a7:03:30:d7:e5:2b:f1:0e:13:a1:4b:69:9e: 46:64:ef:92:26:73:85:d2:8d:08:47:1a:4d:53:db:c9:13:d2: dd:98:bd:a5:f2:69:80:28:6a:ae:6a:97:80:59:10:96:d5:6b: 20:e0:50:1f:64:5c:73:c9:69:0d:c7:ff:12:79:27:1b:b5:61: d2:f4:9b:5d:d2:09:4c:b3:c5:1f:da:6f:67:aa:14:45:30:7f: 3f:44:4c:96:ec:17:88:31:27:66:ea:f6:88:ce:51:ac:02:66: 10:ec:72:f7:ce:eb:29:5c:7e:d5:c0:43:0f:f0:e4:c0:97:f4: 60:6d:50:28:b2:3f:37:94:49:08:7e:0f:0f:d8:5a:6b:4a:d7: 6c:a1:d2:2e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEhJRXT1UbyETZ5koQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZmYjBkNDctNzEyNS00YjkxLTliMDEtMmUzMDhkYWQw ZDI1MB4XDTI0MTIyMjAyMDAzOVoXDTI1MDMyMjAxMDAzOVowLzEtMCsGA1UEAxMk ODAxZTc5YTQtZjhmNy00MDY0LWE0ZWMtOGM4ZDJkYTU0NTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0i2F1bmJm1L7yxJK3U4aP+HC2qP0dc8sBrtg dUWMi1XJXMFo4t8kfaDq6Qa+2DJguQniUefOGfQ+tOEej1UdsgNexvStxVsnu62X ZLCJgEdDeASCAlmZQFUaiR/A8ear+F9+eXhTuoB5YxlnSKDUtwGECVPohUTmvA8K lpqWPghwH/YgaxFFUljcl7DzCpKUdgFOxgt1lj4kCANm4wQflSrA56uo4+OoFNmm s7nJcVevFlH/NrDD0WXuXoSWFxy81OLxQE+JQNq8Mgz5g52ce6uadvyUz5amIILb lrZoAZA6Rc3pUbYNWwuEZWk7tpxgSqua4I4BQ0Nh0ADcI+HvIQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGAc/hNSGt0q8fCXelVj5gxwEldNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNmZi MGQ0Ny03MTI1LTRiOTEtOWIwMS0yZTMwOGRhZDBkMjUvNWE2OGNjYjMtYTYyNS0z YzU1LWEwMjAtZjNiODNjMWZjMGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDZmYjBkNDctNzEyNS00YjkxLTli MDEtMmUzMDhkYWQwZDI1L2Q2ZmIwZDQ3LTcxMjUtNGI5MS05YjAxLTJlMzA4ZGFk MGQyNS5jcmwwHwYDVR0jBBgwFoAU8VFcEnThgAs8+O04pgkEawxrjv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNmZiMGQ0Ny03MTI1LTRiOTEtOWIwMS0yZTMw OGRhZDBkMjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgEXAOEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYadH3khUS1pi0WQgOZlDr4ljeMyh4foupC98wPs2sioQdSDvNtke d7NovAPVr403d+0N+kh4N0nEr9mK8GVtvWjwpvBylucFv1ltXgweCqvt/ToXlLt2 mI0ToJftN/lYWRUfqwjKQANEFim2yxqCyW+nAzDX5SvxDhOhS2meRmTvkiZzhdKN CEcaTVPbyRPS3Zi9pfJpgChqrmqXgFkQltVrIOBQH2Rcc8lpDcf/EnknG7Vh0vSb XdIJTLPFH9pvZ6oURTB/P0RMluwXiDEnZur2iM5RrAJmEOxy987rKVx+1cBDD/Dk wJf0YG1QKLI/N5RJCH4PD9haa0rXbKHSLg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:18 2025 by rpki-client