$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/c212f2f7-10a0-305d-a60a-eca4e1430a94.roa File: c212f2f7-10a0-305d-a60a-eca4e1430a94.roa (raw, json) Hash identifier: saoVG84uQWwZmb8OYrGdA1vlxJC+Wvw13xwfDy1/SA0= Subject key identifier: 82:1C:C4:B9:C1:11:B2:32:E0:0F:69:9B:83:F7:69:6D:BB:48:4E:0B Certificate issuer: /CN=0ad2b3c4-a64c-4afd-b0df-103361339550 Certificate serial: 010D0C9F43285848ADC605EB89C37F8D30AB8C00 Authority key identifier: B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/c212f2f7-10a0-305d-a60a-eca4e1430a94.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 11287 IP address blocks: 2607:1d80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:05:eb:89:c3:7f:8d:30:ab:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ad2b3c4-a64c-4afd-b0df-103361339550 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=d9390ba3-b893-4940-9573-a7f996318dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d5:3c:36:8b:f7:e2:7e:17:a5:31:20:15:7e: 70:47:09:dd:d5:49:1d:9d:a5:f3:d0:6d:36:19:22: 7f:f6:f2:08:dc:2b:7d:a0:05:05:e8:3e:53:24:ed: 48:d2:d1:9a:70:83:29:74:77:18:a6:8f:50:82:84: cf:69:7c:ee:62:d7:48:9f:8d:ad:02:a9:77:54:23: 01:e2:25:8f:0c:34:5f:be:b2:90:52:55:a4:83:2b: c7:8d:cc:7e:c9:e9:0a:c8:8b:c7:8c:d7:77:f6:64: 7d:c9:46:f1:ef:0c:2e:76:fa:0c:3e:d2:68:8d:07: cc:ea:f9:7f:b6:33:32:dc:2f:44:51:9c:85:d8:f0: 1b:2a:80:b9:73:7d:92:f1:76:1b:d7:b9:10:fc:77: 4c:12:15:2f:91:9e:27:b3:8d:3d:8a:9a:fa:ec:bf: 91:2f:9a:dc:cf:2b:ba:79:11:b5:80:c3:1e:f4:91: 15:9f:94:3e:f7:de:c0:3c:b0:cf:75:d0:e2:e5:59: 8a:78:2e:2d:6d:06:8d:30:61:61:8e:dc:76:88:39: da:d1:7d:f4:9f:42:39:b8:2e:77:a3:bf:10:f9:2c: 53:83:76:28:66:16:08:73:76:9f:f4:2f:3d:12:49: 77:3d:ef:80:53:c4:44:7b:2b:9b:dd:44:d3:1f:3c: f8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1C:C4:B9:C1:11:B2:32:E0:0F:69:9B:83:F7:69:6D:BB:48:4E:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/c212f2f7-10a0-305d-a60a-eca4e1430a94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl X509v3 Authority Key Identifier: keyid:B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer sbgp-ipAddrBlock: critical IPv6: 2607:1d80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:2e:e8:40:c6:52:6d:71:da:06:06:1e:d3:d8:09:0c:a0:1c: 45:b4:a7:23:1b:44:59:52:b7:c0:c3:e0:9b:4b:70:b3:39:f8: 53:98:da:34:4b:7e:c8:72:09:63:a2:aa:d8:ac:3f:f6:83:48: 7d:f7:06:8d:ae:06:c2:06:75:7f:ad:d4:19:76:4e:81:ed:ca: fb:a9:79:58:69:44:b4:eb:54:0f:bf:97:ae:9f:ab:ef:80:f5: 05:81:60:2a:20:a9:30:b5:85:31:c5:10:5e:87:f6:12:fd:92: 58:ac:22:8d:1d:2e:b1:aa:ed:d8:6a:ba:21:b8:a9:46:7a:ec: d3:b4:3e:9f:79:ee:3f:d8:51:0e:6d:4e:23:41:c2:31:02:f2: b1:05:b5:d7:0b:2d:06:45:59:69:c6:d6:aa:e4:04:f2:55:bd: c6:a8:e9:5f:18:c8:f0:3d:dc:5b:a5:6e:cc:99:ce:f7:dc:f3: b9:68:90:7a:94:00:49:1e:e3:57:c9:82:cb:0a:0a:02:f8:ba: fa:6d:76:4f:d6:77:6d:06:be:f4:02:41:cd:79:01:7d:7f:35: b7:28:f8:4e:5b:6c:19:b2:8d:d6:92:5c:da:1c:72:c7:c2:ff: 75:a9:5a:dc:1b:0b:9c:f4:34:35:57:8f:8f:38:28:99:f3:57: 1d:b4:4b:33 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEitxgXricN/jTCrjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFkMmIzYzQtYTY0Yy00YWZkLWIwZGYtMTAzMzYxMzM5 NTUwMB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk ZDkzOTBiYTMtYjg5My00OTQwLTk1NzMtYTdmOTk2MzE4ZGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9U8Nov34n4XpTEgFX5wRwnd1UkdnaXz0G02 GSJ/9vII3Ct9oAUF6D5TJO1I0tGacIMpdHcYpo9QgoTPaXzuYtdIn42tAql3VCMB 4iWPDDRfvrKQUlWkgyvHjcx+yekKyIvHjNd39mR9yUbx7wwudvoMPtJojQfM6vl/ tjMy3C9EUZyF2PAbKoC5c32S8XYb17kQ/HdMEhUvkZ4ns409ipr67L+RL5rczyu6 eRG1gMMe9JEVn5Q+997APLDPddDi5VmKeC4tbQaNMGFhjtx2iDna0X30n0I5uC53 o78Q+SxTg3YoZhYIc3af9C89Ekl3Pe+AU8REeyub3UTTHzz46wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIIcxLnBEbIy4A9pm4P3aW27SE4LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYWQy YjNjNC1hNjRjLTRhZmQtYjBkZi0xMDMzNjEzMzk1NTAvYzIxMmYyZjctMTBhMC0z MDVkLWE2MGEtZWNhNGUxNDMwYTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGFkMmIzYzQtYTY0Yy00YWZkLWIw ZGYtMTAzMzYxMzM5NTUwLzBhZDJiM2M0LWE2NGMtNGFmZC1iMGRmLTEwMzM2MTMz OTU1MC5jcmwwHwYDVR0jBBgwFoAUuN7Bw2RS8EIH2z6EpDX5BcG/O24wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYWQyYjNjNC1hNjRjLTRhZmQtYjBkZi0xMDMz NjEzMzk1NTAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcdgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBJLuhAxlJtcdoGBh7T2AkMoBxFtKcjG0RZUrfAw+CbS3CzOfhTmNo0 S37IcgljoqrYrD/2g0h99waNrgbCBnV/rdQZdk6B7cr7qXlYaUS061QPv5eun6vv gPUFgWAqIKkwtYUxxRBeh/YS/ZJYrCKNHS6xqu3YarohuKlGeuzTtD6fee4/2FEO bU4jQcIxAvKxBbXXCy0GRVlpxtaq5ATyVb3GqOlfGMjwPdxbpW7Mmc733PO5aJB6 lABJHuNXyYLLCgoC+Lr6bXZP1ndtBr70AkHNeQF9fzW3KPhOW2wZso3WklzaHHLH wv91qVrcGwuc9DQ1V4+POCiZ81cdtEsz -----END CERTIFICATE-----Generated at Fri Apr 11 21:42:25 2025 by rpki-client