$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/bfb15f29-d4d0-3251-9bc1-b2d845ea4e4b.roa File: bfb15f29-d4d0-3251-9bc1-b2d845ea4e4b.roa (raw, json) Hash identifier: rGUe/9Zjosi5uwLtAjHIZdF0MeR4DuQghCC3NTA1jLk= Subject key identifier: 54:C1:83:0F:E4:CD:56:EE:A3:F6:95:D1:1F:33:5C:97:A3:4E:6D:2C Certificate issuer: /CN=11150dfe-c654-4719-b6c3-642628555522 Certificate serial: 010D0C9F43285848DA7100197428F61FE5544200 Authority key identifier: 51:71:BD:1F:48:FA:8B:C2:3A:56:A7:14:30:0E:99:0B:B9:E8:5E:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/bfb15f29-d4d0-3251-9bc1-b2d845ea4e4b.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 15191 IP address blocks: 2604:4180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:71:00:19:74:28:f6:1f:e5:54:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11150dfe-c654-4719-b6c3-642628555522 Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=394a923b-75ad-4062-b8e8-5323306bdd24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a3:ca:86:e6:4f:cd:d3:03:a4:2f:86:9c:15: 53:e4:dc:e8:a8:eb:78:7e:b9:38:67:5c:35:c3:1d: 9e:0a:d0:cb:9e:bc:0c:ed:e3:0a:70:c7:c9:72:8a: 6e:17:09:43:f4:25:83:9f:fb:5e:ca:57:1f:42:71: b2:8d:06:ba:35:d3:dd:1e:a2:57:07:96:14:4f:25: a4:ab:82:4b:23:72:a4:30:77:e2:c2:c5:3a:2a:82: 6c:04:68:1b:7f:b9:ca:eb:ed:31:71:91:6e:52:81: 79:cd:72:a1:70:b6:d8:28:06:f6:73:ea:79:53:9a: bc:f1:fb:7d:75:b2:63:6c:eb:7f:c6:30:78:61:b0: 0e:6a:48:f5:f1:85:89:59:b8:7b:10:66:29:ad:76: 6b:2e:89:1f:f4:1b:1c:1b:0d:13:e6:b9:33:02:ba: 12:db:e3:5f:e8:92:87:cc:20:8d:bd:73:35:29:45: 98:33:a8:91:9a:b8:69:44:7d:e0:aa:cf:f4:d8:2a: 8d:6c:58:62:39:d5:92:d0:b9:ef:f8:eb:91:0b:ef: d4:8c:76:65:d0:00:7b:be:db:b4:3f:c2:50:43:8c: 57:0c:70:4a:4a:ec:db:da:2b:51:b5:ca:ba:cd:a0: 5b:62:e9:82:f7:87:56:a5:d0:3a:c2:67:5c:a5:50: 11:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C1:83:0F:E4:CD:56:EE:A3:F6:95:D1:1F:33:5C:97:A3:4E:6D:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/bfb15f29-d4d0-3251-9bc1-b2d845ea4e4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.crl X509v3 Authority Key Identifier: keyid:51:71:BD:1F:48:FA:8B:C2:3A:56:A7:14:30:0E:99:0B:B9:E8:5E:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer sbgp-ipAddrBlock: critical IPv6: 2604:4180::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:cd:30:d6:7b:9a:9d:ab:ca:20:68:5a:b4:ab:43:27:ca:5b: d1:ab:20:1e:70:f1:14:39:a3:36:83:be:39:cf:f2:e1:f6:31: ee:a6:14:7c:92:b7:7a:23:0c:9c:50:8c:21:cd:90:48:0b:d8: 30:49:7c:e0:af:f5:73:70:1b:32:5a:d9:75:ad:10:b4:97:02: 60:a0:44:dd:23:61:23:af:0b:41:26:7d:f1:6b:34:65:3c:bf: 83:fb:03:8c:d8:84:31:86:0c:7d:8d:f1:c7:27:6a:68:77:e3: 0e:30:57:06:4f:fd:e9:74:e2:15:66:dc:df:ff:30:2e:b3:6b: 10:90:61:71:4a:ac:64:13:16:50:e2:ea:88:73:8c:41:46:e9: be:3d:32:9e:ea:1e:ab:99:7f:b5:b5:8b:ff:b5:52:94:1c:df: 59:fb:9c:c6:fa:7f:bc:de:91:e3:40:dd:bc:1c:d2:58:52:92: fd:4e:ea:bf:6f:b4:a0:b2:fd:a9:44:01:8d:a9:82:9c:43:92: c1:d3:5c:17:aa:71:b7:8a:0b:ae:cc:51:79:d6:49:a2:90:a0: e6:22:4b:d5:96:8d:26:4a:22:ae:f8:9e:d8:50:98:44:0b:31: f1:ea:35:2f:b6:28:34:28:4f:40:11:38:9c:0f:84:8a:9d:0a: 52:4d:b1:6b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjacQAZdCj2H+VUQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTExNTBkZmUtYzY1NC00NzE5LWI2YzMtNjQyNjI4NTU1 NTIyMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk Mzk0YTkyM2ItNzVhZC00MDYyLWI4ZTgtNTMyMzMwNmJkZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKPKhuZPzdMDpC+GnBVT5NzoqOt4frk4Z1w1 wx2eCtDLnrwM7eMKcMfJcopuFwlD9CWDn/teylcfQnGyjQa6NdPdHqJXB5YUTyWk q4JLI3KkMHfiwsU6KoJsBGgbf7nK6+0xcZFuUoF5zXKhcLbYKAb2c+p5U5q88ft9 dbJjbOt/xjB4YbAOakj18YWJWbh7EGYprXZrLokf9BscGw0T5rkzAroS2+Nf6JKH zCCNvXM1KUWYM6iRmrhpRH3gqs/02CqNbFhiOdWS0Lnv+OuRC+/UjHZl0AB7vtu0 P8JQQ4xXDHBKSuzb2itRtcq6zaBbYumC94dWpdA6wmdcpVARDQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFTBgw/kzVbuo/aV0R8zXJejTm0sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMTE1 MGRmZS1jNjU0LTQ3MTktYjZjMy02NDI2Mjg1NTU1MjIvYmZiMTVmMjktZDRkMC0z MjUxLTliYzEtYjJkODQ1ZWE0ZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTExNTBkZmUtYzY1NC00NzE5LWI2 YzMtNjQyNjI4NTU1NTIyLzExMTUwZGZlLWM2NTQtNDcxOS1iNmMzLTY0MjYyODU1 NTUyMi5jcmwwHwYDVR0jBBgwFoAUUXG9H0j6i8I6VqcUMA6ZC7noXlkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMTE1MGRmZS1jNjU0LTQ3MTktYjZjMy02NDI2 Mjg1NTU1MjIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRBgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBxzTDWe5qdq8ogaFq0q0MnylvRqyAecPEUOaM2g745z/Lh9jHuphR8 krd6IwycUIwhzZBIC9gwSXzgr/VzcBsyWtl1rRC0lwJgoETdI2EjrwtBJn3xazRl PL+D+wOM2IQxhgx9jfHHJ2pod+MOMFcGT/3pdOIVZtzf/zAus2sQkGFxSqxkExZQ 4uqIc4xBRum+PTKe6h6rmX+1tYv/tVKUHN9Z+5zG+n+83pHjQN28HNJYUpL9Tuq/ b7Sgsv2pRAGNqYKcQ5LB01wXqnG3iguuzFF51kmikKDmIkvVlo0mSiKu+J7YUJhE CzHx6jUvtig0KE9AETicD4SKnQpSTbFr -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:58 2025 by rpki-client