$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/281a7c24-7e93-3bec-b791-a7bd8e4d1296.roa File: 281a7c24-7e93-3bec-b791-a7bd8e4d1296.roa (raw, json) Hash identifier: Yy2cHmUReQFzCAyaVniPZ8XWpZ4qEOvNLjjtL2JYfMA= Subject key identifier: 68:99:B4:0C:88:F0:0A:65:E8:29:B2:E6:56:2E:03:BC:88:04:12:BB Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F43285848A315D1856498C3902EE6C680 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/281a7c24-7e93-3bec-b791-a7bd8e4d1296.roa Signing time: Thu 23 Jan 2025 06:07:37 +0000 ROA not before: Thu 23 Jan 2025 06:07:37 +0000 ROA not after: Wed 23 Apr 2025 05:07:37 +0000 asID: 19165 IP address blocks: 2604:5500:7000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:15:d1:85:64:98:c3:90:2e:e6:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Jan 23 06:07:37 2025 GMT Not After : Apr 23 05:07:37 2025 GMT Subject: CN=d5402607-5e72-49ea-a452-236f305b8f57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5c:7e:bb:2b:c9:86:f4:97:1d:be:47:63:a4: b6:e2:a5:b9:c9:86:c7:42:c5:6a:54:87:6e:7e:a9: 80:e8:0b:6f:d0:1c:ae:77:28:56:7a:0d:52:9e:b6: 2e:04:b7:3d:61:a3:25:9f:1f:cf:7b:37:0e:53:27: 1c:d2:92:b0:03:19:bf:61:0e:3b:48:55:ca:05:04: 1e:e6:d8:2a:c0:cf:75:e6:8d:54:78:a9:54:f2:a5: d4:ad:65:1c:28:90:41:4f:0a:ad:cd:bd:49:d8:b1: 79:16:cd:f3:76:b2:38:d8:ed:6c:af:be:f2:80:86: 55:d8:6e:64:50:db:77:51:01:c7:b8:35:53:79:f1: a7:3b:b4:58:7b:36:52:31:80:1f:9d:e6:f5:b1:2b: 60:fb:09:3f:ff:a6:66:b4:6e:7c:05:91:9e:de:35: ef:66:07:2f:a6:30:94:e7:a0:d0:b6:d7:97:c9:b5: 35:23:a0:2b:e5:5d:34:15:fd:97:68:c6:d5:3d:e1: 9c:10:54:f9:e4:46:85:f4:21:e0:54:e6:41:b7:b0: 17:65:43:54:d0:9f:73:b4:6d:3c:8d:95:7a:92:e2: eb:5e:6f:d3:aa:9c:41:a2:05:bc:5a:28:be:57:d4: c7:8d:41:70:f2:1b:5e:c2:b7:16:c1:41:4a:75:27: 62:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:99:B4:0C:88:F0:0A:65:E8:29:B2:E6:56:2E:03:BC:88:04:12:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/281a7c24-7e93-3bec-b791-a7bd8e4d1296.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv6: 2604:5500:7000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:57:23:df:79:22:46:7f:20:79:e8:88:96:72:58:79:7e:a2: 9b:b8:24:94:86:26:f8:d2:c0:de:9c:92:85:8c:0b:a1:74:dc: 32:b8:2c:ef:41:2e:4e:f7:03:29:43:51:96:26:0b:8a:b7:d6: d0:4f:21:46:a3:da:e0:b2:ca:ce:7b:4f:1b:43:b3:64:84:a7: 44:42:7d:c8:42:3b:5c:ee:f4:ea:4b:05:88:93:1a:d0:c4:d4: a5:dd:dd:06:cc:ae:86:a7:e7:d3:e6:6d:ac:86:fe:00:d0:fa: 88:0a:be:ab:cd:7c:df:3e:e6:17:69:a7:92:50:00:95:ba:eb: bc:99:80:ce:38:93:0f:c6:13:60:5e:61:02:c3:c2:65:a0:b0: 66:62:5f:91:b3:db:b9:15:47:bc:24:54:72:6d:b4:2a:c4:89: 39:d6:08:32:68:bc:d3:16:ab:05:7d:21:a5:2d:e3:db:24:3d: 49:f4:81:d7:dd:9f:70:ee:1f:bf:e6:01:53:bd:69:9f:00:d0: 5c:b7:a3:a6:61:fa:45:c7:8e:57:cc:8b:e6:de:3b:d2:df:0f: f3:bc:f1:e1:e1:4d:b5:5f:b5:3f:eb:5b:76:68:ab:8f:b7:41: 9a:bf:f6:f9:ba:1d:94:f4:88:b5:a0:9b:ea:b0:46:58:ae:54: 21:99:57:18 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEijFdGFZJjDkC7mxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDEyMzA2MDczN1oXDTI1MDQyMzA1MDczN1owLzEtMCsGA1UEAxMk ZDU0MDI2MDctNWU3Mi00OWVhLWE0NTItMjM2ZjMwNWI4ZjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFx+uyvJhvSXHb5HY6S24qW5yYbHQsVqVIdu fqmA6Atv0ByudyhWeg1SnrYuBLc9YaMlnx/PezcOUycc0pKwAxm/YQ47SFXKBQQe 5tgqwM915o1UeKlU8qXUrWUcKJBBTwqtzb1J2LF5Fs3zdrI42O1sr77ygIZV2G5k UNt3UQHHuDVTefGnO7RYezZSMYAfneb1sStg+wk//6ZmtG58BZGe3jXvZgcvpjCU 56DQtteXybU1I6Ar5V00Ff2XaMbVPeGcEFT55EaF9CHgVOZBt7AXZUNU0J9ztG08 jZV6kuLrXm/TqpxBogW8Wii+V9THjUFw8htewrcWwUFKdSdiJQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGiZtAyI8Apl6Cmy5lYuA7yIBBK7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvMjgxYTdjMjQtN2U5My0z YmVjLWI3OTEtYTdiZDhlNGQxMjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgRVAHAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAolcj33kiRn8geeiIlnJYeX6im7gklIYm+NLA3pyShYwLoXTcMrgs 70EuTvcDKUNRliYLirfW0E8hRqPa4LLKzntPG0OzZISnREJ9yEI7XO706ksFiJMa 0MTUpd3dBsyuhqfn0+ZtrIb+AND6iAq+q8183z7mF2mnklAAlbrrvJmAzjiTD8YT YF5hAsPCZaCwZmJfkbPbuRVHvCRUcm20KsSJOdYIMmi80xarBX0hpS3j2yQ9SfSB 192fcO4fv+YBU71pnwDQXLejpmH6RceOV8yL5t470t8P87zx4eFNtV+1P+tbdmir j7dBmr/2+bodlPSItaCb6rBGWK5UIZlXGA== -----END CERTIFICATE-----Generated at Sun Apr 6 07:13:48 2025 by rpki-client