$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/a3c68675-a98f-39ec-a89f-2b77a3df4901.roa File: a3c68675-a98f-39ec-a89f-2b77a3df4901.roa (raw, json) Hash identifier: 2OyHfC10fySe2vsNmsTj5hqygNR17FvC7nRonVUjCpg= Subject key identifier: A5:7A:01:09:88:69:3F:90:A3:A7:51:3F:82:71:79:00:11:06:7D:97 Certificate issuer: /CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c Certificate serial: 010D0C9F43285848DE8ED8A21704BC1510C93040 Authority key identifier: 74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/a3c68675-a98f-39ec-a89f-2b77a3df4901.roa Signing time: Thu 13 Feb 2025 13:24:09 +0000 ROA not before: Thu 13 Feb 2025 13:24:09 +0000 ROA not after: Wed 14 May 2025 12:24:09 +0000 asID: 36549 IP address blocks: 2604:1780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:8e:d8:a2:17:04:bc:15:10:c9:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c Validity Not Before: Feb 13 13:24:09 2025 GMT Not After : May 14 12:24:09 2025 GMT Subject: CN=48182c0a-7d16-481a-bc1a-01cfd838f03a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:93:74:8d:dc:c5:c0:21:37:3e:66:b0:f6:d7: 6a:8d:e9:43:4c:b7:6c:e3:73:22:11:31:6f:fd:a6: 8f:5f:3a:30:eb:05:2d:90:03:fb:55:2f:a7:41:5b: d9:c4:95:b5:0b:b9:b1:b4:55:be:9c:19:37:3d:97: f6:ca:45:3d:5b:cb:04:c2:a4:99:42:9d:61:4b:22: 06:74:69:f2:e3:c0:67:eb:52:2c:bd:2a:fb:8e:65: 26:c2:4a:7f:8d:9f:7d:12:6a:46:c1:80:7a:ce:fe: 63:2a:bb:8b:4a:24:4f:07:89:76:e7:a8:0d:7b:d6: a5:99:af:5e:5f:6a:a8:f0:06:56:56:43:fb:eb:9f: 7e:f8:f0:4d:8f:ac:80:cd:37:f7:84:9f:6e:be:18: a0:27:c9:29:14:f1:0b:9a:13:ee:c4:2c:93:ff:bb: 68:18:5b:4b:e3:e6:cb:85:c9:00:53:ff:34:59:6b: 9d:d0:f0:b2:cc:d9:76:6f:a0:91:71:ab:f2:14:6c: 29:3f:22:05:34:da:27:8e:92:3a:9d:ec:8b:05:18: 57:ba:82:b7:5f:ea:d5:00:45:a2:75:ec:f2:66:0b: b1:93:60:20:9e:7e:5d:b4:a9:cc:a0:84:38:e1:c5: bb:4f:d8:13:91:95:34:82:11:d1:0f:46:62:ae:09: 93:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7A:01:09:88:69:3F:90:A3:A7:51:3F:82:71:79:00:11:06:7D:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/a3c68675-a98f-39ec-a89f-2b77a3df4901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl X509v3 Authority Key Identifier: keyid:74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer sbgp-ipAddrBlock: critical IPv6: 2604:1780::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:02:f4:4e:7e:33:9f:e5:62:72:f5:e0:82:85:8f:d4:55:ee: 6d:ab:51:ba:3b:6d:83:9c:77:3d:ed:a5:28:ea:b0:73:c0:eb: 66:17:a6:ce:d9:2a:48:07:d2:b9:18:18:14:f7:9b:b1:02:b1: d6:25:6d:2e:76:88:66:d7:21:68:35:2a:6d:dd:ba:29:b8:af: 4b:a5:cb:e8:6c:68:62:90:67:91:f3:d4:88:36:13:2e:64:a5: 81:73:b0:21:85:b0:41:d7:2c:0f:56:cd:ff:f8:69:70:b0:12: 0d:75:56:42:ed:d6:e4:1b:cf:07:8b:c9:20:6a:bd:5f:f4:51: 82:73:9f:b1:81:7b:6c:f1:55:c5:7a:46:e2:ed:c1:7e:5f:33: ac:3d:5a:cc:57:ed:42:95:68:18:fa:d5:db:e1:89:5e:91:4e: f2:1b:11:d0:33:e8:fd:03:34:96:cc:a4:9e:ef:05:56:74:cf: ed:47:12:d9:c5:02:ca:dc:26:4b:fa:90:9a:48:2f:80:4c:8d: 13:0d:70:77:45:95:55:ce:e9:ed:98:10:01:92:8c:35:89:26: 2a:53:8a:35:81:95:dd:99:48:eb:6a:63:5e:85:0a:e9:4f:82: 6a:e3:8a:03:e8:3f:cf:f3:c2:e7:a1:ae:c4:fb:7a:9c:be:5e: 7c:a5:0b:fb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjejtiiFwS8FRDJMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU5ZmU3YzgtZjdmYS00NjM3LWE3NDYtODczZGJlYWRi ZjNjMB4XDTI1MDIxMzEzMjQwOVoXDTI1MDUxNDEyMjQwOVowLzEtMCsGA1UEAxMk NDgxODJjMGEtN2QxNi00ODFhLWJjMWEtMDFjZmQ4MzhmMDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZN0jdzFwCE3Pmaw9tdqjelDTLds43MiETFv /aaPXzow6wUtkAP7VS+nQVvZxJW1C7mxtFW+nBk3PZf2ykU9W8sEwqSZQp1hSyIG dGny48Bn61IsvSr7jmUmwkp/jZ99EmpGwYB6zv5jKruLSiRPB4l256gNe9alma9e X2qo8AZWVkP7659++PBNj6yAzTf3hJ9uvhigJ8kpFPELmhPuxCyT/7toGFtL4+bL hckAU/80WWud0PCyzNl2b6CRcavyFGwpPyIFNNonjpI6neyLBRhXuoK3X+rVAEWi dezyZguxk2Agnn5dtKnMoIQ44cW7T9gTkZU0ghHRD0ZirgmTfwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKV6AQmIaT+Qo6dRP4JxeQARBn2XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNTlm ZTdjOC1mN2ZhLTQ2MzctYTc0Ni04NzNkYmVhZGJmM2MvYTNjNjg2NzUtYTk4Zi0z OWVjLWE4OWYtMmI3N2EzZGY0OTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjU5ZmU3YzgtZjdmYS00NjM3LWE3 NDYtODczZGJlYWRiZjNjLzI1OWZlN2M4LWY3ZmEtNDYzNy1hNzQ2LTg3M2RiZWFk YmYzYy5jcmwwHwYDVR0jBBgwFoAUdFJpwi/8O6u55n4V9rH9o+lb5uowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNTlmZTdjOC1mN2ZhLTQ2MzctYTc0Ni04NzNk YmVhZGJmM2MuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQXgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDaAvROfjOf5WJy9eCChY/UVe5tq1G6O22DnHc97aUo6rBzwOtmF6bO 2SpIB9K5GBgU95uxArHWJW0udohm1yFoNSpt3bopuK9LpcvobGhikGeR89SINhMu ZKWBc7AhhbBB1ywPVs3/+GlwsBINdVZC7dbkG88Hi8kgar1f9FGCc5+xgXts8VXF ekbi7cF+XzOsPVrMV+1ClWgY+tXb4YlekU7yGxHQM+j9AzSWzKSe7wVWdM/tRxLZ xQLK3CZL+pCaSC+ATI0TDXB3RZVVzuntmBABkow1iSYqU4o1gZXdmUjramNehQrp T4Jq44oD6D/P88Lnoa7E+3qcvl58pQv7 -----END CERTIFICATE-----Generated at Wed Feb 19 20:39:56 2025 by rpki-client