$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/3a3e578e-9cda-3397-800c-e3cbde377721.roa File: 3a3e578e-9cda-3397-800c-e3cbde377721.roa (raw, json) Hash identifier: PbQqGtv/RBlQCRIqAN8kRVKEbqg0glzZrWhsUVdHkNs= Subject key identifier: C7:C0:3A:8A:1B:0D:AD:83:A3:90:40:7B:2A:5E:E6:C4:BA:54:1D:D9 Certificate issuer: /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Certificate serial: 010D0C9F432858487FB5D1A1B1102B590C1E2740 Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/3a3e578e-9cda-3397-800c-e3cbde377721.roa Signing time: Fri 10 Jan 2025 14:00:51 +0000 ROA not before: Fri 10 Jan 2025 14:00:51 +0000 ROA not after: Thu 10 Apr 2025 13:00:51 +0000 asID: 14618 IP address blocks: 2607:dd40:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7f:b5:d1:a1:b1:10:2b:59:0c:1e:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Validity Not Before: Jan 10 14:00:51 2025 GMT Not After : Apr 10 13:00:51 2025 GMT Subject: CN=00dc1cd4-f627-4cfe-83e8-8ebac3e4e695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:98:89:29:72:6a:39:a6:fb:94:fc:80:52:5e: df:52:06:d6:6d:ac:23:b5:14:74:cc:3a:a7:71:42: 04:e5:ea:39:87:a5:53:74:8a:b9:af:13:ec:a2:c5: 6f:c3:e0:6c:8b:d4:bb:48:79:e7:a9:e3:3c:f2:3a: ff:5a:55:26:57:00:fa:f3:98:dd:92:f2:df:07:47: 9d:6f:65:6a:c0:6c:e8:ca:1a:54:bc:d4:c9:42:a1: b3:cc:0c:2a:e4:82:94:db:41:6a:8f:04:9d:8e:50: 31:f7:16:ee:c6:37:4c:4b:f9:d3:1b:59:a3:97:bf: 3a:41:90:dc:30:29:3c:4f:b5:c1:2f:0e:6e:49:b3: 37:e0:5b:d1:7f:4d:51:e9:86:11:9c:5d:9b:c6:fd: 89:8e:3e:08:b0:63:de:fe:e0:62:4e:fb:f3:3a:0c: 8b:32:94:c8:4b:45:50:6f:39:6b:6a:ff:6c:34:d9: e1:87:c8:64:fe:b4:7b:b3:20:ce:f3:ff:f5:e4:9a: 16:a2:c9:ac:20:29:41:62:c5:1a:42:a4:12:f0:0c: 62:4a:fe:7b:92:b5:88:dc:5e:ca:68:e5:e3:ef:15: 7b:ab:7c:ee:f6:68:d9:13:a3:1e:ea:09:82:64:84: 4a:c5:59:0e:a2:c2:c6:88:2c:83:36:b5:1b:8d:d3: bc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C0:3A:8A:1B:0D:AD:83:A3:90:40:7B:2A:5E:E6:C4:BA:54:1D:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/3a3e578e-9cda-3397-800c-e3cbde377721.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl X509v3 Authority Key Identifier: keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer sbgp-ipAddrBlock: critical IPv6: 2607:dd40:1000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:6a:b2:ee:ed:0f:7b:33:c4:fb:ea:8a:b7:bc:bb:ef:11:9a: 1f:36:e5:15:7a:9f:5b:9d:15:20:9f:fb:42:b8:46:97:b2:d2: be:2e:03:a9:e8:53:e8:5f:14:6e:fd:a3:8d:c4:9e:c5:36:d9: b2:40:44:c3:c2:75:eb:89:0f:0d:81:53:0d:cf:a1:6c:1a:e6: 4b:81:c4:82:01:ac:3a:32:9c:d4:6b:76:3b:fb:8d:5c:f5:f0: f6:18:53:53:d6:29:88:9e:ea:25:3b:57:be:b7:58:f0:a1:d5: d3:a5:be:4e:ab:03:a3:2c:56:10:99:e9:a2:ee:ca:b9:d4:68: 8f:dd:7e:e3:f0:9b:8b:2d:54:73:54:c4:12:6f:72:66:9b:e2: 01:d3:0c:81:ca:01:2d:44:ec:91:c3:f5:4c:68:ca:b3:f0:de: c8:1a:63:26:54:a5:9c:f9:ed:59:8d:6a:f2:bc:ab:7c:8d:36: b5:1d:71:18:89:07:69:93:66:bc:33:09:1b:f8:c3:73:41:36: f5:6a:fa:bf:36:9c:e6:1f:80:13:6a:ad:e7:4f:b3:57:80:fb: 38:6f:f5:35:ab:b1:72:b5:1b:42:3a:a9:f9:da:77:54:50:da: 4b:73:7d:ea:43:47:9d:ae:58:b6:68:99:75:08:47:58:27:42: 2d:df:b5:a1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEh/tdGhsRArWQweJ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkM2MzMDQtNjE5ZC00ZTZkLWFlZDUtOWUyNTE2NWNi YzczMB4XDTI1MDExMDE0MDA1MVoXDTI1MDQxMDEzMDA1MVowLzEtMCsGA1UEAxMk MDBkYzFjZDQtZjYyNy00Y2ZlLTgzZTgtOGViYWMzZTRlNjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZiJKXJqOab7lPyAUl7fUgbWbawjtRR0zDqn cUIE5eo5h6VTdIq5rxPsosVvw+Bsi9S7SHnnqeM88jr/WlUmVwD685jdkvLfB0ed b2VqwGzoyhpUvNTJQqGzzAwq5IKU20FqjwSdjlAx9xbuxjdMS/nTG1mjl786QZDc MCk8T7XBLw5uSbM34FvRf01R6YYRnF2bxv2Jjj4IsGPe/uBiTvvzOgyLMpTIS0VQ bzlrav9sNNnhh8hk/rR7syDO8//15JoWosmsIClBYsUaQqQS8AxiSv57krWI3F7K aOXj7xV7q3zu9mjZE6Me6gmCZIRKxVkOosLGiCyDNrUbjdO8BwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMfAOoobDa2Do5BAeype5sS6VB3ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zM2Qz YzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1MTY1Y2JjNzMvM2EzZTU3OGUtOWNkYS0z Mzk3LTgwMGMtZTNjYmRlMzc3NzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzNkM2MzMDQtNjE5ZC00ZTZkLWFl ZDUtOWUyNTE2NWNiYzczLzMzZDNjMzA0LTYxOWQtNGU2ZC1hZWQ1LTllMjUxNjVj YmM3My5jcmwwHwYDVR0jBBgwFoAUjkoNtMfpM0cLNL0AOGQeSnjs4mowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zM2QzYzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1 MTY1Y2JjNzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgfdQBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAfWqy7u0PezPE++qKt7y77xGaHzblFXqfW50VIJ/7QrhGl7LSvi4D qehT6F8Ubv2jjcSexTbZskBEw8J164kPDYFTDc+hbBrmS4HEggGsOjKc1Gt2O/uN XPXw9hhTU9YpiJ7qJTtXvrdY8KHV06W+TqsDoyxWEJnpou7KudRoj91+4/Cbiy1U c1TEEm9yZpviAdMMgcoBLUTskcP1TGjKs/DeyBpjJlSlnPntWY1q8ryrfI02tR1x GIkHaZNmvDMJG/jDc0E29Wr6vzac5h+AE2qt50+zV4D7OG/1NauxcrUbQjqp+dp3 VFDaS3N96kNHna5YtmiZdQhHWCdCLd+1oQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:52 2025 by rpki-client