$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7e1def39-cafd-36c2-9d93-3547ff72dab9.roa File: 7e1def39-cafd-36c2-9d93-3547ff72dab9.roa (raw, json) Hash identifier: Enmlr3XxRy1lcxfKR2ueUkf0pVouXH79kgmW48VlO6k= Subject key identifier: 8F:A8:B4:59:AA:05:CE:FC:A4:26:D8:DB:19:58:A1:D5:5A:8F:39:7A Certificate issuer: /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9 Certificate serial: 010D0C9F43285848BBBB6EED0E7C96E525296C00 Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7e1def39-cafd-36c2-9d93-3547ff72dab9.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 14555 IP address blocks: 2607:dec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:6e:ed:0e:7c:96:e5:25:29:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=5f903db5-1fd8-42b9-8bcf-bdadda7953e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ae:58:42:2a:5c:91:6d:08:0d:cb:15:1f:72: 91:96:b8:b6:35:1b:9f:ab:d2:8d:cb:44:8d:96:34: 76:ac:2a:bc:2d:d1:8f:84:30:5b:8c:3b:07:16:f5: f6:ab:3c:82:e7:3f:42:5e:2f:74:5f:da:e8:d7:4d: 97:08:00:a1:68:38:b4:e7:83:5e:77:8b:0e:fe:0e: ce:33:48:e8:88:b0:52:15:7d:8c:a1:d8:6d:0f:b4: 54:84:80:3b:27:a2:c5:cb:84:46:8f:5d:06:33:dd: 6c:03:1e:57:3c:4c:56:2d:0c:78:66:b1:f8:d8:77: cb:2b:40:ea:b4:16:ec:23:6c:5f:d2:aa:d9:27:12: e5:07:af:71:b2:c5:ee:13:6b:ab:4e:be:a6:f3:d3: 78:4b:6e:a7:69:36:30:8c:cf:9b:75:00:4b:5a:6e: 34:1a:76:d7:bd:6c:c1:58:c0:00:6d:a9:77:1f:e1: aa:c3:c9:79:dc:77:61:99:7c:3a:30:0f:47:cc:17: 30:c8:10:01:35:46:29:bf:81:b5:94:bb:15:a1:0e: 7d:c9:93:88:ca:78:19:44:6f:a5:5b:7f:b3:8b:d6: ab:8b:52:2e:c6:de:0f:c0:67:b2:46:a1:4d:ca:24: 5b:00:52:96:46:1c:cb:c7:ae:b2:21:be:69:68:24: 8f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A8:B4:59:AA:05:CE:FC:A4:26:D8:DB:19:58:A1:D5:5A:8F:39:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7e1def39-cafd-36c2-9d93-3547ff72dab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl X509v3 Authority Key Identifier: keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer sbgp-ipAddrBlock: critical IPv6: 2607:dec0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:8a:f2:0e:e0:b3:7b:f2:86:de:3d:79:77:aa:a7:dd:f5:05: 2a:9f:0b:04:16:cc:49:c0:27:77:a6:80:23:47:f1:78:d8:b3: d0:22:70:dc:78:93:ca:4d:11:c5:3e:e3:10:5a:61:a8:68:95: 1c:c3:b3:61:ea:c6:1e:bb:5e:4e:88:00:c9:82:2a:95:dd:98: 90:9a:d4:d2:96:fd:b1:3a:56:37:2d:9d:a3:db:09:8e:ae:97: 0f:ed:12:43:c6:24:2e:7c:67:3a:7a:12:0a:21:b7:a1:60:5b: 36:82:76:76:ff:7a:c9:b2:21:61:90:3f:b1:a0:33:a2:09:c3: ee:b1:cd:b0:d4:f7:67:33:5f:91:7d:a4:73:f2:de:68:20:9f: 4a:7c:c2:9f:75:68:d6:84:09:f1:0c:67:e2:2c:7b:b9:c1:e9: de:82:35:3c:99:b5:eb:de:d6:a9:9b:72:31:d0:be:47:7d:e0: 49:4e:c2:8f:6f:ca:ff:b8:b3:88:5d:39:28:7e:b1:7c:15:b4: 0d:37:b6:ed:ec:d3:c2:37:75:2b:c9:fa:79:73:57:bc:4b:56: 7b:7e:9a:52:b4:74:f8:3f:1c:69:0f:8d:38:d9:28:e7:b0:10: cf:e9:c6:4a:0c:da:7c:7c:ad:41:08:4e:13:7a:c0:2c:ae:1b: 59:ef:fc:7e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi7u27tDnyW5SUpbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IxNDM3MTMtNzkyMy00ZTRkLTk0NzYtYjhlNWNlMWNh OWM5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk NWY5MDNkYjUtMWZkOC00MmI5LThiY2YtYmRhZGRhNzk1M2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn65YQipckW0IDcsVH3KRlri2NRufq9KNy0SN ljR2rCq8LdGPhDBbjDsHFvX2qzyC5z9CXi90X9ro102XCAChaDi054Ned4sO/g7O M0joiLBSFX2ModhtD7RUhIA7J6LFy4RGj10GM91sAx5XPExWLQx4ZrH42HfLK0Dq tBbsI2xf0qrZJxLlB69xssXuE2urTr6m89N4S26naTYwjM+bdQBLWm40GnbXvWzB WMAAbal3H+Gqw8l53HdhmXw6MA9HzBcwyBABNUYpv4G1lLsVoQ59yZOIyngZRG+l W3+zi9ari1Iuxt4PwGeyRqFNyiRbAFKWRhzLx66yIb5paCSPewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI+otFmqBc78pCbY2xlYodVajzl6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0 MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1Y2UxY2E5YzkvN2UxZGVmMzktY2FmZC0z NmMyLTlkOTMtMzU0N2ZmNzJkYWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2IxNDM3MTMtNzkyMy00ZTRkLTk0 NzYtYjhlNWNlMWNhOWM5LzdiMTQzNzEzLTc5MjMtNGU0ZC05NDc2LWI4ZTVjZTFj YTljOS5jcmwwHwYDVR0jBBgwFoAUYdUy6W27yi6kNGeQ5T4cjK+y2TAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1 Y2UxY2E5YzkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfewDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCvivIO4LN78obePXl3qqfd9QUqnwsEFsxJwCd3poAjR/F42LPQInDc eJPKTRHFPuMQWmGoaJUcw7Nh6sYeu15OiADJgiqV3ZiQmtTSlv2xOlY3LZ2j2wmO rpcP7RJDxiQufGc6ehIKIbehYFs2gnZ2/3rJsiFhkD+xoDOiCcPusc2w1PdnM1+R faRz8t5oIJ9KfMKfdWjWhAnxDGfiLHu5wenegjU8mbXr3tapm3Ix0L5HfeBJTsKP b8r/uLOIXTkofrF8FbQNN7bt7NPCN3Uryfp5c1e8S1Z7fppStHT4PxxpD4042Sjn sBDP6cZKDNp8fK1BCE4TesAsrhtZ7/x+ -----END CERTIFICATE-----Generated at Sun Feb 16 15:56:01 2025 by rpki-client