$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/ca191e91-1ffc-3d56-a7f7-352483de6c9a.roa File: ca191e91-1ffc-3d56-a7f7-352483de6c9a.roa (raw, json) Hash identifier: 4mEOhOhbAvL9IcMMLaj7kSudWA1vpg6FMLhXFpsiOtE= Subject key identifier: 68:F2:44:B1:C7:7B:CE:53:9F:7E:1E:4E:EA:80:48:1B:03:C0:82:40 Certificate issuer: /CN=09440a93-986f-41da-8723-7b67f81bdbce Certificate serial: 010D0C9F43285848ADC618FAF88F905DB6E28540 Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/ca191e91-1ffc-3d56-a7f7-352483de6c9a.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 19901 IP address blocks: 2601:1e00::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:18:fa:f8:8f:90:5d:b6:e2:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=dde3dac3-a760-40ea-9f37-0923fe066e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6e:10:76:c7:65:04:a1:37:f4:0f:5b:d7:38: c9:1a:d7:91:c9:84:44:3b:2d:09:9c:f8:29:85:68: c0:d3:32:6b:68:3b:c4:94:76:aa:ea:f8:d9:68:fa: 89:84:79:a2:e3:a7:63:ee:7b:43:49:9c:e2:13:da: 74:01:18:ab:60:f8:6e:c4:3f:a5:20:39:de:24:3b: 86:6e:40:fb:99:bf:8b:6c:db:c9:e2:73:4d:81:f9: 9b:24:96:af:ad:83:97:84:b8:0f:91:96:f9:d6:ca: 40:f5:5c:c4:ec:9a:ec:2d:be:b7:09:57:42:b2:cb: db:e8:d2:ed:d6:25:2e:72:94:0e:e8:f4:bc:b5:22: af:c5:7e:47:87:bc:d8:2e:d9:51:a1:75:d9:8e:f4: 9c:f6:6f:b0:6e:c5:84:c5:e8:90:1b:c4:ac:04:e0: e3:d8:88:74:e6:bb:16:9e:47:9b:76:32:9f:2e:c3: c2:2c:c5:17:84:5a:c3:48:18:59:10:26:a0:9a:60: fc:47:31:ee:4b:b7:64:9b:22:63:e5:a1:82:b9:5b: 7a:89:06:43:94:0a:47:38:1d:bc:c6:be:26:30:d6: 25:9b:17:fb:c7:3d:70:7b:63:d3:1c:72:7c:a9:4c: a3:c2:48:d0:4e:f0:d6:c1:c8:14:5c:55:92:26:47: 04:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F2:44:B1:C7:7B:CE:53:9F:7E:1E:4E:EA:80:48:1B:03:C0:82:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/ca191e91-1ffc-3d56-a7f7-352483de6c9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl X509v3 Authority Key Identifier: keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer sbgp-ipAddrBlock: critical IPv6: 2601:1e00::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:ce:a3:ed:6b:8d:9f:4d:04:b3:98:41:ad:ca:7d:ef:c1:74: 4b:d4:ac:21:cc:28:af:78:79:e8:4f:dc:a0:a1:37:94:2b:4d: 30:36:82:d7:39:be:66:9f:90:b1:23:58:65:e2:59:c8:b3:b4: 78:72:83:32:d7:23:5f:b9:7b:8f:d0:fe:97:79:4e:67:d9:fa: 3a:d2:4b:1f:12:b1:8b:e0:8a:d8:6c:7d:f6:27:aa:e0:37:53: d1:de:d8:ea:38:cb:40:f0:9f:5c:ec:dc:b1:4c:6f:24:02:92: 2e:c4:75:61:2d:2b:7a:1b:ac:69:a7:1a:6b:7e:6b:f7:9b:13: a0:ae:eb:4c:98:a5:45:92:01:6b:68:b1:3e:c7:9b:d0:cc:f7: d2:60:b9:51:4b:14:35:01:50:3f:2a:3f:df:07:19:1e:09:b8: 86:fc:5f:90:22:22:54:e7:d1:c1:6a:08:f1:ef:2e:a7:0d:ba: a6:04:59:7b:6a:8d:82:54:44:13:e5:1b:e4:35:bf:55:b3:b6: d3:53:f2:a4:0f:20:d2:81:61:60:b0:5d:9d:73:75:63:4e:da: 6b:87:5e:44:ee:22:88:7f:ce:97:71:b8:f8:99:b6:45:12:af: 15:26:23:d4:70:0a:a3:6b:69:a2:73:31:78:3c:55:80:1e:e3: db:83:94:48 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEitxhj6+I+QXbbihUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk YmNlMB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk ZGRlM2RhYzMtYTc2MC00MGVhLTlmMzctMDkyM2ZlMDY2ZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG4QdsdlBKE39A9b1zjJGteRyYREOy0JnPgp hWjA0zJraDvElHaq6vjZaPqJhHmi46dj7ntDSZziE9p0ARirYPhuxD+lIDneJDuG bkD7mb+LbNvJ4nNNgfmbJJavrYOXhLgPkZb51spA9VzE7JrsLb63CVdCssvb6NLt 1iUucpQO6PS8tSKvxX5Hh7zYLtlRoXXZjvSc9m+wbsWExeiQG8SsBODj2Ih05rsW nkebdjKfLsPCLMUXhFrDSBhZECagmmD8RzHuS7dkmyJj5aGCuVt6iQZDlApHOB28 xr4mMNYlmxf7xz1we2PTHHJ8qUyjwkjQTvDWwcgUXFWSJkcEvwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGjyRLHHe85Tn34eTuqASBsDwIJAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0 MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvY2ExOTFlOTEtMWZmYy0z ZDU2LWE3ZjctMzUyNDgzZGU2YzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3 MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3 ZjgxYmRiY2UuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgEeADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBhzqPta42fTQSzmEGtyn3vwXRL1KwhzCiveHnoT9ygoTeUK00wNoLX Ob5mn5CxI1hl4lnIs7R4coMy1yNfuXuP0P6XeU5n2fo60ksfErGL4IrYbH32J6rg N1PR3tjqOMtA8J9c7NyxTG8kApIuxHVhLSt6G6xppxprfmv3mxOgrutMmKVFkgFr aLE+x5vQzPfSYLlRSxQ1AVA/Kj/fBxkeCbiG/F+QIiJU59HBagjx7y6nDbqmBFl7 ao2CVEQT5RvkNb9Vs7bTU/KkDyDSgWFgsF2dc3VjTtprh15E7iKIf86Xcbj4mbZF Eq8VJiPUcAqja2miczF4PFWAHuPbg5RI -----END CERTIFICATE-----Generated at Sat Apr 12 00:48:58 2025 by rpki-client