$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e/88e05931-0c14-3925-9e24-ef2218634232.roa File: 88e05931-0c14-3925-9e24-ef2218634232.roa (raw, json) Hash identifier: t4lpxM90p3qSHWrh9waEtfWwKwtJsvgletH4GkATrRU= Subject key identifier: 5B:3B:97:FF:92:16:92:20:89:56:2B:44:5D:81:72:C3:DB:20:01:16 Certificate issuer: /CN=21846a97-ea37-4a3f-89db-5c537c294e8e Certificate serial: 010D0C9F432858487FB5E79CAECC9CAC5F9668F4 Authority key identifier: F5:24:25:6D:75:45:45:38:2E:73:85:15:F9:D6:3A:37:69:A7:BB:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e/88e05931-0c14-3925-9e24-ef2218634232.roa Signing time: Fri 10 Jan 2025 14:00:51 +0000 ROA not before: Fri 10 Jan 2025 14:00:51 +0000 ROA not after: Thu 10 Apr 2025 13:00:51 +0000 asID: 400678 IP address blocks: 2604:a6c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e/21846a97-ea37-4a3f-89db-5c537c294e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e/21846a97-ea37-4a3f-89db-5c537c294e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7f:b5:e7:9c:ae:cc:9c:ac:5f:96:68:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21846a97-ea37-4a3f-89db-5c537c294e8e Validity Not Before: Jan 10 14:00:51 2025 GMT Not After : Apr 10 13:00:51 2025 GMT Subject: CN=ef85d578-1ff7-46aa-b258-ce175ae15f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:68:55:e1:23:d9:99:aa:af:90:e9:00:8e:e5: 3e:41:28:dd:81:65:3c:a0:c5:85:40:6b:a3:25:24: 77:c6:39:19:48:13:0d:ba:f1:f3:73:bf:e1:4a:dc: 0a:40:1f:41:b2:7a:b3:8c:a5:be:d2:57:8c:64:b5: 60:8b:1a:67:33:97:0c:1f:d0:a0:53:c7:22:83:3c: 89:86:cf:98:0b:e0:4d:f0:9b:af:0f:43:1b:3a:74: 64:40:ec:d1:c8:e1:59:18:2c:54:b2:b8:8c:c6:f4: 4e:e4:bf:f5:95:31:0c:19:79:e5:96:db:2f:0e:3e: 85:42:3c:5b:3b:97:c5:b6:a2:e1:fa:b2:02:13:ff: ce:fa:a3:03:11:5c:35:ae:73:30:fd:85:22:bd:66: 51:e4:1a:eb:03:e6:c0:35:22:66:9e:6a:ef:f5:f1: a7:f7:12:bb:c9:1b:9c:51:4d:c6:51:99:78:24:55: d5:a5:94:5a:4f:73:b8:f4:d3:67:e5:17:9c:fa:00: 75:ed:8b:6c:64:22:dc:56:6c:09:fc:fc:f1:df:2d: 9f:5b:ca:72:c9:4b:e1:fb:8b:d8:9c:89:73:83:3f: b7:9c:27:50:a8:a0:c1:26:2b:1f:ff:b2:8a:b4:d8: 35:9a:e6:28:1f:83:bf:97:df:b3:bc:09:a6:d0:50: ff:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:3B:97:FF:92:16:92:20:89:56:2B:44:5D:81:72:C3:DB:20:01:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e/88e05931-0c14-3925-9e24-ef2218634232.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e/21846a97-ea37-4a3f-89db-5c537c294e8e.crl X509v3 Authority Key Identifier: keyid:F5:24:25:6D:75:45:45:38:2E:73:85:15:F9:D6:3A:37:69:A7:BB:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e.cer sbgp-ipAddrBlock: critical IPv6: 2604:a6c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:5a:19:63:98:67:3e:4f:31:0e:09:67:86:b1:f5:b8:e1:bb: 11:f5:63:a9:47:35:28:10:53:a6:75:94:a5:6d:06:92:3d:32: dc:0c:78:08:ae:34:a8:26:87:5d:70:a5:33:fb:67:01:bd:25: f2:bb:b6:eb:c8:78:d7:30:92:9a:a3:65:8e:bc:48:52:a1:ed: f1:13:51:8e:b7:cc:dd:22:33:3b:2a:43:a3:e4:76:72:29:9b: c7:1d:bb:3c:ca:56:b0:89:ad:e9:f6:60:6e:38:a8:7d:db:d7: 0e:80:be:86:e3:04:66:29:14:30:81:4a:e3:4e:75:00:88:33: d5:e1:cb:97:4f:01:d1:e7:0b:79:c9:4a:a5:34:10:91:ae:7d: d7:3b:d1:0a:5c:d9:50:2e:af:3d:c3:39:fa:4b:3a:96:29:03: bb:ac:2f:47:22:1a:77:08:73:94:16:a5:b6:e9:a8:69:d4:00: 1c:6c:24:73:b1:e2:02:90:06:ea:6f:7c:df:21:a8:77:ea:14: 98:7b:f9:52:c8:80:04:d4:2f:4a:bc:bd:b3:41:3c:67:0b:e3: 13:05:21:f7:e3:8e:33:87:16:7e:c1:88:46:4f:26:67:ae:17: 81:e6:10:ca:46:1b:9c:ae:b4:31:05:88:f5:0c:e6:a9:34:68: 61:9d:eb:76 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEh/teecrsycrF+WaPQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE4NDZhOTctZWEzNy00YTNmLTg5ZGItNWM1MzdjMjk0 ZThlMB4XDTI1MDExMDE0MDA1MVoXDTI1MDQxMDEzMDA1MVowLzEtMCsGA1UEAxMk ZWY4NWQ1NzgtMWZmNy00NmFhLWIyNTgtY2UxNzVhZTE1ZjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2hV4SPZmaqvkOkAjuU+QSjdgWU8oMWFQGuj JSR3xjkZSBMNuvHzc7/hStwKQB9BsnqzjKW+0leMZLVgixpnM5cMH9CgU8cigzyJ hs+YC+BN8JuvD0MbOnRkQOzRyOFZGCxUsriMxvRO5L/1lTEMGXnlltsvDj6FQjxb O5fFtqLh+rICE//O+qMDEVw1rnMw/YUivWZR5BrrA+bANSJmnmrv9fGn9xK7yRuc UU3GUZl4JFXVpZRaT3O49NNn5Rec+gB17YtsZCLcVmwJ/Pzx3y2fW8pyyUvh+4vY nIlzgz+3nCdQqKDBJisf/7KKtNg1muYoH4O/l9+zvAmm0FD/2QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFs7l/+SFpIgiVYrRF2BcsPbIAEWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yMTg0 NmE5Ny1lYTM3LTRhM2YtODlkYi01YzUzN2MyOTRlOGUvODhlMDU5MzEtMGMxNC0z OTI1LTllMjQtZWYyMjE4NjM0MjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjE4NDZhOTctZWEzNy00YTNmLTg5 ZGItNWM1MzdjMjk0ZThlLzIxODQ2YTk3LWVhMzctNGEzZi04OWRiLTVjNTM3YzI5 NGU4ZS5jcmwwHwYDVR0jBBgwFoAU9SQlbXVFRTguc4UV+dY6N2mnu94wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8yMTg0NmE5Ny1lYTM3LTRhM2YtODlkYi01YzUz N2MyOTRlOGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSmwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAgWhljmGc+TzEOCWeGsfW44bsR9WOpRzUoEFOmdZSlbQaSPTLcDHgI rjSoJoddcKUz+2cBvSXyu7bryHjXMJKao2WOvEhSoe3xE1GOt8zdIjM7KkOj5HZy KZvHHbs8ylawia3p9mBuOKh929cOgL6G4wRmKRQwgUrjTnUAiDPV4cuXTwHR5wt5 yUqlNBCRrn3XO9EKXNlQLq89wzn6SzqWKQO7rC9HIhp3CHOUFqW26ahp1AAcbCRz seICkAbqb3zfIah36hSYe/lSyIAE1C9KvL2zQTxnC+MTBSH3444zhxZ+wYhGTyZn rheB5hDKRhucrrQxBYj1DOapNGhhnet2 -----END CERTIFICATE-----Generated at Sun Feb 16 20:29:57 2025 by rpki-client