$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/4d174698-f0e1-3dfc-8937-59d2c51f39a9.roa File: 4d174698-f0e1-3dfc-8937-59d2c51f39a9.roa (raw, json) Hash identifier: 8HHXVG2u+z9yX68Bg4P8l7SNDelJU7n2+Pwp52Y5hZg= Subject key identifier: F8:9B:86:A5:3F:71:B7:20:7E:87:E4:F3:32:BE:24:EF:22:EF:2E:18 Certificate issuer: /CN=c7b3cf4c-bba0-481c-8e82-74f050c5fa2e Certificate serial: 010D0C9F432858484C101960FB988824F1102AC0 Authority key identifier: FF:BC:A7:A8:B0:C9:3E:0B:30:5C:7D:40:5E:6D:1E:0F:2B:BA:93:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/4d174698-f0e1-3dfc-8937-59d2c51f39a9.roa Signing time: Mon 23 Dec 2024 02:00:40 +0000 ROA not before: Mon 23 Dec 2024 02:00:40 +0000 ROA not after: Sun 23 Mar 2025 01:00:40 +0000 asID: 394456 IP address blocks: 2607:b6c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4c:10:19:60:fb:98:88:24:f1:10:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7b3cf4c-bba0-481c-8e82-74f050c5fa2e Validity Not Before: Dec 23 02:00:40 2024 GMT Not After : Mar 23 01:00:40 2025 GMT Subject: CN=49087bab-d8ec-48f3-971f-93e1722fa972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f3:bb:48:2e:10:27:ff:03:5d:21:f8:b5:9d: 77:2a:f9:c1:95:80:b1:16:de:12:ab:6b:a5:1c:89: fb:e5:9e:1d:e3:98:81:20:a3:8f:1e:c7:b9:89:c8: 0a:bd:2c:13:dd:35:29:8a:a9:81:09:9e:49:0c:9a: df:4b:3e:f8:6b:fe:10:05:64:d2:96:13:e5:66:bf: a0:91:52:e2:da:df:a8:34:44:95:c4:a7:7e:a8:ba: 53:96:8f:5a:21:d1:8c:be:36:0b:66:c4:cb:0e:3a: 61:47:ab:a2:7a:cb:55:55:df:e8:e4:f0:47:a0:9e: 16:ee:fc:38:b0:fb:80:f5:5c:e7:66:7c:96:e9:d2: fb:03:ba:0f:ea:99:ec:c3:09:45:d8:6e:49:1c:2c: a7:91:65:95:e0:da:05:a6:31:97:9e:d2:03:53:24: 27:97:9d:46:e5:50:a8:f1:49:50:00:f3:71:7d:37: cd:14:f2:d7:fa:ff:d6:b9:56:e8:77:c4:13:ba:32: 7e:21:df:b0:89:22:30:93:a2:cb:db:77:5a:d8:f4: dc:31:1e:4c:22:c0:2e:f7:3c:bc:34:cf:31:9d:34: 39:1e:ed:87:e2:79:e7:14:14:71:99:ec:14:a3:8a: 21:c7:86:45:f8:af:3a:dc:dc:d6:37:59:f6:a3:12: 0d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9B:86:A5:3F:71:B7:20:7E:87:E4:F3:32:BE:24:EF:22:EF:2E:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/4d174698-f0e1-3dfc-8937-59d2c51f39a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.crl X509v3 Authority Key Identifier: keyid:FF:BC:A7:A8:B0:C9:3E:0B:30:5C:7D:40:5E:6D:1E:0F:2B:BA:93:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer sbgp-ipAddrBlock: critical IPv6: 2607:b6c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:2f:1a:c4:f3:1d:37:6a:80:ce:8c:2f:6a:ce:97:fe:1c:a3: 87:80:31:4c:54:30:04:29:df:a0:b7:af:96:90:1f:69:9b:6f: e9:6d:c0:38:cc:14:fd:e7:f0:68:40:5d:04:20:4d:36:7c:1c: 2c:67:b5:4e:b9:6a:a3:a2:3f:ca:96:3a:94:3a:78:5c:88:07: 76:ee:35:e3:05:d9:c3:a0:22:08:30:14:b1:92:b8:78:0a:79: 37:c8:ac:14:04:5e:4b:da:85:60:17:ff:6d:81:dc:e3:19:ad: c6:8e:bf:47:2c:8e:c8:e4:ee:f0:eb:29:65:15:e2:12:79:0f: 09:e7:13:88:66:a8:2e:fd:7b:62:a2:60:09:44:df:61:28:db: 24:f7:17:6c:e6:d8:08:83:43:bc:6b:ab:af:92:f0:5c:c2:99: 69:a3:e1:8a:25:c0:6c:2a:d4:24:62:dd:a3:4e:c5:e4:7f:2b: 11:57:b6:63:97:48:46:e3:f4:1e:16:fa:c7:57:d4:6d:eb:ac: 23:67:8e:7e:da:83:3e:40:be:82:4e:b6:07:84:be:82:26:e8: 9b:f6:bf:2f:1c:8d:da:be:55:26:61:1f:16:fd:3e:ce:ca:34: 20:96:25:fd:48:49:eb:ec:f3:fb:89:89:c1:50:2f:be:df:d3: 8c:b3:1d:d8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhMEBlg+5iIJPEQKsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdiM2NmNGMtYmJhMC00ODFjLThlODItNzRmMDUwYzVm YTJlMB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk NDkwODdiYWItZDhlYy00OGYzLTk3MWYtOTNlMTcyMmZhOTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPO7SC4QJ/8DXSH4tZ13KvnBlYCxFt4Sq2ul HIn75Z4d45iBIKOPHse5icgKvSwT3TUpiqmBCZ5JDJrfSz74a/4QBWTSlhPlZr+g kVLi2t+oNESVxKd+qLpTlo9aIdGMvjYLZsTLDjphR6uiestVVd/o5PBHoJ4W7vw4 sPuA9VznZnyW6dL7A7oP6pnswwlF2G5JHCynkWWV4NoFpjGXntIDUyQnl51G5VCo 8UlQAPNxfTfNFPLX+v/WuVbod8QTujJ+Id+wiSIwk6LL23da2PTcMR5MIsAu9zy8 NM8xnTQ5Hu2H4nnnFBRxmewUo4ohx4ZF+K863NzWN1n2oxINiwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPibhqU/cbcgfofk8zK+JO8i7y4YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jN2Iz Y2Y0Yy1iYmEwLTQ4MWMtOGU4Mi03NGYwNTBjNWZhMmUvNGQxNzQ2OTgtZjBlMS0z ZGZjLTg5MzctNTlkMmM1MWYzOWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYzdiM2NmNGMtYmJhMC00ODFjLThl ODItNzRmMDUwYzVmYTJlL2M3YjNjZjRjLWJiYTAtNDgxYy04ZTgyLTc0ZjA1MGM1 ZmEyZS5jcmwwHwYDVR0jBBgwFoAU/7ynqLDJPgswXH1AXm0eDyu6kwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jN2IzY2Y0Yy1iYmEwLTQ4MWMtOGU4Mi03NGYw NTBjNWZhMmUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJge2wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA0LxrE8x03aoDOjC9qzpf+HKOHgDFMVDAEKd+gt6+WkB9pm2/pbcA4 zBT95/BoQF0EIE02fBwsZ7VOuWqjoj/KljqUOnhciAd27jXjBdnDoCIIMBSxkrh4 Cnk3yKwUBF5L2oVgF/9tgdzjGa3Gjr9HLI7I5O7w6yllFeISeQ8J5xOIZqgu/Xti omAJRN9hKNsk9xds5tgIg0O8a6uvkvBcwplpo+GKJcBsKtQkYt2jTsXkfysRV7Zj l0hG4/QeFvrHV9Rt66wjZ45+2oM+QL6CTrYHhL6CJuib9r8vHI3avlUmYR8W/T7O yjQgliX9SEnr7PP7iYnBUC++39OMsx3Y -----END CERTIFICATE-----Generated at Sun Feb 16 20:53:52 2025 by rpki-client