$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/065ee998-46a2-4051-a1a1-b267cd239391/911a5292-cc4f-303e-84fc-f8db0222164a.roa File: 911a5292-cc4f-303e-84fc-f8db0222164a.roa (raw, json) Hash identifier: u8labehXfoP+K1+nVKrBlfYE2JmW38vKtjGC0RdD5xI= Subject key identifier: D1:82:8C:FF:EF:A0:93:98:51:3D:4C:8C:F6:0C:51:45:65:2C:2E:42 Certificate issuer: /CN=065ee998-46a2-4051-a1a1-b267cd239391 Certificate serial: 010D0C9F432858488280842963E233F92D8D4B31 Authority key identifier: BE:BE:C6:A8:26:70:00:9B:E3:A7:43:A8:AE:C6:21:CF:5E:E0:41:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/065ee998-46a2-4051-a1a1-b267cd239391.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/065ee998-46a2-4051-a1a1-b267cd239391/911a5292-cc4f-303e-84fc-f8db0222164a.roa Signing time: Sat 11 Jan 2025 14:00:52 +0000 ROA not before: Sat 11 Jan 2025 14:00:52 +0000 ROA not after: Fri 11 Apr 2025 13:00:52 +0000 asID: 33549 IP address blocks: 2604:6440::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/065ee998-46a2-4051-a1a1-b267cd239391/065ee998-46a2-4051-a1a1-b267cd239391.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/065ee998-46a2-4051-a1a1-b267cd239391/065ee998-46a2-4051-a1a1-b267cd239391.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/065ee998-46a2-4051-a1a1-b267cd239391.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:82:80:84:29:63:e2:33:f9:2d:8d:4b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=065ee998-46a2-4051-a1a1-b267cd239391 Validity Not Before: Jan 11 14:00:52 2025 GMT Not After : Apr 11 13:00:52 2025 GMT Subject: CN=b2f2ab1a-0c3b-4fc9-bdaa-a2e5150c84ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8f:f4:bb:73:9b:30:b5:9e:dc:40:e5:f5:73: 40:47:9f:cf:14:34:78:fb:60:c2:ae:cc:da:31:2b: 7e:47:9e:f8:68:e9:3c:d0:25:4f:60:eb:e3:76:66: 08:b7:f0:7f:36:ff:34:50:d6:e9:1f:f9:32:af:e3: f8:f1:4f:04:22:51:1b:00:4e:3a:51:ce:51:82:28: 65:db:14:ff:25:82:93:53:eb:e0:30:56:fd:5d:71: b5:41:7b:47:b5:91:ba:12:10:15:02:94:e0:7b:c4: 19:9c:8a:7f:1d:da:8a:63:02:92:6b:e6:43:7c:c7: 81:b5:41:7b:a3:ae:4e:cc:6b:0f:e8:0d:a0:10:89: d6:cf:b5:0d:d5:3c:03:e9:53:f0:fc:d6:85:8c:14: 7e:21:a8:db:55:29:ba:db:a5:19:f2:95:60:d9:94: 3d:81:10:a0:2e:d2:54:eb:01:62:8e:87:dd:ab:a4: 73:fa:f8:08:d2:cc:b4:96:5a:03:c1:0f:48:39:ef: 0e:90:8e:93:46:fa:d5:a3:4b:2f:7e:85:61:83:b8: 61:f4:74:c2:68:8d:0f:c1:09:ce:23:08:e1:e5:bc: dc:45:48:e9:b5:74:53:3f:fc:9e:a4:c5:6d:40:e7: e5:2c:2e:c6:e6:84:ab:90:9c:b3:e1:8c:ab:37:cd: 27:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:82:8C:FF:EF:A0:93:98:51:3D:4C:8C:F6:0C:51:45:65:2C:2E:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/065ee998-46a2-4051-a1a1-b267cd239391/911a5292-cc4f-303e-84fc-f8db0222164a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/065ee998-46a2-4051-a1a1-b267cd239391/065ee998-46a2-4051-a1a1-b267cd239391.crl X509v3 Authority Key Identifier: keyid:BE:BE:C6:A8:26:70:00:9B:E3:A7:43:A8:AE:C6:21:CF:5E:E0:41:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/065ee998-46a2-4051-a1a1-b267cd239391.cer sbgp-ipAddrBlock: critical IPv6: 2604:6440::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:22:02:aa:97:76:55:f1:ac:e2:1a:9e:bd:17:65:97:81:61: 80:b6:a5:65:ef:a0:33:32:f3:13:c4:26:fc:63:95:9e:4f:32: 83:29:43:f7:6a:16:c2:42:50:b7:cf:96:44:72:23:e0:f4:98: e6:ca:11:5a:e6:82:48:01:43:0e:23:37:c8:2b:88:11:4d:8b: fe:27:8a:a3:b7:d2:c5:1c:75:9e:6b:68:15:73:1f:cb:75:48: c6:bf:35:a1:f7:25:7e:2f:db:d6:0d:e0:1d:5d:c8:e1:83:a6: 3a:13:3a:39:72:71:22:6b:31:69:51:8d:83:58:43:27:2e:55: 32:1b:ea:b7:6f:e7:f4:df:6b:17:61:94:16:b2:84:46:94:39: 2a:45:2e:85:0d:cb:b5:fc:f7:50:90:20:5c:83:e5:bf:38:9d: ed:43:d6:58:03:5c:f5:66:9d:05:17:4f:ef:48:59:a9:1f:64: 7c:b3:4b:f5:84:53:b2:d7:a9:27:33:9d:e7:aa:f6:82:7a:f1: 2c:68:6c:bc:32:46:79:9d:4a:f2:e5:18:05:14:99:75:0d:6c: 19:80:9a:4e:bd:90:ab:c8:65:6c:4c:40:56:e8:72:9d:13:7a: 2c:e2:cd:cd:84:89:64:92:a0:d9:96:bc:1f:f4:65:54:9a:24: 10:17:03:e6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiCgIQpY+Iz+S2NSzEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY1ZWU5OTgtNDZhMi00MDUxLWExYTEtYjI2N2NkMjM5 MzkxMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk YjJmMmFiMWEtMGMzYi00ZmM5LWJkYWEtYTJlNTE1MGM4NGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4/0u3ObMLWe3EDl9XNAR5/PFDR4+2DCrsza MSt+R574aOk80CVPYOvjdmYIt/B/Nv80UNbpH/kyr+P48U8EIlEbAE46Uc5Rgihl 2xT/JYKTU+vgMFb9XXG1QXtHtZG6EhAVApTge8QZnIp/HdqKYwKSa+ZDfMeBtUF7 o65OzGsP6A2gEInWz7UN1TwD6VPw/NaFjBR+IajbVSm626UZ8pVg2ZQ9gRCgLtJU 6wFijofdq6Rz+vgI0sy0lloDwQ9IOe8OkI6TRvrVo0svfoVhg7hh9HTCaI0PwQnO Iwjh5bzcRUjptXRTP/yepMVtQOflLC7G5oSrkJyz4YyrN80nnwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNGCjP/voJOYUT1MjPYMUUVlLC5CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wNjVl ZTk5OC00NmEyLTQwNTEtYTFhMS1iMjY3Y2QyMzkzOTEvOTExYTUyOTItY2M0Zi0z MDNlLTg0ZmMtZjhkYjAyMjIxNjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDY1ZWU5OTgtNDZhMi00MDUxLWEx YTEtYjI2N2NkMjM5MzkxLzA2NWVlOTk4LTQ2YTItNDA1MS1hMWExLWIyNjdjZDIz OTM5MS5jcmwwHwYDVR0jBBgwFoAUvr7GqCZwAJvjp0OorsYhz17gQZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wNjVlZTk5OC00NmEyLTQwNTEtYTFhMS1iMjY3 Y2QyMzkzOTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRkQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCjIgKql3ZV8aziGp69F2WXgWGAtqVl76AzMvMTxCb8Y5WeTzKDKUP3 ahbCQlC3z5ZEciPg9JjmyhFa5oJIAUMOIzfIK4gRTYv+J4qjt9LFHHWea2gVcx/L dUjGvzWh9yV+L9vWDeAdXcjhg6Y6Ezo5cnEiazFpUY2DWEMnLlUyG+q3b+f032sX YZQWsoRGlDkqRS6FDcu1/PdQkCBcg+W/OJ3tQ9ZYA1z1Zp0FF0/vSFmpH2R8s0v1 hFOy16knM53nqvaCevEsaGy8MkZ5nUry5RgFFJl1DWwZgJpOvZCryGVsTEBW6HKd E3os4s3NhIlkkqDZlrwf9GVUmiQQFwPm -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:33 2025 by rpki-client