$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/03233396-7373-36cb-ab6f-70f08e11bdb8.roa File: 03233396-7373-36cb-ab6f-70f08e11bdb8.roa (raw, json) Hash identifier: GEJInjyCLACnM3hm8Gt9wU3hG/6YQVADcU+R8zwWJQo= Subject key identifier: 2F:4B:48:97:A0:0F:3F:E1:96:2E:70:B3:59:E2:1B:45:57:C0:23:7D Certificate issuer: /CN=1f60c0cf-9537-4a86-bd67-a1dfd2892507 Certificate serial: 010D0C9F43285848A830A767326FB4D33F21DD80 Authority key identifier: 9D:B7:19:FA:97:3D:4F:D2:FA:41:B6:80:92:4E:D7:18:33:4C:4E:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/03233396-7373-36cb-ab6f-70f08e11bdb8.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 22280 IP address blocks: 2607:1940::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/1f60c0cf-9537-4a86-bd67-a1dfd2892507.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/1f60c0cf-9537-4a86-bd67-a1dfd2892507.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:a7:67:32:6f:b4:d3:3f:21:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f60c0cf-9537-4a86-bd67-a1dfd2892507 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=a1dd2cfd-ea9c-493f-b937-6b20cb4ec8dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bc:33:08:88:25:9a:2a:eb:da:d2:00:05:e3: f9:bc:cd:75:f7:d7:79:e4:09:ea:15:0a:04:00:8d: f9:16:00:7e:60:bb:d5:66:8d:58:57:e9:d9:4b:b3: 36:70:f2:60:f5:b8:ff:6a:11:c2:d3:4b:62:76:b5: 01:ea:dd:f4:aa:04:32:d6:8c:f6:52:b9:26:79:0f: 81:f2:e3:59:4b:9a:e1:10:8c:31:05:bc:eb:23:2c: 9b:83:73:24:13:79:a3:88:08:a9:ae:93:ee:4c:2c: ec:12:f6:1d:c2:8c:9b:cf:08:64:b1:e7:55:75:fa: 45:3f:04:eb:cf:fc:e7:49:41:b2:a9:42:9c:ee:f8: 8a:ac:93:60:22:d7:c1:33:6a:0f:0a:f7:26:92:f7: 91:b8:c2:dd:7b:fe:b0:d6:13:2d:13:32:34:e8:d1: e6:40:53:d8:3c:97:57:e9:85:f8:bb:7a:3f:80:2f: 2b:c5:79:8a:84:9f:5c:c9:64:b9:39:b5:5e:66:07: a6:50:46:f1:c5:91:86:89:93:17:15:95:56:67:68: 90:02:c7:d1:f0:80:d9:70:83:dd:72:58:af:74:42: c3:05:86:b9:c3:c0:7d:f5:be:8c:ae:30:df:9e:a9: ce:db:7f:f0:bf:70:7f:21:de:e3:7e:98:a6:fd:70: 77:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4B:48:97:A0:0F:3F:E1:96:2E:70:B3:59:E2:1B:45:57:C0:23:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/03233396-7373-36cb-ab6f-70f08e11bdb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/1f60c0cf-9537-4a86-bd67-a1dfd2892507.crl X509v3 Authority Key Identifier: keyid:9D:B7:19:FA:97:3D:4F:D2:FA:41:B6:80:92:4E:D7:18:33:4C:4E:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507.cer sbgp-ipAddrBlock: critical IPv6: 2607:1940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:1f:9a:a5:c6:55:c0:46:20:d7:e1:9b:3b:c4:5d:1c:22:0e: 0b:1c:63:f8:d0:41:06:26:95:95:b7:a9:23:ae:77:a0:11:c3: 60:11:8e:7c:36:2a:20:03:a7:6c:dc:9a:36:57:cf:10:f7:f8: ee:65:f7:33:2c:ee:34:8f:61:ff:5c:6f:36:0a:5f:7f:54:89: b5:a7:c0:1b:24:17:46:e1:9f:fd:d3:3c:67:72:44:6a:11:ca: a3:4f:e5:e1:18:e4:0d:2f:c1:ac:15:a9:a2:7f:57:b5:29:bb: c9:21:b2:63:a0:df:c5:e2:8c:ef:e9:1e:2c:17:07:16:b3:20: a1:97:28:6f:83:68:9b:53:51:9f:48:71:3a:c6:2e:06:53:2d: 37:fe:04:b8:25:0c:6a:84:d4:85:89:54:97:19:4f:8d:1b:1f: 14:6a:2f:09:de:cf:f4:55:ed:d8:bc:71:48:89:f2:9f:a5:09: 95:1a:ec:b4:1a:1e:04:75:2c:28:4b:09:ef:03:4c:7a:94:04: 43:b0:ec:48:7b:b4:d5:42:9e:73:21:f0:77:75:06:6f:45:b6: 09:0c:93:71:dc:9d:6e:2c:d4:98:21:26:41:3c:73:bf:f0:70: 94:36:72:c5:3d:d7:38:20:18:b1:75:c5:71:b1:60:ea:fa:7e: a2:74:39:5d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEioMKdnMm+00z8h3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY2MGMwY2YtOTUzNy00YTg2LWJkNjctYTFkZmQyODky NTA3MB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk YTFkZDJjZmQtZWE5Yy00OTNmLWI5MzctNmIyMGNiNGVjOGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrwzCIglmirr2tIABeP5vM1199d55AnqFQoE AI35FgB+YLvVZo1YV+nZS7M2cPJg9bj/ahHC00tidrUB6t30qgQy1oz2UrkmeQ+B 8uNZS5rhEIwxBbzrIyybg3MkE3mjiAiprpPuTCzsEvYdwoybzwhksedVdfpFPwTr z/znSUGyqUKc7viKrJNgItfBM2oPCvcmkveRuMLde/6w1hMtEzI06NHmQFPYPJdX 6YX4u3o/gC8rxXmKhJ9cyWS5ObVeZgemUEbxxZGGiZMXFZVWZ2iQAsfR8IDZcIPd clivdELDBYa5w8B99b6MrjDfnqnO23/wv3B/Id7jfpim/XB38wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC9LSJegDz/hli5ws1niG0VXwCN9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xZjYw YzBjZi05NTM3LTRhODYtYmQ2Ny1hMWRmZDI4OTI1MDcvMDMyMzMzOTYtNzM3My0z NmNiLWFiNmYtNzBmMDhlMTFiZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWY2MGMwY2YtOTUzNy00YTg2LWJk NjctYTFkZmQyODkyNTA3LzFmNjBjMGNmLTk1MzctNGE4Ni1iZDY3LWExZGZkMjg5 MjUwNy5jcmwwHwYDVR0jBBgwFoAUnbcZ+pc9T9L6QbaAkk7XGDNMTpUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xZjYwYzBjZi05NTM3LTRhODYtYmQ2Ny1hMWRm ZDI4OTI1MDcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcZQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAYH5qlxlXARiDX4Zs7xF0cIg4LHGP40EEGJpWVt6kjrnegEcNgEY58 NiogA6ds3Jo2V88Q9/juZfczLO40j2H/XG82Cl9/VIm1p8AbJBdG4Z/90zxnckRq EcqjT+XhGOQNL8GsFamif1e1KbvJIbJjoN/F4ozv6R4sFwcWsyChlyhvg2ibU1Gf SHE6xi4GUy03/gS4JQxqhNSFiVSXGU+NGx8Uai8J3s/0Ve3YvHFIifKfpQmVGuy0 Gh4EdSwoSwnvA0x6lARDsOxIe7TVQp5zIfB3dQZvRbYJDJNx3J1uLNSYISZBPHO/ 8HCUNnLFPdc4IBixdcVxsWDq+n6idDld -----END CERTIFICATE-----Generated at Sat Apr 12 15:33:08 2025 by rpki-client