$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/4e50a587-28e3-33c4-93d2-06b5fce81567.roa File: 4e50a587-28e3-33c4-93d2-06b5fce81567.roa (raw, json) Hash identifier: XNObKYr6+UoYX753ETC3iddtEiLdlCWr0WqyTpcuHrU= Subject key identifier: A5:30:69:E3:34:31:1F:15:BD:B1:36:3E:AF:3A:DD:61:FA:42:59:F4 Certificate issuer: /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343 Certificate serial: 010D0C9F432858488280927040C0070971AB3380 Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/4e50a587-28e3-33c4-93d2-06b5fce81567.roa Signing time: Sat 11 Jan 2025 14:00:52 +0000 ROA not before: Sat 11 Jan 2025 14:00:52 +0000 ROA not after: Fri 11 Apr 2025 13:00:52 +0000 asID: 30041 IP address blocks: 2607:9b00::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:82:80:92:70:40:c0:07:09:71:ab:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343 Validity Not Before: Jan 11 14:00:52 2025 GMT Not After : Apr 11 13:00:52 2025 GMT Subject: CN=536c5568-3035-4174-b9cb-e103529f505f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8e:ef:3a:6b:0f:60:18:91:22:fd:6a:40:4a: 4b:0e:08:31:61:71:55:27:4b:70:c5:a6:3f:34:b0: 41:3d:f4:7b:dc:34:ad:0f:2b:fb:e4:fb:b2:0f:e8: 52:8e:37:61:35:8d:f8:9d:c3:57:f4:79:61:70:43: 20:40:a1:5d:29:bf:9c:98:d4:aa:7a:85:da:1e:12: 01:15:17:e5:3a:cd:eb:20:62:24:7b:98:8c:ee:0c: f0:6e:ee:9a:dd:69:f5:09:06:88:44:c8:e4:ab:1e: ef:86:86:2d:c6:7d:95:92:12:10:21:83:17:51:c5: cf:fa:00:40:99:26:36:68:a2:94:76:00:fd:2e:74: 2a:5b:ed:5e:7a:7a:1b:65:13:4d:ea:a0:22:58:63: c5:12:3e:57:47:bd:04:99:a7:fd:fc:28:e9:6b:e2: b0:26:28:11:d9:e5:13:bc:75:5f:98:95:c7:23:3f: ef:b6:21:5d:63:67:8e:fc:13:6d:13:9c:09:6c:e6: dc:9a:4c:8c:b1:ff:32:92:01:f2:1d:6e:06:84:fe: e6:13:5a:11:b3:09:65:a9:58:a7:b9:2d:85:e9:7c: 35:f5:13:0f:c7:dd:a5:41:e5:f5:6d:0a:f2:76:14: 0a:4b:d3:86:68:63:85:3b:2a:8c:88:bc:fa:1e:ad: 5d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:30:69:E3:34:31:1F:15:BD:B1:36:3E:AF:3A:DD:61:FA:42:59:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/4e50a587-28e3-33c4-93d2-06b5fce81567.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl X509v3 Authority Key Identifier: keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer sbgp-ipAddrBlock: critical IPv6: 2607:9b00::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:81:12:14:d1:d9:3e:42:b9:4d:ef:fc:2b:07:a4:99:87:f8: 61:8e:eb:0b:6f:2c:d5:5c:47:2e:49:92:a9:59:4f:3e:c0:fa: e8:ca:3d:df:e6:14:74:52:66:17:9b:21:54:bf:26:85:24:7e: 63:0c:5c:50:71:2a:e3:16:4d:ab:77:40:17:d6:d2:9f:00:32: 54:a7:86:3d:d1:07:2b:e7:2e:dd:bf:e7:12:97:f3:93:f2:21: f6:79:e2:72:1f:01:a8:ed:c5:d8:42:7d:4c:8a:35:09:0b:99: 72:ff:dc:66:5c:df:56:bb:11:e2:0a:69:f6:3e:45:cc:42:15: 7f:3c:40:91:61:7d:54:d0:03:20:81:ea:a7:43:db:a9:ee:9c: 1f:01:78:44:e4:ae:96:86:47:65:76:ca:62:f9:ab:40:ce:70: 9d:a4:6e:35:d8:ae:22:f0:66:cc:45:bd:fe:9a:64:e8:05:dd: 44:e6:d4:2c:ff:a7:b9:76:0d:ce:fa:51:42:42:57:79:f1:c1: de:3f:eb:0d:88:a0:52:e0:f2:7f:fd:2c:45:66:de:0f:93:e8: c9:0a:cf:36:5a:5c:7d:bb:38:bc:0a:49:e6:00:bf:18:f3:7e: 8a:5a:ac:2b:b3:11:7a:ce:3f:71:77:89:c4:56:ce:54:60:27: b6:3f:f0:55 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiCgJJwQMAHCXGrM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJhOGJkZDAtNmM3Zi00N2I3LWI0MjctNmUyYjQ1NGZh MzQzMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk NTM2YzU1NjgtMzAzNS00MTc0LWI5Y2ItZTEwMzUyOWY1MDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY7vOmsPYBiRIv1qQEpLDggxYXFVJ0twxaY/ NLBBPfR73DStDyv75PuyD+hSjjdhNY34ncNX9HlhcEMgQKFdKb+cmNSqeoXaHhIB FRflOs3rIGIke5iM7gzwbu6a3Wn1CQaIRMjkqx7vhoYtxn2VkhIQIYMXUcXP+gBA mSY2aKKUdgD9LnQqW+1eenobZRNN6qAiWGPFEj5XR70Emaf9/Cjpa+KwJigR2eUT vHVfmJXHIz/vtiFdY2eO/BNtE5wJbObcmkyMsf8ykgHyHW4GhP7mE1oRswllqVin uS2F6Xw19RMPx92lQeX1bQrydhQKS9OGaGOFOyqMiLz6Hq1daQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKUwaeM0MR8VvbE2Pq863WH6Qln0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85YmE4 YmRkMC02YzdmLTQ3YjctYjQyNy02ZTJiNDU0ZmEzNDMvNGU1MGE1ODctMjhlMy0z M2M0LTkzZDItMDZiNWZjZTgxNTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWJhOGJkZDAtNmM3Zi00N2I3LWI0 MjctNmUyYjQ1NGZhMzQzLzliYThiZGQwLTZjN2YtNDdiNy1iNDI3LTZlMmI0NTRm YTM0My5jcmwwHwYDVR0jBBgwFoAUsWj3t9BOo5ekclbjM5CgXUrxK0AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85YmE4YmRkMC02YzdmLTQ3YjctYjQyNy02ZTJi NDU0ZmEzNDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgebADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBBgRIU0dk+QrlN7/wrB6SZh/hhjusLbyzVXEcuSZKpWU8+wProyj3f 5hR0UmYXmyFUvyaFJH5jDFxQcSrjFk2rd0AX1tKfADJUp4Y90Qcr5y7dv+cSl/OT 8iH2eeJyHwGo7cXYQn1MijUJC5ly/9xmXN9WuxHiCmn2PkXMQhV/PECRYX1U0AMg geqnQ9up7pwfAXhE5K6Whkdldspi+atAznCdpG412K4i8GbMRb3+mmToBd1E5tQs /6e5dg3O+lFCQld58cHeP+sNiKBS4PJ//SxFZt4Pk+jJCs82Wlx9uzi8CknmAL8Y 836KWqwrsxF6zj9xd4nEVs5UYCe2P/BV -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:58 2025 by rpki-client