$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/20864f6f-43bf-35e8-8286-a62e02cad118.roa File: 20864f6f-43bf-35e8-8286-a62e02cad118.roa (raw, json) Hash identifier: EsjNoIPsVEY2aqCfA+IfgOKX7cEl/I1omoBUlfFlb/s= Subject key identifier: 9D:AE:86:D4:13:3A:0C:A0:B4:A4:82:A7:25:A6:80:E6:3B:B3:26:CE Certificate issuer: /CN=a3c520d4-cb8b-424e-862a-3abdfbedcfc8 Certificate serial: 010D0C9F4328584858A058AE405228F2987C7280 Authority key identifier: 63:9C:48:1E:63:4D:5F:2E:0C:4C:D6:C5:D7:30:04:1C:12:E1:9C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/20864f6f-43bf-35e8-8286-a62e02cad118.roa Signing time: Fri 27 Dec 2024 14:00:52 +0000 ROA not before: Fri 27 Dec 2024 14:00:52 +0000 ROA not after: Thu 27 Mar 2025 13:00:52 +0000 asID: 53587 IP address blocks: 2607:5d00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:58:a0:58:ae:40:52:28:f2:98:7c:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3c520d4-cb8b-424e-862a-3abdfbedcfc8 Validity Not Before: Dec 27 14:00:52 2024 GMT Not After : Mar 27 13:00:52 2025 GMT Subject: CN=0e3bc315-4030-42fe-afb1-4c7fbd1da016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:49:8c:a5:1e:4b:5f:fa:12:90:1e:bf:2d:06: df:ba:77:76:28:5a:e2:da:bf:da:71:27:8a:de:ae: 01:1c:67:7a:31:14:ac:0b:df:f0:75:76:eb:8e:2d: 18:1a:fd:e3:8f:88:51:fd:70:f3:a8:6f:6b:f7:81: 32:1b:da:8c:7d:2c:e0:6f:f5:55:fa:4d:44:e0:ae: 42:91:17:16:47:d2:bb:8d:e8:0d:1a:78:f5:01:e2: c5:5f:af:6c:2b:79:71:10:5a:40:81:2c:4d:12:b7: 40:be:23:43:dd:ed:f0:45:26:07:53:b5:db:78:7b: 6d:29:1a:48:89:91:6f:ce:64:1a:08:c0:0a:1f:28: 82:91:f6:b1:1a:24:15:b5:4a:cd:86:c1:35:22:e0: 37:45:a6:73:ca:d3:36:ea:6c:e2:c0:82:57:32:91: 8e:fc:f8:83:f1:47:f7:ce:0d:20:2a:d1:bd:21:c3: 05:46:f8:f4:f3:2b:72:2b:da:bd:5e:7a:63:9b:9e: 31:ad:16:d1:55:17:a5:16:ab:1b:8a:18:17:0a:1a: af:1c:0d:46:45:8a:d5:82:13:38:44:ff:f1:cd:6e: cc:21:64:1f:b0:db:54:13:a7:97:93:a6:a2:a5:1c: d6:52:46:66:07:d7:7b:2a:17:15:03:62:ef:02:74: c8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AE:86:D4:13:3A:0C:A0:B4:A4:82:A7:25:A6:80:E6:3B:B3:26:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/20864f6f-43bf-35e8-8286-a62e02cad118.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.crl X509v3 Authority Key Identifier: keyid:63:9C:48:1E:63:4D:5F:2E:0C:4C:D6:C5:D7:30:04:1C:12:E1:9C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer sbgp-ipAddrBlock: critical IPv6: 2607:5d00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:6e:1d:6c:af:30:0e:29:3a:17:7f:06:51:5a:60:4e:49:8b: a4:58:00:ca:a4:22:6a:21:88:11:2b:86:34:4c:3c:28:ac:d1: 29:21:9a:f2:60:6c:d8:bb:60:ea:07:7d:14:a7:ad:c9:55:d6: 74:ab:80:46:12:0c:1b:0b:87:03:e0:84:a3:5a:da:10:ca:ca: 5b:09:5e:45:59:96:11:4a:6e:c9:88:16:c3:58:87:d9:c3:c8: 1c:b5:51:49:73:9e:b5:8c:6c:4c:c4:4e:86:1a:11:27:c7:77: 11:02:44:c3:31:78:3c:65:84:45:db:a1:af:5a:b2:f6:6f:95: f1:0e:4c:a0:83:f7:3a:8b:13:29:52:0c:97:e9:a9:94:d1:29: da:74:f4:4a:c0:46:c6:c4:14:16:22:c2:6e:c7:06:54:ea:c2: a7:18:06:a6:03:0f:bc:23:35:18:b4:df:60:87:a8:0a:80:c8: bc:95:f3:e3:40:80:3f:3b:82:a0:33:f3:74:d6:e7:7f:07:00: aa:2b:2a:53:24:90:c3:04:00:d8:90:ae:d1:21:4e:87:90:eb: bd:b0:08:a1:07:45:46:46:5e:e4:2a:30:21:b6:85:15:e0:e1: e6:dc:28:e3:19:42:3c:e5:ed:86:b7:7b:a1:71:c1:03:ea:0f: f0:9a:ea:63 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhYoFiuQFIo8ph8coAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNjNTIwZDQtY2I4Yi00MjRlLTg2MmEtM2FiZGZiZWRj ZmM4MB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk MGUzYmMzMTUtNDAzMC00MmZlLWFmYjEtNGM3ZmJkMWRhMDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00mMpR5LX/oSkB6/LQbfund2KFri2r/acSeK 3q4BHGd6MRSsC9/wdXbrji0YGv3jj4hR/XDzqG9r94EyG9qMfSzgb/VV+k1E4K5C kRcWR9K7jegNGnj1AeLFX69sK3lxEFpAgSxNErdAviND3e3wRSYHU7XbeHttKRpI iZFvzmQaCMAKHyiCkfaxGiQVtUrNhsE1IuA3RaZzytM26mziwIJXMpGO/PiD8Uf3 zg0gKtG9IcMFRvj08ytyK9q9Xnpjm54xrRbRVRelFqsbihgXChqvHA1GRYrVghM4 RP/xzW7MIWQfsNtUE6eXk6aipRzWUkZmB9d7KhcVA2LvAnTIAwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ2uhtQTOgygtKSCpyWmgOY7sybOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hM2M1 MjBkNC1jYjhiLTQyNGUtODYyYS0zYWJkZmJlZGNmYzgvMjA4NjRmNmYtNDNiZi0z NWU4LTgyODYtYTYyZTAyY2FkMTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTNjNTIwZDQtY2I4Yi00MjRlLTg2 MmEtM2FiZGZiZWRjZmM4L2EzYzUyMGQ0LWNiOGItNDI0ZS04NjJhLTNhYmRmYmVk Y2ZjOC5jcmwwHwYDVR0jBBgwFoAUY5xIHmNNXy4MTNbF1zAEHBLhnLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hM2M1MjBkNC1jYjhiLTQyNGUtODYyYS0zYWJk ZmJlZGNmYzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgddADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDHbh1srzAOKToXfwZRWmBOSYukWADKpCJqIYgRK4Y0TDworNEpIZry YGzYu2DqB30Up63JVdZ0q4BGEgwbC4cD4ISjWtoQyspbCV5FWZYRSm7JiBbDWIfZ w8gctVFJc561jGxMxE6GGhEnx3cRAkTDMXg8ZYRF26GvWrL2b5XxDkygg/c6ixMp UgyX6amU0SnadPRKwEbGxBQWIsJuxwZU6sKnGAamAw+8IzUYtN9gh6gKgMi8lfPj QIA/O4KgM/N01ud/BwCqKypTJJDDBADYkK7RIU6HkOu9sAihB0VGRl7kKjAhtoUV 4OHm3CjjGUI85e2Gt3uhccED6g/wmupj -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:41 2025 by rpki-client