$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/d3f9f2ee-3934-3455-a720-f4db20c7d7f5.roa File: d3f9f2ee-3934-3455-a720-f4db20c7d7f5.roa (raw, json) Hash identifier: 4uslLxX7KbdAS9pYWyPJpCJNzB1sW0mCAlmeTKrpV5U= Subject key identifier: 4D:81:54:55:19:E9:D7:D2:75:5E:42:3A:A4:63:1E:15:06:9B:34:3E Certificate issuer: /CN=a66a4367-3a0d-450c-ab2e-9b8f84e436ed Certificate serial: 010D0C9F43285848828089446603F465DAC239C8 Authority key identifier: 7C:F5:0C:AE:7C:6B:E6:27:FE:43:86:15:EF:C9:C9:59:17:B6:09:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/d3f9f2ee-3934-3455-a720-f4db20c7d7f5.roa Signing time: Sat 11 Jan 2025 14:00:52 +0000 ROA not before: Sat 11 Jan 2025 14:00:52 +0000 ROA not after: Fri 11 Apr 2025 13:00:52 +0000 asID: 397263 IP address blocks: 2620:8e:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:82:80:89:44:66:03:f4:65:da:c2:39:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a66a4367-3a0d-450c-ab2e-9b8f84e436ed Validity Not Before: Jan 11 14:00:52 2025 GMT Not After : Apr 11 13:00:52 2025 GMT Subject: CN=b9ff151b-e376-4a81-87d1-9fdde710e432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7e:78:e4:1e:f8:d7:a3:85:66:a0:98:20:68: 1e:75:25:cc:6b:60:8a:8c:60:53:0e:5c:19:44:eb: b2:3c:d3:d1:45:52:2a:67:f8:0d:b0:89:b4:aa:2d: cc:3a:e5:cc:b3:32:d3:b4:12:bf:90:95:99:30:2c: 8b:59:70:36:8e:5f:5e:27:68:5e:0a:76:21:2d:87: 9d:b7:43:bf:4a:36:35:53:05:db:9a:fc:6e:52:48: f8:81:e1:48:dc:1e:9e:30:2a:8d:fc:cd:d5:92:55: 6f:28:5c:18:8e:2e:e7:88:da:a6:72:a8:65:f9:94: 2b:74:85:88:93:d9:ba:bc:1e:49:fc:28:44:5e:fa: 2d:ef:0e:a4:7c:9a:05:3a:50:ce:6e:cf:d5:14:69: 9b:1a:47:68:cb:62:8a:22:2a:f7:b0:b8:71:9a:ff: dc:cc:15:46:7a:b6:2f:47:3f:13:e5:ff:a8:2b:34: 17:24:9a:ec:3d:16:d1:e1:8a:29:83:b1:77:6b:ac: b2:6f:95:43:0e:db:bb:66:8f:3d:e4:dd:17:8e:fc: d0:3e:3e:57:7f:1d:18:df:91:0a:9e:be:9c:45:74: 75:e1:7c:d3:d3:b7:3e:c7:34:91:ec:c5:69:5b:dc: b5:55:95:23:fb:26:27:09:45:c9:81:aa:64:34:83: 15:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:81:54:55:19:E9:D7:D2:75:5E:42:3A:A4:63:1E:15:06:9B:34:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/d3f9f2ee-3934-3455-a720-f4db20c7d7f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.crl X509v3 Authority Key Identifier: keyid:7C:F5:0C:AE:7C:6B:E6:27:FE:43:86:15:EF:C9:C9:59:17:B6:09:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer sbgp-ipAddrBlock: critical IPv6: 2620:8e:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:8f:29:76:db:d2:26:c8:cb:6b:5b:23:00:b6:ef:a7:fc:0e: 84:81:16:ba:92:65:a1:9c:14:50:b7:fc:6d:2d:44:b1:55:87: 33:e5:75:5d:f7:eb:16:38:cd:32:22:08:0e:a3:73:59:5b:6e: 7b:18:ce:9c:01:ba:5c:af:e8:2b:9f:40:53:ca:bf:5c:db:46: 27:5d:76:6f:65:6f:86:02:12:15:00:87:b3:e4:02:10:a5:e3: 28:9c:cf:36:cb:ce:84:74:04:88:0b:ac:92:5c:a4:bc:e4:74: 75:72:97:fa:b5:af:29:d1:2d:c8:60:34:72:2f:3a:7f:c8:bc: 5a:81:38:11:b6:68:cc:ab:ed:62:87:17:16:68:0c:5b:59:43: e0:21:62:78:3c:69:0a:76:58:a6:75:5c:62:1a:de:36:83:1c: bb:37:53:8e:54:24:94:1d:b0:08:a6:20:c4:66:d0:04:a1:ce: 82:d7:da:c3:38:69:9a:cb:8c:59:72:af:ca:73:4c:2c:c6:41: f5:ce:78:64:7b:ad:7e:53:97:0a:ba:1a:2f:ac:9e:fc:bb:6b: 65:1e:22:22:2d:3d:b1:d3:ac:cc:08:f1:13:1c:66:67:66:1d: ef:3e:fc:ef:2f:91:8f:f9:6b:4a:fd:64:05:d5:3b:b7:3c:e5: 09:25:63:16 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiCgIlEZgP0ZdrCOcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY2YTQzNjctM2EwZC00NTBjLWFiMmUtOWI4Zjg0ZTQz NmVkMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk YjlmZjE1MWItZTM3Ni00YTgxLTg3ZDEtOWZkZGU3MTBlNDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH545B7416OFZqCYIGgedSXMa2CKjGBTDlwZ ROuyPNPRRVIqZ/gNsIm0qi3MOuXMszLTtBK/kJWZMCyLWXA2jl9eJ2heCnYhLYed t0O/SjY1UwXbmvxuUkj4geFI3B6eMCqN/M3VklVvKFwYji7niNqmcqhl+ZQrdIWI k9m6vB5J/ChEXvot7w6kfJoFOlDObs/VFGmbGkdoy2KKIir3sLhxmv/czBVGerYv Rz8T5f+oKzQXJJrsPRbR4Yopg7F3a6yyb5VDDtu7Zo895N0XjvzQPj5Xfx0Y35EK nr6cRXR14XzT07c+xzSR7MVpW9y1VZUj+yYnCUXJgapkNIMVIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE2BVFUZ6dfSdV5COqRjHhUGmzQ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNjZh NDM2Ny0zYTBkLTQ1MGMtYWIyZS05YjhmODRlNDM2ZWQvZDNmOWYyZWUtMzkzNC0z NDU1LWE3MjAtZjRkYjIwYzdkN2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTY2YTQzNjctM2EwZC00NTBjLWFi MmUtOWI4Zjg0ZTQzNmVkL2E2NmE0MzY3LTNhMGQtNDUwYy1hYjJlLTliOGY4NGU0 MzZlZC5jcmwwHwYDVR0jBBgwFoAUfPUMrnxr5if+Q4YV78nJWRe2CTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNjZhNDM2Ny0zYTBkLTQ1MGMtYWIyZS05Yjhm ODRlNDM2ZWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAjiAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABePKXbb0ibIy2tbIwC276f8DoSBFrqSZaGcFFC3/G0tRLFVhzPl dV336xY4zTIiCA6jc1lbbnsYzpwBulyv6CufQFPKv1zbRidddm9lb4YCEhUAh7Pk AhCl4yiczzbLzoR0BIgLrJJcpLzkdHVyl/q1rynRLchgNHIvOn/IvFqBOBG2aMyr 7WKHFxZoDFtZQ+AhYng8aQp2WKZ1XGIa3jaDHLs3U45UJJQdsAimIMRm0AShzoLX 2sM4aZrLjFlyr8pzTCzGQfXOeGR7rX5Tlwq6Gi+snvy7a2UeIiItPbHTrMwI8RMc ZmdmHe8+/O8vkY/5a0r9ZAXVO7c85QklYxY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:52 2025 by rpki-client