$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/34b95ee8-66c2-3d4d-99fa-1890bcf86dab.roa File: 34b95ee8-66c2-3d4d-99fa-1890bcf86dab.roa (raw, json) Hash identifier: XUQ4yeBnwkyIY0wpwl6uME9TLZJ++bOu6RZEAYNnSwY= Subject key identifier: 60:24:21:81:8D:A7:A6:AC:D5:B2:07:71:F9:79:BC:EE:46:BC:C5:87 Certificate issuer: /CN=cf35609e-0e1f-484a-af8f-815006d97f11 Certificate serial: 010D0C9F4328584819CFC1CC69AF2A00238562B0 Authority key identifier: CE:9A:08:7C:21:06:9C:08:3D:C6:79:BA:DB:B2:28:34:71:1B:2F:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/34b95ee8-66c2-3d4d-99fa-1890bcf86dab.roa Signing time: Thu 05 Dec 2024 02:00:39 +0000 ROA not before: Thu 05 Dec 2024 02:00:39 +0000 ROA not after: Wed 05 Mar 2025 02:00:39 +0000 asID: 14694 IP address blocks: 2620:4e:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/cf35609e-0e1f-484a-af8f-815006d97f11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/cf35609e-0e1f-484a-af8f-815006d97f11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:19:cf:c1:cc:69:af:2a:00:23:85:62:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf35609e-0e1f-484a-af8f-815006d97f11 Validity Not Before: Dec 5 02:00:39 2024 GMT Not After : Mar 5 02:00:39 2025 GMT Subject: CN=3dfa68f7-06f8-467a-b894-bb91c08c49b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d0:f7:dc:0a:51:4d:3d:e9:e9:76:d4:ce:83: d8:a6:52:46:0e:50:84:76:f7:3d:68:f3:76:e6:4d: 0d:ad:24:30:f2:b5:b2:c5:5e:1d:92:08:77:91:05: 6c:33:7d:d6:72:54:d0:15:77:c2:5a:f0:b1:2c:73: 51:11:78:3c:ba:44:2a:52:b0:7d:ba:1a:44:71:8c: 88:49:50:e1:23:5c:e1:b8:2a:3e:42:0d:9d:ac:1d: 46:df:00:40:6c:82:34:15:08:50:33:51:5e:21:0a: b7:e6:a0:58:64:4a:83:7e:24:f7:5c:f2:32:05:cd: cc:9d:fc:00:c7:43:34:42:e4:f1:de:72:ca:41:c8: 7b:2b:e6:39:c1:88:3d:ae:04:6f:cc:f0:a5:cf:5d: 8a:d3:df:cb:cc:70:12:fa:ec:69:b3:11:dd:3f:24: c9:0e:09:78:40:15:82:db:07:ec:90:6f:82:a5:1a: e0:29:42:2e:85:72:72:5a:a1:8d:f9:ad:cf:74:94: 3d:f8:62:a4:dc:af:69:08:48:3b:9b:79:da:38:68: 16:d9:97:5e:7f:26:c0:fa:5d:f5:d2:98:37:5b:19: 12:ef:2a:6c:ac:04:d4:ab:88:98:c6:d7:5a:4a:d1: 29:a6:d6:ca:ce:e5:c7:c4:22:91:4b:d9:57:e1:9e: 3f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:24:21:81:8D:A7:A6:AC:D5:B2:07:71:F9:79:BC:EE:46:BC:C5:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/34b95ee8-66c2-3d4d-99fa-1890bcf86dab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/cf35609e-0e1f-484a-af8f-815006d97f11.crl X509v3 Authority Key Identifier: keyid:CE:9A:08:7C:21:06:9C:08:3D:C6:79:BA:DB:B2:28:34:71:1B:2F:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11.cer sbgp-ipAddrBlock: critical IPv6: 2620:4e:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:52:06:d3:a0:38:90:b1:c1:e6:78:80:2b:2a:2d:34:3a:d3: d7:09:de:ad:9b:eb:3f:b5:45:f3:72:48:de:98:67:60:8f:94: 89:0a:ac:6a:56:87:ca:f4:37:6a:b9:a7:9d:83:b2:80:32:83: 54:24:7d:2c:19:47:20:03:5a:c1:da:8e:b8:a1:0b:08:66:c0: b5:c9:c7:3a:54:a8:9e:70:ad:9c:67:c8:ca:c9:e5:2c:7b:eb: 64:bc:e7:a4:bf:55:3c:f3:09:97:45:cd:84:66:af:0c:9f:86: a9:2d:5d:f2:db:e7:5a:a2:d9:2c:ff:8e:29:42:b2:25:80:79: 97:93:ea:a7:15:c1:a9:54:9b:a5:0c:c7:46:d7:06:9e:d4:3a: fd:b9:7b:16:eb:f1:94:2b:7c:25:48:99:7b:b1:79:e5:59:72: dd:0f:0b:75:08:39:1c:b2:4d:1f:d3:e7:a9:4c:ba:5e:ef:a0: ee:ef:1c:c6:37:ad:d8:9a:a7:21:13:8b:25:df:cf:bf:c1:8a: 70:5a:8f:5c:2c:60:8c:18:33:bd:14:83:d4:be:8a:03:9d:36: f6:7d:86:9c:1f:54:28:40:eb:e2:eb:ca:ed:e6:4e:38:99:07: 75:e1:a8:dd:a0:4d:a0:a9:3e:06:80:bb:01:a9:9f:10:d2:8e: 30:b0:a5:85 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZz8HMaa8qACOFYrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YzNTYwOWUtMGUxZi00ODRhLWFmOGYtODE1MDA2ZDk3 ZjExMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk M2RmYTY4ZjctMDZmOC00NjdhLWI4OTQtYmI5MWMwOGM0OWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9D33ApRTT3p6XbUzoPYplJGDlCEdvc9aPN2 5k0NrSQw8rWyxV4dkgh3kQVsM33WclTQFXfCWvCxLHNREXg8ukQqUrB9uhpEcYyI SVDhI1zhuCo+Qg2drB1G3wBAbII0FQhQM1FeIQq35qBYZEqDfiT3XPIyBc3MnfwA x0M0QuTx3nLKQch7K+Y5wYg9rgRvzPClz12K09/LzHAS+uxpsxHdPyTJDgl4QBWC 2wfskG+CpRrgKUIuhXJyWqGN+a3PdJQ9+GKk3K9pCEg7m3naOGgW2ZdefybA+l31 0pg3WxkS7ypsrATUq4iYxtdaStEpptbKzuXHxCKRS9lX4Z4/swIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGAkIYGNp6as1bIHcfl5vO5GvMWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jZjM1 NjA5ZS0wZTFmLTQ4NGEtYWY4Zi04MTUwMDZkOTdmMTEvMzRiOTVlZTgtNjZjMi0z ZDRkLTk5ZmEtMTg5MGJjZjg2ZGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2YzNTYwOWUtMGUxZi00ODRhLWFm OGYtODE1MDA2ZDk3ZjExL2NmMzU2MDllLTBlMWYtNDg0YS1hZjhmLTgxNTAwNmQ5 N2YxMS5jcmwwHwYDVR0jBBgwFoAUzpoIfCEGnAg9xnm627IoNHEbL2QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jZjM1NjA5ZS0wZTFmLTQ4NGEtYWY4Zi04MTUw MDZkOTdmMTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAATiAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJRSBtOgOJCxweZ4gCsqLTQ609cJ3q2b6z+1RfNySN6YZ2CPlIkK rGpWh8r0N2q5p52DsoAyg1QkfSwZRyADWsHajrihCwhmwLXJxzpUqJ5wrZxnyMrJ 5Sx762S856S/VTzzCZdFzYRmrwyfhqktXfLb51qi2Sz/jilCsiWAeZeT6qcVwalU m6UMx0bXBp7UOv25exbr8ZQrfCVImXuxeeVZct0PC3UIORyyTR/T56lMul7voO7v HMY3rdiapyETiyXfz7/BinBaj1wsYIwYM70Ug9S+igOdNvZ9hpwfVChA6+Lryu3m TjiZB3XhqN2gTaCpPgaAuwGpnxDSjjCwpYU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:37 2025 by rpki-client