$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/323e4eb5-73e4-3f1d-b613-2b7750199565.roa File: 323e4eb5-73e4-3f1d-b613-2b7750199565.roa (raw, json) Hash identifier: rJeKGOpDrQHkYQY+qJ7PPaXwBSpX+ov4A/gaMNVJrHI= Subject key identifier: FE:64:55:D0:CF:6D:66:7D:10:93:1D:EA:49:C3:7B:3A:55:1E:2C:CB Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F4328584819CFCED14579676500B95D40 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/323e4eb5-73e4-3f1d-b613-2b7750199565.roa Signing time: Thu 05 Dec 2024 02:00:39 +0000 ROA not before: Thu 05 Dec 2024 02:00:39 +0000 ROA not after: Wed 05 Mar 2025 02:00:39 +0000 asID: 30133 IP address blocks: 2001:500:67::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:19:cf:ce:d1:45:79:67:65:00:b9:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Dec 5 02:00:39 2024 GMT Not After : Mar 5 02:00:39 2025 GMT Subject: CN=434ada3c-23d4-443e-87a1-1e88e680825d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:38:44:e6:20:9a:a2:7a:db:54:b1:d8:d8:58: 76:f9:53:7f:6c:4e:c7:cc:16:28:83:b9:92:36:a7: 9d:00:c6:50:81:38:c7:4a:c1:8b:35:7e:61:99:55: 44:a7:c4:43:4d:7b:c8:6e:ea:40:3f:6b:94:cb:f5: 54:83:28:d9:29:bc:35:76:10:cc:48:59:41:0b:4a: 78:b4:66:ad:87:98:5b:d9:be:bc:cf:15:37:c4:ac: 9b:27:c5:fb:8d:f3:84:89:fc:1d:4f:ad:29:78:db: 90:7c:44:1c:bc:3a:9b:5f:48:1f:09:71:c9:f7:d3: c0:e3:a9:7e:9f:b2:28:93:79:17:58:47:65:2e:22: 87:df:59:7a:51:30:9f:fb:17:68:a6:03:e5:a5:ba: 9d:f6:25:f6:9d:10:d7:11:72:63:a9:4e:19:3b:2d: 58:cf:ad:34:6a:23:63:8e:4b:31:4e:12:87:05:3b: 9b:41:c7:bd:28:db:1a:88:95:62:17:d5:c0:8b:5b: de:e1:41:6e:2c:13:5e:f1:d1:8a:e6:8f:b5:97:7f: eb:6f:e9:b7:68:4e:03:6f:86:d4:9c:70:b4:32:a7: 57:d2:a2:95:34:26:c2:e7:cc:d2:f8:13:b4:1e:5a: 30:c0:5f:70:2e:e4:84:2c:fc:52:7b:26:1c:49:67: 4b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:64:55:D0:CF:6D:66:7D:10:93:1D:EA:49:C3:7B:3A:55:1E:2C:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/323e4eb5-73e4-3f1d-b613-2b7750199565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:67::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:82:7e:68:9e:64:46:b6:f6:24:90:4a:e1:bc:a2:c0:f6:57: c2:fe:a1:f7:ce:bb:f0:0b:2d:97:af:be:fa:da:0c:77:22:01: 29:fb:86:3f:af:cd:2b:81:3b:ee:f5:fa:5b:e1:9f:be:94:91: c2:ff:96:be:2a:cd:d5:f6:ff:c9:76:b6:99:f2:5c:48:16:17: 6e:cf:a0:3c:f3:d8:4d:5e:62:5f:69:27:14:f3:09:cd:bd:5e: 7f:c9:49:82:6b:e7:91:a3:46:b5:ed:9a:3a:4e:ff:2e:e4:e6: 89:e4:76:0d:2e:e2:0c:d8:90:1e:4c:0a:e6:56:53:05:89:cc: 24:38:30:b9:38:6e:be:72:c7:6b:76:b3:be:08:3b:d0:dd:ff: cd:df:a5:69:70:f6:0e:ca:a4:24:c3:af:28:5f:22:cf:36:c8: 51:cc:5a:b6:b0:a0:cb:8a:5a:98:b8:a8:61:ff:a5:f5:55:52: 59:f5:33:41:f2:eb:c0:99:7a:50:5f:8b:e8:e4:0e:7a:d8:04: 87:0f:02:b8:fc:97:45:72:e5:ee:6e:79:7d:e8:55:95:5c:48: 74:e6:98:d5:a7:e6:06:23:a2:03:d0:83:e7:bd:ef:7f:d3:b3: 3d:d4:36:d1:85:07:9e:51:d0:e4:db:ce:dd:48:a9:45:2b:85: 0b:eb:95:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZz87RRXlnZQC5XUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk NDM0YWRhM2MtMjNkNC00NDNlLTg3YTEtMWU4OGU2ODA4MjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDhE5iCaonrbVLHY2Fh2+VN/bE7HzBYog7mS NqedAMZQgTjHSsGLNX5hmVVEp8RDTXvIbupAP2uUy/VUgyjZKbw1dhDMSFlBC0p4 tGath5hb2b68zxU3xKybJ8X7jfOEifwdT60peNuQfEQcvDqbX0gfCXHJ99PA46l+ n7Iok3kXWEdlLiKH31l6UTCf+xdopgPlpbqd9iX2nRDXEXJjqU4ZOy1Yz600aiNj jksxThKHBTubQce9KNsaiJViF9XAi1ve4UFuLBNe8dGK5o+1l3/rb+m3aE4Db4bU nHC0MqdX0qKVNCbC58zS+BO0HlowwF9wLuSELPxSeyYcSWdLbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP5kVdDPbWZ9EJMd6knDezpVHizLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvMzIzZTRlYjUtNzNlNC0z ZjFkLWI2MTMtMmI3NzUwMTk5NTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAOCfmieZEa29iSQSuG8osD2V8L+offOu/ALLZevvvraDHciASn7 hj+vzSuBO+71+lvhn76UkcL/lr4qzdX2/8l2tpnyXEgWF27PoDzz2E1eYl9pJxTz Cc29Xn/JSYJr55GjRrXtmjpO/y7k5onkdg0u4gzYkB5MCuZWUwWJzCQ4MLk4br5y x2t2s74IO9Dd/83fpWlw9g7KpCTDryhfIs82yFHMWrawoMuKWpi4qGH/pfVVUln1 M0Hy68CZelBfi+jkDnrYBIcPArj8l0Vy5e5ueX3oVZVcSHTmmNWn5gYjogPQg+e9 73/Tsz3UNtGFB55R0OTbzt1IqUUrhQvrlTo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:44 2025 by rpki-client