$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/cf00bd16-50e8-3ac2-97b5-399cd7d9d044.roa File: cf00bd16-50e8-3ac2-97b5-399cd7d9d044.roa (raw, json) Hash identifier: ptPu5nriRa1PQzkGsVCkuQsJ5QKWyehhRXIgnB/BlR4= Subject key identifier: F4:1F:B3:C4:96:B6:DA:02:52:42:1B:CC:6A:A3:AC:C4:2D:B9:7A:A4 Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F43285848143A7525C98E8ACF41697840 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/cf00bd16-50e8-3ac2-97b5-399cd7d9d044.roa Signing time: Tue 03 Dec 2024 02:00:40 +0000 ROA not before: Tue 03 Dec 2024 02:00:40 +0000 ROA not after: Mon 03 Mar 2025 02:00:40 +0000 asID: 33071 IP address blocks: 2001:500:71::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:14:3a:75:25:c9:8e:8a:cf:41:69:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Dec 3 02:00:40 2024 GMT Not After : Mar 3 02:00:40 2025 GMT Subject: CN=d9b002c1-d86f-4df3-bff5-a2d08aa01673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9d:82:4a:ab:10:2c:c4:1d:e3:d1:91:e9:00: 20:8d:a0:1c:04:12:8f:9c:2f:8b:62:0e:e2:9e:c3: 3a:3e:30:69:76:f7:8a:f5:33:1d:ba:2b:39:24:24: 73:7a:25:2c:60:50:ea:87:cb:69:0f:88:a5:ef:d9: f2:47:5a:10:1b:28:f6:52:ee:7d:4f:72:c6:2b:9e: 3c:2a:51:2a:67:da:6a:3d:2a:b0:ce:23:b7:2d:22: fa:7c:ee:54:c1:bf:5f:7a:3b:ff:ac:d6:5a:88:9f: f4:b9:74:08:14:2a:14:35:0c:4d:16:58:11:ca:e5: e3:1d:63:88:9a:fa:a0:4d:e6:fb:9f:06:a7:96:da: 35:f8:d3:90:31:a5:dd:dd:ab:15:1e:09:da:1a:be: 43:74:d2:55:aa:7c:a3:35:80:70:2b:fe:10:e9:5a: 17:a4:bf:79:6f:83:cf:23:e5:4c:b0:bb:5a:f7:ee: 66:cb:59:05:ae:ff:e8:c4:35:a5:b3:a6:8e:74:c1: 95:c8:d7:f1:e0:4f:3a:46:9d:5d:89:c8:55:7a:9d: 5e:d0:83:56:64:e0:4c:bf:9e:a7:5f:0d:9f:35:63: 66:3c:d7:d8:28:df:0d:77:c3:44:da:f5:6b:53:26: 33:5a:e8:21:4c:da:10:1c:34:e1:c3:67:f6:d8:c8: 2e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1F:B3:C4:96:B6:DA:02:52:42:1B:CC:6A:A3:AC:C4:2D:B9:7A:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/cf00bd16-50e8-3ac2-97b5-399cd7d9d044.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:71::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:7d:59:14:9c:16:b9:ce:18:25:75:7d:e8:b9:32:7e:22:12: c1:36:cb:ce:72:87:c0:e0:5b:90:c7:18:f2:46:d1:da:84:73: aa:74:4c:67:f1:2d:4e:8f:17:83:e6:e8:b0:48:f5:01:7a:42: 5c:c4:9b:63:e8:97:f0:73:0f:49:71:33:23:cc:a6:e9:52:16: 83:79:aa:27:e6:b7:31:7a:04:b6:9b:58:16:41:fa:45:6d:c9: 3a:32:35:4d:42:e9:cf:f6:75:19:08:da:f2:78:48:45:f3:9b: 7e:f1:9d:af:b2:f9:38:07:ae:58:22:fe:55:3b:0e:15:2d:c8: 08:8c:38:84:77:b2:59:92:99:b9:dd:34:ea:7e:8d:34:01:a9: 85:e5:7e:7a:26:ae:cc:c9:f2:9f:38:a2:a0:36:9a:ec:52:d4: dc:cc:ec:71:6a:c3:32:2a:1d:b1:3d:20:eb:3b:b0:42:d9:03: e0:3e:5e:28:aa:da:69:d7:21:c3:c9:1c:d4:d3:f5:8a:f4:8d: 84:9c:9c:15:f9:b5:8d:39:d2:f8:23:84:02:68:fa:05:25:80: e9:01:e2:ba:83:28:d3:c3:99:78:ba:2e:64:bf:ee:9c:de:2e: 4e:69:90:a7:b3:48:35:fd:92:bb:5c:f4:9c:37:d2:f6:68:9c: 16:02:26:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgUOnUlyY6Kz0FpeEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk ZDliMDAyYzEtZDg2Zi00ZGYzLWJmZjUtYTJkMDhhYTAxNjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ2CSqsQLMQd49GR6QAgjaAcBBKPnC+LYg7i nsM6PjBpdveK9TMduis5JCRzeiUsYFDqh8tpD4il79nyR1oQGyj2Uu59T3LGK548 KlEqZ9pqPSqwziO3LSL6fO5Uwb9fejv/rNZaiJ/0uXQIFCoUNQxNFlgRyuXjHWOI mvqgTeb7nwanlto1+NOQMaXd3asVHgnaGr5DdNJVqnyjNYBwK/4Q6VoXpL95b4PP I+VMsLta9+5my1kFrv/oxDWls6aOdMGVyNfx4E86Rp1dichVep1e0INWZOBMv56n Xw2fNWNmPNfYKN8Nd8NE2vVrUyYzWughTNoQHDThw2f22MguIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPQfs8SWttoCUkIbzGqjrMQtuXqkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvY2YwMGJkMTYtNTBlOC0z YWMyLTk3YjUtMzk5Y2Q3ZDlkMDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADB9WRScFrnOGCV1fei5Mn4iEsE2y85yh8DgW5DHGPJG0dqEc6p0 TGfxLU6PF4Pm6LBI9QF6QlzEm2Pol/BzD0lxMyPMpulSFoN5qifmtzF6BLabWBZB +kVtyToyNU1C6c/2dRkI2vJ4SEXzm37xna+y+TgHrlgi/lU7DhUtyAiMOIR3slmS mbndNOp+jTQBqYXlfnomrszJ8p84oqA2muxS1NzM7HFqwzIqHbE9IOs7sELZA+A+ Xiiq2mnXIcPJHNTT9Yr0jYScnBX5tY050vgjhAJo+gUlgOkB4rqDKNPDmXi6LmS/ 7pzeLk5pkKezSDX9krtc9Jw30vZonBYCJgQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:56:04 2025 by rpki-client