$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/a29d5ba2-6995-3c9d-a08c-28b666cd1b84.roa File: a29d5ba2-6995-3c9d-a08c-28b666cd1b84.roa (raw, json) Hash identifier: 89LjWON5NADS7hizVau9lr5spGGl5aTWUSYTrPL92JQ= Subject key identifier: 25:A2:DC:C2:09:A7:AD:0A:E8:4E:0C:0C:C1:31:84:E8:76:29:DE:51 Certificate issuer: /CN=03a7a8d3-26fa-4915-bacf-2848f9754758 Certificate serial: 010D0C9F43285848A400BF9929A89A2272A58FC0 Authority key identifier: 53:99:8A:12:01:32:65:4D:FD:B5:26:2B:D5:F8:28:BC:E6:EF:7B:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/a29d5ba2-6995-3c9d-a08c-28b666cd1b84.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 400326 IP address blocks: 2606:3f80:b000::/36 maxlen: 40 2606:3f80:c000::/36 maxlen: 48 2606:3f80:e000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/03a7a8d3-26fa-4915-bacf-2848f9754758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/03a7a8d3-26fa-4915-bacf-2848f9754758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:bf:99:29:a8:9a:22:72:a5:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03a7a8d3-26fa-4915-bacf-2848f9754758 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=1acb2afd-9d2c-45ad-b777-4103bf2ddfe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:43:37:85:39:c7:db:8a:45:5b:28:c4:ac:63: 24:78:9e:e0:40:90:ec:3f:a7:2d:b6:34:12:42:a2: b7:e9:29:7e:34:06:0e:ce:29:d1:c9:c0:57:13:a1: 12:2d:56:ab:dc:0a:5b:6e:da:08:0f:ff:d8:c2:86: cf:fb:14:f6:6a:01:77:00:9d:00:a0:7f:2b:e1:ed: 06:59:f3:e9:29:a4:3f:ca:fe:2a:70:99:40:67:7f: 63:ff:c0:f4:0d:57:e3:61:46:b3:e6:97:cf:fc:7c: 1d:57:56:cb:ed:72:20:4d:3f:11:e2:19:44:30:1e: 08:12:cb:be:1e:74:59:22:81:6f:35:ef:ff:c2:34: 02:ec:ef:53:34:de:68:13:0f:5c:7d:28:c8:b4:87: e9:1c:b7:10:c3:29:13:44:b5:d7:44:f9:38:a7:3d: 5e:51:54:16:ba:24:64:73:46:53:77:eb:f8:14:90: 55:d0:59:9b:9d:90:3f:c5:6a:58:6a:59:aa:5d:65: 8f:83:0b:7f:2f:00:33:54:22:29:37:92:f3:80:c9: 3c:cc:3c:5b:94:59:42:07:f1:c5:c8:ed:64:5a:33: 39:5a:36:e4:6a:8d:b6:7c:0a:66:ed:15:4a:96:a7: 5d:07:fc:83:0e:e0:a5:bb:c5:93:53:ef:7d:fa:67: dc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A2:DC:C2:09:A7:AD:0A:E8:4E:0C:0C:C1:31:84:E8:76:29:DE:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/a29d5ba2-6995-3c9d-a08c-28b666cd1b84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/03a7a8d3-26fa-4915-bacf-2848f9754758.crl X509v3 Authority Key Identifier: keyid:53:99:8A:12:01:32:65:4D:FD:B5:26:2B:D5:F8:28:BC:E6:EF:7B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758.cer sbgp-ipAddrBlock: critical IPv6: 2606:3f80:b000::-2606:3f80:cfff:ffff:ffff:ffff:ffff:ffff 2606:3f80:e000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:05:10:8b:3d:dc:67:08:d3:8b:8d:4c:b0:57:cd:12:67:cf: c3:29:47:46:23:b9:68:82:c5:17:c7:3e:15:6d:97:6a:57:cf: 3e:70:fe:2d:90:b1:75:b1:61:e2:74:fe:58:98:65:98:7a:ed: 96:e1:db:3a:f9:d7:b7:30:bc:c0:43:ee:19:7d:58:6a:03:46: 23:a2:e8:ce:d7:d0:12:91:a3:10:77:02:ba:0f:61:d2:46:8c: d0:0c:00:5b:40:9d:4c:7b:f3:22:dc:87:ff:15:ea:e3:65:ec: b1:3c:9f:c9:1a:26:c8:12:e8:ca:f9:16:34:4d:fd:e6:37:e8: b1:de:22:0b:7c:ac:cd:8d:4e:e7:30:5d:bc:6c:c3:6f:0e:98: 25:2b:ee:67:8d:90:a5:bb:99:2d:26:39:e7:b2:da:fe:c3:9d: 4b:9d:21:fc:ac:56:77:fb:31:31:90:66:be:ad:5e:05:a5:e3: ce:46:d0:71:52:da:c5:33:43:44:d9:82:3b:9b:fa:89:e1:4b: b8:d3:2f:3c:b2:47:28:78:57:73:e5:61:0d:b6:d6:37:ea:7d: cc:99:7a:9f:6c:b8:22:4b:19:6f:8b:82:e2:92:2d:94:fa:39: 7b:d4:01:1a:27:4e:ad:2c:87:8f:17:7b:2e:1d:d4:83:2a:10: 03:0f:65:29 -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEikAL+ZKaiaInKlj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNhN2E4ZDMtMjZmYS00OTE1LWJhY2YtMjg0OGY5NzU0 NzU4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk MWFjYjJhZmQtOWQyYy00NWFkLWI3NzctNDEwM2JmMmRkZmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEM3hTnH24pFWyjErGMkeJ7gQJDsP6cttjQS QqK36Sl+NAYOzinRycBXE6ESLVar3ApbbtoID//YwobP+xT2agF3AJ0AoH8r4e0G WfPpKaQ/yv4qcJlAZ39j/8D0DVfjYUaz5pfP/HwdV1bL7XIgTT8R4hlEMB4IEsu+ HnRZIoFvNe//wjQC7O9TNN5oEw9cfSjItIfpHLcQwykTRLXXRPk4pz1eUVQWuiRk c0ZTd+v4FJBV0FmbnZA/xWpYalmqXWWPgwt/LwAzVCIpN5LzgMk8zDxblFlCB/HF yO1kWjM5Wjbkao22fApm7RVKlqddB/yDDuClu8WTU+99+mfcuwIDAQABo4IDaTCC A2UwHQYDVR0OBBYEFCWi3MIJp60K6E4MDMExhOh2Kd5RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wM2E3 YThkMy0yNmZhLTQ5MTUtYmFjZi0yODQ4Zjk3NTQ3NTgvYTI5ZDViYTItNjk5NS0z YzlkLWEwOGMtMjhiNjY2Y2QxYjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDNhN2E4ZDMtMjZmYS00OTE1LWJh Y2YtMjg0OGY5NzU0NzU4LzAzYTdhOGQzLTI2ZmEtNDkxNS1iYWNmLTI4NDhmOTc1 NDc1OC5jcmwwHwYDVR0jBBgwFoAUU5mKEgEyZU39tSYr1fgovObve08wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wM2E3YThkMy0yNmZhLTQ5MTUtYmFjZi0yODQ4 Zjk3NTQ3NTguY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAAjAaMBADBgQmBj+A sAMGBCYGP4DAAwYEJgY/gOAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGAUQiz3cZwjTi41MsFfNEmfPwylH RiO5aILFF8c+FW2XalfPPnD+LZCxdbFh4nT+WJhlmHrtluHbOvnXtzC8wEPuGX1Y agNGI6LoztfQEpGjEHcCug9h0kaM0AwAW0CdTHvzItyH/xXq42XssTyfyRomyBLo yvkWNE395jfosd4iC3yszY1O5zBdvGzDbw6YJSvuZ42QpbuZLSY557La/sOdS50h /KxWd/sxMZBmvq1eBaXjzkbQcVLaxTNDRNmCO5v6ieFLuNMvPLJHKHhXc+VhDbbW N+p9zJl6n2y4IksZb4uC4pItlPo5e9QBGidOrSyHjxd7Lh3UgyoQAw9lKQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:43 2025 by rpki-client