$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0504ab19-51ee-3aee-8913-da5b1dbe59e8.roa File: 0504ab19-51ee-3aee-8913-da5b1dbe59e8.roa (raw, json) Hash identifier: nXnAXBqxrTG3eKCMD72/F1xxxl6Z9Rwc3W2EMo9dda8= Subject key identifier: B4:24:34:6D:CB:72:F1:02:48:C7:6F:D1:79:2B:C7:74:42:78:B5:A1 Certificate issuer: /CN=0d1af089-3ace-488d-8f52-6b375c813ba2 Certificate serial: 010D0C9F4328584869605CB8E502F022963F5900 Authority key identifier: A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0504ab19-51ee-3aee-8913-da5b1dbe59e8.roa Signing time: Thu 02 Jan 2025 14:00:52 +0000 ROA not before: Thu 02 Jan 2025 14:00:52 +0000 ROA not after: Wed 02 Apr 2025 13:00:52 +0000 asID: 33600 IP address blocks: 2620:88:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:69:60:5c:b8:e5:02:f0:22:96:3f:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d1af089-3ace-488d-8f52-6b375c813ba2 Validity Not Before: Jan 2 14:00:52 2025 GMT Not After : Apr 2 13:00:52 2025 GMT Subject: CN=5d36b47d-c472-4cb7-90aa-98e052a248a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:25:dd:18:6b:ad:89:b8:85:29:31:14:1a:b8: 8e:3e:09:0f:a4:19:12:dd:3b:fb:a1:01:70:28:54: 07:30:da:fa:72:1e:82:a5:2f:45:8c:ec:8d:f9:e2: e8:20:6c:f2:fd:85:8f:c8:09:41:31:cc:53:75:57: a8:5d:c9:20:79:c1:13:7c:87:30:9e:ff:a2:71:fa: 48:bb:5e:7d:fb:f0:82:19:5b:98:94:2d:78:9a:11: 46:3b:8e:bb:87:02:53:99:c4:56:38:b8:c2:60:07: 5b:f2:98:06:b6:1a:2b:32:2f:67:ad:75:0a:fb:79: e1:a3:ed:c3:6d:a3:d2:c5:2a:ee:c6:96:0f:35:c4: fb:c6:9b:11:fd:49:bf:16:8d:e4:9f:06:43:c2:16: 44:ca:1e:6a:7c:ad:ad:11:ea:da:33:33:b3:bf:02: 4d:9e:b8:ff:45:9b:84:80:d0:e4:93:c3:44:91:e9: 18:a7:60:66:d4:2b:d3:71:13:d8:7e:c8:a6:e1:94: 0a:d8:04:03:c5:e7:8b:98:45:74:f7:81:8d:67:23: 53:0f:8c:24:26:3f:de:88:20:5a:ec:a2:66:24:e4: eb:9b:c3:d5:90:92:c7:41:70:34:7d:df:bd:61:a6: ef:5c:64:f1:e6:26:6b:e5:ee:bf:b6:b0:82:ce:fe: c9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:24:34:6D:CB:72:F1:02:48:C7:6F:D1:79:2B:C7:74:42:78:B5:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0504ab19-51ee-3aee-8913-da5b1dbe59e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl X509v3 Authority Key Identifier: keyid:A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer sbgp-ipAddrBlock: critical IPv6: 2620:88:6000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:a7:ca:89:2d:ce:2e:ba:b4:3d:dd:e5:01:83:7d:6b:8e:e8: 6e:ab:58:b9:81:e2:44:04:46:e0:b0:80:29:a6:e4:d6:e5:5c: 9e:32:0b:aa:ca:65:78:bf:cd:93:02:b0:47:c4:5a:4c:5e:21: 10:80:34:53:3c:29:c7:31:13:a4:43:fc:74:9d:c7:e8:06:c9: b8:84:c1:92:2e:f3:28:14:32:63:29:d5:9b:ff:a3:31:dc:8e: e7:bb:dc:5c:3c:b0:0f:16:cc:4f:11:a3:35:aa:f8:d3:fe:7a: 3b:39:ab:84:0b:52:44:37:f9:19:6d:e3:23:c0:c8:c0:77:e2: f7:d0:fe:00:53:f8:01:7c:c7:48:b7:2f:38:b4:ba:43:dd:39: e1:85:80:b9:e0:3f:5f:ec:2d:22:ed:ae:9b:a2:a8:8a:0a:e4: 8e:6a:ff:7c:15:7f:5e:23:3f:5f:ac:81:ff:c8:91:77:c7:45: 11:9f:b5:a5:6b:17:ca:37:10:d7:71:3e:99:10:0f:3b:ab:45: 09:3c:54:72:88:cc:67:82:08:1b:f2:fd:d4:24:78:88:85:a6: c7:0a:4e:69:58:2e:32:94:f5:f3:55:02:af:19:1f:ec:38:e5: b7:da:63:b3:e4:83:83:61:5d:2c:c2:24:dd:91:45:56:df:e2: 2a:39:2f:ac -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhpYFy45QLwIpY/WQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQxYWYwODktM2FjZS00ODhkLThmNTItNmIzNzVjODEz YmEyMB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk NWQzNmI0N2QtYzQ3Mi00Y2I3LTkwYWEtOThlMDUyYTI0OGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iXdGGutibiFKTEUGriOPgkPpBkS3Tv7oQFw KFQHMNr6ch6CpS9FjOyN+eLoIGzy/YWPyAlBMcxTdVeoXckgecETfIcwnv+icfpI u159+/CCGVuYlC14mhFGO467hwJTmcRWOLjCYAdb8pgGthorMi9nrXUK+3nho+3D baPSxSruxpYPNcT7xpsR/Um/Fo3knwZDwhZEyh5qfK2tEeraMzOzvwJNnrj/RZuE gNDkk8NEkekYp2Bm1CvTcRPYfsim4ZQK2AQDxeeLmEV094GNZyNTD4wkJj/eiCBa 7KJmJOTrm8PVkJLHQXA0fd+9YabvXGTx5iZr5e6/trCCzv7JTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLQkNG3LcvECSMdv0Xkrx3RCeLWhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDFh ZjA4OS0zYWNlLTQ4OGQtOGY1Mi02YjM3NWM4MTNiYTIvMDUwNGFiMTktNTFlZS0z YWVlLTg5MTMtZGE1YjFkYmU1OWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGQxYWYwODktM2FjZS00ODhkLThm NTItNmIzNzVjODEzYmEyLzBkMWFmMDg5LTNhY2UtNDg4ZC04ZjUyLTZiMzc1Yzgx M2JhMi5jcmwwHwYDVR0jBBgwFoAUppzO8te8P4zuLxY0WWSFvc4eLpQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDFhZjA4OS0zYWNlLTQ4OGQtOGY1Mi02YjM3 NWM4MTNiYTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAiGAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAICnyoktzi66tD3d5QGDfWuO6G6rWLmB4kQERuCwgCmm5NblXJ4y C6rKZXi/zZMCsEfEWkxeIRCANFM8KccxE6RD/HSdx+gGybiEwZIu8ygUMmMp1Zv/ ozHcjue73Fw8sA8WzE8RozWq+NP+ejs5q4QLUkQ3+Rlt4yPAyMB34vfQ/gBT+AF8 x0i3Lzi0ukPdOeGFgLngP1/sLSLtrpuiqIoK5I5q/3wVf14jP1+sgf/IkXfHRRGf taVrF8o3ENdxPpkQDzurRQk8VHKIzGeCCBvy/dQkeIiFpscKTmlYLjKU9fNVAq8Z H+w45bfaY7Pkg4NhXSzCJN2RRVbf4io5L6w= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:07 2025 by rpki-client