$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/d1bc157d-452c-3df9-8b8f-0af48916ab94.roa File: d1bc157d-452c-3df9-8b8f-0af48916ab94.roa (raw, json) Hash identifier: Owoj9hOpPiI4CgDn5Xkw7bWBM6I5zzvl8Z2b15ksGqM= Subject key identifier: 46:72:0B:4F:2C:C9:F7:91:6A:25:55:94:0C:E8:C5:C7:6F:19:26:4B Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F43285848143A784931B9F4736F55D0C0 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/d1bc157d-452c-3df9-8b8f-0af48916ab94.roa Signing time: Tue 03 Dec 2024 02:00:40 +0000 ROA not before: Tue 03 Dec 2024 02:00:40 +0000 ROA not after: Mon 03 Mar 2025 02:00:40 +0000 asID: 13984 IP address blocks: 2604:2ec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:14:3a:78:49:31:b9:f4:73:6f:55:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: Dec 3 02:00:40 2024 GMT Not After : Mar 3 02:00:40 2025 GMT Subject: CN=01bb65f8-5b10-4c1c-99b3-924ed499012e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3d:67:fe:58:7a:f9:f9:c5:48:de:ef:f2:82: cc:1a:ff:3a:06:3b:51:35:10:d3:4d:25:1d:03:94: 18:03:b1:d9:5a:12:e5:d5:99:5d:76:ba:01:2e:e2: d8:67:65:a9:0b:2a:2b:0c:a3:29:f5:93:57:ae:46: c0:16:bc:c2:4e:dc:3d:e7:d4:fb:20:7f:46:10:5e: 73:38:53:95:00:12:60:a5:d5:6a:a9:41:69:0b:23: 19:44:f8:68:bb:7d:ed:06:6b:81:71:2d:b2:27:c5: 55:d4:87:21:04:51:8f:d5:38:d3:26:60:d5:82:d3: 49:1e:96:df:d3:08:12:b5:58:87:0a:57:ed:71:c8: 9f:fd:c6:38:76:c8:72:2e:90:50:93:5f:54:2e:82: 58:48:41:0e:8d:bd:a3:0b:dd:43:14:19:f1:2e:04: 2a:ae:5d:0c:b8:c1:ce:18:75:8f:59:36:04:cb:37: a2:fc:54:49:33:9f:d7:0f:00:a5:3a:6d:f0:d6:b6: d5:79:9f:44:9a:d9:a6:b3:83:ef:0b:b2:7d:ff:42: 43:ed:7f:3d:54:f1:2c:8d:b8:bb:38:c3:16:40:83: 19:22:e2:00:9c:f8:c0:50:e7:82:34:98:f0:a3:b7: 96:c4:ee:ff:6e:d0:a0:b9:a1:60:d4:4a:8a:b4:a0: 05:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:72:0B:4F:2C:C9:F7:91:6A:25:55:94:0C:E8:C5:C7:6F:19:26:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/d1bc157d-452c-3df9-8b8f-0af48916ab94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv6: 2604:2ec0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:0a:4d:ba:e4:0c:1f:cc:50:79:37:ed:33:6a:d8:bf:51:4a: 8d:60:35:32:4a:0d:68:bb:8f:35:1b:ab:e9:ed:c6:bd:9c:f0: 49:ba:1d:c4:53:cf:59:0f:b0:d9:9b:7e:76:34:cb:3c:60:f2: dc:01:ea:14:05:d7:d0:e3:36:d5:de:7f:c6:3f:00:db:f3:74: 93:1b:88:77:c3:6c:88:1c:4f:72:79:14:7a:30:dd:50:de:c6: 65:e9:12:74:14:ac:e4:21:27:81:7d:fa:c1:aa:76:9d:b2:8a: 0a:d7:43:10:7d:77:9e:11:8c:d7:60:51:e3:c8:57:63:ef:01: f9:70:e6:d6:5d:91:55:05:8f:aa:e0:40:9a:4e:84:93:aa:d3: a3:47:45:cb:1e:22:cc:1a:af:a9:36:fa:72:9a:47:49:77:d4: 36:ce:aa:b0:d7:87:a3:6a:12:c5:1a:a5:5e:28:f5:28:78:bd: 24:95:11:70:b9:b7:fc:e5:f9:a2:b6:fa:81:c5:9c:1f:a1:0d: df:fe:de:a6:21:ab:cd:32:66:e1:a4:81:06:6f:ca:c2:e7:0c: 73:bf:c6:53:5d:a3:0c:5b:d7:49:50:c9:e2:72:b2:25:42:db: 1c:9c:ed:bd:9e:90:6a:77:0e:22:eb:b1:eb:d0:ed:64:8c:17: f5:21:13:ed -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgUOnhJMbn0c29V0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk MDFiYjY1ZjgtNWIxMC00YzFjLTk5YjMtOTI0ZWQ0OTkwMTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT1n/lh6+fnFSN7v8oLMGv86BjtRNRDTTSUd A5QYA7HZWhLl1ZlddroBLuLYZ2WpCyorDKMp9ZNXrkbAFrzCTtw959T7IH9GEF5z OFOVABJgpdVqqUFpCyMZRPhou33tBmuBcS2yJ8VV1IchBFGP1TjTJmDVgtNJHpbf 0wgStViHClftccif/cY4dshyLpBQk19ULoJYSEEOjb2jC91DFBnxLgQqrl0MuMHO GHWPWTYEyzei/FRJM5/XDwClOm3w1rbVeZ9Emtmms4PvC7J9/0JD7X89VPEsjbi7 OMMWQIMZIuIAnPjAUOeCNJjwo7eWxO7/btCguaFg1EqKtKAFOwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEZyC08syfeRaiVVlAzoxcdvGSZLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvZDFiYzE1N2QtNDUyYy0z ZGY5LThiOGYtMGFmNDg5MTZhYjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQuwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCICk265AwfzFB5N+0zati/UUqNYDUySg1ou481G6vp7ca9nPBJuh3E U89ZD7DZm352NMs8YPLcAeoUBdfQ4zbV3n/GPwDb83STG4h3w2yIHE9yeRR6MN1Q 3sZl6RJ0FKzkISeBffrBqnadsooK10MQfXeeEYzXYFHjyFdj7wH5cObWXZFVBY+q 4ECaToSTqtOjR0XLHiLMGq+pNvpymkdJd9Q2zqqw14ejahLFGqVeKPUoeL0klRFw ubf85fmitvqBxZwfoQ3f/t6mIavNMmbhpIEGb8rC5wxzv8ZTXaMMW9dJUMnicrIl QtscnO29npBqdw4i67Hr0O1kjBf1IRPt -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:31 2025 by rpki-client