$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/09c7597f-fdd5-3742-aa9a-6a360b4cab15.roa File: 09c7597f-fdd5-3742-aa9a-6a360b4cab15.roa (raw, json) Hash identifier: DL5JTFv0aZdE+iVlqib2R4dfFUWNHSOFoRmWrzaf1zc= Subject key identifier: 23:01:7D:45:B7:ED:23:69:F7:17:3C:9B:56:64:00:62:36:5D:98:9D Certificate issuer: /CN=223ca9d9-14f2-4824-b1ba-16bc030ccf15 Certificate serial: 010D0C9F43285848AF2B79A71FA3DF7AC24A5880 Authority key identifier: 6A:78:B9:AC:DB:19:7E:87:5D:2E:D8:52:E1:25:FE:21:99:B1:D3:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/09c7597f-fdd5-3742-aa9a-6a360b4cab15.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 399078 IP address blocks: 2606:42c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/223ca9d9-14f2-4824-b1ba-16bc030ccf15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/223ca9d9-14f2-4824-b1ba-16bc030ccf15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:79:a7:1f:a3:df:7a:c2:4a:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=223ca9d9-14f2-4824-b1ba-16bc030ccf15 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=de5ddee2-fad6-4973-8abf-8bc1976de699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e6:b1:e9:17:7c:4f:9e:06:9e:5a:8b:ce:9f: 3f:4c:4c:3e:34:94:17:9e:cd:87:07:34:97:f3:78: 91:02:87:37:ed:b8:44:e1:85:ef:e3:36:c6:97:5e: cd:73:dc:96:44:61:35:4a:f9:01:65:b5:16:8c:95: 43:c7:ba:63:68:d7:04:46:2f:55:b3:3c:c6:bb:d4: b7:4a:74:d7:06:20:ef:11:6e:93:23:d6:d9:20:cf: ca:d9:13:9c:bb:55:5c:12:63:d9:76:75:fd:77:e2: 8e:61:4c:ca:9e:bc:21:bf:90:3b:e2:6f:15:24:d8: 50:18:e8:33:3a:6d:f8:45:4b:95:04:52:37:0b:18: db:62:9e:f2:01:3d:f2:3e:3a:12:e0:19:ab:bc:af: a2:7e:f2:39:93:50:cd:94:33:1c:18:eb:5b:1c:41: cf:54:ed:a0:85:85:8c:78:52:78:e7:7d:7a:93:46: fd:61:3e:7a:34:8d:7d:a4:db:4b:2f:22:c3:37:c7: 3f:e4:0c:fa:3a:90:0f:82:8c:8c:ba:df:b9:49:93: 98:ce:55:b2:fe:69:72:0e:2a:8d:01:36:e3:4c:bc: c1:e4:87:f4:7b:47:c2:7c:f2:44:a2:21:6d:4d:36: 08:25:18:ff:a0:b2:b3:6a:7a:eb:4f:00:66:9e:af: 5a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:01:7D:45:B7:ED:23:69:F7:17:3C:9B:56:64:00:62:36:5D:98:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/09c7597f-fdd5-3742-aa9a-6a360b4cab15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/223ca9d9-14f2-4824-b1ba-16bc030ccf15.crl X509v3 Authority Key Identifier: keyid:6A:78:B9:AC:DB:19:7E:87:5D:2E:D8:52:E1:25:FE:21:99:B1:D3:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15.cer sbgp-ipAddrBlock: critical IPv6: 2606:42c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:c6:65:93:c7:31:cc:90:99:cd:7f:7d:c3:a9:7a:62:13:99: e5:37:28:7f:35:7e:ab:75:48:f9:8f:83:e6:00:84:42:ff:ac: 2f:2b:49:50:df:36:89:1e:d7:d4:c3:fb:ad:7c:40:f3:26:5b: ae:43:f1:b1:d2:f6:f4:a9:79:73:de:d9:0a:09:99:b1:24:c1: 78:df:11:ac:cc:30:01:b6:d0:c2:39:56:9c:b1:15:bf:d2:03: 56:d9:bf:dd:05:8c:36:2d:52:87:49:60:7d:9d:83:49:fb:0f: 4f:f9:89:f5:b3:7b:0d:b3:95:cd:7f:a7:d0:0f:4b:0d:0e:ac: cf:69:56:8b:d9:f2:51:f0:f8:71:3c:4d:10:60:cd:cc:0f:d0: d9:9f:72:83:02:6d:db:27:09:7f:aa:c9:9e:34:76:da:4f:e1: a1:14:86:a2:16:2f:4a:3a:22:99:6a:2e:65:10:0c:35:a3:20: 04:21:63:ac:0a:d8:6a:90:b9:2a:91:15:59:86:56:e7:ce:67: 80:c6:f0:4d:aa:8e:c0:a4:f1:1e:00:63:6d:8d:9f:13:42:1a: 50:7e:00:72:98:5e:35:b3:d6:88:54:35:69:24:46:b6:0c:ac: 4e:a9:69:8d:95:d9:9e:bf:b2:11:a6:66:12:56:7b:7e:17:47: b9:47:d9:af -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEivK3mnH6PfesJKWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjIzY2E5ZDktMTRmMi00ODI0LWIxYmEtMTZiYzAzMGNj ZjE1MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk ZGU1ZGRlZTItZmFkNi00OTczLThhYmYtOGJjMTk3NmRlNjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuax6Rd8T54GnlqLzp8/TEw+NJQXns2HBzSX 83iRAoc37bhE4YXv4zbGl17Nc9yWRGE1SvkBZbUWjJVDx7pjaNcERi9VszzGu9S3 SnTXBiDvEW6TI9bZIM/K2ROcu1VcEmPZdnX9d+KOYUzKnrwhv5A74m8VJNhQGOgz Om34RUuVBFI3CxjbYp7yAT3yPjoS4BmrvK+ifvI5k1DNlDMcGOtbHEHPVO2ghYWM eFJ45316k0b9YT56NI19pNtLLyLDN8c/5Az6OpAPgoyMut+5SZOYzlWy/mlyDiqN ATbjTLzB5If0e0fCfPJEoiFtTTYIJRj/oLKzanrrTwBmnq9aDQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCMBfUW37SNp9xc8m1ZkAGI2XZidMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMjNj YTlkOS0xNGYyLTQ4MjQtYjFiYS0xNmJjMDMwY2NmMTUvMDljNzU5N2YtZmRkNS0z NzQyLWFhOWEtNmEzNjBiNGNhYjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjIzY2E5ZDktMTRmMi00ODI0LWIx YmEtMTZiYzAzMGNjZjE1LzIyM2NhOWQ5LTE0ZjItNDgyNC1iMWJhLTE2YmMwMzBj Y2YxNS5jcmwwHwYDVR0jBBgwFoAUani5rNsZfoddLthS4SX+IZmx0+MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMjNjYTlkOS0xNGYyLTQ4MjQtYjFiYS0xNmJj MDMwY2NmMTUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZCwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBjxmWTxzHMkJnNf33DqXpiE5nlNyh/NX6rdUj5j4PmAIRC/6wvK0lQ 3zaJHtfUw/utfEDzJluuQ/Gx0vb0qXlz3tkKCZmxJMF43xGszDABttDCOVacsRW/ 0gNW2b/dBYw2LVKHSWB9nYNJ+w9P+Yn1s3sNs5XNf6fQD0sNDqzPaVaL2fJR8Phx PE0QYM3MD9DZn3KDAm3bJwl/qsmeNHbaT+GhFIaiFi9KOiKZai5lEAw1oyAEIWOs CthqkLkqkRVZhlbnzmeAxvBNqo7ApPEeAGNtjZ8TQhpQfgBymF41s9aIVDVpJEa2 DKxOqWmNldmev7IRpmYSVnt+F0e5R9mv -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:49 2025 by rpki-client