$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5e3ae1c0-4e5c-3839-bcc7-85944741f6df.roa File: 5e3ae1c0-4e5c-3839-bcc7-85944741f6df.roa (raw, json) Hash identifier: pGSGhRBre0CMikede1YcMDl1ZF3L15YRwwKXTz5q6Sk= Subject key identifier: 6F:F9:8F:A2:AA:91:3C:04:06:97:4F:81:79:D8:B4:1A:7F:B6:D6:B1 Certificate issuer: /CN=4cef7db1-d0f7-4a95-8c36-d162a28a52c6 Certificate serial: 010D0C9F43285848CC7B8FE5E1B98056C2E11380 Authority key identifier: 6C:4A:22:A1:E5:F2:F8:1B:6B:4B:F3:FA:34:57:8E:82:E1:17:BB:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5e3ae1c0-4e5c-3839-bcc7-85944741f6df.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 14618 IP address blocks: 2620:10b:b008::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:8f:e5:e1:b9:80:56:c2:e1:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cef7db1-d0f7-4a95-8c36-d162a28a52c6 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=8d3a0ed9-9139-401d-8b94-b14c9c09a222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:61:13:a3:65:5f:19:c3:b7:ea:a1:57:d1:58: d3:7d:24:d2:74:6c:8a:9e:fe:f3:fb:51:9d:74:47: 97:6b:6b:f6:1a:7a:45:21:56:20:5f:04:46:ff:83: 7c:09:c1:42:0d:8f:9f:12:94:20:3f:ac:f1:30:a7: 2d:7c:49:05:75:b7:8c:e3:c2:b3:65:24:66:ee:ee: 5c:92:4d:a6:f4:4f:a5:72:72:90:a5:f0:d8:4f:98: da:45:6d:9b:85:a4:c7:2b:d6:db:2b:20:c0:76:9a: 76:79:34:1d:4f:7e:c8:a3:bf:f0:6e:bb:e1:52:ae: 54:bc:56:bc:71:be:b1:59:c6:90:4d:95:c7:5c:16: d0:99:c3:f7:1e:67:b3:e3:8e:a8:9c:d2:b9:38:76: 02:17:df:ae:84:df:ce:f1:b8:3b:f6:8c:cc:00:f8: 17:95:81:04:cc:57:6e:a1:06:31:e5:3f:94:ae:67: 0f:95:6c:09:7e:02:2e:de:da:1f:1a:d0:05:69:02: a6:69:d5:a3:51:33:67:c2:0a:13:e8:7a:bd:3e:1f: 7c:3d:e9:f7:2c:2d:02:5a:96:02:05:cf:4b:7f:c3: 80:aa:5c:a4:07:a3:65:1d:32:0a:00:af:b0:dd:cb: 74:b0:aa:bb:76:64:c3:61:41:ba:da:31:14:f8:a4: d1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F9:8F:A2:AA:91:3C:04:06:97:4F:81:79:D8:B4:1A:7F:B6:D6:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5e3ae1c0-4e5c-3839-bcc7-85944741f6df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.crl X509v3 Authority Key Identifier: keyid:6C:4A:22:A1:E5:F2:F8:1B:6B:4B:F3:FA:34:57:8E:82:E1:17:BB:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer sbgp-ipAddrBlock: critical IPv6: 2620:10b:b008::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:be:99:c9:5b:74:fd:c1:df:de:9a:e7:9b:14:12:dd:db:99: 12:9e:3d:d4:74:77:5b:64:4d:f9:05:af:46:e2:e1:00:b3:ca: 8b:9c:3a:dd:5d:f2:aa:9a:6b:54:0b:e6:b2:76:bb:ca:6a:b8: cf:73:d1:46:eb:d9:3f:7e:26:fe:27:55:d9:78:49:59:11:37: 4e:0b:15:2d:99:d7:15:01:7d:80:25:49:6a:95:7b:fd:f2:5e: 59:e0:a6:ae:41:15:20:72:65:5e:8e:8c:09:68:34:ff:95:61: 01:62:03:a1:1a:2b:b7:4d:53:2e:19:59:09:3c:a9:67:f3:47: 4b:a6:d3:44:63:42:cd:62:4c:c9:8c:5f:91:42:3f:5c:9d:aa: 85:3d:76:e5:d8:0f:6c:9a:39:b8:8c:25:f6:5b:e4:27:dc:e1: bf:6b:6c:55:2e:da:9f:bf:92:c3:43:2b:ad:2d:ff:0a:b6:7a: 69:34:d6:8a:56:d2:82:0b:db:9e:fd:36:1b:ba:56:a2:b2:fa: ee:cc:62:3a:70:94:96:8a:b8:71:83:77:a1:a7:4d:0a:70:7c: fa:46:b0:92:73:90:1a:d8:a5:90:59:7c:65:ed:1c:69:f1:ff: ba:24:89:88:60:de:a2:da:fa:92:f6:59:ea:28:3f:4b:8a:8c: ac:c3:8b:14 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjMe4/l4bmAVsLhE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNlZjdkYjEtZDBmNy00YTk1LThjMzYtZDE2MmEyOGE1 MmM2MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk OGQzYTBlZDktOTEzOS00MDFkLThiOTQtYjE0YzljMDlhMjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2ETo2VfGcO36qFX0VjTfSTSdGyKnv7z+1Gd dEeXa2v2GnpFIVYgXwRG/4N8CcFCDY+fEpQgP6zxMKctfEkFdbeM48KzZSRm7u5c kk2m9E+lcnKQpfDYT5jaRW2bhaTHK9bbKyDAdpp2eTQdT37Io7/wbrvhUq5UvFa8 cb6xWcaQTZXHXBbQmcP3Hmez446onNK5OHYCF9+uhN/O8bg79ozMAPgXlYEEzFdu oQYx5T+UrmcPlWwJfgIu3tofGtAFaQKmadWjUTNnwgoT6Hq9Ph98Pen3LC0CWpYC Bc9Lf8OAqlykB6NlHTIKAK+w3ct0sKq7dmTDYUG62jEU+KTR2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG/5j6KqkTwEBpdPgXnYtBp/ttaxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80Y2Vm N2RiMS1kMGY3LTRhOTUtOGMzNi1kMTYyYTI4YTUyYzYvNWUzYWUxYzAtNGU1Yy0z ODM5LWJjYzctODU5NDQ3NDFmNmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGNlZjdkYjEtZDBmNy00YTk1LThj MzYtZDE2MmEyOGE1MmM2LzRjZWY3ZGIxLWQwZjctNGE5NS04YzM2LWQxNjJhMjhh NTJjNi5jcmwwHwYDVR0jBBgwFoAUbEoioeXy+BtrS/P6NFeOguEXuyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80Y2VmN2RiMS1kMGY3LTRhOTUtOGMzNi1kMTYy YTI4YTUyYzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiABC7AI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABu+mclbdP3B396a55sUEt3bmRKePdR0d1tkTfkFr0bi4QCzyouc Ot1d8qqaa1QL5rJ2u8pquM9z0Ubr2T9+Jv4nVdl4SVkRN04LFS2Z1xUBfYAlSWqV e/3yXlngpq5BFSByZV6OjAloNP+VYQFiA6EaK7dNUy4ZWQk8qWfzR0um00RjQs1i TMmMX5FCP1ydqoU9duXYD2yaObiMJfZb5Cfc4b9rbFUu2p+/ksNDK60t/wq2emk0 1opW0oIL2579Nhu6VqKy+u7MYjpwlJaKuHGDd6GnTQpwfPpGsJJzkBrYpZBZfGXt HGnx/7okiYhg3qLa+pL2WeooP0uKjKzDixQ= -----END CERTIFICATE-----Generated at Fri Mar 14 11:21:19 2025 by rpki-client