$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/611c5848-7847-37af-bcd8-ea93e742fac5.roa File: 611c5848-7847-37af-bcd8-ea93e742fac5.roa (raw, json) Hash identifier: Iy6w0dqYq3D4Bj6R/NoG8DqOsoDfD0lfx1+u3K07vyI= Subject key identifier: EE:4C:B5:00:68:89:DC:00:16:38:9F:46:5E:9E:6E:C6:BB:B5:8A:0B Certificate issuer: /CN=7a2be303-4525-4433-b220-b1c6b5052945 Certificate serial: 010D0C9F432858482A8FDEF1A8221C18DFFA9980 Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/611c5848-7847-37af-bcd8-ea93e742fac5.roa Signing time: Wed 11 Dec 2024 02:00:38 +0000 ROA not before: Wed 11 Dec 2024 02:00:38 +0000 ROA not after: Tue 11 Mar 2025 01:00:38 +0000 asID: 136473 IP address blocks: 2604:28c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2a:8f:de:f1:a8:22:1c:18:df:fa:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945 Validity Not Before: Dec 11 02:00:38 2024 GMT Not After : Mar 11 01:00:38 2025 GMT Subject: CN=c55b6ed2-6048-4bb5-8dae-0967c37ad476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:86:ec:b8:1b:2c:fc:f0:1b:ad:37:11:3d:56: 32:1d:14:81:4f:1b:fa:d0:68:25:68:7e:c2:91:48: fe:f9:5d:e1:75:ee:05:04:0f:ee:48:74:38:a6:02: 2d:68:f9:d5:3a:b7:33:1a:14:bd:1d:2a:6f:6e:e8: 95:61:1c:d0:c0:4e:53:ce:c0:be:df:e7:da:6a:69: a6:4b:c7:f9:74:91:13:cb:4d:0c:d8:7e:f6:a6:5b: 4c:1f:f1:53:b7:64:43:41:48:b3:40:35:84:1b:27: 72:86:a0:84:9c:34:3c:b8:b7:55:db:69:9f:cb:0c: c2:f0:6b:2c:2b:a1:0e:cd:52:d5:20:52:66:e5:8b: 0f:bf:18:e1:cf:e4:a2:31:79:e0:91:c1:53:86:20: 82:8b:e2:5e:7e:2d:39:9d:49:1d:6d:a5:87:15:d0: 14:aa:c7:36:9d:61:38:36:26:ad:2d:59:ec:5c:cb: f7:71:d5:0c:3b:11:4c:af:ca:5e:5b:17:d1:18:0b: f7:bf:a3:31:7f:33:b5:e6:a6:f1:2e:73:c2:95:32: 79:c5:b4:0d:0c:fc:67:9e:63:45:3f:05:fe:9c:95: 78:0f:3d:47:ae:c9:43:b5:06:56:1c:11:9e:0c:fd: 44:e6:cb:99:9d:51:2e:9a:22:44:da:e7:37:cb:0f: 28:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4C:B5:00:68:89:DC:00:16:38:9F:46:5E:9E:6E:C6:BB:B5:8A:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/611c5848-7847-37af-bcd8-ea93e742fac5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl X509v3 Authority Key Identifier: keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer sbgp-ipAddrBlock: critical IPv6: 2604:28c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:5d:90:2e:f4:d5:19:47:f0:49:b2:f9:2d:41:67:18:7d:7f: 75:d1:3a:d9:f3:17:f4:72:b7:f2:5b:42:27:ec:85:a3:55:7a: cb:9c:80:f7:e6:87:bc:b3:4d:b7:3f:53:dc:70:20:f8:dd:1a: 1d:98:cb:b5:8a:8f:e9:10:55:d0:43:6f:6d:94:7c:62:f5:21: ae:91:c5:88:6c:7b:f8:15:37:21:c6:4f:34:24:16:d1:1e:fe: a3:fe:f8:55:a0:d1:a1:cf:f1:08:f6:2d:c1:83:dd:ba:3a:ca: 74:bd:93:16:5c:34:a9:db:53:56:72:0c:90:3c:b8:d6:d5:c3: 20:53:04:4e:3a:17:48:39:88:82:cb:21:29:62:e2:c6:15:17: ed:45:ab:f1:03:93:f4:79:6c:3d:ef:cd:c6:69:36:e6:13:28: a8:ff:73:3a:5e:cb:6f:a8:9b:69:d5:6c:77:cc:11:d8:02:0e: 7b:9d:be:0d:0a:6a:09:d0:79:4b:de:06:71:14:5d:68:bf:26: 92:f8:f1:07:97:08:76:e4:d8:3a:d7:ac:51:35:cd:26:2f:6d: 20:bb:59:51:ea:c6:9a:e7:b1:18:43:b9:7e:f5:f0:92:55:bb: b1:43:fe:9e:51:05:e6:1a:95:54:a4:62:33:11:51:84:93:bb: 3b:c2:18:ee -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgqj97xqCIcGN/6mYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy OTQ1MB4XDTI0MTIxMTAyMDAzOFoXDTI1MDMxMTAxMDAzOFowLzEtMCsGA1UEAxMk YzU1YjZlZDItNjA0OC00YmI1LThkYWUtMDk2N2MzN2FkNDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIbsuBss/PAbrTcRPVYyHRSBTxv60GglaH7C kUj++V3hde4FBA/uSHQ4pgItaPnVOrczGhS9HSpvbuiVYRzQwE5TzsC+3+faammm S8f5dJETy00M2H72pltMH/FTt2RDQUizQDWEGydyhqCEnDQ8uLdV22mfywzC8Gss K6EOzVLVIFJm5YsPvxjhz+SiMXngkcFThiCCi+Jefi05nUkdbaWHFdAUqsc2nWE4 NiatLVnsXMv3cdUMOxFMr8peWxfRGAv3v6MxfzO15qbxLnPClTJ5xbQNDPxnnmNF PwX+nJV4Dz1HrslDtQZWHBGeDP1E5suZnVEumiJE2uc3yw8oXwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO5MtQBoidwAFjifRl6ebsa7tYoLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvNjExYzU4NDgtNzg0Ny0z N2FmLWJjZDgtZWE5M2U3NDJmYWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1 Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2 YjUwNTI5NDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQowDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAqXZAu9NUZR/BJsvktQWcYfX910TrZ8xf0crfyW0In7IWjVXrLnID3 5oe8s023P1PccCD43RodmMu1io/pEFXQQ29tlHxi9SGukcWIbHv4FTchxk80JBbR Hv6j/vhVoNGhz/EI9i3Bg926Osp0vZMWXDSp21NWcgyQPLjW1cMgUwROOhdIOYiC yyEpYuLGFRftRavxA5P0eWw9783GaTbmEyio/3M6XstvqJtp1Wx3zBHYAg57nb4N CmoJ0HlL3gZxFF1ovyaS+PEHlwh25Ng616xRNc0mL20gu1lR6saa57EYQ7l+9fCS VbuxQ/6eUQXmGpVUpGIzEVGEk7s7whju -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:39 2025 by rpki-client