$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/1e2f5530-ba9d-381d-9b54-2d76fceca419.roa File: 1e2f5530-ba9d-381d-9b54-2d76fceca419.roa (raw, json) Hash identifier: SzV+4J9MYppw5F24MNWnPXqk5Q+ab9sdETG3iiVYSds= Subject key identifier: EC:85:01:07:ED:D1:FE:1F:5D:E8:64:FC:0E:5E:F3:33:07:59:4E:8A Certificate issuer: /CN=b433860d-ab5d-45f4-a11e-f313b584710a Certificate serial: 010D0C9F432858488DAB53F26FD591D7BD569800 Authority key identifier: CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/1e2f5530-ba9d-381d-9b54-2d76fceca419.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 14445 IP address blocks: 2606:2a40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 10 Feb 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:53:f2:6f:d5:91:d7:bd:56:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433860d-ab5d-45f4-a11e-f313b584710a Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=c8fd02cd-d83c-487a-81c1-b4498d2e9b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:82:93:7d:be:1a:90:c7:cb:22:cf:e5:cd:29: aa:4a:89:43:59:3d:8f:78:66:f3:a4:98:d5:0d:fa: 0f:70:91:cd:58:c8:0c:22:2f:c3:2b:a4:b2:16:2f: b6:8d:15:bb:ee:61:d3:2b:f5:27:ef:76:f5:86:37: 6a:a2:b7:84:aa:2a:bd:17:56:d6:99:2e:57:f0:ec: ad:09:87:48:18:01:52:2e:78:40:5d:12:89:6f:0c: 84:92:34:2f:fb:ee:ac:b5:51:69:a8:1e:ec:37:08: 3b:5f:74:78:52:ec:3e:bd:69:1b:a3:88:0e:01:bd: b0:8c:07:98:58:32:f3:39:3b:c2:4e:bc:da:5f:4e: 29:de:94:6f:a5:13:ff:7c:4f:41:92:46:1a:6e:5f: c4:b2:f7:01:eb:67:c2:ef:67:9a:49:19:4f:75:d9: 3d:e2:e4:80:80:a7:3d:bf:16:a0:ee:98:30:89:3d: 56:1d:1c:b2:8b:92:b3:70:8f:0f:56:ad:11:ee:d0: a3:f9:a2:77:62:f2:74:f7:13:ac:92:32:d0:e5:13: 4f:66:9b:25:ed:b1:19:17:30:07:0c:15:9a:2e:a3: 4e:4f:46:49:68:21:90:10:cb:24:d4:8f:09:a5:1a: 54:5e:69:7f:3c:22:9c:42:7b:f4:9a:be:8c:3d:b7: 06:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:85:01:07:ED:D1:FE:1F:5D:E8:64:FC:0E:5E:F3:33:07:59:4E:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/1e2f5530-ba9d-381d-9b54-2d76fceca419.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl X509v3 Authority Key Identifier: keyid:CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer sbgp-ipAddrBlock: critical IPv6: 2606:2a40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:bd:43:f7:c5:04:5d:d6:43:48:2e:77:0f:84:03:88:21:37: ac:68:69:fa:56:59:3a:c7:fa:d4:1e:35:5b:e1:9a:f2:b2:d8: 6f:45:71:33:dc:46:04:c0:0f:ba:79:8d:4a:4b:21:bd:52:43: 40:ba:b5:e6:b2:5e:f0:1f:85:85:25:e7:2a:85:ff:ca:77:12: 77:d3:75:ba:70:a9:ca:06:9a:f5:be:b3:34:10:a3:64:b7:be: 2b:6b:66:d5:02:b1:58:ec:fc:32:aa:07:f9:b8:d4:9d:de:c0: 07:20:fe:28:4c:ef:67:31:95:2e:f0:00:53:90:34:ac:65:77: 0d:1a:e9:d2:65:67:05:bd:63:27:82:9a:18:c8:82:84:0f:64: fa:6c:aa:79:02:37:22:49:14:fa:e2:c8:3b:e3:aa:9f:f5:33: 05:92:74:f6:f9:6c:0a:d7:07:59:b7:4d:e3:9f:53:09:46:5b: 7e:cb:bc:e7:56:99:72:ef:b2:31:14:63:8c:88:df:44:ce:68: 1b:1d:6a:08:44:3d:0f:73:8e:67:b1:10:56:da:9d:62:d2:25: 01:11:26:ab:23:5f:17:76:fd:5e:a5:0e:9f:9a:79:3a:08:19: f9:d7:eb:6f:76:ca:bb:1f:ba:d0:7c:d6:42:2c:ba:89:e4:b1: ba:7d:8d:7b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiNq1Pyb9WR171WmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzMzg2MGQtYWI1ZC00NWY0LWExMWUtZjMxM2I1ODQ3 MTBhMB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk YzhmZDAyY2QtZDgzYy00ODdhLTgxYzEtYjQ0OThkMmU5YjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4KTfb4akMfLIs/lzSmqSolDWT2PeGbzpJjV DfoPcJHNWMgMIi/DK6SyFi+2jRW77mHTK/Un73b1hjdqoreEqiq9F1bWmS5X8Oyt CYdIGAFSLnhAXRKJbwyEkjQv++6stVFpqB7sNwg7X3R4Uuw+vWkbo4gOAb2wjAeY WDLzOTvCTrzaX04p3pRvpRP/fE9BkkYabl/EsvcB62fC72eaSRlPddk94uSAgKc9 vxag7pgwiT1WHRyyi5KzcI8PVq0R7tCj+aJ3YvJ09xOskjLQ5RNPZpsl7bEZFzAH DBWaLqNOT0ZJaCGQEMsk1I8JpRpUXml/PCKcQnv0mr6MPbcGwwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOyFAQft0f4fXehk/A5e8zMHWU6KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNDMz ODYwZC1hYjVkLTQ1ZjQtYTExZS1mMzEzYjU4NDcxMGEvMWUyZjU1MzAtYmE5ZC0z ODFkLTliNTQtMmQ3NmZjZWNhNDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjQzMzg2MGQtYWI1ZC00NWY0LWEx MWUtZjMxM2I1ODQ3MTBhL2I0MzM4NjBkLWFiNWQtNDVmNC1hMTFlLWYzMTNiNTg0 NzEwYS5jcmwwHwYDVR0jBBgwFoAUz9UTZdOGkQNiuVzEe6KxGXpl5VUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iNDMzODYwZC1hYjVkLTQ1ZjQtYTExZS1mMzEz YjU4NDcxMGEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYqQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC1vUP3xQRd1kNILncPhAOIITesaGn6Vlk6x/rUHjVb4ZrysthvRXEz 3EYEwA+6eY1KSyG9UkNAurXmsl7wH4WFJecqhf/KdxJ303W6cKnKBpr1vrM0EKNk t74ra2bVArFY7Pwyqgf5uNSd3sAHIP4oTO9nMZUu8ABTkDSsZXcNGunSZWcFvWMn gpoYyIKED2T6bKp5AjciSRT64sg746qf9TMFknT2+WwK1wdZt03jn1MJRlt+y7zn Vply77IxFGOMiN9EzmgbHWoIRD0Pc45nsRBW2p1i0iUBESarI18Xdv1epQ6fmnk6 CBn51+tvdsq7H7rQfNZCLLqJ5LG6fY17 -----END CERTIFICATE-----Generated at Sun Feb 9 15:28:29 2025 by rpki-client