$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/7c1ba9ff-755e-3117-9120-25b143c0f470.roa File: 7c1ba9ff-755e-3117-9120-25b143c0f470.roa (raw, json) Hash identifier: 6k280n82Il5kwMADeEGXYhZLGLKBv3gpSy0vzYvObwg= Subject key identifier: 08:27:E4:C3:CA:9F:B6:29:3E:42:04:72:32:C4:78:E5:07:96:1E:D0 Certificate issuer: /CN=4890f8fd-3ae6-4818-8c1f-19aab66f43a1 Certificate serial: 010D0C9F432858489E6B6EDDE0D4103481FABD30 Authority key identifier: 9F:85:49:00:D8:C8:26:66:8B:5E:DA:A7:05:C6:89:9D:EA:1F:7A:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/7c1ba9ff-755e-3117-9120-25b143c0f470.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 12145 IP address blocks: 2604:dec0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:6e:dd:e0:d4:10:34:81:fa:bd:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4890f8fd-3ae6-4818-8c1f-19aab66f43a1 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=4d43cb32-b42b-4d4a-b981-a217e72a38f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8c:a4:cb:66:bb:85:cc:9f:01:8c:55:ee:aa: ce:9a:57:4c:76:9d:4b:b3:60:2e:c3:f7:4c:21:7f: 45:79:da:32:5c:e1:e9:02:fc:57:a5:36:b6:8b:4e: d8:6a:41:0c:fe:16:d1:d0:f6:12:d4:8b:c2:f3:42: cc:a3:60:14:34:70:fe:97:72:de:df:46:1a:c4:08: cc:78:eb:13:4a:5a:37:31:9a:d5:c9:c8:b7:9a:b9: 2b:b2:97:1c:b5:33:36:f7:2a:47:92:7a:8c:29:6a: 7d:e0:96:9b:25:ef:7d:51:2b:7a:7c:64:9d:a4:81: e1:df:49:f5:51:98:59:c7:d5:eb:10:18:84:75:c9: c7:dd:c0:39:98:32:01:a4:e0:f5:7a:80:c4:28:44: 78:92:ae:7d:c7:3b:d3:dd:2b:5e:19:19:71:fa:2a: 2c:dc:b5:04:3d:33:d5:ba:22:51:c3:19:d1:ef:32: 41:81:a3:a8:b4:6c:9d:c5:c5:6b:dc:0a:d3:a1:05: a7:ab:d4:7f:c2:c4:a3:14:82:1c:4d:e6:17:31:d3: 52:fe:ee:de:1a:ac:81:da:d8:a1:94:2c:dc:ad:27: 8f:0c:b5:bd:00:b0:35:9a:a3:5a:ab:5a:49:bd:ba: 87:14:f0:0e:93:63:8c:0d:6b:b2:e4:9e:f3:3d:6f: d6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:27:E4:C3:CA:9F:B6:29:3E:42:04:72:32:C4:78:E5:07:96:1E:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/7c1ba9ff-755e-3117-9120-25b143c0f470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.crl X509v3 Authority Key Identifier: keyid:9F:85:49:00:D8:C8:26:66:8B:5E:DA:A7:05:C6:89:9D:EA:1F:7A:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.cer sbgp-ipAddrBlock: critical IPv6: 2604:dec0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:ee:ef:61:c8:3d:5a:d8:4e:5c:08:fd:9f:df:92:c8:23:e9: f7:ea:45:5c:73:2b:19:b8:7d:e6:ce:b1:96:f4:45:eb:96:74: ef:ee:b2:c8:c6:75:26:f8:d4:b7:12:3c:74:84:58:f7:00:78: 16:8e:10:79:1b:83:08:72:97:d9:16:90:09:71:01:ce:a3:72: 22:99:77:b7:3b:90:b3:18:73:84:8d:d5:c6:b6:34:9d:49:45: 6e:41:70:f3:c1:a1:70:6a:90:d4:e4:9f:f6:82:8e:41:ab:92: 68:50:f6:d6:3e:3f:49:58:22:f4:2f:0c:0b:94:4f:b3:27:a9: 1e:84:8f:c4:47:76:22:58:56:44:5b:c7:d2:45:2a:34:97:aa: 00:d5:60:ab:4a:c6:01:c0:61:d0:07:10:e2:8a:a8:43:66:c7: 87:1a:1e:e9:77:55:3d:21:14:e8:5a:ec:f6:8b:de:58:49:c7: d3:cb:d9:ad:98:68:b0:b8:26:67:92:89:0a:12:9b:cb:84:5f: 65:5f:e2:1c:8c:54:20:6f:57:10:e6:a4:60:66:c8:06:5f:8e: f7:10:04:cf:99:3c:28:af:57:ce:8f:24:36:2f:79:7f:46:3e: 8e:c7:bd:cc:ae:a2:d4:8c:76:5f:c6:ee:90:fb:d7:03:cc:65: 48:43:6a:da -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiea27d4NQQNIH6vTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg5MGY4ZmQtM2FlNi00ODE4LThjMWYtMTlhYWI2NmY0 M2ExMB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NGQ0M2NiMzItYjQyYi00ZDRhLWI5ODEtYTIxN2U3MmEzOGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoyky2a7hcyfAYxV7qrOmldMdp1Ls2Auw/dM IX9FedoyXOHpAvxXpTa2i07YakEM/hbR0PYS1IvC80LMo2AUNHD+l3Le30YaxAjM eOsTSlo3MZrVyci3mrkrspcctTM29ypHknqMKWp94JabJe99USt6fGSdpIHh30n1 UZhZx9XrEBiEdcnH3cA5mDIBpOD1eoDEKER4kq59xzvT3SteGRlx+ios3LUEPTPV uiJRwxnR7zJBgaOotGydxcVr3ArToQWnq9R/wsSjFIIcTeYXMdNS/u7eGqyB2tih lCzcrSePDLW9ALA1mqNaq1pJvbqHFPAOk2OMDWuy5J7zPW/WdwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAgn5MPKn7YpPkIEcjLEeOUHlh7QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ODkw ZjhmZC0zYWU2LTQ4MTgtOGMxZi0xOWFhYjY2ZjQzYTEvN2MxYmE5ZmYtNzU1ZS0z MTE3LTkxMjAtMjViMTQzYzBmNDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDg5MGY4ZmQtM2FlNi00ODE4LThj MWYtMTlhYWI2NmY0M2ExLzQ4OTBmOGZkLTNhZTYtNDgxOC04YzFmLTE5YWFiNjZm NDNhMS5jcmwwHwYDVR0jBBgwFoAUn4VJANjIJmaLXtqnBcaJneoferwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ODkwZjhmZC0zYWU2LTQ4MTgtOGMxZi0xOWFh YjY2ZjQzYTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTewDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAb7u9hyD1a2E5cCP2f35LII+n36kVccysZuH3mzrGW9EXrlnTv7rLI xnUm+NS3Ejx0hFj3AHgWjhB5G4MIcpfZFpAJcQHOo3IimXe3O5CzGHOEjdXGtjSd SUVuQXDzwaFwapDU5J/2go5Bq5JoUPbWPj9JWCL0LwwLlE+zJ6kehI/ER3YiWFZE W8fSRSo0l6oA1WCrSsYBwGHQBxDiiqhDZseHGh7pd1U9IRToWuz2i95YScfTy9mt mGiwuCZnkokKEpvLhF9lX+IcjFQgb1cQ5qRgZsgGX473EATPmTwor1fOjyQ2L3l/ Rj6Ox73MrqLUjHZfxu6Q+9cDzGVIQ2ra -----END CERTIFICATE-----Generated at Sat Apr 5 04:39:19 2025 by rpki-client