$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/a1e057fb-16f7-3396-8982-11bad5ac424f.roa File: a1e057fb-16f7-3396-8982-11bad5ac424f.roa (raw, json) Hash identifier: WAbZFhikXzjM1+FTO3pAhR02MunAd/JCGvb80U76GvA= Subject key identifier: 93:4B:9B:D2:91:D5:6E:E0:9C:98:D4:E9:57:E8:DD:74:04:AF:02:0E Certificate issuer: /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee Certificate serial: 010D0C9F43285848C6E6360F936AEAF67098CC00 Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/a1e057fb-16f7-3396-8982-11bad5ac424f.roa Signing time: Wed 05 Feb 2025 02:00:39 +0000 ROA not before: Wed 05 Feb 2025 02:00:39 +0000 ROA not after: Tue 06 May 2025 01:00:39 +0000 asID: 53407 IP address blocks: 2604:9440::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:e6:36:0f:93:6a:ea:f6:70:98:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee Validity Not Before: Feb 5 02:00:39 2025 GMT Not After : May 6 01:00:39 2025 GMT Subject: CN=892bc3d4-1fe7-4d3b-9530-dad46ef9aa55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7f:d9:c7:56:1f:28:73:65:fd:9f:fa:b3:74: ff:7d:0d:1f:be:e9:3f:6f:bb:6c:7b:39:73:ac:eb: bd:22:cf:bf:e9:fa:69:6d:f3:2f:b6:17:b0:d9:61: cb:19:60:19:52:04:3e:be:21:b4:62:ff:11:00:8e: b0:d0:49:cf:bd:75:d9:80:48:b9:9e:cc:cf:1c:ab: e0:5b:d5:94:ac:e0:8f:67:94:6e:1c:27:49:f5:10: a4:3c:94:d1:c5:d8:8c:98:a5:1e:44:2b:99:26:c3: a2:05:56:38:69:b7:8a:10:2f:a4:4f:57:ea:dd:22: 1f:7a:b6:62:94:5d:4e:41:ac:77:43:b7:b6:0a:cc: 99:7b:49:f5:c6:85:73:f5:8f:ce:3b:35:0d:ee:5a: c8:92:b1:43:c1:6b:80:a9:3f:90:f7:24:dd:f7:0e: 8a:19:b8:cf:52:cb:24:68:76:81:27:2a:35:04:71: 47:7f:73:c0:80:48:aa:97:d6:b1:27:43:f2:29:2a: d4:e0:30:e3:b1:22:f5:11:e8:e5:3b:df:12:d4:0a: 6d:9a:f0:e4:d6:fc:46:91:97:de:32:40:d2:ea:30: 2d:5b:31:8f:8d:dc:24:bc:5a:5b:3c:e5:38:52:f9: b1:c9:c9:01:88:eb:5f:49:03:bc:8f:c0:7e:7a:50: 9d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:4B:9B:D2:91:D5:6E:E0:9C:98:D4:E9:57:E8:DD:74:04:AF:02:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/a1e057fb-16f7-3396-8982-11bad5ac424f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl X509v3 Authority Key Identifier: keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer sbgp-ipAddrBlock: critical IPv6: 2604:9440::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:15:65:a8:e8:7a:4d:01:d6:5a:2c:05:6e:fb:a5:d1:88:f9: c8:0b:e6:e0:38:23:c3:80:38:39:2b:52:db:98:0a:21:a7:c2: 14:a9:f6:46:e8:d7:09:1e:0d:8d:97:d2:8c:b1:5f:c0:fd:aa: 74:ce:72:86:4e:17:27:72:48:10:b4:0d:46:69:12:3b:a9:bc: 64:b5:31:82:6a:b1:4b:60:7a:16:a1:56:64:39:78:ad:17:33: b6:aa:0d:1d:f3:36:cf:47:33:a8:f3:25:7a:2e:c7:63:b7:cc: 60:0e:87:cd:88:da:e8:13:16:b0:26:c6:ca:11:a4:13:45:ac: bc:75:d8:2f:d5:d0:a6:10:55:6a:10:f4:6c:f3:43:cb:46:99: 08:9a:8b:b4:e2:07:a8:6a:b8:aa:18:65:21:f0:58:ee:d4:36: aa:08:bf:cb:e9:84:6a:d8:fa:00:d8:93:b4:4e:fb:71:c6:4f: 52:2a:20:c9:97:3e:79:25:c0:c5:88:bf:63:aa:94:47:44:9b: 0e:a2:fe:1e:60:f9:ce:85:b4:8c:2f:44:10:5e:70:dc:64:fe: 15:0a:10:d1:7e:78:c0:a2:d5:cf:0b:e7:f8:bd:d6:fd:c8:f6: d6:91:57:68:c2:98:00:32:a4:c0:fa:82:12:0c:7a:8a:f6:f4: 3e:0f:88:65 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjG5jYPk2rq9nCYzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE2MDE0YjEtZGYwZi00Y2ZkLTk5ODAtM2VlNGJjOWU5 ZmVlMB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk ODkyYmMzZDQtMWZlNy00ZDNiLTk1MzAtZGFkNDZlZjlhYTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2X/Zx1YfKHNl/Z/6s3T/fQ0fvuk/b7tsezlz rOu9Is+/6fppbfMvthew2WHLGWAZUgQ+viG0Yv8RAI6w0EnPvXXZgEi5nszPHKvg W9WUrOCPZ5RuHCdJ9RCkPJTRxdiMmKUeRCuZJsOiBVY4abeKEC+kT1fq3SIferZi lF1OQax3Q7e2CsyZe0n1xoVz9Y/OOzUN7lrIkrFDwWuAqT+Q9yTd9w6KGbjPUssk aHaBJyo1BHFHf3PAgEiql9axJ0PyKSrU4DDjsSL1EejlO98S1AptmvDk1vxGkZfe MkDS6jAtWzGPjdwkvFpbPOU4UvmxyckBiOtfSQO8j8B+elCd1QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJNLm9KR1W7gnJjU6Vfo3XQErwIOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YTYw MTRiMS1kZjBmLTRjZmQtOTk4MC0zZWU0YmM5ZTlmZWUvYTFlMDU3ZmItMTZmNy0z Mzk2LTg5ODItMTFiYWQ1YWM0MjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGE2MDE0YjEtZGYwZi00Y2ZkLTk5 ODAtM2VlNGJjOWU5ZmVlLzhhNjAxNGIxLWRmMGYtNGNmZC05OTgwLTNlZTRiYzll OWZlZS5jcmwwHwYDVR0jBBgwFoAUkhU2LxsekHKvkCTiHxNn13oJ6bEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YTYwMTRiMS1kZjBmLTRjZmQtOTk4MC0zZWU0 YmM5ZTlmZWUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSUQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCgFWWo6HpNAdZaLAVu+6XRiPnIC+bgOCPDgDg5K1LbmAohp8IUqfZG 6NcJHg2Nl9KMsV/A/ap0znKGThcnckgQtA1GaRI7qbxktTGCarFLYHoWoVZkOXit FzO2qg0d8zbPRzOo8yV6Lsdjt8xgDofNiNroExawJsbKEaQTRay8ddgv1dCmEFVq EPRs80PLRpkImou04geoariqGGUh8Fju1DaqCL/L6YRq2PoA2JO0Tvtxxk9SKiDJ lz55JcDFiL9jqpRHRJsOov4eYPnOhbSML0QQXnDcZP4VChDRfnjAotXPC+f4vdb9 yPbWkVdowpgAMqTA+oISDHqK9vQ+D4hl -----END CERTIFICATE-----Generated at Fri Apr 4 15:59:49 2025 by rpki-client