$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/f1ab79d8-9ba8-341f-b4ae-165cdb969a2d.roa File: f1ab79d8-9ba8-341f-b4ae-165cdb969a2d.roa (raw, json) Hash identifier: KK0Zf7AdOx5FDQiCN+s6mzV2yo65mXZrWxLkd8nlVFk= Subject key identifier: C6:C6:41:AE:3F:F5:34:5F:9C:BC:8B:2A:50:ED:A0:28:D7:49:F2:6A Certificate issuer: /CN=c17eacde-68de-455f-97dc-4d67847c03ff Certificate serial: 010D0C9F43285848E9CBF3120B5EBF223BF2D4C0 Authority key identifier: 34:FA:19:93:2C:BC:98:3C:00:2E:50:7B:F8:9E:BC:72:C9:F3:BC:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/f1ab79d8-9ba8-341f-b4ae-165cdb969a2d.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 21577 IP address blocks: 2604:d580::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/c17eacde-68de-455f-97dc-4d67847c03ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/c17eacde-68de-455f-97dc-4d67847c03ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:f3:12:0b:5e:bf:22:3b:f2:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c17eacde-68de-455f-97dc-4d67847c03ff Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=9e45b409-d844-437a-9a1c-9033e3d56508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:85:ee:54:27:56:ea:64:98:9b:e8:87:84:a4: a7:9f:9c:08:3e:d2:34:49:3e:09:48:c6:94:44:df: 40:2a:53:89:ea:f4:30:cc:f1:e1:16:e4:33:07:c1: 41:1f:11:f5:cb:bb:ba:3a:29:ed:5d:40:9f:3b:a8: 50:ec:52:28:69:a2:68:c8:47:af:43:83:3b:96:0a: 71:99:16:e2:c9:f8:0a:8f:ee:ad:73:b0:2f:1c:c7: ae:62:e1:5d:b1:0a:9e:aa:52:07:70:06:ad:cc:f2: 46:01:0b:0d:f2:91:60:04:12:d3:a5:f5:e1:0a:11: 48:7e:15:a4:1f:f0:ad:c6:ea:d1:b6:84:5c:ad:ef: 02:66:8b:22:bf:45:1d:11:21:bf:44:55:e5:b4:c9: a3:6d:59:6b:e0:d5:41:a0:76:c3:4d:c9:31:23:34: 9e:c5:b1:df:9a:b2:86:40:2e:9d:e4:15:b3:d4:0c: cf:5f:d3:f6:70:26:69:79:eb:4e:50:91:d5:90:13: dd:34:f1:74:8f:b2:57:9c:5b:2f:78:23:c4:35:14: 6d:0b:88:30:a7:da:4e:0c:86:21:e5:6f:ef:28:5d: 9e:a8:11:eb:c4:98:4d:ed:75:f0:a5:5f:96:c0:3d: a1:eb:72:f5:6a:8d:f5:b2:97:c1:7b:f7:56:d3:c3: 56:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C6:41:AE:3F:F5:34:5F:9C:BC:8B:2A:50:ED:A0:28:D7:49:F2:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/f1ab79d8-9ba8-341f-b4ae-165cdb969a2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/c17eacde-68de-455f-97dc-4d67847c03ff.crl X509v3 Authority Key Identifier: keyid:34:FA:19:93:2C:BC:98:3C:00:2E:50:7B:F8:9E:BC:72:C9:F3:BC:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff.cer sbgp-ipAddrBlock: critical IPv6: 2604:d580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:78:51:6d:b5:f1:03:ed:7f:8d:d4:9b:89:13:20:f6:62:d7: c3:9f:bf:0a:21:20:bf:40:31:d1:40:0e:23:f0:58:17:eb:49: 83:fe:68:8a:6c:78:14:a2:0d:45:ec:03:f9:96:ef:8c:9a:13: a2:cd:80:44:02:0d:f4:0b:46:f5:ed:d8:cc:86:e5:32:be:c5: 95:f6:b1:e2:c8:8b:f4:fa:57:44:b2:9c:db:5a:3b:e6:4e:0f: a9:94:5d:5d:32:b4:b0:3e:e2:de:44:a5:19:07:fb:3d:8d:13: 93:6f:a6:ac:69:2f:35:b7:c4:cb:00:19:6e:ee:5d:6c:63:bd: 97:b9:78:30:e1:28:a0:28:1e:eb:6f:72:43:3a:e5:36:45:f4: 9e:e9:e5:13:22:9e:6a:7c:65:86:32:05:38:d7:c9:7d:41:68: 4c:c6:4e:9f:7b:d6:35:91:8f:6f:96:8c:7b:28:08:46:d6:b0: 68:a8:c4:05:b0:e2:86:a4:43:08:7a:37:94:85:59:8a:26:31: ef:9f:3d:64:ac:c8:9b:6d:1d:55:81:88:a3:98:ad:1c:8a:a8: 5c:64:e4:9f:96:f9:4f:b5:54:3f:a5:3d:69:f8:3a:4e:9d:31: bc:75:28:52:c4:8c:f9:ca:cc:bd:4a:5b:71:93:4a:46:25:39: 8a:e8:dc:ea -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjpy/MSC16/Ijvy1MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzE3ZWFjZGUtNjhkZS00NTVmLTk3ZGMtNGQ2Nzg0N2Mw M2ZmMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk OWU0NWI0MDktZDg0NC00MzdhLTlhMWMtOTAzM2UzZDU2NTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84XuVCdW6mSYm+iHhKSnn5wIPtI0ST4JSMaU RN9AKlOJ6vQwzPHhFuQzB8FBHxH1y7u6OintXUCfO6hQ7FIoaaJoyEevQ4M7lgpx mRbiyfgKj+6tc7AvHMeuYuFdsQqeqlIHcAatzPJGAQsN8pFgBBLTpfXhChFIfhWk H/CtxurRtoRcre8CZosiv0UdESG/RFXltMmjbVlr4NVBoHbDTckxIzSexbHfmrKG QC6d5BWz1AzPX9P2cCZpeetOUJHVkBPdNPF0j7JXnFsveCPENRRtC4gwp9pODIYh 5W/vKF2eqBHrxJhN7XXwpV+WwD2h63L1ao31spfBe/dW08NWuwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMbGQa4/9TRfnLyLKlDtoCjXSfJqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jMTdl YWNkZS02OGRlLTQ1NWYtOTdkYy00ZDY3ODQ3YzAzZmYvZjFhYjc5ZDgtOWJhOC0z NDFmLWI0YWUtMTY1Y2RiOTY5YTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzE3ZWFjZGUtNjhkZS00NTVmLTk3 ZGMtNGQ2Nzg0N2MwM2ZmL2MxN2VhY2RlLTY4ZGUtNDU1Zi05N2RjLTRkNjc4NDdj MDNmZi5jcmwwHwYDVR0jBBgwFoAUNPoZkyy8mDwALlB7+J68csnzvK8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jMTdlYWNkZS02OGRlLTQ1NWYtOTdkYy00ZDY3 ODQ3YzAzZmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTVgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAMeFFttfED7X+N1JuJEyD2YtfDn78KISC/QDHRQA4j8FgX60mD/miK bHgUog1F7AP5lu+MmhOizYBEAg30C0b17djMhuUyvsWV9rHiyIv0+ldEspzbWjvm Tg+plF1dMrSwPuLeRKUZB/s9jROTb6asaS81t8TLABlu7l1sY72XuXgw4SigKB7r b3JDOuU2RfSe6eUTIp5qfGWGMgU418l9QWhMxk6fe9Y1kY9vlox7KAhG1rBoqMQF sOKGpEMIejeUhVmKJjHvnz1krMibbR1VgYijmK0ciqhcZOSflvlPtVQ/pT1p+DpO nTG8dShSxIz5ysy9Sltxk0pGJTmK6Nzq -----END CERTIFICATE-----Generated at Fri Apr 4 19:28:31 2025 by rpki-client