$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa File: 4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa (raw, json) Hash identifier: Jlv6uQBRtx0pocgwZXc45OxBzsyv3rkpBsjnfzxXVgM= Subject key identifier: 04:2F:E3:0B:89:4B:68:B4:B3:34:19:1E:67:E9:E0:20:EC:87:85:FE Certificate issuer: /CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996 Certificate serial: 010D0C9F43285848854B5065275F68B99F633640 Authority key identifier: DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa Signing time: Sun 12 Jan 2025 14:00:53 +0000 ROA not before: Sun 12 Jan 2025 14:00:53 +0000 ROA not after: Sat 12 Apr 2025 13:00:53 +0000 asID: 16509 IP address blocks: 2600:400:ff00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:85:4b:50:65:27:5f:68:b9:9f:63:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996 Validity Not Before: Jan 12 14:00:53 2025 GMT Not After : Apr 12 13:00:53 2025 GMT Subject: CN=00f09046-35ed-40f0-b91f-64e977d3854b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bf:d9:fa:09:05:db:bd:76:00:34:71:e3:24: a7:b2:9c:fb:65:f3:d5:a7:87:b8:59:20:e5:a5:52: 6d:f3:f1:a1:0a:b2:78:b6:7c:a4:fa:98:5f:9b:5d: 34:de:83:44:9e:19:82:88:6c:db:4b:19:f8:c9:37: 3e:96:c5:10:f5:2d:6d:b7:0a:c8:07:c8:ef:77:42: 0e:80:f5:b1:fa:c1:7a:a1:63:69:8f:1f:de:c7:83: 67:2e:f3:12:6f:60:20:99:43:84:b2:33:86:43:71: 79:f5:b6:52:f3:33:fc:5f:82:2c:c2:9e:27:dd:94: 91:3e:29:23:10:f0:bb:b3:dd:00:c2:f4:cf:40:b2: 8b:37:f8:60:51:8c:53:e5:7b:e6:25:ee:58:3b:2d: ef:29:ff:79:d8:b1:91:c3:c0:8f:bc:cf:69:25:9e: a7:38:e3:fc:dc:30:91:20:3c:f5:a8:7e:99:cc:35: 53:01:c7:85:b9:4a:5a:d5:3a:2e:45:61:13:08:72: 9d:ed:1b:7a:bb:da:eb:db:99:b8:dd:a8:da:bc:17: 71:91:4c:39:86:48:c1:57:0b:a5:21:82:1e:1a:0f: 2b:d0:4d:8a:6a:81:01:42:d8:47:d5:37:8d:57:f7: ab:6f:12:c2:cf:27:76:a8:1e:d3:93:71:da:37:70: b5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2F:E3:0B:89:4B:68:B4:B3:34:19:1E:67:E9:E0:20:EC:87:85:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl X509v3 Authority Key Identifier: keyid:DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer sbgp-ipAddrBlock: critical IPv6: 2600:400:ff00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:4d:9e:91:1c:55:ad:52:99:1b:23:63:b1:d3:45:32:dd:2f: 0e:9a:4f:d4:3b:b1:5e:26:5f:99:b9:49:60:e8:5f:49:a3:b5: 24:b4:f4:ec:ee:b6:d4:a8:09:c7:86:ab:e3:82:90:09:09:ed: dc:1a:73:0b:8b:aa:45:e1:d7:bb:8f:ce:80:0d:68:31:c9:f2: ef:56:b6:3d:8b:87:e6:53:5c:d8:43:d1:52:bf:44:5f:d2:7f: 70:ad:8e:47:80:64:44:24:db:66:55:34:36:c2:2e:ad:8a:f3: 82:bf:39:38:91:3f:a1:86:0c:aa:f7:3a:7e:e8:75:50:fc:cd: ba:d6:68:79:af:17:34:3d:70:83:a7:ca:ad:5b:7d:c9:09:e0: d5:f8:75:4c:d0:dd:16:79:b6:a3:96:6a:1c:b0:8e:ac:9e:49: 30:2e:23:0e:e1:8b:8d:30:ed:61:6f:32:30:b5:93:f2:ad:fc: 9b:a1:ee:36:4c:da:58:9a:3f:4f:19:77:d7:d9:40:de:64:f0: 18:c3:cd:39:5f:0b:66:99:8d:a7:76:95:c3:fb:41:c9:04:4f: 39:5c:e8:67:7e:c5:fe:86:c8:23:a9:31:a3:80:25:d8:de:28: f6:dd:d6:d1:f9:25:e3:37:83:9b:fc:8b:fc:64:4d:69:a4:31: d7:48:43:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiFS1BlJ19ouZ9jNkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhhMGYxNzYtYjRhMi00ZTMyLThhOTgtNGUxMmUwN2Q4 OTk2MB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk MDBmMDkwNDYtMzVlZC00MGYwLWI5MWYtNjRlOTc3ZDM4NTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b/Z+gkF2712ADRx4ySnspz7ZfPVp4e4WSDl pVJt8/GhCrJ4tnyk+phfm1003oNEnhmCiGzbSxn4yTc+lsUQ9S1ttwrIB8jvd0IO gPWx+sF6oWNpjx/ex4NnLvMSb2AgmUOEsjOGQ3F59bZS8zP8X4Iswp4n3ZSRPikj EPC7s90AwvTPQLKLN/hgUYxT5XvmJe5YOy3vKf952LGRw8CPvM9pJZ6nOOP83DCR IDz1qH6ZzDVTAceFuUpa1TouRWETCHKd7Rt6u9rr25m43ajavBdxkUw5hkjBVwul IYIeGg8r0E2KaoEBQthH1TeNV/erbxLCzyd2qB7Tk3HaN3C1oQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAQv4wuJS2i0szQZHmfp4CDsh4X+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOGEw ZjE3Ni1iNGEyLTRlMzItOGE5OC00ZTEyZTA3ZDg5OTYvNGYwZmU2ZTctYjhhYi0z ZGFjLTkxNTUtMDAxYWM2NGRjMzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDhhMGYxNzYtYjRhMi00ZTMyLThh OTgtNGUxMmUwN2Q4OTk2L2Q4YTBmMTc2LWI0YTItNGUzMi04YTk4LTRlMTJlMDdk ODk5Ni5jcmwwHwYDVR0jBBgwFoAU3HV8E36ogo58+VN1GdCxhU7FP/YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kOGEwZjE3Ni1iNGEyLTRlMzItOGE5OC00ZTEy ZTA3ZDg5OTYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAEAP8A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABlNnpEcVa1SmRsjY7HTRTLdLw6aT9Q7sV4mX5m5SWDoX0mjtSS0 9OzuttSoCceGq+OCkAkJ7dwacwuLqkXh17uPzoANaDHJ8u9Wtj2Lh+ZTXNhD0VK/ RF/Sf3CtjkeAZEQk22ZVNDbCLq2K84K/OTiRP6GGDKr3On7odVD8zbrWaHmvFzQ9 cIOnyq1bfckJ4NX4dUzQ3RZ5tqOWahywjqyeSTAuIw7hi40w7WFvMjC1k/Kt/Juh 7jZM2liaP08Zd9fZQN5k8BjDzTlfC2aZjad2lcP7QckETzlc6Gd+xf6GyCOpMaOA JdjeKPbd1tH5JeM3g5v8i/xkTWmkMddIQ10= -----END CERTIFICATE-----Generated at Fri Mar 14 09:52:06 2025 by rpki-client