$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/cbf33bd1-f96b-3cbf-be1f-b05627924ab6.roa File: cbf33bd1-f96b-3cbf-be1f-b05627924ab6.roa (raw, json) Hash identifier: fjTnw1bRwjJy1K2G52zgjFHuhiknuGKiMqmJZBxOJV0= Subject key identifier: FE:A1:B0:A7:15:E9:59:05:25:19:B9:56:83:AB:C0:35:C3:BE:FB:90 Certificate issuer: /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Certificate serial: 010D0C9F4328584898D60B50FB9566AD1D918300 Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/cbf33bd1-f96b-3cbf-be1f-b05627924ab6.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 14618 IP address blocks: 2610:e8:3180::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:0b:50:fb:95:66:ad:1d:91:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=937e6eeb-2805-4709-b1cb-736812e61fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5c:66:bd:8e:f7:bc:43:bd:a7:e6:77:82:32: d2:20:c7:a4:ad:fc:7a:7f:bf:b9:67:2e:5c:51:14: 3f:3e:bd:03:13:10:33:7a:35:b2:d0:c0:a2:af:fd: 63:96:5b:09:7a:0d:10:95:b8:0e:7e:41:87:18:18: e9:8f:59:4d:57:eb:ae:ef:25:cb:d1:5e:ce:e1:eb: 6c:e3:fe:f3:a6:2f:53:c9:6f:e1:25:f1:73:64:62: 18:57:fd:2f:d3:94:66:d5:c4:59:2c:2b:50:61:c3: 45:e5:25:6a:92:17:ee:01:46:3c:c4:9c:f7:f1:59: 5d:96:dc:c7:bc:81:8a:4a:0c:f8:2b:89:28:0a:8e: ce:35:1b:1e:f6:19:4d:5c:bd:85:1a:06:9b:6b:70: 10:e2:f2:9d:cf:bb:bf:26:4b:6e:08:6d:53:05:c5: a5:a3:2e:8d:a1:34:29:08:75:be:02:d4:53:e6:1b: cb:1b:56:81:dd:9c:66:8b:cf:40:f0:f7:ee:31:ad: e2:96:d8:48:38:d1:61:05:f4:fb:16:c9:53:5d:91: 52:76:00:89:aa:89:cb:7e:ba:e5:d7:f4:2d:b3:8b: a8:92:c8:f2:66:7f:ea:0d:59:a7:61:ea:a5:01:64: bc:79:b7:40:88:f7:39:a4:e4:a3:5b:ae:34:34:0c: 05:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A1:B0:A7:15:E9:59:05:25:19:B9:56:83:AB:C0:35:C3:BE:FB:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/cbf33bd1-f96b-3cbf-be1f-b05627924ab6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl X509v3 Authority Key Identifier: keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer sbgp-ipAddrBlock: critical IPv6: 2610:e8:3180::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:2c:48:89:5c:21:69:b5:17:78:a0:d8:65:6f:3a:e6:36:e8: 2e:23:c9:e7:2b:dd:a1:79:86:8d:ab:ab:b5:ff:65:c0:e4:3a: 1e:1c:ce:34:20:97:cc:c7:05:f1:a3:80:38:e2:20:d7:d1:d6: a9:93:09:cf:4e:41:e7:04:46:c0:65:d9:38:a7:48:2a:e3:ca: 2c:c1:1a:bf:6a:d9:c1:28:9a:44:fa:49:55:ff:78:f3:07:58: 95:b3:6b:80:9a:8f:26:91:37:ba:96:a5:3d:3d:da:2b:ff:c7: 6a:92:d5:0e:76:63:23:e9:7f:a2:21:f6:1d:08:b3:e9:9f:e0: bf:1d:a5:7a:44:ff:89:5f:be:b4:52:88:f2:02:b2:7e:62:6c: c1:81:93:42:3c:73:ac:cc:01:31:b1:f6:2b:0e:f7:8d:0b:ee: 13:f9:77:df:ac:f2:f2:ae:74:18:23:77:89:a5:e3:de:f3:c9: 0c:88:70:3a:e4:78:9b:db:83:e3:59:bd:2a:b5:45:b2:b4:bd: be:06:7b:76:9b:18:e9:1a:32:3f:8d:0c:83:3e:88:c2:d4:d6: 1c:66:e7:c5:1b:1c:cf:1c:18:c7:77:64:e4:1c:e8:b6:a3:1c: 71:85:e5:a1:10:14:2d:e2:f7:07:ab:9f:85:8f:07:b8:03:08: bd:84:68:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiY1gtQ+5VmrR2RgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5NDI1YzUtNTJlOC00ZWFjLTllMWQtYjA3MDc5Yzg0 ZDdiMB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk OTM3ZTZlZWItMjgwNS00NzA5LWIxY2ItNzM2ODEyZTYxZmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1xmvY73vEO9p+Z3gjLSIMekrfx6f7+5Zy5c URQ/Pr0DExAzejWy0MCir/1jllsJeg0QlbgOfkGHGBjpj1lNV+uu7yXL0V7O4ets 4/7zpi9TyW/hJfFzZGIYV/0v05Rm1cRZLCtQYcNF5SVqkhfuAUY8xJz38VldltzH vIGKSgz4K4koCo7ONRse9hlNXL2FGgaba3AQ4vKdz7u/JktuCG1TBcWloy6NoTQp CHW+AtRT5hvLG1aB3Zxmi89A8PfuMa3ilthIONFhBfT7FslTXZFSdgCJqonLfrrl 1/Qts4uoksjyZn/qDVmnYeqlAWS8ebdAiPc5pOSjW640NAwFwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP6hsKcV6VkFJRm5VoOrwDXDvvuQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0 MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzljODRkN2IvY2JmMzNiZDEtZjk2Yi0z Y2JmLWJlMWYtYjA1NjI3OTI0YWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTM5NDI1YzUtNTJlOC00ZWFjLTll MWQtYjA3MDc5Yzg0ZDdiL2UzOTQyNWM1LTUyZTgtNGVhYy05ZTFkLWIwNzA3OWM4 NGQ3Yi5jcmwwHwYDVR0jBBgwFoAUBiGHe0/vkdqGTfcX0R/RGNKyU6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcw NzljODRkN2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhAA6DGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJksSIlcIWm1F3ig2GVvOuY26C4jyecr3aF5ho2rq7X/ZcDkOh4c zjQgl8zHBfGjgDjiINfR1qmTCc9OQecERsBl2TinSCrjyizBGr9q2cEomkT6SVX/ ePMHWJWza4CajyaRN7qWpT092iv/x2qS1Q52YyPpf6Ih9h0Is+mf4L8dpXpE/4lf vrRSiPICsn5ibMGBk0I8c6zMATGx9isO940L7hP5d9+s8vKudBgjd4ml497zyQyI cDrkeJvbg+NZvSq1RbK0vb4Ge3abGOkaMj+NDIM+iMLU1hxm58UbHM8cGMd3ZOQc 6LajHHGF5aEQFC3i9wern4WPB7gDCL2EaNI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:08 2025 by rpki-client