$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/d04dd6f5-30fb-3bd8-9178-2ef70d0acf25.roa File: d04dd6f5-30fb-3bd8-9178-2ef70d0acf25.roa (raw, json) Hash identifier: mDpe5thI4CqjcM5U4rk2/V6tk39KZ/gNJGcvPOWT4fg= Subject key identifier: 4A:C8:D2:B0:0D:80:18:59:6A:97:9A:39:19:0C:2B:1D:89:D2:AA:47 Certificate issuer: /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Certificate serial: 010D0C9F4328584898D60B6138A6FC8426FBD160 Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/d04dd6f5-30fb-3bd8-9178-2ef70d0acf25.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 2610:e8:3180::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:0b:61:38:a6:fc:84:26:fb:d1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=bd12835b-8e0b-4b15-aab0-1076f2aef4f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:89:e3:40:22:9d:83:ce:34:2f:bc:71:02:cf: ab:c5:d4:2f:da:6a:29:e5:cd:09:74:8b:24:aa:31: b5:32:34:d1:a1:1d:d1:97:84:9a:ce:d3:08:e5:71: 43:45:3f:06:3e:c6:4d:98:72:b5:2c:fb:2b:74:93: 77:05:52:d2:c0:a6:d1:43:15:b7:52:25:67:4a:5e: 20:d4:15:04:33:41:9c:2f:da:24:57:07:33:57:14: eb:02:4a:41:05:3c:49:77:fe:f2:b2:65:89:b6:50: 26:39:b1:54:c2:b7:ba:a2:4d:48:80:4f:15:16:b4: a3:67:44:a0:39:36:70:30:28:31:3a:e1:e1:33:e2: b5:7f:d5:85:af:4f:1e:40:03:ee:69:83:c7:64:ea: f5:2a:4f:1f:77:9e:78:2d:ef:65:c9:20:0e:67:c3: aa:bb:9b:ef:e5:d7:c0:4c:ee:c0:f3:03:5f:e8:d3: 6e:b9:dc:d9:12:e9:22:2c:ac:f0:0f:18:1c:01:1e: da:e1:2d:9c:29:49:8c:da:0a:94:e9:8a:95:89:13: a1:3b:0a:1a:69:b9:1a:04:90:fb:df:9d:ef:0a:66: e3:da:f8:2c:e4:ff:9d:0f:6c:62:a8:02:cd:0b:8f: db:1d:14:af:e1:8d:9d:56:bf:11:99:41:1b:e6:d4: 74:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C8:D2:B0:0D:80:18:59:6A:97:9A:39:19:0C:2B:1D:89:D2:AA:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/d04dd6f5-30fb-3bd8-9178-2ef70d0acf25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl X509v3 Authority Key Identifier: keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer sbgp-ipAddrBlock: critical IPv6: 2610:e8:3180::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:1d:ac:ac:e9:de:4b:ff:cf:c5:50:09:16:e2:48:21:e8:ff: e1:4b:3a:fb:e8:ae:56:19:34:22:bc:e8:e1:aa:31:3f:84:ef: 67:5f:9f:7f:43:04:a9:9c:ee:85:a7:bf:b9:05:5e:1c:99:3c: f9:1a:86:91:fe:4b:4d:b5:b5:6b:2f:8a:89:34:28:49:4e:79: 4b:e0:43:9a:cf:85:98:34:9a:72:c4:a5:bc:05:99:11:b2:27: a1:90:30:a6:e4:af:8f:63:b3:cb:ee:ee:9f:94:84:0c:b9:54: 96:7b:fd:02:87:72:0c:0a:41:5d:d4:2f:d0:75:7f:b4:66:bc: 16:c1:b8:60:d9:fd:c1:2f:37:ce:33:ac:bf:45:db:bb:79:89: 22:41:79:2d:23:36:31:64:af:77:c1:8b:97:9b:87:c5:16:1e: bc:05:96:5e:cb:86:5f:43:33:56:a7:c4:dd:55:5a:d0:d0:c3: f3:aa:50:8d:ea:5d:45:6b:96:ac:4d:62:aa:07:09:b3:95:ef: 52:db:22:90:4a:b7:e1:a4:00:a2:36:0e:11:b5:aa:f0:e3:b2: ca:c8:b9:e7:0d:67:bd:94:f1:ba:af:ee:d1:41:50:ed:cc:70: a0:ac:bf:20:bf:0c:39:d0:e1:26:fc:b2:32:17:f9:84:d3:39: 65:02:94:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiY1gthOKb8hCb70WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5NDI1YzUtNTJlOC00ZWFjLTllMWQtYjA3MDc5Yzg0 ZDdiMB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk YmQxMjgzNWItOGUwYi00YjE1LWFhYjAtMTA3NmYyYWVmNGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYnjQCKdg840L7xxAs+rxdQv2mop5c0JdIsk qjG1MjTRoR3Rl4SaztMI5XFDRT8GPsZNmHK1LPsrdJN3BVLSwKbRQxW3UiVnSl4g 1BUEM0GcL9okVwczVxTrAkpBBTxJd/7ysmWJtlAmObFUwre6ok1IgE8VFrSjZ0Sg OTZwMCgxOuHhM+K1f9WFr08eQAPuaYPHZOr1Kk8fd554Le9lySAOZ8Oqu5vv5dfA TO7A8wNf6NNuudzZEukiLKzwDxgcAR7a4S2cKUmM2gqU6YqViROhOwoaabkaBJD7 353vCmbj2vgs5P+dD2xiqALNC4/bHRSv4Y2dVr8RmUEb5tR0SQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFErI0rANgBhZapeaORkMKx2J0qpHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0 MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzljODRkN2IvZDA0ZGQ2ZjUtMzBmYi0z YmQ4LTkxNzgtMmVmNzBkMGFjZjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTM5NDI1YzUtNTJlOC00ZWFjLTll MWQtYjA3MDc5Yzg0ZDdiL2UzOTQyNWM1LTUyZTgtNGVhYy05ZTFkLWIwNzA3OWM4 NGQ3Yi5jcmwwHwYDVR0jBBgwFoAUBiGHe0/vkdqGTfcX0R/RGNKyU6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcw NzljODRkN2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhAA6DGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADkdrKzp3kv/z8VQCRbiSCHo/+FLOvvorlYZNCK86OGqMT+E72df n39DBKmc7oWnv7kFXhyZPPkahpH+S021tWsviok0KElOeUvgQ5rPhZg0mnLEpbwF mRGyJ6GQMKbkr49js8vu7p+UhAy5VJZ7/QKHcgwKQV3UL9B1f7RmvBbBuGDZ/cEv N84zrL9F27t5iSJBeS0jNjFkr3fBi5ebh8UWHrwFll7Lhl9DM1anxN1VWtDQw/Oq UI3qXUVrlqxNYqoHCbOV71LbIpBKt+GkAKI2DhG1qvDjssrIuecNZ72U8bqv7tFB UO3McKCsvyC/DDnQ4Sb8sjIX+YTTOWUClP0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:05 2025 by rpki-client