$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa File: 3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa (raw, json) Hash identifier: rzjl1IYu8UMnevKMGuX6VbqvvJH/vE6yjnk/AOphLtg= Subject key identifier: 15:7E:42:1E:85:02:2E:DE:81:20:DF:2C:1F:3B:38:53:67:D4:F0:FB Certificate issuer: /CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Certificate serial: 010D0C9F43285848A400BE24BB77C63196763EC0 Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 14230 IP address blocks: 2607:fb20::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:be:24:bb:77:c6:31:96:76:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=bb18e545-c203-4014-bf4c-e6d25172c3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f2:d4:27:3a:58:fe:24:09:2c:83:e9:a0:e5: 8c:74:88:aa:3d:1c:39:a2:3c:38:fc:f3:1e:bf:0f: bc:e3:25:62:c1:c3:5a:c1:77:41:ef:cb:9b:a5:fc: 35:1b:6a:b7:74:76:2b:ba:1c:57:2c:d4:4f:e5:56: 6c:09:9d:3f:e9:10:92:10:5b:9f:7e:c4:c6:8d:f0: a4:42:78:99:ad:80:74:30:14:bf:19:6b:fb:0c:d2: 9f:13:c1:a4:96:c3:49:6d:bf:72:ed:05:ec:bb:6f: ac:22:a4:0f:a8:1f:65:c4:4e:3d:14:19:a7:86:a2: fb:0c:15:9d:3e:27:44:cc:5e:ae:ff:23:02:36:3c: da:31:6a:3e:9f:0d:f4:48:09:93:50:a2:13:41:c9: c0:84:99:f1:54:bc:e9:c7:4e:3d:20:b5:68:b2:cd: a7:71:08:ac:22:67:8a:7e:75:33:cb:f0:20:8f:96: 6b:62:88:cf:e0:e0:85:26:6e:24:d6:3e:df:fd:99: d0:23:89:c4:df:2e:4f:1c:6a:a8:fa:e0:17:ab:c7: 76:48:cd:dd:5f:58:39:99:49:9f:0a:0c:26:e7:23: 2c:52:87:f2:04:98:80:f6:38:4e:db:33:46:f9:cf: c3:da:e1:08:fb:10:aa:2c:99:b8:a7:ec:0b:34:27: 39:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:7E:42:1E:85:02:2E:DE:81:20:DF:2C:1F:3B:38:53:67:D4:F0:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl X509v3 Authority Key Identifier: keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer sbgp-ipAddrBlock: critical IPv6: 2607:fb20::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:f1:5c:fe:24:1f:0f:6b:21:38:bb:f0:a6:58:5b:b7:cd:17: 9e:38:9a:b0:20:90:85:8b:58:11:50:02:ba:7c:8f:93:8a:93: 41:58:30:87:70:27:54:be:ac:0e:fc:66:77:5f:a2:72:71:9d: 6b:b6:9f:40:b9:2d:a3:79:d0:6f:9e:af:91:a7:cd:49:cc:cf: a6:8d:21:6a:38:9f:0d:13:4a:24:b7:2e:37:fc:d2:da:c3:22: 47:39:ac:a5:65:bd:20:5c:0b:fb:54:b1:b5:61:b8:c0:e0:fb: 86:4d:9c:8f:93:83:b7:f0:dc:12:46:3c:72:3c:da:f5:35:3a: b2:8f:2c:d0:67:51:9b:aa:ee:2c:99:05:e1:9b:50:ed:8b:8b: 98:d7:84:c4:29:86:41:3f:43:c8:d8:6d:0d:e0:52:dc:d2:16: 8d:2d:b9:17:92:91:71:72:7d:e8:b4:43:e0:2c:d2:bb:0a:d8: b8:0a:ef:65:f0:08:e2:59:77:f3:96:07:49:8b:72:41:36:aa: 2a:b9:97:e2:10:3e:bc:07:ff:c1:a3:1e:ce:2e:10:4e:51:c1: 23:d8:f3:e5:92:94:75:37:14:89:08:f8:d0:06:64:bf:2c:e9: 9c:21:35:95:f5:f8:67:0d:bb:a8:1c:cc:25:ce:ed:00:13:0c: 38:13:ef:80 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEikAL4ku3fGMZZ2PsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhkZjM0NmQtM2Y2Ni00NTU1LWIyYWItNjdmNDUwZWZk Y2IzMB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk YmIxOGU1NDUtYzIwMy00MDE0LWJmNGMtZTZkMjUxNzJjM2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvLUJzpY/iQJLIPpoOWMdIiqPRw5ojw4/PMe vw+84yViwcNawXdB78ubpfw1G2q3dHYruhxXLNRP5VZsCZ0/6RCSEFuffsTGjfCk QniZrYB0MBS/GWv7DNKfE8GklsNJbb9y7QXsu2+sIqQPqB9lxE49FBmnhqL7DBWd PidEzF6u/yMCNjzaMWo+nw30SAmTUKITQcnAhJnxVLzpx049ILVoss2ncQisImeK fnUzy/Agj5ZrYojP4OCFJm4k1j7f/ZnQI4nE3y5PHGqo+uAXq8d2SM3dX1g5mUmf Cgwm5yMsUofyBJiA9jhO2zNG+c/D2uEI+xCqLJm4p+wLNCc5oQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBV+Qh6FAi7egSDfLB87OFNn1PD7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yOGRm MzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0NTBlZmRjYjMvM2RjZjZmNjctOGE0Zi0z ZTNkLWEwMzUtMDgzNzEzZDZjZWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjhkZjM0NmQtM2Y2Ni00NTU1LWIy YWItNjdmNDUwZWZkY2IzLzI4ZGYzNDZkLTNmNjYtNDU1NS1iMmFiLTY3ZjQ1MGVm ZGNiMy5jcmwwHwYDVR0jBBgwFoAU0TE0tLR3LAyK//WCA1AodurlHZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yOGRmMzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0 NTBlZmRjYjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf7IDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBE8Vz+JB8PayE4u/CmWFu3zReeOJqwIJCFi1gRUAK6fI+TipNBWDCH cCdUvqwO/GZ3X6JycZ1rtp9AuS2jedBvnq+Rp81JzM+mjSFqOJ8NE0okty43/NLa wyJHOaylZb0gXAv7VLG1YbjA4PuGTZyPk4O38NwSRjxyPNr1NTqyjyzQZ1Gbqu4s mQXhm1Dti4uY14TEKYZBP0PI2G0N4FLc0haNLbkXkpFxcn3otEPgLNK7Cti4Cu9l 8AjiWXfzlgdJi3JBNqoquZfiED68B//Box7OLhBOUcEj2PPlkpR1NxSJCPjQBmS/ LOmcITWV9fhnDbuoHMwlzu0AEww4E++A -----END CERTIFICATE-----Generated at Sun Apr 6 17:46:47 2025 by rpki-client