$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa File: 30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa (raw, json) Hash identifier: WWHETHBlZzizjcwdqZAWi1xUlL8dw9LdKrGQnlLjzgw= Subject key identifier: 91:90:AA:20:10:09:39:67:9E:49:C7:1C:04:AA:BD:03:79:F9:A0:93 Certificate issuer: /CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16 Certificate serial: 010D0C9F43285848A29B4BB124F928FF51DE3580 Authority key identifier: 04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 33501 IP address blocks: 2607:19c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:4b:b1:24:f9:28:ff:51:de:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16 Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=b539c445-2560-4a23-b561-4cf9fffc6f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:70:7c:97:60:96:ed:dd:5b:21:bc:ef:03:ec: a2:de:1b:2f:df:ba:ea:38:43:b3:75:2e:59:c0:38: 6a:18:e3:db:92:48:44:ae:7c:3a:4c:9a:7b:5e:e1: 4b:3a:a5:cf:68:2c:ad:a9:83:e7:f2:ba:5b:6a:80: 17:5b:2f:50:c1:72:53:dc:ca:a1:ab:18:08:c4:1e: 69:46:5f:40:f3:2d:93:44:ca:10:de:60:fb:85:2b: 2e:3f:d0:e7:ae:f8:bf:d1:e5:31:49:53:9b:82:e0: 97:74:8e:53:4c:b6:c5:70:02:7f:d6:15:30:cb:cb: 44:c4:09:85:31:dc:76:89:1a:6d:de:f9:af:16:2a: c1:4a:70:cd:f5:08:26:b3:5e:82:8b:6a:be:ba:8d: 10:ab:29:62:46:ed:9f:ac:66:8e:12:98:ea:cb:8e: ac:e4:de:48:f6:b1:85:73:95:62:2f:52:70:e4:b6: 46:aa:11:91:c4:bd:12:f3:d7:f0:d3:89:48:2d:12: ed:38:b4:24:a3:54:29:aa:3f:99:60:1a:eb:bd:cb: 12:1b:d7:cc:19:8b:df:7f:ef:31:c4:2f:c8:ca:e2: 06:d3:44:30:82:3f:de:94:c2:09:47:f3:81:06:df: 31:16:a8:49:72:87:e9:3a:59:be:bc:1c:b3:70:1e: 5a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:90:AA:20:10:09:39:67:9E:49:C7:1C:04:AA:BD:03:79:F9:A0:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.crl X509v3 Authority Key Identifier: keyid:04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer sbgp-ipAddrBlock: critical IPv6: 2607:19c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:c2:20:e4:a1:65:b4:b5:f5:e0:9f:05:db:f6:5b:1d:8c:89: 23:0b:6e:7f:63:bd:19:a6:ca:41:dc:90:89:55:57:66:92:3c: c9:03:69:07:ce:4a:bb:21:25:e1:bb:1d:45:dd:a2:d9:cf:b0: 14:46:1f:57:20:0f:ab:70:9d:0f:97:12:e1:2c:29:e8:50:d2: 53:61:c8:62:fb:5e:e9:9d:8d:fb:b2:59:ec:a6:c6:4c:c9:6c: 11:5a:6f:a2:f1:66:cd:ee:13:3b:25:df:d2:f5:e0:b0:17:1f: c2:08:55:1b:2d:87:08:ab:77:12:95:b8:6a:db:48:69:3a:3b: 70:56:4e:21:c1:7d:24:56:97:a5:77:ed:84:ee:9a:24:1a:6d: 31:d8:44:ea:20:92:dd:34:28:0a:70:7c:d7:53:46:67:08:f1: 63:be:b1:4e:78:54:c3:d6:3b:3b:94:66:8c:6b:fa:21:d1:01: 93:c0:39:7e:32:5e:0e:1b:75:81:87:08:b2:09:21:62:4f:ff: 99:de:ad:e0:6b:e2:3d:7a:7d:69:8d:4b:10:a9:4a:d1:35:20: f0:a4:36:0d:ef:5f:c4:72:4a:f4:d0:4f:40:52:d6:98:4c:80: d1:80:b1:7c:ef:a6:7d:22:e3:db:1a:d7:cc:fb:8d:5b:de:c1: 23:d6:72:35 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiim0uxJPko/1HeNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjkzYmY3NzItYjFjMi00ZjJmLTk3NmMtNTI4YjZmMWQ4 ZTE2MB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk YjUzOWM0NDUtMjU2MC00YTIzLWI1NjEtNGNmOWZmZmM2ZjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknB8l2CW7d1bIbzvA+yi3hsv37rqOEOzdS5Z wDhqGOPbkkhErnw6TJp7XuFLOqXPaCytqYPn8rpbaoAXWy9QwXJT3MqhqxgIxB5p Rl9A8y2TRMoQ3mD7hSsuP9Dnrvi/0eUxSVObguCXdI5TTLbFcAJ/1hUwy8tExAmF Mdx2iRpt3vmvFirBSnDN9Qgms16Ci2q+uo0QqyliRu2frGaOEpjqy46s5N5I9rGF c5ViL1Jw5LZGqhGRxL0S89fw04lILRLtOLQko1Qpqj+ZYBrrvcsSG9fMGYvff+8x xC/IyuIG00Qwgj/elMIJR/OBBt8xFqhJcofpOlm+vByzcB5aoQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJGQqiAQCTlnnknHHASqvQN5+aCTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82OTNi Zjc3Mi1iMWMyLTRmMmYtOTc2Yy01MjhiNmYxZDhlMTYvMzBhNGEzYWYtMGQ3Yy0z MTk2LThjMmItMWZmNmU4ZmU4MWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjkzYmY3NzItYjFjMi00ZjJmLTk3 NmMtNTI4YjZmMWQ4ZTE2LzY5M2JmNzcyLWIxYzItNGYyZi05NzZjLTUyOGI2ZjFk OGUxNi5jcmwwHwYDVR0jBBgwFoAUBDuRJkNa5T25ITW/GMY20NqdQacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82OTNiZjc3Mi1iMWMyLTRmMmYtOTc2Yy01Mjhi NmYxZDhlMTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcZwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBawiDkoWW0tfXgnwXb9lsdjIkjC25/Y70ZpspB3JCJVVdmkjzJA2kH zkq7ISXhux1F3aLZz7AURh9XIA+rcJ0PlxLhLCnoUNJTYchi+17pnY37slnspsZM yWwRWm+i8WbN7hM7Jd/S9eCwFx/CCFUbLYcIq3cSlbhq20hpOjtwVk4hwX0kVpel d+2E7pokGm0x2ETqIJLdNCgKcHzXU0ZnCPFjvrFOeFTD1js7lGaMa/oh0QGTwDl+ Ml4OG3WBhwiyCSFiT/+Z3q3ga+I9en1pjUsQqUrRNSDwpDYN71/Eckr00E9AUtaY TIDRgLF876Z9IuPbGtfM+41b3sEj1nI1 -----END CERTIFICATE-----Generated at Sat Apr 12 13:40:21 2025 by rpki-client