$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/4a9eb50d-2780-3043-b84e-a510d52cdef8.roa File: 4a9eb50d-2780-3043-b84e-a510d52cdef8.roa (raw, json) Hash identifier: 6/+6mRJxsfYIK0V/g2hF/MwR+tbfZnaxbfRja1lCvGM= Subject key identifier: 17:C9:69:49:29:12:BB:94:7D:1E:C9:80:E7:ED:36:66:4E:0E:8B:79 Certificate issuer: /CN=98161ef7-249b-450b-ba6a-5819e613ed63 Certificate serial: 010D0C9F4328584894A5EE03D6308695071E7020 Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/4a9eb50d-2780-3043-b84e-a510d52cdef8.roa Signing time: Sat 18 Jan 2025 02:00:38 +0000 ROA not before: Sat 18 Jan 2025 02:00:38 +0000 ROA not after: Fri 18 Apr 2025 01:00:38 +0000 asID: 174 IP address blocks: 2602:2b7:100::/40 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:94:a5:ee:03:d6:30:86:95:07:1e:70:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63 Validity Not Before: Jan 18 02:00:38 2025 GMT Not After : Apr 18 01:00:38 2025 GMT Subject: CN=f0fc88ce-4854-4b1b-a6c7-35ded355f4b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:90:41:72:46:ba:f7:59:3c:82:e0:d4:96:5d: e4:75:01:60:63:69:ff:49:82:a8:4a:13:a3:d7:97: 73:4b:c4:d0:71:86:82:c5:86:9a:b3:77:fc:8e:68: 74:d7:a0:e9:7c:e8:4b:62:9c:53:0e:99:d1:99:f1: ce:d3:35:69:eb:a8:b1:d1:a6:1f:2b:36:cd:8a:0c: 57:cb:b0:4e:6a:80:34:6c:67:c8:7b:fa:d4:d7:a9: a9:f5:ca:f0:94:cb:df:a5:be:37:14:f8:5e:12:f1: 87:a1:f7:a9:bd:54:55:30:f9:9c:09:74:ac:bf:f5: ba:c4:59:b1:76:0b:df:33:2e:35:f3:5b:fe:6d:b6: 46:36:34:37:5b:71:68:2d:c0:0f:b5:ec:39:45:89: eb:e4:0e:76:4d:3b:cb:77:bb:72:4c:81:e2:28:65: fb:34:2f:c4:f2:66:28:db:44:7e:2b:88:e8:8f:fc: 16:c3:6d:92:13:64:ad:6f:24:6b:7d:13:79:44:98: b7:a8:85:26:73:9c:1b:d7:a7:ac:9c:76:e8:86:90: bb:62:c1:83:04:2b:72:b1:2c:e1:52:ad:7e:93:03: 9e:d8:54:82:80:d1:86:b6:12:c9:12:95:33:2e:36: 89:21:9a:37:0a:ee:25:9b:3b:a1:36:71:5f:89:27: 98:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C9:69:49:29:12:BB:94:7D:1E:C9:80:E7:ED:36:66:4E:0E:8B:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/4a9eb50d-2780-3043-b84e-a510d52cdef8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl X509v3 Authority Key Identifier: keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer sbgp-ipAddrBlock: critical IPv6: 2602:2b7:100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:0e:1a:5f:c5:0d:bb:be:29:8d:6d:0c:26:19:b2:5b:ba:ca: 94:a8:57:88:d7:02:95:04:a3:e5:76:6e:2e:82:3f:04:ab:e4: 7f:db:45:87:7c:0c:ba:df:26:7b:b4:ac:57:d3:46:4e:83:86: 70:61:c3:b8:dd:6f:2e:3b:89:76:19:15:33:24:4d:45:82:fd: 0b:b5:dd:db:9a:47:69:72:1d:19:2d:ba:e8:e7:55:33:72:9f: f6:78:89:eb:8c:fc:7a:5c:32:fb:03:2a:5c:aa:ed:f5:8e:78: d9:ae:bc:a8:48:8f:f8:fd:55:a6:d0:81:b0:d4:57:b9:7f:43: 88:67:5c:ea:47:18:99:70:9a:70:8d:8e:ea:71:1b:a6:b8:2a: 63:e2:c0:cd:c7:9c:0e:64:3a:c8:e6:cd:e2:35:5c:cb:81:63: 4d:20:7a:c8:d6:6b:3a:59:48:5a:30:40:a2:a2:f3:11:a4:f1: a7:6b:12:24:f1:bb:a8:ad:e9:a3:9d:62:ef:1e:c3:88:ff:3f: 4b:72:55:36:39:09:01:15:a4:43:16:aa:c0:69:c1:cd:88:86: 24:17:29:a7:de:f7:64:2e:d0:af:a3:b6:af:6d:82:3e:25:41: 2e:6e:fe:3e:c6:2f:43:ec:f9:92:6b:82:c6:95:3c:65:de:1b: 32:b7:4e:b6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEiUpe4D1jCGlQcecCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgxNjFlZjctMjQ5Yi00NTBiLWJhNmEtNTgxOWU2MTNl ZDYzMB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk ZjBmYzg4Y2UtNDg1NC00YjFiLWE2YzctMzVkZWQzNTVmNGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5BBcka691k8guDUll3kdQFgY2n/SYKoShOj 15dzS8TQcYaCxYaas3f8jmh016DpfOhLYpxTDpnRmfHO0zVp66ix0aYfKzbNigxX y7BOaoA0bGfIe/rU16mp9crwlMvfpb43FPheEvGHofepvVRVMPmcCXSsv/W6xFmx dgvfMy4181v+bbZGNjQ3W3FoLcAPtew5RYnr5A52TTvLd7tyTIHiKGX7NC/E8mYo 20R+K4joj/wWw22SE2StbyRrfRN5RJi3qIUmc5wb16esnHbohpC7YsGDBCtysSzh Uq1+kwOe2FSCgNGGthLJEpUzLjaJIZo3Cu4lmzuhNnFfiSeYoQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBfJaUkpEruUfR7JgOftNmZODot5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODE2 MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5ZTYxM2VkNjMvNGE5ZWI1MGQtMjc4MC0z MDQzLWI4NGUtYTUxMGQ1MmNkZWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTgxNjFlZjctMjQ5Yi00NTBiLWJh NmEtNTgxOWU2MTNlZDYzLzk4MTYxZWY3LTI0OWItNDUwYi1iYTZhLTU4MTllNjEz ZWQ2My5jcmwwHwYDVR0jBBgwFoAU1BnUREsRiVyMbWhl/etLT/KsGnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ODE2MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5 ZTYxM2VkNjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgICtwEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARA4aX8UNu74pjW0MJhmyW7rKlKhXiNcClQSj5XZuLoI/BKvkf9tF h3wMut8me7SsV9NGToOGcGHDuN1vLjuJdhkVMyRNRYL9C7Xd25pHaXIdGS266OdV M3Kf9niJ64z8elwy+wMqXKrt9Y542a68qEiP+P1VptCBsNRXuX9DiGdc6kcYmXCa cI2O6nEbprgqY+LAzcecDmQ6yObN4jVcy4FjTSB6yNZrOllIWjBAoqLzEaTxp2sS JPG7qK3po51i7x7DiP8/S3JVNjkJARWkQxaqwGnBzYiGJBcpp973ZC7Qr6O2r22C PiVBLm7+PsYvQ+z5kmuCxpU8Zd4bMrdOtg== -----END CERTIFICATE-----Generated at Sat Apr 5 05:04:53 2025 by rpki-client