$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/b958c9c9-ab91-3b4d-ac8b-07578817d88d.roa File: b958c9c9-ab91-3b4d-ac8b-07578817d88d.roa (raw, json) Hash identifier: LvXMh+sYJG7cqjJfFibStDZA8oo9HEcCXm0TKucRtPY= Subject key identifier: AC:D5:29:78:B1:0D:41:52:D1:E3:A4:A3:18:3A:1F:25:D3:FB:58:A7 Certificate issuer: /CN=a7bb872d-e597-498e-8bd5-d2efae320554 Certificate serial: 010D0C9F43285848A1360D0AF479FDDFF04C0700 Authority key identifier: 0B:C1:1F:4E:79:79:D6:3F:8B:E2:4A:B8:4F:99:21:03:79:42:69:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/b958c9c9-ab91-3b4d-ac8b-07578817d88d.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 62890 IP address blocks: 2606:ed40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:0d:0a:f4:79:fd:df:f0:4c:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7bb872d-e597-498e-8bd5-d2efae320554 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=5701d929-5a05-4035-9fc1-5b0b6e443170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:eb:74:a3:b0:59:92:4b:6b:8a:14:34:b5:28: 78:1d:aa:80:88:75:b4:4b:0a:d1:9a:71:5d:86:19: be:2c:2e:50:40:c9:fb:b9:b0:2f:62:e1:ce:ab:91: e4:da:dc:60:62:d8:5e:e5:e7:cb:f6:9a:01:1a:2a: d9:bb:47:64:94:f2:a2:a6:3b:81:2d:ba:a4:39:82: 64:57:f9:43:a8:0d:b8:16:55:57:8e:dd:dd:70:cc: cb:4b:12:24:75:33:3b:63:d9:78:f7:77:58:4c:77: f0:7e:f0:4b:fc:ad:a3:5d:54:7a:de:e1:18:6f:6d: f0:1f:eb:78:1c:e0:fd:24:e4:34:33:98:f9:ab:50: 9a:5e:8c:b3:e9:ba:c4:7b:13:3e:21:1e:94:11:35: 8b:06:40:81:92:6c:5d:3d:ec:b5:48:81:47:23:0d: 89:02:72:8e:e0:99:81:2d:61:e6:06:69:fe:a2:f4: f8:b8:c8:a5:6d:6e:e6:0e:c8:ee:c9:37:e3:40:f2: ac:63:46:5f:12:cf:e5:fc:98:43:ee:6c:55:ee:26: 2f:3c:4b:96:f9:72:49:5c:8f:5f:fe:9b:38:50:03: f0:f2:74:62:f8:83:b3:dc:8b:8e:6b:a0:44:3e:c0: f0:88:8d:6b:14:13:4f:4c:c2:0a:8f:f0:56:82:7b: 9b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D5:29:78:B1:0D:41:52:D1:E3:A4:A3:18:3A:1F:25:D3:FB:58:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/b958c9c9-ab91-3b4d-ac8b-07578817d88d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.crl X509v3 Authority Key Identifier: keyid:0B:C1:1F:4E:79:79:D6:3F:8B:E2:4A:B8:4F:99:21:03:79:42:69:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer sbgp-ipAddrBlock: critical IPv6: 2606:ed40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:df:a3:99:40:62:c9:68:c1:1e:eb:ae:62:d1:68:d1:3f:49: 4a:35:fb:38:2d:84:96:f8:65:39:75:4f:4d:dc:ec:f5:2e:9d: e6:18:a2:9f:63:47:92:06:e7:71:44:c2:83:0c:2b:0a:7b:82: 97:4a:ba:3d:f8:21:6e:57:46:58:e8:80:51:b8:e7:c7:c2:85: 30:06:20:67:d7:b0:92:41:dc:8a:71:8c:8f:cf:03:15:c4:86: 4c:b7:43:25:07:86:b8:38:19:a5:46:ce:67:d4:c6:ed:34:18: d5:19:77:e3:c2:96:71:39:41:00:dc:89:50:a6:83:44:e7:7a: 34:b1:56:37:a3:57:74:77:c6:3e:52:6b:36:ca:cc:60:6a:f0: 79:f2:83:65:79:cb:65:48:75:d8:30:5c:cb:41:2a:6a:61:1b: 2e:89:c2:43:58:c2:98:ca:b3:b9:57:56:cd:26:cc:6f:ff:10: e8:d3:3a:59:0e:39:f6:f1:a2:92:40:a4:bf:4e:89:cd:3d:2b: ba:a1:00:6a:49:35:ff:71:09:ff:41:12:a9:c7:1e:38:67:27: 17:c6:99:81:56:7d:ce:1d:4a:64:dd:65:f0:3f:9d:c0:88:7e: f0:e8:ea:bd:eb:20:6f:80:f7:02:62:f6:1e:19:30:16:24:35: aa:08:bc:f1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEihNg0K9Hn93/BMBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdiYjg3MmQtZTU5Ny00OThlLThiZDUtZDJlZmFlMzIw NTU0MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk NTcwMWQ5MjktNWEwNS00MDM1LTlmYzEtNWIwYjZlNDQzMTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOt0o7BZkktrihQ0tSh4HaqAiHW0SwrRmnFd hhm+LC5QQMn7ubAvYuHOq5Hk2txgYthe5efL9poBGirZu0dklPKipjuBLbqkOYJk V/lDqA24FlVXjt3dcMzLSxIkdTM7Y9l493dYTHfwfvBL/K2jXVR63uEYb23wH+t4 HOD9JOQ0M5j5q1CaXoyz6brEexM+IR6UETWLBkCBkmxdPey1SIFHIw2JAnKO4JmB LWHmBmn+ovT4uMilbW7mDsjuyTfjQPKsY0ZfEs/l/JhD7mxV7iYvPEuW+XJJXI9f /ps4UAPw8nRi+IOz3IuOa6BEPsDwiI1rFBNPTMIKj/BWgnubQwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKzVKXixDUFS0eOkoxg6HyXT+1inMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hN2Ji ODcyZC1lNTk3LTQ5OGUtOGJkNS1kMmVmYWUzMjA1NTQvYjk1OGM5YzktYWI5MS0z YjRkLWFjOGItMDc1Nzg4MTdkODhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTdiYjg3MmQtZTU5Ny00OThlLThi ZDUtZDJlZmFlMzIwNTU0L2E3YmI4NzJkLWU1OTctNDk4ZS04YmQ1LWQyZWZhZTMy MDU1NC5jcmwwHwYDVR0jBBgwFoAUC8EfTnl51j+L4kq4T5khA3lCaX0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hN2JiODcyZC1lNTk3LTQ5OGUtOGJkNS1kMmVm YWUzMjA1NTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbtQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAP36OZQGLJaMEe665i0WjRP0lKNfs4LYSW+GU5dU9N3Oz1Lp3mGKKf Y0eSBudxRMKDDCsKe4KXSro9+CFuV0ZY6IBRuOfHwoUwBiBn17CSQdyKcYyPzwMV xIZMt0MlB4a4OBmlRs5n1MbtNBjVGXfjwpZxOUEA3IlQpoNE53o0sVY3o1d0d8Y+ Ums2ysxgavB58oNlectlSHXYMFzLQSpqYRsuicJDWMKYyrO5V1bNJsxv/xDo0zpZ Djn28aKSQKS/TonNPSu6oQBqSTX/cQn/QRKpxx44ZycXxpmBVn3OHUpk3WXwP53A iH7w6Oq96yBvgPcCYvYeGTAWJDWqCLzx -----END CERTIFICATE-----Generated at Mon Apr 7 06:05:17 2025 by rpki-client