$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1e1f31d2-39c0-3bc4-a643-96cebdb3b1be.roa File: 1e1f31d2-39c0-3bc4-a643-96cebdb3b1be.roa (raw, json) Hash identifier: tOEqpIw1Um6sYM2QaZw+9QwlJRkGjNNXjWzEiYcpwo8= Subject key identifier: 79:ED:16:F9:DE:A5:77:B1:82:D4:9F:1C:84:D0:C7:42:2A:64:DA:A2 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584832F00239BFD5F27C1F856860 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1e1f31d2-39c0-3bc4-a643-96cebdb3b1be.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 397223 IP address blocks: 2620:74:1c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:02:39:bf:d5:f2:7c:1f:85:68:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=4813faf8-1a2b-4bd4-97bb-6de86e07199e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8f:a4:ae:11:a6:8c:2a:78:df:20:bd:8f:71: 85:3b:ee:53:b6:ba:f0:a1:88:d0:50:58:37:62:39: ef:8d:5c:5c:89:69:48:d0:a7:54:f9:62:65:2c:1b: fa:a9:b3:40:23:94:10:50:f7:f8:6a:5f:ea:4d:b4: a0:41:6b:f2:89:44:8b:10:d4:51:da:bb:d0:bb:b7: f2:73:85:3e:bd:df:f1:7e:16:8f:8b:17:1b:a8:65: ac:ca:d7:ae:f8:b8:d4:ed:8a:13:49:50:c2:0c:0d: b3:4d:9c:cc:8f:1f:27:f8:e6:39:cf:86:95:3d:66: 3d:bd:b2:76:b6:e8:8a:3e:4c:39:c0:1e:f4:65:7e: 0c:25:b6:2f:3b:09:61:dc:47:d2:e7:12:e3:e8:4b: 0a:b2:e4:82:c1:04:a8:f8:95:b1:8b:79:1c:4a:47: 47:74:48:83:0b:3f:ac:78:d9:ce:79:74:c7:19:73: a1:ce:32:f9:aa:aa:ac:f3:22:b4:a4:42:5f:4f:a6: e5:b9:ee:d2:6a:02:c5:19:fb:b3:00:b9:b1:1a:cb: f9:e1:4a:f6:cd:e4:a4:46:78:65:3c:b3:19:28:dd: 82:43:59:f3:6c:4d:91:f0:40:5d:bf:d7:78:aa:09: 0f:13:87:a0:16:e8:c3:35:6b:18:fe:4a:71:55:b4: ca:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:ED:16:F9:DE:A5:77:B1:82:D4:9F:1C:84:D0:C7:42:2A:64:DA:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1e1f31d2-39c0-3bc4-a643-96cebdb3b1be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:1c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:18:ce:26:1a:89:4a:9f:f2:9c:43:b2:6c:89:e1:22:c1:82: 83:01:3c:1c:1a:c2:d2:27:a5:b8:93:f8:b5:a5:d1:71:bb:bb: 50:9e:d5:e2:f4:10:1a:16:bb:ea:69:3c:52:36:1b:a1:a9:f7: 00:db:35:7f:9d:ef:89:20:5d:b0:57:12:39:0d:45:0e:b0:3c: 19:95:05:2c:24:58:c3:46:f8:77:c0:db:10:5b:48:f2:62:83: 43:27:ec:bf:74:1e:1e:6d:18:be:27:61:b4:c7:7e:f0:8e:87: 53:a6:b9:e1:f3:4f:94:9d:91:0d:81:d0:2e:29:e1:79:df:06: df:14:c7:ef:5e:29:08:de:4c:6f:de:7f:eb:c2:b8:8d:8c:7a: 61:07:59:be:c2:79:f5:5a:4e:a3:db:26:1b:ec:e0:af:41:b9: bb:67:87:03:f6:3a:5e:e7:a0:e8:23:e4:54:5a:28:c1:e5:af: 14:68:6e:fa:85:ca:a6:24:da:f4:38:89:58:a6:81:0f:b3:c1: 79:52:b4:ce:e3:1b:90:71:65:a0:ea:1e:4e:b0:b7:37:d4:7d: 4d:01:67:b6:38:46:5f:41:f7:18:fe:bb:91:c4:67:a4:49:d6: a3:1b:84:fd:63:17:7f:c1:b6:d1:1b:a0:45:45:75:64:b5:d5: c9:a1:13:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgy8AI5v9XyfB+FaGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk NDgxM2ZhZjgtMWEyYi00YmQ0LTk3YmItNmRlODZlMDcxOTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI+krhGmjCp43yC9j3GFO+5TtrrwoYjQUFg3 YjnvjVxciWlI0KdU+WJlLBv6qbNAI5QQUPf4al/qTbSgQWvyiUSLENRR2rvQu7fy c4U+vd/xfhaPixcbqGWsyteu+LjU7YoTSVDCDA2zTZzMjx8n+OY5z4aVPWY9vbJ2 tuiKPkw5wB70ZX4MJbYvOwlh3EfS5xLj6EsKsuSCwQSo+JWxi3kcSkdHdEiDCz+s eNnOeXTHGXOhzjL5qqqs8yK0pEJfT6blue7SagLFGfuzALmxGsv54Ur2zeSkRnhl PLMZKN2CQ1nzbE2R8EBdv9d4qgkPE4egFujDNWsY/kpxVbTKewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHntFvnepXexgtSfHITQx0IqZNqiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMWUxZjMxZDItMzljMC0z YmM0LWE2NDMtOTZjZWJkYjNiMWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGEYziYaiUqf8pxDsmyJ4SLBgoMBPBwawtInpbiT+LWl0XG7u1Ce 1eL0EBoWu+ppPFI2G6Gp9wDbNX+d74kgXbBXEjkNRQ6wPBmVBSwkWMNG+HfA2xBb SPJig0Mn7L90Hh5tGL4nYbTHfvCOh1OmueHzT5SdkQ2B0C4p4XnfBt8Ux+9eKQje TG/ef+vCuI2MemEHWb7CefVaTqPbJhvs4K9BubtnhwP2Ol7noOgj5FRaKMHlrxRo bvqFyqYk2vQ4iVimgQ+zwXlStM7jG5BxZaDqHk6wtzfUfU0BZ7Y4Rl9B9xj+u5HE Z6RJ1qMbhP1jF3/BttEboEVFdWS11cmhE9g= -----END CERTIFICATE-----Generated at Sun Feb 16 20:56:15 2025 by rpki-client