$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a556adc5-4f8b-3b8f-9a3b-3e2a07e5a872.roa File: a556adc5-4f8b-3b8f-9a3b-3e2a07e5a872.roa (raw, json) Hash identifier: I5/FDgnbce2GdUNgE9Li02YiKLCV8DGuyqItIKnX+XE= Subject key identifier: 14:77:BD:4C:BD:9B:A5:EB:20:5B:21:7D:B0:57:D3:AA:55:25:9A:1F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584832F00165D00774D1B167F200 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a556adc5-4f8b-3b8f-9a3b-3e2a07e5a872.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 397242 IP address blocks: 2620:74:1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:01:65:d0:07:74:d1:b1:67:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=9378727c-d2e1-4b04-a539-7db7dd86d277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2a:84:da:88:0d:8a:b7:c1:28:c9:77:93:a9: e2:ac:2c:c2:c9:c0:5b:f8:47:21:9d:44:5f:c7:c4: 52:f3:df:59:ff:4b:b3:f4:6e:17:cc:41:f2:2f:78: e6:41:4f:bc:6f:e9:eb:ba:3f:3c:d7:32:cb:42:16: ba:9d:4d:27:ac:47:a5:53:e0:bf:b3:c5:43:1a:bb: 9e:2e:b8:a9:b1:df:95:d7:e1:45:f7:ff:71:7c:3c: e0:3e:0b:bc:bc:f0:21:00:f2:4f:3a:7e:bd:23:a5: 76:b0:c9:94:c5:15:88:4c:f9:d8:41:1c:25:46:97: f2:1d:93:a8:f1:b8:d9:ca:cf:61:12:5c:ee:7b:fa: 5c:d9:ee:0a:08:6a:b1:e2:9a:c9:f5:8a:7b:d4:82: 34:e5:87:e9:84:1b:8d:b1:5b:83:8b:90:8f:31:90: 32:29:05:32:fe:3b:16:60:eb:62:44:6d:30:ef:a6: eb:a8:95:8f:4e:ad:7f:98:dd:1c:5a:13:76:9c:35: a5:6c:53:03:52:57:f2:bc:e8:46:ea:b9:a1:17:02: 6f:40:2c:96:51:c1:75:b4:60:db:54:fc:65:3f:d7: ce:91:97:88:24:62:8f:50:65:40:fe:da:9e:0e:d8: bb:b8:47:b5:80:20:49:2b:c7:b3:d5:5f:16:81:5b: 1e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:77:BD:4C:BD:9B:A5:EB:20:5B:21:7D:B0:57:D3:AA:55:25:9A:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a556adc5-4f8b-3b8f-9a3b-3e2a07e5a872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:a6:50:7f:c5:17:c0:9d:b1:bd:3e:3c:a9:44:f9:14:4a:37: 1d:bb:dd:44:26:93:ee:40:ea:b6:14:4d:14:bd:25:d0:65:5c: 7f:7b:13:2c:4f:1f:c5:ab:30:6d:4a:30:d5:a0:3b:43:e0:0b: 19:70:54:38:6b:fc:f3:b8:31:5e:3a:b2:46:ee:4c:7f:55:08: f0:6c:98:ee:66:a6:af:b7:65:a0:9d:90:fe:99:67:6e:22:97: e3:57:9c:48:a3:2b:e8:ee:74:e5:60:34:da:c6:72:97:54:0c: 8a:63:0d:2e:7b:93:a7:b0:f6:a1:d3:fb:e0:fc:24:27:2e:a0: ae:b2:03:16:03:03:45:c4:37:43:1b:83:b7:e0:47:01:e5:54: 63:91:aa:ec:05:e1:3d:f9:0e:52:a6:e0:db:49:7b:93:a0:63: 83:d7:c1:03:4d:44:7c:cc:97:b1:64:f6:d3:0c:1a:17:4e:cb: c3:f1:81:c2:36:54:74:7e:0b:8f:e4:e4:ac:06:28:c7:3f:30: 24:f0:3d:c7:a2:27:c7:5a:4b:e4:0e:c6:5b:58:39:1e:d0:88: 8d:51:eb:16:eb:5f:25:e2:93:b8:c0:66:71:ea:4a:86:ac:78: 69:89:3b:02:ab:a8:c9:fa:cb:94:d2:ae:85:8a:bd:ad:39:53: 9e:a3:9a:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgy8AFl0Ad00bFn8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk OTM3ODcyN2MtZDJlMS00YjA0LWE1MzktN2RiN2RkODZkMjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiqE2ogNirfBKMl3k6nirCzCycBb+EchnURf x8RS899Z/0uz9G4XzEHyL3jmQU+8b+nruj881zLLQha6nU0nrEelU+C/s8VDGrue Lripsd+V1+FF9/9xfDzgPgu8vPAhAPJPOn69I6V2sMmUxRWITPnYQRwlRpfyHZOo 8bjZys9hElzue/pc2e4KCGqx4prJ9Yp71II05YfphBuNsVuDi5CPMZAyKQUy/jsW YOtiRG0w76brqJWPTq1/mN0cWhN2nDWlbFMDUlfyvOhG6rmhFwJvQCyWUcF1tGDb VPxlP9fOkZeIJGKPUGVA/tqeDti7uEe1gCBJK8ez1V8WgVseCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBR3vUy9m6XrIFshfbBX06pVJZofMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTU1NmFkYzUtNGY4Yi0z YjhmLTlhM2ItM2UyYTA3ZTVhODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEGmUH/FF8Cdsb0+PKlE+RRKNx273UQmk+5A6rYUTRS9JdBlXH97 EyxPH8WrMG1KMNWgO0PgCxlwVDhr/PO4MV46skbuTH9VCPBsmO5mpq+3ZaCdkP6Z Z24il+NXnEijK+judOVgNNrGcpdUDIpjDS57k6ew9qHT++D8JCcuoK6yAxYDA0XE N0Mbg7fgRwHlVGORquwF4T35DlKm4NtJe5OgY4PXwQNNRHzMl7Fk9tMMGhdOy8Px gcI2VHR+C4/k5KwGKMc/MCTwPceiJ8daS+QOxltYOR7QiI1R6xbrXyXik7jAZnHq SoaseGmJOwKrqMn6y5TSroWKva05U56jmtc= -----END CERTIFICATE-----Generated at Sun Feb 16 20:54:01 2025 by rpki-client