$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/42fefd6b-230b-385a-b836-7d67f6a1d38d.roa File: 42fefd6b-230b-385a-b836-7d67f6a1d38d.roa (raw, json) Hash identifier: osSo70KX1k4j5VZ7yzBwNyXjToyzxPBLkbQmitxUVGM= Subject key identifier: 0E:E0:95:31:29:CD:07:C7:2F:51:61:07:22:18:A4:85:09:EA:8C:09 Certificate issuer: /CN=c4182a0d-d744-441b-a850-e3f85aa3aafb Certificate serial: 010D0C9F432858489340ACB6ED94B43B6314C240 Authority key identifier: 2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/42fefd6b-230b-385a-b836-7d67f6a1d38d.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 14618 IP address blocks: 2620:135:7020::/56 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:ac:b6:ed:94:b4:3b:63:14:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4182a0d-d744-441b-a850-e3f85aa3aafb Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=a357810a-90e4-4c73-9191-f0f3a6f37302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:da:d5:0c:6c:a1:9f:2d:43:75:2d:3c:b2:3a: ec:b7:fa:85:7b:bf:02:95:e7:36:6b:6d:64:40:ee: 3f:68:05:9d:11:05:4b:8e:77:5a:fb:f2:da:21:0b: d7:92:b2:cd:c3:5d:df:38:46:fd:37:f5:ee:65:61: bd:9a:25:4b:67:81:0b:c6:50:8d:7c:ca:f6:5b:c1: 4c:d4:72:e1:25:f3:31:c2:02:25:cc:28:46:9d:2a: 41:90:cf:dd:89:2c:37:0c:d9:03:15:2b:49:0a:ee: 1e:7c:76:9f:f3:19:99:1f:ff:1a:de:62:37:62:5b: 39:66:73:7f:e7:fb:0f:b5:18:11:01:46:1f:4d:6c: 9f:b6:52:12:75:bb:8c:00:52:e3:42:3b:20:2a:49: b9:8e:8f:25:05:db:33:a5:ee:1b:42:79:2c:79:13: aa:f9:00:06:12:1a:31:f6:f9:3d:c6:0f:10:75:92: ed:9f:08:39:da:0d:63:ca:fc:57:61:71:b8:99:db: 3d:d7:9e:05:53:04:c0:3a:ed:50:46:aa:db:28:6c: 25:20:80:10:42:29:fe:e3:56:e4:94:ee:5f:db:ab: d8:53:57:fe:ad:22:da:eb:7a:4b:f3:30:ec:96:d0: b2:6d:54:85:5a:5b:fb:77:8e:7e:c6:98:17:57:07: 2d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E0:95:31:29:CD:07:C7:2F:51:61:07:22:18:A4:85:09:EA:8C:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/42fefd6b-230b-385a-b836-7d67f6a1d38d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl X509v3 Authority Key Identifier: keyid:2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer sbgp-ipAddrBlock: critical IPv6: 2620:135:7020::/56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:08:14:61:e9:fb:bf:69:bd:a5:78:f1:d7:96:00:fc:ec:20: b1:bc:43:8e:39:55:14:47:59:48:27:7e:49:64:42:e8:a7:87: c2:0a:d3:66:0d:e4:7b:80:ac:d1:4b:92:b2:3d:02:cb:0d:cf: 39:37:d7:3a:68:cf:32:47:e7:4b:33:82:93:08:bf:ba:10:09: 96:f2:98:4d:83:83:fe:dd:c8:0e:df:af:a2:63:f6:cf:bb:10: 99:bb:00:56:87:b2:d8:68:80:90:90:ef:ff:f7:b1:d3:c8:6f: fa:38:6a:b9:f3:23:2a:8a:c5:c3:19:17:c9:40:96:d5:ab:5d: 9f:f7:65:20:97:9a:41:cc:cf:54:f6:88:ad:08:36:f4:3d:cc: ea:75:4c:a9:fb:48:6a:a0:82:2d:be:8a:ce:39:86:69:1f:cc: ab:45:da:bb:c1:18:fc:3a:11:31:f4:ae:15:83:06:15:6e:d7: 7a:c4:bd:c2:bd:5e:ba:58:6b:b9:b7:14:9f:8d:1f:02:5b:62: 7d:ef:ca:b3:c1:3d:37:bd:0d:d8:d1:42:9c:14:0d:c4:45:f4: 8a:9c:cb:af:f8:5d:73:c4:a9:69:be:2a:cf:f3:a2:4c:0d:7b: 01:02:c8:d0:41:5f:e0:59:79:9c:19:64:82:ba:b7:d3:ca:35: 94:76:06:57 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEiTQKy27ZS0O2MUwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQxODJhMGQtZDc0NC00NDFiLWE4NTAtZTNmODVhYTNh YWZiMB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk YTM1NzgxMGEtOTBlNC00YzczLTkxOTEtZjBmM2E2ZjM3MzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtrVDGyhny1DdS08sjrst/qFe78Clec2a21k QO4/aAWdEQVLjnda+/LaIQvXkrLNw13fOEb9N/XuZWG9miVLZ4ELxlCNfMr2W8FM 1HLhJfMxwgIlzChGnSpBkM/diSw3DNkDFStJCu4efHaf8xmZH/8a3mI3Yls5ZnN/ 5/sPtRgRAUYfTWyftlISdbuMAFLjQjsgKkm5jo8lBdszpe4bQnkseROq+QAGEhox 9vk9xg8QdZLtnwg52g1jyvxXYXG4mds9154FUwTAOu1QRqrbKGwlIIAQQin+41bk lO5f26vYU1f+rSLa63pL8zDsltCybVSFWlv7d45+xpgXVwct6wIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFA7glTEpzQfHL1FhByIYpIUJ6owJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jNDE4 MmEwZC1kNzQ0LTQ0MWItYTg1MC1lM2Y4NWFhM2FhZmIvNDJmZWZkNmItMjMwYi0z ODVhLWI4MzYtN2Q2N2Y2YTFkMzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzQxODJhMGQtZDc0NC00NDFiLWE4 NTAtZTNmODVhYTNhYWZiL2M0MTgyYTBkLWQ3NDQtNDQxYi1hODUwLWUzZjg1YWEz YWFmYi5jcmwwHwYDVR0jBBgwFoAUK7GR1bTMw7yKfS/LGMgJ/OaZwCIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jNDE4MmEwZC1kNzQ0LTQ0MWItYTg1MC1lM2Y4 NWFhM2FhZmIuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgAJiABNXAg ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQB1CBRh6fu/ab2lePHXlgD87CCxvEOOOVUUR1lIJ35JZELop4fC CtNmDeR7gKzRS5KyPQLLDc85N9c6aM8yR+dLM4KTCL+6EAmW8phNg4P+3cgO36+i Y/bPuxCZuwBWh7LYaICQkO//97HTyG/6OGq58yMqisXDGRfJQJbVq12f92Ugl5pB zM9U9oitCDb0PczqdUyp+0hqoIItvorOOYZpH8yrRdq7wRj8OhEx9K4VgwYVbtd6 xL3CvV66WGu5txSfjR8CW2J978qzwT03vQ3Y0UKcFA3ERfSKnMuv+F1zxKlpvirP 86JMDXsBAsjQQV/gWXmcGWSCurfTyjWUdgZX -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:13 2025 by rpki-client