$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/d08ce755-af65-3768-957e-3d777b184fec.roa File: d08ce755-af65-3768-957e-3d777b184fec.roa (raw, json) Hash identifier: hDauuaukcZtAK7JGOfZ5402qYlbScMkQe6jU4FFokzQ= Subject key identifier: D0:0D:D8:0B:81:BF:4D:E8:40:EF:19:73:43:18:9F:E6:62:06:40:09 Certificate issuer: /CN=c4182a0d-d744-441b-a850-e3f85aa3aafb Certificate serial: 010D0C9F432858489340A85BD98212EB8F1FE340 Authority key identifier: 2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/d08ce755-af65-3768-957e-3d777b184fec.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 16509 IP address blocks: 2620:135:7020::/56 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:a8:5b:d9:82:12:eb:8f:1f:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4182a0d-d744-441b-a850-e3f85aa3aafb Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=e8b79650-1de1-46aa-9ca2-310b46f3c8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8f:c1:d9:f9:89:44:64:5d:41:13:26:91:f2: f6:ba:72:22:27:d7:e5:b5:2a:16:5c:1e:53:20:b8: cf:00:a1:23:41:a7:58:ab:3b:04:ad:e7:4a:87:b1: f8:a9:9a:b5:73:71:c4:2a:8c:91:d3:29:6a:30:73: 58:d0:df:1e:8e:72:50:59:70:67:f4:aa:94:55:88: 10:94:8f:de:f1:dc:99:bf:ae:29:0a:56:b9:3e:a4: 26:eb:db:31:9a:5c:ee:c5:03:02:08:5b:cb:2e:98: 9d:7e:16:3e:e3:4f:49:5f:ce:22:f9:8c:8a:d3:39: 3f:55:e6:f5:30:17:be:8e:4c:eb:1c:52:f0:63:9b: 86:74:9f:a0:ee:f3:6c:d3:07:5c:ee:1e:c0:30:a8: d0:eb:d2:0f:23:fa:c3:bb:b3:c2:9b:fa:47:31:eb: 27:2e:96:75:ca:68:52:82:f7:c6:ec:df:0e:eb:4d: 46:d9:9a:85:3d:18:74:f0:f0:89:6d:82:4a:7d:81: b2:65:e5:52:28:22:93:4a:0b:e6:4a:4c:85:ad:68: 89:b9:6f:85:18:a1:0e:3b:c1:3a:92:5a:5d:5a:3c: b0:29:2d:ff:4d:a0:3c:0b:8a:f3:ff:1d:2e:d7:34: 2a:1d:ba:fd:fc:86:12:23:39:c9:f7:b9:bc:04:2d: 42:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0D:D8:0B:81:BF:4D:E8:40:EF:19:73:43:18:9F:E6:62:06:40:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/d08ce755-af65-3768-957e-3d777b184fec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl X509v3 Authority Key Identifier: keyid:2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer sbgp-ipAddrBlock: critical IPv6: 2620:135:7020::/56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:0a:3f:02:4d:2d:77:f1:03:7d:2c:01:d0:0d:f9:fe:35:37: 98:02:de:e6:6c:ab:c3:10:7d:6e:26:00:40:e0:de:6d:5b:72: dd:48:f2:4f:e1:eb:2f:48:66:41:cf:f0:23:d5:7e:29:c1:b0: ff:29:41:b7:2b:d6:84:8c:37:ec:e4:d4:91:47:ee:10:17:05: 9a:1c:c8:ef:9b:5b:93:c1:92:ce:e3:77:a8:4c:55:c1:cb:47: 53:1b:b7:ae:ca:68:45:0d:42:59:3b:ad:ca:61:61:c3:57:a3: 3a:a3:6b:8c:73:61:ef:cc:08:29:50:43:83:57:b8:89:a7:85: c4:45:b7:db:4f:d2:26:ea:a8:59:69:9c:09:07:74:64:5a:56: 95:ab:2a:e3:90:2c:19:69:40:d5:a0:d6:60:0e:40:41:d2:19: 90:be:db:a2:5e:31:2b:18:68:84:1b:80:65:02:f4:52:24:7b: 88:17:07:6d:ec:91:cd:91:a5:34:be:d0:f8:f9:d4:67:58:79: 84:0e:a5:c8:6c:c8:cd:17:7f:44:4b:17:b8:23:b4:d5:c9:bf: fb:25:49:7c:16:85:87:58:38:11:4f:f2:b5:45:d0:a2:d1:e5: 3f:09:ab:6d:7e:10:91:e8:1d:46:cf:f2:7d:cf:de:3a:30:aa: e6:a6:e3:5c -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEiTQKhb2YIS648f40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQxODJhMGQtZDc0NC00NDFiLWE4NTAtZTNmODVhYTNh YWZiMB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk ZThiNzk2NTAtMWRlMS00NmFhLTljYTItMzEwYjQ2ZjNjOGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI/B2fmJRGRdQRMmkfL2unIiJ9fltSoWXB5T ILjPAKEjQadYqzsEredKh7H4qZq1c3HEKoyR0ylqMHNY0N8ejnJQWXBn9KqUVYgQ lI/e8dyZv64pCla5PqQm69sxmlzuxQMCCFvLLpidfhY+409JX84i+YyK0zk/Veb1 MBe+jkzrHFLwY5uGdJ+g7vNs0wdc7h7AMKjQ69IPI/rDu7PCm/pHMesnLpZ1ymhS gvfG7N8O601G2ZqFPRh08PCJbYJKfYGyZeVSKCKTSgvmSkyFrWiJuW+FGKEOO8E6 klpdWjywKS3/TaA8C4rz/x0u1zQqHbr9/IYSIznJ97m8BC1CKwIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFNAN2AuBv03oQO8Zc0MYn+ZiBkAJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jNDE4 MmEwZC1kNzQ0LTQ0MWItYTg1MC1lM2Y4NWFhM2FhZmIvZDA4Y2U3NTUtYWY2NS0z NzY4LTk1N2UtM2Q3NzdiMTg0ZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzQxODJhMGQtZDc0NC00NDFiLWE4 NTAtZTNmODVhYTNhYWZiL2M0MTgyYTBkLWQ3NDQtNDQxYi1hODUwLWUzZjg1YWEz YWFmYi5jcmwwHwYDVR0jBBgwFoAUK7GR1bTMw7yKfS/LGMgJ/OaZwCIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jNDE4MmEwZC1kNzQ0LTQ0MWItYTg1MC1lM2Y4 NWFhM2FhZmIuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgAJiABNXAg ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQCGCj8CTS138QN9LAHQDfn+NTeYAt7mbKvDEH1uJgBA4N5tW3Ld SPJP4esvSGZBz/Aj1X4pwbD/KUG3K9aEjDfs5NSRR+4QFwWaHMjvm1uTwZLO43eo TFXBy0dTG7euymhFDUJZO63KYWHDV6M6o2uMc2HvzAgpUEODV7iJp4XERbfbT9Im 6qhZaZwJB3RkWlaVqyrjkCwZaUDVoNZgDkBB0hmQvtuiXjErGGiEG4BlAvRSJHuI Fwdt7JHNkaU0vtD4+dRnWHmEDqXIbMjNF39ESxe4I7TVyb/7JUl8FoWHWDgRT/K1 RdCi0eU/CattfhCR6B1Gz/J9z946MKrmpuNc -----END CERTIFICATE-----Generated at Fri Mar 14 11:27:56 2025 by rpki-client