$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/15df4117-2a03-3a05-b343-26c9dadc4d1d.roa File: 15df4117-2a03-3a05-b343-26c9dadc4d1d.roa (raw, json) Hash identifier: gwrEgzTnWjXro4qi6x+NYOWlZJ8eeLfnxQyy0KibDCI= Subject key identifier: 51:A3:9C:BA:8D:92:7C:69:87:BA:C0:32:05:C5:15:E1:EB:B4:02:35 Certificate issuer: /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Certificate serial: 010D0C9F4328584886B07A73FA53F40DD934FD80 Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/15df4117-2a03-3a05-b343-26c9dadc4d1d.roa Signing time: Mon 13 Jan 2025 02:00:40 +0000 ROA not before: Mon 13 Jan 2025 02:00:40 +0000 ROA not after: Sun 13 Apr 2025 01:00:40 +0000 asID: 198949 IP address blocks: 2607:cc80:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:86:b0:7a:73:fa:53:f4:0d:d9:34:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Validity Not Before: Jan 13 02:00:40 2025 GMT Not After : Apr 13 01:00:40 2025 GMT Subject: CN=8c345d78-9c8e-4b63-bf74-1c44a2cce6fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9f:3d:bf:7e:b0:9c:2b:60:db:75:4d:93:06: 16:b5:b3:6c:86:90:0f:ee:74:72:17:3a:74:57:00: c8:45:2d:f5:34:7a:38:d2:a6:82:03:17:90:30:86: a5:a1:72:4a:d3:7e:cf:46:69:7a:24:7c:1a:40:aa: e7:7e:8f:b5:49:bc:33:05:c6:87:e0:1b:ec:31:7b: 3f:29:11:72:41:e5:ca:b0:96:6b:3b:7c:d6:28:6d: 52:75:ca:c6:19:ed:13:5f:07:0b:55:9b:1c:4c:16: e2:50:dd:58:c1:5b:ca:96:7e:a0:15:e6:87:11:02: 10:7f:81:b6:df:8e:b5:11:9b:99:8f:4f:94:4e:e1: 79:82:1a:24:5e:c6:fa:7b:5b:67:87:b8:5f:4c:05: 1f:24:4d:2f:8e:d2:94:fa:da:0e:69:ad:d0:34:e5: c0:e1:14:c1:9a:c1:72:7a:ac:94:9d:27:95:24:9c: 28:16:a1:bf:97:96:aa:4c:c5:54:dc:d2:5a:34:15: 8c:41:84:14:a0:35:4c:cc:ac:c4:ef:2e:7e:23:83: 3b:91:58:5d:90:e4:ff:62:cb:37:ac:7f:76:17:17: fd:f1:52:4c:70:88:02:23:8d:9d:af:9f:c7:25:8c: 92:83:44:96:c9:62:93:7f:4c:7c:12:fb:ab:3a:cb: 26:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A3:9C:BA:8D:92:7C:69:87:BA:C0:32:05:C5:15:E1:EB:B4:02:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/15df4117-2a03-3a05-b343-26c9dadc4d1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl X509v3 Authority Key Identifier: keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer sbgp-ipAddrBlock: critical IPv6: 2607:cc80:3000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:52:60:15:ae:fd:25:0a:83:d7:b1:1e:63:86:79:70:13:c7: e3:20:31:bb:05:ed:f4:d7:b1:22:d7:37:c6:49:55:36:2d:f4: 63:79:77:6c:32:34:91:a6:59:30:59:52:5d:46:51:f0:25:c1: 8d:b5:02:37:86:b0:1e:34:69:d9:6d:de:bc:c3:77:dd:a8:e1: 3d:c3:92:4a:bd:dd:e2:da:0a:5e:de:cc:37:6f:7a:27:19:3d: 86:b3:c4:60:b4:80:92:e5:ad:1b:fb:8b:a0:31:31:83:8f:07: f5:17:6a:51:67:9c:c1:bf:53:b0:a4:37:99:1b:b4:75:a5:52: da:2a:d1:b8:43:03:43:2c:b5:15:dd:3a:87:30:06:c1:35:c0: da:1c:ea:21:a3:e4:82:c0:3f:c7:87:f0:32:76:bd:09:a8:f8: d5:dc:15:94:25:b2:28:f9:4d:5b:4f:61:13:32:53:e1:cc:75: 1e:c7:70:57:9d:fa:45:ca:73:5f:5e:36:77:db:40:c9:10:8e: 3f:ca:9d:7c:28:63:6c:5d:c5:e6:ba:75:11:b2:12:a3:eb:e8: 3a:ce:d1:0a:44:86:8a:f5:43:fb:ab:58:06:8c:26:ad:f0:3c: f7:3c:80:41:29:ff:14:7c:31:f7:cb:ed:38:c1:94:5b:ee:a1: a2:53:d7:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiGsHpz+lP0Ddk0/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE1ZDNmZGItN2MyZC00MzkwLWE3MmYtZmE0NmYwMmY0 MDc4MB4XDTI1MDExMzAyMDA0MFoXDTI1MDQxMzAxMDA0MFowLzEtMCsGA1UEAxMk OGMzNDVkNzgtOWM4ZS00YjYzLWJmNzQtMWM0NGEyY2NlNmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ89v36wnCtg23VNkwYWtbNshpAP7nRyFzp0 VwDIRS31NHo40qaCAxeQMIaloXJK037PRml6JHwaQKrnfo+1SbwzBcaH4BvsMXs/ KRFyQeXKsJZrO3zWKG1SdcrGGe0TXwcLVZscTBbiUN1YwVvKln6gFeaHEQIQf4G2 3461EZuZj0+UTuF5ghokXsb6e1tnh7hfTAUfJE0vjtKU+toOaa3QNOXA4RTBmsFy eqyUnSeVJJwoFqG/l5aqTMVU3NJaNBWMQYQUoDVMzKzE7y5+I4M7kVhdkOT/Yss3 rH92Fxf98VJMcIgCI42dr5/HJYySg0SWyWKTf0x8EvurOssm0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFGjnLqNknxph7rAMgXFFeHrtAI1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTVk M2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2ZjAyZjQwNzgvMTVkZjQxMTctMmEwMy0z YTA1LWIzNDMtMjZjOWRhZGM0ZDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE1ZDNmZGItN2MyZC00MzkwLWE3 MmYtZmE0NmYwMmY0MDc4L2UxNWQzZmRiLTdjMmQtNDM5MC1hNzJmLWZhNDZmMDJm NDA3OC5jcmwwHwYDVR0jBBgwFoAUEMqrDaYVw2cS3TXs0nMj95zDq7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMTVkM2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2 ZjAyZjQwNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfMgDAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKFSYBWu/SUKg9exHmOGeXATx+MgMbsF7fTXsSLXN8ZJVTYt9GN5 d2wyNJGmWTBZUl1GUfAlwY21AjeGsB40adlt3rzDd92o4T3Dkkq93eLaCl7ezDdv eicZPYazxGC0gJLlrRv7i6AxMYOPB/UXalFnnMG/U7CkN5kbtHWlUtoq0bhDA0Ms tRXdOocwBsE1wNoc6iGj5ILAP8eH8DJ2vQmo+NXcFZQlsij5TVtPYRMyU+HMdR7H cFed+kXKc19eNnfbQMkQjj/KnXwoY2xdxea6dRGyEqPr6DrO0QpEhor1Q/urWAaM Jq3wPPc8gEEp/xR8MffL7TjBlFvuoaJT18Q= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:16 2025 by rpki-client