$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/2e3eec9d-ef2d-3201-b0d7-fa96cbcbd39c.roa File: 2e3eec9d-ef2d-3201-b0d7-fa96cbcbd39c.roa (raw, json) Hash identifier: FFMj7VOSIllbw5M3dw2N4fOShES0y1afBHsMYshfRpk= Subject key identifier: B7:6D:38:94:40:E3:6E:14:75:78:4C:45:7C:17:E0:FF:E0:00:7E:EE Certificate issuer: /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Certificate serial: 010D0C9F4328584886B07AA293A9240C62818580 Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/2e3eec9d-ef2d-3201-b0d7-fa96cbcbd39c.roa Signing time: Mon 13 Jan 2025 02:00:40 +0000 ROA not before: Mon 13 Jan 2025 02:00:40 +0000 ROA not after: Sun 13 Apr 2025 01:00:40 +0000 asID: 198949 IP address blocks: 2607:cc80:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:86:b0:7a:a2:93:a9:24:0c:62:81:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Validity Not Before: Jan 13 02:00:40 2025 GMT Not After : Apr 13 01:00:40 2025 GMT Subject: CN=d48aedeb-e5cf-4251-8b56-3f187e46e009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:73:68:09:b9:95:df:fa:02:da:17:c6:82:d2: 8c:f0:3b:0b:e5:25:17:ee:f2:d6:56:32:f7:60:6c: 84:5f:2c:60:ed:8a:0d:67:c7:44:5b:24:13:20:6a: df:c8:63:57:3b:ff:6d:d9:b9:44:7f:51:7c:e6:3d: 2e:8a:aa:ea:25:e2:ef:2a:90:28:77:29:b2:8d:fb: a3:39:fa:1c:d3:b6:8a:9b:f2:82:15:05:1a:c8:f3: 2a:1f:ab:c2:3f:87:51:1b:71:74:97:88:89:f1:8b: 33:e2:31:a0:72:14:31:90:7b:9c:77:a7:81:65:81: 88:9c:fc:82:29:a2:07:60:2c:a3:8e:d1:f1:e7:2a: 3f:81:ae:7e:18:60:d9:4b:9c:2b:1d:56:0b:a3:c4: ef:7f:57:74:0b:60:7e:a5:f6:b8:ef:90:14:8b:90: 5a:16:c5:30:0a:01:b2:13:96:40:00:af:27:aa:1d: 41:51:7c:b9:b8:ce:f4:b2:78:38:0d:04:32:cc:5b: c3:68:d5:f0:62:f4:76:dc:76:96:47:9a:95:f8:f3: 74:b1:50:9b:5b:4e:0f:d6:8b:38:1f:d3:fd:09:27: a7:d7:cf:2c:ae:c9:4a:53:10:44:5f:cd:ee:d5:3d: 79:2d:ef:b8:e4:d9:86:f4:f6:86:42:34:f1:f6:98: 35:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6D:38:94:40:E3:6E:14:75:78:4C:45:7C:17:E0:FF:E0:00:7E:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/2e3eec9d-ef2d-3201-b0d7-fa96cbcbd39c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl X509v3 Authority Key Identifier: keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer sbgp-ipAddrBlock: critical IPv6: 2607:cc80:8000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:5f:66:cc:a1:95:09:50:5b:37:76:1d:db:48:ac:00:96:a5: a6:4e:89:52:28:7c:09:ec:db:a7:c1:a6:fa:c7:d4:1e:56:6e: 31:45:8a:96:d1:8b:4d:6b:66:dd:f8:c8:2f:2e:28:99:4c:5a: 1e:68:78:83:70:57:23:96:85:d9:59:b3:54:9f:3e:95:84:7d: f1:91:23:4e:d1:98:be:eb:c7:dc:a7:14:32:81:81:a4:fa:90: 7b:be:01:fe:9b:30:53:c1:ed:65:6c:84:c1:bc:cb:4d:02:15: 2b:ef:a0:84:13:03:4d:06:7d:60:37:b5:8e:57:37:3e:b2:d2: 5c:1c:4d:06:2a:e9:39:a3:ec:da:f0:ca:68:97:ba:81:13:33: d2:bb:9f:de:d9:eb:5d:47:af:02:64:57:31:6a:4a:29:c4:06: 02:90:1d:7d:5a:84:77:c6:ca:d0:60:03:4a:04:08:e4:34:d1: f4:1a:b1:8e:1a:f9:44:f4:c2:59:d7:13:1c:41:8b:59:56:96: 85:58:37:91:20:a9:ae:5a:5a:5e:e2:75:69:ce:5c:c1:7b:6e: 65:cf:b9:6f:49:ce:bd:08:b4:ab:93:96:b5:49:94:ed:b9:e9: 2d:42:35:3d:dc:43:08:48:9a:1f:e5:21:9a:17:4c:8f:61:e1: e2:60:d3:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiGsHqik6kkDGKBhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE1ZDNmZGItN2MyZC00MzkwLWE3MmYtZmE0NmYwMmY0 MDc4MB4XDTI1MDExMzAyMDA0MFoXDTI1MDQxMzAxMDA0MFowLzEtMCsGA1UEAxMk ZDQ4YWVkZWItZTVjZi00MjUxLThiNTYtM2YxODdlNDZlMDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XNoCbmV3/oC2hfGgtKM8DsL5SUX7vLWVjL3 YGyEXyxg7YoNZ8dEWyQTIGrfyGNXO/9t2blEf1F85j0uiqrqJeLvKpAodymyjfuj Ofoc07aKm/KCFQUayPMqH6vCP4dRG3F0l4iJ8Ysz4jGgchQxkHucd6eBZYGInPyC KaIHYCyjjtHx5yo/ga5+GGDZS5wrHVYLo8Tvf1d0C2B+pfa475AUi5BaFsUwCgGy E5ZAAK8nqh1BUXy5uM70sng4DQQyzFvDaNXwYvR23HaWR5qV+PN0sVCbW04P1os4 H9P9CSen188srslKUxBEX83u1T15Le+45NmG9PaGQjTx9pg1pwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLdtOJRA424UdXhMRXwX4P/gAH7uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTVk M2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2ZjAyZjQwNzgvMmUzZWVjOWQtZWYyZC0z MjAxLWIwZDctZmE5NmNiY2JkMzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE1ZDNmZGItN2MyZC00MzkwLWE3 MmYtZmE0NmYwMmY0MDc4L2UxNWQzZmRiLTdjMmQtNDM5MC1hNzJmLWZhNDZmMDJm NDA3OC5jcmwwHwYDVR0jBBgwFoAUEMqrDaYVw2cS3TXs0nMj95zDq7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMTVkM2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2 ZjAyZjQwNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfMgIAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEFfZsyhlQlQWzd2HdtIrACWpaZOiVIofAns26fBpvrH1B5WbjFF ipbRi01rZt34yC8uKJlMWh5oeINwVyOWhdlZs1SfPpWEffGRI07RmL7rx9ynFDKB gaT6kHu+Af6bMFPB7WVshMG8y00CFSvvoIQTA00GfWA3tY5XNz6y0lwcTQYq6Tmj 7NrwymiXuoETM9K7n97Z611HrwJkVzFqSinEBgKQHX1ahHfGytBgA0oECOQ00fQa sY4a+UT0wlnXExxBi1lWloVYN5Egqa5aWl7idWnOXMF7bmXPuW9Jzr0ItKuTlrVJ lO256S1CNT3cQwhImh/lIZoXTI9h4eJg0+M= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:21 2025 by rpki-client