$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/474aeac4-4a0f-37f9-af53-a0017b82f404.roa File: 474aeac4-4a0f-37f9-af53-a0017b82f404.roa (raw, json) Hash identifier: z149ebPODhczE6pSZSrNwWq1TD/NSiDiyqaOCrsRHe8= Subject key identifier: 50:61:01:19:77:69:FC:BA:42:D4:AA:D6:14:62:17:D7:C6:B0:0B:E4 Certificate issuer: /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Certificate serial: 010D0C9F43285848854B4F84360326C15052D180 Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/474aeac4-4a0f-37f9-af53-a0017b82f404.roa Signing time: Sun 12 Jan 2025 14:00:53 +0000 ROA not before: Sun 12 Jan 2025 14:00:53 +0000 ROA not after: Sat 12 Apr 2025 13:00:53 +0000 asID: 25664 IP address blocks: 2607:cc80:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:85:4b:4f:84:36:03:26:c1:50:52:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Validity Not Before: Jan 12 14:00:53 2025 GMT Not After : Apr 12 13:00:53 2025 GMT Subject: CN=099d54f8-6e21-4090-8e0a-2d6ffef31d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d2:bd:e6:44:4b:71:ca:e3:2a:32:57:9d:6a: cb:b4:51:b7:ac:c3:93:73:26:0a:74:8d:7f:bb:93: d8:ed:be:86:13:14:50:d1:8f:0f:bf:af:5f:e0:f8: c2:73:a3:dc:01:eb:29:21:25:62:e8:d7:7c:30:cc: 99:8f:d9:70:42:e7:ca:be:dc:46:ee:7b:49:18:93: 7c:0b:7b:a9:3e:b0:a4:43:e0:ce:49:37:1d:3d:cc: 18:92:6a:45:cf:2d:f8:42:98:28:33:a8:f5:df:e3: 85:2b:b3:4e:0c:4d:e1:26:74:cc:8d:93:e9:cd:11: 79:00:54:60:e1:56:e9:88:0e:f9:6e:36:bf:bc:d8: f4:5a:e8:0b:f7:98:d1:dc:9e:f2:4a:7e:1a:8a:53: f0:66:e6:91:44:ba:8c:b3:7b:52:1a:44:f6:0b:c7: 92:1f:57:08:a3:31:b2:11:ac:e5:34:e7:91:a0:e0: 7f:9a:f8:2b:3c:aa:cb:ff:24:5c:f8:00:09:f0:29: 71:44:02:d5:01:16:09:45:54:c4:01:04:a9:b7:4e: 6c:ea:58:50:1d:dc:e0:13:71:de:de:b9:ae:a5:db: 35:1b:f2:85:80:0d:bb:cd:d9:e5:e6:40:6e:9c:8b: a1:c2:0f:bc:fa:61:30:46:23:b6:37:ff:a5:93:c7: 97:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:61:01:19:77:69:FC:BA:42:D4:AA:D6:14:62:17:D7:C6:B0:0B:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/474aeac4-4a0f-37f9-af53-a0017b82f404.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl X509v3 Authority Key Identifier: keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer sbgp-ipAddrBlock: critical IPv6: 2607:cc80:1000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:35:f4:40:6d:6c:51:12:33:ef:62:86:e4:bb:5f:61:97:39: 71:82:6a:c4:a3:d2:45:1f:fa:5b:d1:d3:b1:d3:70:7e:00:d1: 79:f0:3f:79:1a:a3:7a:d6:c2:a6:4d:c6:8f:f5:02:6e:3a:2f: 2f:d2:19:6b:73:cc:cd:dc:15:b1:eb:8a:f1:06:68:31:df:e3: ae:b0:c4:f2:e1:a6:95:74:b1:be:4f:c4:9d:7c:70:30:36:fd: f7:a4:22:71:33:ce:a7:e5:8b:4f:7a:0c:6f:48:ee:3c:0d:ee: da:1a:55:da:25:7d:da:39:5e:23:3c:18:8a:3e:83:84:7b:03: c4:69:5e:59:74:ad:4b:69:37:65:fe:e9:ad:40:95:39:1f:40: ba:68:b5:d5:6c:6b:2b:70:22:7d:d2:2b:c3:80:e8:72:b2:cc: 7c:c7:99:50:d3:b5:b7:19:39:5a:6e:27:cc:cb:ba:a3:43:2d: 7c:4e:62:2d:dc:71:a2:9e:8e:4b:17:60:a6:f7:24:14:ae:e5: bb:b7:ff:50:a3:43:99:fd:d4:73:73:01:5e:85:69:28:fd:04: a8:51:49:e9:3b:1d:f9:55:5a:4e:45:1d:ce:64:0a:70:bd:75: 1c:fc:04:62:da:8b:5d:12:1e:ac:e8:fe:c7:ad:c3:87:fa:d4: ce:9b:3c:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiFS0+ENgMmwVBS0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE1ZDNmZGItN2MyZC00MzkwLWE3MmYtZmE0NmYwMmY0 MDc4MB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk MDk5ZDU0ZjgtNmUyMS00MDkwLThlMGEtMmQ2ZmZlZjMxZDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdK95kRLccrjKjJXnWrLtFG3rMOTcyYKdI1/ u5PY7b6GExRQ0Y8Pv69f4PjCc6PcAespISVi6Nd8MMyZj9lwQufKvtxG7ntJGJN8 C3upPrCkQ+DOSTcdPcwYkmpFzy34QpgoM6j13+OFK7NODE3hJnTMjZPpzRF5AFRg 4VbpiA75bja/vNj0WugL95jR3J7ySn4ailPwZuaRRLqMs3tSGkT2C8eSH1cIozGy EazlNOeRoOB/mvgrPKrL/yRc+AAJ8ClxRALVARYJRVTEAQSpt05s6lhQHdzgE3He 3rmupds1G/KFgA27zdnl5kBunIuhwg+8+mEwRiO2N/+lk8eXIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFBhARl3afy6QtSq1hRiF9fGsAvkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTVk M2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2ZjAyZjQwNzgvNDc0YWVhYzQtNGEwZi0z N2Y5LWFmNTMtYTAwMTdiODJmNDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE1ZDNmZGItN2MyZC00MzkwLWE3 MmYtZmE0NmYwMmY0MDc4L2UxNWQzZmRiLTdjMmQtNDM5MC1hNzJmLWZhNDZmMDJm NDA3OC5jcmwwHwYDVR0jBBgwFoAUEMqrDaYVw2cS3TXs0nMj95zDq7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMTVkM2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2 ZjAyZjQwNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfMgBAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFY19EBtbFESM+9ihuS7X2GXOXGCasSj0kUf+lvR07HTcH4A0Xnw P3kao3rWwqZNxo/1Am46Ly/SGWtzzM3cFbHrivEGaDHf466wxPLhppV0sb5PxJ18 cDA2/fekInEzzqfli096DG9I7jwN7toaVdolfdo5XiM8GIo+g4R7A8RpXll0rUtp N2X+6a1AlTkfQLpotdVsaytwIn3SK8OA6HKyzHzHmVDTtbcZOVpuJ8zLuqNDLXxO Yi3ccaKejksXYKb3JBSu5bu3/1CjQ5n91HNzAV6FaSj9BKhRSek7HflVWk5FHc5k CnC9dRz8BGLai10SHqzo/setw4f61M6bPGE= -----END CERTIFICATE-----Generated at Sun Feb 16 20:52:58 2025 by rpki-client