$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/4f20e63c-cd20-3051-9632-312975732fcb.roa File: 4f20e63c-cd20-3051-9632-312975732fcb.roa (raw, json) Hash identifier: bsf0yHgvtYlzjzi5ezhmadIo044I3fVwDSDxswB/0qE= Subject key identifier: 99:25:F5:2B:C4:2B:C9:7D:A1:C3:15:FA:3D:53:37:37:DB:F9:F8:A1 Certificate issuer: /CN=29cf59bb-49d4-46dc-a312-da9c10dc336e Certificate serial: 010D0C9F43285848A1360E04496C811AF5101CB0 Authority key identifier: 75:6D:39:EF:55:71:4A:71:37:2C:93:BC:47:6F:1D:A8:BC:34:23:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/4f20e63c-cd20-3051-9632-312975732fcb.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 6859 IP address blocks: 2620:0:5300::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:0e:04:49:6c:81:1a:f5:10:1c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29cf59bb-49d4-46dc-a312-da9c10dc336e Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=52b3f965-2abf-42e5-88f7-a08cf65edea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a2:f5:41:14:37:2a:1a:96:52:f2:26:88:ea: cb:c3:50:cb:ba:fd:b8:36:34:3a:a1:0f:13:c6:62: fd:3e:1e:33:45:c9:84:11:fc:29:68:96:f9:7f:f5: 6b:da:53:e4:c6:fe:37:80:dd:db:e8:92:8e:59:bd: 89:89:8f:11:29:6a:c2:f4:19:3d:38:fe:71:23:f9: af:c1:4c:0a:c9:53:2d:7e:7e:2c:55:3e:5a:b5:2d: 91:1e:8b:91:1a:20:51:78:9f:c6:6d:45:d8:1b:04: 1b:c6:fa:df:6b:44:8a:16:fa:23:d6:d0:eb:aa:2e: 8b:bf:c6:f1:e8:33:95:b6:13:8c:e0:eb:71:e9:7a: 4b:68:b2:fb:88:a6:d3:4f:2e:5a:05:59:4c:11:73: d4:cd:c8:88:4d:06:13:08:62:42:f8:f7:9d:69:48: d9:1e:0c:0a:96:c3:13:88:16:3f:91:83:d7:7d:38: de:44:bc:ff:70:ae:3a:4d:21:36:1a:81:2f:9a:1d: b5:27:91:84:26:91:10:a6:8c:45:6f:71:aa:2f:bb: 27:e5:36:d1:64:9f:4f:cf:f7:7b:ee:a8:e2:aa:6a: 92:c8:7d:22:0c:78:40:74:6f:25:6a:34:ae:d7:32: fe:00:d8:8c:39:05:0c:3e:c5:71:f2:c2:06:f5:19: 1d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:25:F5:2B:C4:2B:C9:7D:A1:C3:15:FA:3D:53:37:37:DB:F9:F8:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/4f20e63c-cd20-3051-9632-312975732fcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.crl X509v3 Authority Key Identifier: keyid:75:6D:39:EF:55:71:4A:71:37:2C:93:BC:47:6F:1D:A8:BC:34:23:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5300::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:2f:3e:fd:3b:a0:43:80:b2:64:de:76:00:8f:76:75:c3:7d: fb:cc:e5:37:0f:dc:ca:00:6e:e4:43:c2:1d:4c:06:e7:d6:8b: 4a:f5:b0:94:b0:21:13:ea:b8:aa:0a:2a:6e:40:63:9e:64:e4: 23:64:02:9f:ca:6f:89:91:f7:ae:db:16:8b:51:5e:ed:d6:86: 01:68:69:54:5c:82:e7:35:59:30:b9:8b:68:51:af:ba:d9:60: 8b:18:70:30:2d:22:63:e4:c9:1b:d5:19:ea:90:b4:28:fe:eb: 79:bf:58:83:46:5c:10:6a:e4:16:3f:de:41:74:ad:3d:41:c2: d8:97:fb:94:c0:ac:8e:e0:29:49:be:d6:17:39:0d:8b:27:40: f2:5b:82:b5:22:e1:5f:f8:a9:c3:e6:82:1c:90:21:c7:65:fa: f3:16:8d:fc:55:c6:9a:bd:ec:04:0e:74:10:5a:9e:e8:b0:d6: 30:17:ad:9d:b4:83:02:36:e8:d6:25:de:9c:83:e5:05:f5:c3: 83:90:1f:7b:ce:5d:e7:7a:eb:35:8e:8a:06:60:ef:70:a1:f6: 3e:ed:20:e7:14:8b:7a:42:e3:e5:81:aa:84:52:33:0c:7e:98: 6f:36:61:29:83:f6:68:93:80:a9:0a:39:8c:8b:2b:35:89:2b: 35:38:f7:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNg4ESWyBGvUQHLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjljZjU5YmItNDlkNC00NmRjLWEzMTItZGE5YzEwZGMz MzZlMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk NTJiM2Y5NjUtMmFiZi00MmU1LTg4ZjctYTA4Y2Y2NWVkZWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaL1QRQ3KhqWUvImiOrLw1DLuv24NjQ6oQ8T xmL9Ph4zRcmEEfwpaJb5f/Vr2lPkxv43gN3b6JKOWb2JiY8RKWrC9Bk9OP5xI/mv wUwKyVMtfn4sVT5atS2RHouRGiBReJ/GbUXYGwQbxvrfa0SKFvoj1tDrqi6Lv8bx 6DOVthOM4Otx6XpLaLL7iKbTTy5aBVlMEXPUzciITQYTCGJC+PedaUjZHgwKlsMT iBY/kYPXfTjeRLz/cK46TSE2GoEvmh21J5GEJpEQpoxFb3GqL7sn5TbRZJ9Pz/d7 7qjiqmqSyH0iDHhAdG8lajSu1zL+ANiMOQUMPsVx8sIG9RkdqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJkl9SvEK8l9ocMV+j1TNzfb+fihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWNm NTliYi00OWQ0LTQ2ZGMtYTMxMi1kYTljMTBkYzMzNmUvNGYyMGU2M2MtY2QyMC0z MDUxLTk2MzItMzEyOTc1NzMyZmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjljZjU5YmItNDlkNC00NmRjLWEz MTItZGE5YzEwZGMzMzZlLzI5Y2Y1OWJiLTQ5ZDQtNDZkYy1hMzEyLWRhOWMxMGRj MzM2ZS5jcmwwHwYDVR0jBBgwFoAUdW0571VxSnE3LJO8R28dqLw0I5AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWNmNTliYi00OWQ0LTQ2ZGMtYTMxMi1kYTlj MTBkYzMzNmUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAAFMA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFAvPv07oEOAsmTedgCPdnXDffvM5TcP3MoAbuRDwh1MBufWi0r1 sJSwIRPquKoKKm5AY55k5CNkAp/Kb4mR967bFotRXu3WhgFoaVRcguc1WTC5i2hR r7rZYIsYcDAtImPkyRvVGeqQtCj+63m/WINGXBBq5BY/3kF0rT1BwtiX+5TArI7g KUm+1hc5DYsnQPJbgrUi4V/4qcPmghyQIcdl+vMWjfxVxpq97AQOdBBanuiw1jAX rZ20gwI26NYl3pyD5QX1w4OQH3vOXed66zWOigZg73Ch9j7tIOcUi3pC4+WBqoRS Mwx+mG82YSmD9miTgKkKOYyLKzWJKzU491g= -----END CERTIFICATE-----Generated at Fri Apr 11 21:27:09 2025 by rpki-client