$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/8d050d66-0e71-325e-a47b-b0b94e6ac58e.roa File: 8d050d66-0e71-325e-a47b-b0b94e6ac58e.roa (raw, json) Hash identifier: i0GQNYnZSIBahNUB0179UQ5exNh8wrdWZYfqDnPBfnA= Subject key identifier: 40:33:97:C0:E1:52:34:09:AC:1C:24:35:D6:54:C5:30:4B:DF:CB:1F Certificate issuer: /CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Certificate serial: 010D0C9F43285848143A7D8C4AA739A0501C1690 Authority key identifier: C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/8d050d66-0e71-325e-a47b-b0b94e6ac58e.roa Signing time: Tue 03 Dec 2024 02:00:40 +0000 ROA not before: Tue 03 Dec 2024 02:00:40 +0000 ROA not after: Mon 03 Mar 2025 02:00:40 +0000 asID: 64236 IP address blocks: 2604:2d00::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:14:3a:7d:8c:4a:a7:39:a0:50:1c:16:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Validity Not Before: Dec 3 02:00:40 2024 GMT Not After : Mar 3 02:00:40 2025 GMT Subject: CN=1f4c96d7-6088-4c7c-8638-2b1d628845a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a2:33:c9:06:5f:19:8c:a7:89:b2:ee:1d:d8: a9:ab:b5:d2:a7:a0:69:32:03:18:1e:e1:84:c9:e2: 69:98:97:e6:84:f6:4e:f2:a9:24:67:29:c0:5e:41: 07:63:26:85:f7:d7:5d:00:52:bd:d5:61:b7:af:66: d8:82:45:46:6d:6a:aa:49:01:d7:00:a2:0c:1d:e1: ac:d1:84:49:14:2d:f4:41:57:a0:f5:79:63:98:71: 22:99:50:ef:c5:cf:33:f1:68:25:34:30:47:42:ff: 1e:79:6f:d1:95:bb:d0:e2:bd:82:dc:31:93:56:e2: 99:d8:ce:0d:83:67:37:74:1c:63:b5:08:7d:92:48: f7:5f:5d:e6:4b:54:d5:69:29:62:22:36:b6:cd:08: 9e:42:ab:05:6a:0d:b9:84:c5:b3:cb:a6:56:cb:88: 16:90:04:49:88:86:2c:6c:d1:d5:f3:df:10:06:b1: 9b:a1:d5:e6:2d:1f:53:a0:e4:21:52:b7:c0:98:d8: ed:7b:39:1d:ca:de:4d:1e:e4:c3:5c:58:e7:59:0b: 40:38:bc:ac:48:95:ac:71:60:d6:eb:f3:46:3a:24: 2e:ca:82:76:1c:d1:54:dc:ec:77:d9:cd:e8:56:96: 18:74:b0:b7:da:24:29:1d:a7:e6:cb:84:eb:bd:67: a2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:33:97:C0:E1:52:34:09:AC:1C:24:35:D6:54:C5:30:4B:DF:CB:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/8d050d66-0e71-325e-a47b-b0b94e6ac58e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl X509v3 Authority Key Identifier: keyid:C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d00::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:77:99:f9:0a:44:c5:05:ec:1f:96:0b:94:b6:5c:ff:bc:cf: 2f:19:56:9c:07:9b:2e:93:28:af:7f:01:ec:9a:07:c3:8f:5e: 58:06:df:10:35:bd:a7:e4:b4:1e:0f:c3:6a:e4:b2:d0:b1:dd: f2:23:1d:4b:7c:24:82:3a:12:1d:26:1c:1a:54:47:09:5d:98: 12:e7:9f:6d:ad:09:b8:fc:58:68:8b:51:b3:8b:18:88:b4:bc: be:c1:8a:0b:f9:18:0b:cb:12:39:b1:81:99:c6:44:e9:46:4d: e7:4a:2f:5c:e0:47:7f:e8:87:6b:de:2e:59:a0:41:2a:12:95: 79:de:53:86:5a:80:99:2f:3b:ca:5d:b4:d1:13:e8:82:49:57: 41:7f:73:50:95:a5:79:85:5b:89:56:82:3f:70:16:9c:c3:73: 58:4e:fc:ab:27:31:05:fa:21:39:3e:ae:3a:92:33:30:9d:6f: 24:74:72:2b:2f:66:1d:d3:cb:ca:2b:c6:0e:dc:ae:03:68:a3: 05:38:10:74:3d:df:64:13:37:e4:8a:55:be:bc:5a:e0:a2:ca: a2:d0:2f:c8:91:02:09:74:40:0a:85:ba:fb:77:03:13:b8:9d: 57:71:8d:88:85:3d:2c:38:2e:88:00:6c:29:34:66:93:c4:96: 0c:5e:ad:17 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEgUOn2MSqc5oFAcFpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZTQwNjgtZjdlNS00MDRiLTk2OTMtZGNmZjRiMmU4 Zjk1MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk MWY0Yzk2ZDctNjA4OC00YzdjLTg2MzgtMmIxZDYyODg0NWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6IzyQZfGYynibLuHdipq7XSp6BpMgMYHuGE yeJpmJfmhPZO8qkkZynAXkEHYyaF99ddAFK91WG3r2bYgkVGbWqqSQHXAKIMHeGs 0YRJFC30QVeg9XljmHEimVDvxc8z8WglNDBHQv8eeW/RlbvQ4r2C3DGTVuKZ2M4N g2c3dBxjtQh9kkj3X13mS1TVaSliIja2zQieQqsFag25hMWzy6ZWy4gWkARJiIYs bNHV898QBrGbodXmLR9ToOQhUrfAmNjtezkdyt5NHuTDXFjnWQtAOLysSJWscWDW 6/NGOiQuyoJ2HNFU3Ox32c3oVpYYdLC32iQpHafmy4TrvWeiXwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEAzl8DhUjQJrBwkNdZUxTBL38sfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJl NDA2OC1mN2U1LTQwNGItOTY5My1kY2ZmNGIyZThmOTUvOGQwNTBkNjYtMGU3MS0z MjVlLWE0N2ItYjBiOTRlNmFjNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzViZTQwNjgtZjdlNS00MDRiLTk2 OTMtZGNmZjRiMmU4Zjk1LzM1YmU0MDY4LWY3ZTUtNDA0Yi05NjkzLWRjZmY0YjJl OGY5NS5jcmwwHwYDVR0jBBgwFoAUx5tNJUqL+1JPO26W0tgCYtGpB88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJlNDA2OC1mN2U1LTQwNGItOTY5My1kY2Zm NGIyZThmOTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgQtAAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAC3eZ+QpExQXsH5YLlLZc/7zPLxlWnAebLpMor38B7JoHw49eWAbf EDW9p+S0Hg/DauSy0LHd8iMdS3wkgjoSHSYcGlRHCV2YEuefba0JuPxYaItRs4sY iLS8vsGKC/kYC8sSObGBmcZE6UZN50ovXOBHf+iHa94uWaBBKhKVed5ThlqAmS87 yl200RPogklXQX9zUJWleYVbiVaCP3AWnMNzWE78qycxBfohOT6uOpIzMJ1vJHRy Ky9mHdPLyivGDtyuA2ijBTgQdD3fZBM35IpVvrxa4KLKotAvyJECCXRACoW6+3cD E7idV3GNiIU9LDguiABsKTRmk8SWDF6tFw== -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:05 2025 by rpki-client