$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/de3ea48a-afe6-3f81-ac77-01bdc995874d.roa File: de3ea48a-afe6-3f81-ac77-01bdc995874d.roa (raw, json) Hash identifier: CwljE3uhfS9/zX+j1IhTIZCGEmN76hCY9c/LljNVLmM= Subject key identifier: 3C:EE:63:46:63:C7:65:F2:1F:C9:CB:76:49:D2:DB:50:5A:C3:C5:E1 Certificate issuer: /CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2 Certificate serial: 010D0C9F432858485E35B06CF037EA86F1D57470 Authority key identifier: E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/de3ea48a-afe6-3f81-ac77-01bdc995874d.roa Signing time: Sun 29 Dec 2024 14:00:53 +0000 ROA not before: Sun 29 Dec 2024 14:00:53 +0000 ROA not after: Sat 29 Mar 2025 13:00:53 +0000 asID: 14168 IP address blocks: 2605:bb80:1337::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5e:35:b0:6c:f0:37:ea:86:f1:d5:74:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2 Validity Not Before: Dec 29 14:00:53 2024 GMT Not After : Mar 29 13:00:53 2025 GMT Subject: CN=8da2cf54-8d93-4efc-97c3-499313c31197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:38:94:9c:08:55:ff:8e:64:b3:60:72:47:dc: 47:09:9e:e6:e5:a4:8b:64:c9:91:58:ec:f3:97:12: 86:c0:33:51:1b:ab:62:ff:06:73:1a:d6:04:7d:60: c0:39:72:63:1d:3e:a1:57:ee:5a:e8:46:86:28:9e: 0b:61:04:fd:03:d6:31:e4:34:fd:7f:34:c0:b6:3d: cd:9f:b1:9d:25:77:42:15:58:19:22:67:5f:de:82: 9c:2e:09:38:45:52:f6:39:b2:b3:05:b0:48:b3:64: da:ec:33:41:d5:1c:65:24:50:e1:e7:75:02:61:65: ad:1a:f3:81:8f:39:09:ba:1d:55:62:b3:72:e4:6d: 71:dc:fe:87:1b:79:a8:ba:f5:e5:23:b8:3f:17:28: 76:bb:94:df:eb:4b:19:db:62:29:69:b2:0a:a7:8f: 02:0a:3e:35:67:0c:e5:cb:97:81:bf:e3:9d:8e:60: 47:e9:2f:2c:ec:ca:68:04:3b:46:b3:b9:5b:76:7f: 1c:59:6d:a4:ff:cd:fe:b8:f6:3c:ad:d5:09:15:d6: 3d:d7:cb:56:50:c9:bf:69:b5:0d:16:37:b8:66:41: 00:8c:75:b6:11:16:5a:19:73:cf:b6:f7:8b:63:83: e7:17:ce:a1:da:85:3c:fe:bf:6f:2a:d7:8a:f2:eb: a9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EE:63:46:63:C7:65:F2:1F:C9:CB:76:49:D2:DB:50:5A:C3:C5:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/de3ea48a-afe6-3f81-ac77-01bdc995874d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl X509v3 Authority Key Identifier: keyid:E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer sbgp-ipAddrBlock: critical IPv6: 2605:bb80:1337::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:9e:f9:84:fe:8a:f2:8e:f1:75:b0:ea:01:d6:77:c9:35:f6: dd:fe:b6:fe:7a:a6:5a:45:b4:e4:de:9c:7d:03:60:ef:10:66: 62:07:43:ef:96:71:ca:c0:34:e7:02:f7:b8:96:08:5f:f3:2b: d2:be:b9:f2:a4:5d:77:df:db:56:3a:b3:f0:9a:2e:93:a9:93: 93:d2:49:3c:64:da:81:e4:03:b6:70:5e:a2:cf:c8:0f:0c:a2: 25:14:45:e3:78:e8:c7:df:90:3b:7d:66:b3:d1:0d:aa:4f:64: 30:e3:9a:a0:91:60:93:c9:6e:66:3a:ad:eb:9b:17:32:e4:ab: c5:c3:41:e5:7f:9f:00:44:8e:65:52:44:54:a4:ee:6f:68:54: 8b:7c:48:21:63:7a:60:ad:33:34:92:73:6c:e0:d2:74:ad:81: fd:c2:db:8e:fa:7c:48:65:92:34:01:4e:3d:1f:bc:24:56:ed: 61:7d:b5:e3:6a:b7:0d:2a:b5:54:83:5c:74:e6:9b:5b:f7:b5: f9:c2:1f:5e:68:41:91:c6:9a:9a:42:c3:1d:7c:53:8b:fe:5a: 2b:e5:4f:57:53:c7:a6:56:f3:36:68:4c:96:aa:f9:9f:dd:12: 7d:b6:c6:d9:bb:61:ee:f1:12:62:5e:a7:97:48:22:26:4f:33: 94:c4:d0:36 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEheNbBs8DfqhvHVdHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFkYzlmNDItODIwMS00YWYyLWEzYzItMjIzZDFlMjY4 N2EyMB4XDTI0MTIyOTE0MDA1M1oXDTI1MDMyOTEzMDA1M1owLzEtMCsGA1UEAxMk OGRhMmNmNTQtOGQ5My00ZWZjLTk3YzMtNDk5MzEzYzMxMTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyziUnAhV/45ks2ByR9xHCZ7m5aSLZMmRWOzz lxKGwDNRG6ti/wZzGtYEfWDAOXJjHT6hV+5a6EaGKJ4LYQT9A9Yx5DT9fzTAtj3N n7GdJXdCFVgZImdf3oKcLgk4RVL2ObKzBbBIs2Ta7DNB1RxlJFDh53UCYWWtGvOB jzkJuh1VYrNy5G1x3P6HG3mouvXlI7g/Fyh2u5Tf60sZ22IpabIKp48CCj41Zwzl y5eBv+OdjmBH6S8s7MpoBDtGs7lbdn8cWW2k/83+uPY8rdUJFdY918tWUMm/abUN Fje4ZkEAjHW2ERZaGXPPtveLY4PnF86h2oU8/r9vKteK8uupHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDzuY0Zjx2XyH8nLdknS21Baw8XhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWRj OWY0Mi04MjAxLTRhZjItYTNjMi0yMjNkMWUyNjg3YTIvZGUzZWE0OGEtYWZlNi0z ZjgxLWFjNzctMDFiZGM5OTU4NzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkYzlmNDItODIwMS00YWYyLWEz YzItMjIzZDFlMjY4N2EyLzRhZGM5ZjQyLTgyMDEtNGFmMi1hM2MyLTIyM2QxZTI2 ODdhMi5jcmwwHwYDVR0jBBgwFoAU4btomINz3yVYWM/rRkGgAfxhPV8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YWRjOWY0Mi04MjAxLTRhZjItYTNjMi0yMjNk MWUyNjg3YTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgW7gBM3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEqe+YT+ivKO8XWw6gHWd8k19t3+tv56plpFtOTenH0DYO8QZmIH Q++WccrANOcC97iWCF/zK9K+ufKkXXff21Y6s/CaLpOpk5PSSTxk2oHkA7ZwXqLP yA8MoiUUReN46MffkDt9ZrPRDapPZDDjmqCRYJPJbmY6reubFzLkq8XDQeV/nwBE jmVSRFSk7m9oVIt8SCFjemCtMzSSc2zg0nStgf3C2476fEhlkjQBTj0fvCRW7WF9 teNqtw0qtVSDXHTmm1v3tfnCH15oQZHGmppCwx18U4v+WivlT1dTx6ZW8zZoTJaq +Z/dEn22xtm7Ye7xEmJep5dIIiZPM5TE0DY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:10 2025 by rpki-client