$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/eaa719a0-4402-367a-9fe6-f7ae25dc23ac.roa File: eaa719a0-4402-367a-9fe6-f7ae25dc23ac.roa (raw, json) Hash identifier: L2QPFmNudLD6lAZJYCCJg6E9FboRhgMqg0ksEj15NVM= Subject key identifier: D0:E4:DB:CF:5B:FF:BA:84:32:FE:24:27:81:AD:A0:29:42:8E:8E:FA Certificate issuer: /CN=4f965035-760e-4232-a4c3-bc290fa7e325 Certificate serial: 010D0C9F432858480BDA6DF167778AC6812F20C0 Authority key identifier: 4F:53:AA:A6:82:E5:67:D0:28:69:98:61:76:F7:6E:EB:DB:83:C1:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/eaa719a0-4402-367a-9fe6-f7ae25dc23ac.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 25656 IP address blocks: 2620:38:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/4f965035-760e-4232-a4c3-bc290fa7e325.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/4f965035-760e-4232-a4c3-bc290fa7e325.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:6d:f1:67:77:8a:c6:81:2f:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f965035-760e-4232-a4c3-bc290fa7e325 Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=97e7f81a-17e8-4a80-b373-90006468ff40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:34:9b:94:6f:ee:cf:09:de:70:8a:77:c8:04: ea:a8:e5:6a:4e:97:14:15:5d:72:39:c7:4b:eb:4c: 8d:48:71:26:7d:f9:83:dd:ef:9b:21:7b:77:af:f8: 73:46:e5:2c:58:db:bc:bc:c3:27:9f:2d:01:e1:53: 5f:e6:2c:50:06:57:99:02:a7:96:50:2b:c6:b9:dc: fc:e2:31:61:2b:af:be:dc:10:18:cf:1e:ba:62:66: 16:a2:81:a0:35:aa:6b:a9:16:01:51:66:b9:8d:22: 02:fe:bb:f5:a4:4c:7b:fe:a5:53:98:2b:97:8e:c0: 97:51:00:e6:15:e9:57:6a:c2:59:0d:f0:ec:d5:a8: 26:1a:00:9f:13:8e:5e:eb:87:06:86:f8:ba:af:49: d8:78:22:fd:84:aa:22:a7:39:e7:30:9d:40:c9:0e: f9:52:72:8d:86:c6:3e:ac:ce:ec:79:aa:8b:7d:dd: b9:53:3d:d3:ee:07:b3:b1:f9:04:21:b1:f8:f8:ab: 4f:02:d7:23:24:ac:ee:80:23:ef:18:33:1d:57:cc: 85:c3:6f:e2:cb:a2:7f:03:3f:6f:21:08:47:ce:4f: 59:f2:73:89:38:de:88:30:1e:3d:e1:c9:d6:1c:66: 02:d4:67:29:02:81:52:be:21:11:12:a9:c0:15:97: 9a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E4:DB:CF:5B:FF:BA:84:32:FE:24:27:81:AD:A0:29:42:8E:8E:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/eaa719a0-4402-367a-9fe6-f7ae25dc23ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/4f965035-760e-4232-a4c3-bc290fa7e325.crl X509v3 Authority Key Identifier: keyid:4F:53:AA:A6:82:E5:67:D0:28:69:98:61:76:F7:6E:EB:DB:83:C1:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325.cer sbgp-ipAddrBlock: critical IPv6: 2620:38:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:68:e6:55:18:60:02:74:92:4b:eb:e3:98:01:34:c1:c0:8f: 62:86:06:ff:df:d3:ab:06:80:d8:fd:2f:79:54:31:dd:91:d3: 05:cb:e3:96:c8:aa:a1:06:ac:d9:b4:d9:97:fc:9f:1a:a1:11: 01:ef:a6:1e:15:a2:40:ad:88:72:35:75:0c:94:03:72:ea:3e: 14:dc:4e:12:a9:06:a4:e0:16:25:b2:ee:f9:fa:f5:29:63:80: 63:8f:80:8e:96:97:0e:a8:d0:d8:6d:58:a6:ed:dd:2a:f2:5e: a5:b7:8d:41:d1:82:dc:d6:94:8b:23:86:b3:19:7c:a6:9a:1c: 09:75:52:c5:93:50:22:7c:59:11:a9:c4:4d:0e:4d:fa:1a:64: 03:e4:6d:32:5d:da:19:30:70:c0:dd:e7:6c:6d:06:27:97:a5: 0e:4b:94:14:30:88:49:c0:e6:8e:ad:6c:a3:2a:19:ff:3e:81: e2:4c:ea:20:e1:29:8b:45:2a:bf:25:af:d5:ff:b4:48:61:18: ed:97:f6:34:0c:86:61:cf:13:32:69:32:58:5c:6e:94:ea:64: 09:6e:3f:88:d4:76:9b:d0:f1:21:af:2e:42:83:42:65:8c:a3: 58:16:ff:7a:7b:0d:d9:50:13:4b:8e:5a:55:c8:20:81:d2:5e: 14:50:bf:f7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgL2m3xZ3eKxoEvIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5NjUwMzUtNzYwZS00MjMyLWE0YzMtYmMyOTBmYTdl MzI1MB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk OTdlN2Y4MWEtMTdlOC00YTgwLWIzNzMtOTAwMDY0NjhmZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zSblG/uzwnecIp3yATqqOVqTpcUFV1yOcdL 60yNSHEmffmD3e+bIXt3r/hzRuUsWNu8vMMnny0B4VNf5ixQBleZAqeWUCvGudz8 4jFhK6++3BAYzx66YmYWooGgNaprqRYBUWa5jSIC/rv1pEx7/qVTmCuXjsCXUQDm FelXasJZDfDs1agmGgCfE45e64cGhvi6r0nYeCL9hKoipznnMJ1AyQ75UnKNhsY+ rM7seaqLfd25Uz3T7gezsfkEIbH4+KtPAtcjJKzugCPvGDMdV8yFw2/iy6J/Az9v IQhHzk9Z8nOJON6IMB494cnWHGYC1GcpAoFSviEREqnAFZeaJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNDk289b/7qEMv4kJ4GtoClCjo76MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80Zjk2 NTAzNS03NjBlLTQyMzItYTRjMy1iYzI5MGZhN2UzMjUvZWFhNzE5YTAtNDQwMi0z NjdhLTlmZTYtZjdhZTI1ZGMyM2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGY5NjUwMzUtNzYwZS00MjMyLWE0 YzMtYmMyOTBmYTdlMzI1LzRmOTY1MDM1LTc2MGUtNDIzMi1hNGMzLWJjMjkwZmE3 ZTMyNS5jcmwwHwYDVR0jBBgwFoAUT1OqpoLlZ9AoaZhhdvdu69uDwVMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80Zjk2NTAzNS03NjBlLTQyMzItYTRjMy1iYzI5 MGZhN2UzMjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAOMAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEto5lUYYAJ0kkvr45gBNMHAj2KGBv/f06sGgNj9L3lUMd2R0wXL 45bIqqEGrNm02Zf8nxqhEQHvph4VokCtiHI1dQyUA3LqPhTcThKpBqTgFiWy7vn6 9SljgGOPgI6Wlw6o0NhtWKbt3SryXqW3jUHRgtzWlIsjhrMZfKaaHAl1UsWTUCJ8 WRGpxE0OTfoaZAPkbTJd2hkwcMDd52xtBieXpQ5LlBQwiEnA5o6tbKMqGf8+geJM 6iDhKYtFKr8lr9X/tEhhGO2X9jQMhmHPEzJpMlhcbpTqZAluP4jUdpvQ8SGvLkKD QmWMo1gW/3p7DdlQE0uOWlXIIIHSXhRQv/c= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:59 2025 by rpki-client