$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/4834fa76-34fe-3b4b-b654-210b0d429d12.roa File: 4834fa76-34fe-3b4b-b654-210b0d429d12.roa (raw, json) Hash identifier: nIX7JZS1NaPniGAtMaMxGJnzNtyh0cDPMPxWxliGYjs= Subject key identifier: 84:19:AB:B1:F7:BB:6B:96:E4:7E:8D:A0:37:41:51:77:26:D9:00:34 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F43285848960B53C365DFD490A8FC6400 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/4834fa76-34fe-3b4b-b654-210b0d429d12.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 2606:dc00:ff01::/48 maxlen: 48 2606:dc00:ff02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:53:c3:65:df:d4:90:a8:fc:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=d71f0282-dd95-4926-9fc8-be51b90d6f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a7:ec:32:24:6d:e5:c6:6f:00:52:f3:17:9b: aa:56:96:ad:c5:5c:55:14:5a:63:10:b9:10:24:8b: 09:8b:b4:d6:77:bb:ef:76:5c:e5:11:dd:12:ae:f1: 10:ad:8b:20:27:c2:9e:3d:fd:ab:e8:1c:85:c7:a6: 44:a4:b7:88:7d:87:c2:43:36:0b:62:55:76:3f:32: 35:2f:db:d5:66:d2:cf:9b:19:2b:03:23:ba:ab:f1: f4:08:68:0e:32:c1:df:8c:6a:6c:e5:c2:51:9b:cc: a1:bb:a0:ef:53:81:09:44:16:01:9c:50:e4:59:fa: 19:cb:57:8a:b7:74:19:a8:ca:b3:6f:79:e9:33:79: 79:e6:e6:41:bc:13:6e:7a:0c:54:07:88:de:00:4d: e4:77:b1:2f:eb:84:9f:d2:52:92:51:ea:8d:a0:91: 64:4a:ac:9f:53:6c:ef:bb:43:ee:d7:39:c8:7b:bc: 32:14:d7:5a:58:ff:3a:0c:72:50:7b:d5:e5:81:2c: e1:62:f8:0e:b0:3d:5f:7a:62:82:72:ae:d7:9e:6a: a1:6c:1f:ea:92:ac:f7:c2:22:2a:76:13:a7:37:75: 20:34:9c:3b:7b:56:63:67:c7:10:c3:70:e7:1c:93: 2d:ce:62:42:da:b7:d2:12:57:66:49:4d:ab:e2:a7: 9d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:19:AB:B1:F7:BB:6B:96:E4:7E:8D:A0:37:41:51:77:26:D9:00:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/4834fa76-34fe-3b4b-b654-210b0d429d12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv6: 2606:dc00:ff01::-2606:dc00:ff02:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:d0:2d:11:5a:aa:22:44:62:69:af:b6:2b:52:25:6c:11:8f: 32:5a:3a:51:bc:55:cf:7d:79:63:b7:43:8c:11:e7:f0:f7:0a: 45:bc:b5:f0:dd:31:81:40:d1:34:a6:da:ed:7e:31:20:b1:9d: 54:77:0b:85:dc:93:f1:62:40:ad:80:1d:98:90:c9:23:b1:02: 0a:7c:71:d7:e8:c7:2d:9d:f6:d8:27:37:0a:b9:a1:54:42:bb: ed:2d:ca:07:ae:04:8f:d4:75:59:c8:0b:09:1b:a6:98:c2:03: d3:cd:ec:30:9d:b4:b7:81:e3:c1:ae:69:d1:94:cc:1e:79:92: 05:f0:57:a1:2d:59:6e:10:bd:b5:b1:b1:a4:cf:7d:54:b7:30: f5:60:bc:1f:1c:6b:c2:83:1b:1e:fa:dc:58:56:3c:fd:f0:a0: 2e:27:3c:02:02:8d:45:b5:59:81:81:78:71:3a:9b:08:f1:66: 7a:ec:68:27:9f:d2:fc:e9:65:58:62:9c:60:33:36:11:50:3b: d4:22:19:ec:99:49:ce:5c:9c:f9:21:47:ca:e2:e5:58:20:60: c8:e4:ec:5b:48:23:c0:49:56:1b:e2:22:4d:fb:7e:72:ef:b9: 9b:0a:66:95:b6:3f:ce:29:2a:7d:06:cc:19:09:5c:9f:23:fa: 02:95:c3:4b -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEiWC1PDZd/UkKj8ZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk ZDcxZjAyODItZGQ5NS00OTI2LTlmYzgtYmU1MWI5MGQ2Zjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqafsMiRt5cZvAFLzF5uqVpatxVxVFFpjELkQ JIsJi7TWd7vvdlzlEd0SrvEQrYsgJ8KePf2r6ByFx6ZEpLeIfYfCQzYLYlV2PzI1 L9vVZtLPmxkrAyO6q/H0CGgOMsHfjGps5cJRm8yhu6DvU4EJRBYBnFDkWfoZy1eK t3QZqMqzb3npM3l55uZBvBNuegxUB4jeAE3kd7Ev64Sf0lKSUeqNoJFkSqyfU2zv u0Pu1znIe7wyFNdaWP86DHJQe9XlgSzhYvgOsD1femKCcq7XnmqhbB/qkqz3wiIq dhOnN3UgNJw7e1ZjZ8cQw3DnHJMtzmJC2rfSEldmSU2r4qedtQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFIQZq7H3u2uW5H6NoDdBUXcm2QA0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvNDgzNGZhNzYtMzRmZS0z YjRiLWI2NTQtMjEwYjBkNDI5ZDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmBtwA /wEDBwAmBtwA/wIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAk9AtEVqqIkRiaa+2K1IlbBGPMlo6UbxVz315 Y7dDjBHn8PcKRby18N0xgUDRNKba7X4xILGdVHcLhdyT8WJArYAdmJDJI7ECCnxx 1+jHLZ322Cc3CrmhVEK77S3KB64Ej9R1WcgLCRummMID083sMJ20t4Hjwa5p0ZTM HnmSBfBXoS1ZbhC9tbGxpM99VLcw9WC8HxxrwoMbHvrcWFY8/fCgLic8AgKNRbVZ gYF4cTqbCPFmeuxoJ5/S/OllWGKcYDM2EVA71CIZ7JlJzlyc+SFHyuLlWCBgyOTs W0gjwElWG+IiTft+cu+5mwpmlbY/zikqfQbMGQlcnyP6ApXDSw== -----END CERTIFICATE-----Generated at Sat Apr 5 09:42:25 2025 by rpki-client