$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/35a6c984-7199-33e0-aebc-4baa9ef6f0da.roa File: 35a6c984-7199-33e0-aebc-4baa9ef6f0da.roa (raw, json) Hash identifier: 5O9uRcFTvLti/8shg9zCW9FWt+vzVko4uXnUF9zdGZ0= Subject key identifier: BF:DC:50:20:AE:64:60:0E:6D:12:66:36:C2:15:EB:DB:04:88:18:7B Certificate issuer: /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Certificate serial: 010D0C9F432858489E6B65F1804C478E171C5100 Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/35a6c984-7199-33e0-aebc-4baa9ef6f0da.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 396356 IP address blocks: 2607:6b80:6c::/48 maxlen: 48 2607:6b80:6d::/48 maxlen: 48 2607:6b80:6e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:65:f1:80:4c:47:8e:17:1c:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=d2a1289e-edce-438d-8db8-d5c483065ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:29:75:ae:ab:df:52:1d:20:db:0f:e6:6f:f4: ce:88:f0:38:43:5b:1d:73:40:5f:9b:da:c7:f8:08: 19:5f:12:d0:92:59:8f:82:f7:a8:9f:68:47:82:15: 6a:a2:d6:c7:c4:c4:80:78:8d:62:aa:b9:79:0d:28: 61:b6:cc:25:b4:9c:17:f9:06:1e:fc:db:ae:63:c7: ca:7d:4f:de:77:77:1a:b1:a2:43:03:06:ac:09:9d: f0:da:66:fb:cd:21:a3:3c:69:8b:49:8e:5b:f4:f0: d6:5f:20:1b:e5:e0:8d:92:f7:86:fa:6a:23:69:f0: be:d1:44:ae:04:00:81:3e:66:49:a4:b1:4c:f9:b6: 5d:93:ff:f3:05:cd:0e:21:d4:90:c2:37:92:3f:39: 48:c6:1e:1e:09:25:f6:3e:16:dc:70:4d:c4:8e:21: 58:90:05:b7:b7:d3:a5:70:62:0d:b7:4f:20:02:0c: f4:eb:1c:a9:15:ea:fc:4b:61:c0:b4:5f:5f:2b:0c: fb:69:85:da:4c:79:35:e5:51:a8:a7:92:d8:10:65: 3d:d6:85:b3:31:2d:56:ac:28:00:68:09:9c:85:10: 96:a0:4f:61:4a:1d:28:fb:b8:4f:cc:08:76:60:55: c5:f1:25:12:cc:e3:e1:62:32:f6:87:9e:80:8e:66: ad:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DC:50:20:AE:64:60:0E:6D:12:66:36:C2:15:EB:DB:04:88:18:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/35a6c984-7199-33e0-aebc-4baa9ef6f0da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl X509v3 Authority Key Identifier: keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer sbgp-ipAddrBlock: critical IPv6: 2607:6b80:6c::-2607:6b80:6e:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:f0:e7:97:d6:92:2e:d8:2f:fa:ed:70:f1:87:93:53:92:3f: 3e:f1:be:86:3a:0e:67:b7:45:ae:c1:45:b6:6c:b7:fd:a4:1e: a8:34:b6:f8:dd:43:6a:db:a5:3e:95:0c:6d:ae:6c:7e:ae:87: 5e:eb:c3:f6:3e:71:71:c0:2e:0f:c3:28:97:0c:2a:79:6a:ed: 93:e9:f6:38:9a:44:14:fa:bd:94:b3:93:1d:e1:c0:8f:8e:1b: 74:16:bd:b6:d0:a6:80:24:25:af:c7:94:62:5c:6f:f9:e8:b6: b1:2f:2f:1b:b9:1e:76:b1:4b:be:5a:eb:e1:2b:0e:f5:5e:28: 64:e1:4e:06:5d:a7:44:22:b7:b7:33:ec:9c:50:54:ca:66:17: 44:ad:80:49:6e:a7:3a:6e:51:20:5b:d1:9c:ca:0b:d9:a0:38: fc:12:ca:f6:96:2e:7a:e4:fd:ec:c2:fd:7a:f8:03:73:3d:e0: db:04:0b:10:dd:03:e2:ad:36:e6:dc:37:d6:14:4d:51:53:5b: 9d:27:ca:5f:77:c5:59:ca:96:3f:e3:a5:60:47:7c:9c:ce:8e: fa:96:0b:13:57:68:b3:41:e6:8a:53:56:3d:c9:75:6c:eb:43: 5f:5e:8f:bf:68:a3:6b:7f:fb:5d:95:78:86:99:3a:a3:ab:39: df:f1:cb:f1 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEiea2XxgExHjhccUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3 ZTFhMB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZDJhMTI4OWUtZWRjZS00MzhkLThkYjgtZDVjNDgzMDY1ZmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjil1rqvfUh0g2w/mb/TOiPA4Q1sdc0Bfm9rH +AgZXxLQklmPgveon2hHghVqotbHxMSAeI1iqrl5DShhtswltJwX+QYe/NuuY8fK fU/ed3casaJDAwasCZ3w2mb7zSGjPGmLSY5b9PDWXyAb5eCNkveG+mojafC+0USu BACBPmZJpLFM+bZdk//zBc0OIdSQwjeSPzlIxh4eCSX2PhbccE3EjiFYkAW3t9Ol cGINt08gAgz06xypFer8S2HAtF9fKwz7aYXaTHk15VGop5LYEGU91oWzMS1WrCgA aAmchRCWoE9hSh0o+7hPzAh2YFXF8SUSzOPhYjL2h56AjmatewIDAQABo4IDYzCC A18wHQYDVR0OBBYEFL/cUCCuZGAObRJmNsIV69sEiBh7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvMzVhNmM5ODQtNzE5OS0z M2UwLWFlYmMtNGJhYTllZjZmMGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi MDYwMDdlMWEuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwImB2uA AGwDBwAmB2uAAG4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAd/Dnl9aSLtgv+u1w8YeTU5I/PvG+hjoOZ7dF rsFFtmy3/aQeqDS2+N1DatulPpUMba5sfq6HXuvD9j5xccAuD8MolwwqeWrtk+n2 OJpEFPq9lLOTHeHAj44bdBa9ttCmgCQlr8eUYlxv+ei2sS8vG7kedrFLvlrr4SsO 9V4oZOFOBl2nRCK3tzPsnFBUymYXRK2ASW6nOm5RIFvRnMoL2aA4/BLK9pYueuT9 7ML9evgDcz3g2wQLEN0D4q025tw31hRNUVNbnSfKX3fFWcqWP+OlYEd8nM6O+pYL E1dos0HmilNWPcl1bOtDX16Pv2ija3/7XZV4hpk6o6s53/HL8Q== -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:26 2025 by rpki-client