$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1da50353-f473-3027-9512-8f06238fa823.roa File: 1da50353-f473-3027-9512-8f06238fa823.roa (raw, json) Hash identifier: 0EK3ij8me0rFYzwYv4uVCR7ldB6irKxOo1i/Jg1c6zU= Subject key identifier: A6:4C:E1:2C:89:B9:E2:8B:29:23:37:0F:23:D8:FF:30:D9:FF:C3:5C Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285848530ADF2F90FDCE16E5148C00 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1da50353-f473-3027-9512-8f06238fa823.roa Signing time: Wed 25 Dec 2024 14:00:52 +0000 ROA not before: Wed 25 Dec 2024 14:00:52 +0000 ROA not after: Tue 25 Mar 2025 13:00:52 +0000 asID: 174 IP address blocks: 2001:49f0:d049::/48 maxlen: 48 2001:49f0:d04a::/48 maxlen: 48 2001:49f0:d077::/48 maxlen: 48 2001:49f0:d078::/48 maxlen: 48 2001:49f0:d07a::/48 maxlen: 48 2001:49f0:d07b::/48 maxlen: 48 2001:49f0:d07d::/48 maxlen: 48 2001:49f0:d07e::/48 maxlen: 48 2001:49f0:d07f::/48 maxlen: 48 2001:49f0:d081::/48 maxlen: 48 2001:49f0:d082::/48 maxlen: 48 2001:49f0:d083::/48 maxlen: 48 2001:49f0:d084::/48 maxlen: 48 2001:49f0:d087::/48 maxlen: 48 2001:49f0:d089::/48 maxlen: 48 2001:49f0:d08a::/48 maxlen: 48 2001:49f0:d08f::/48 maxlen: 48 2001:49f0:d097::/49 maxlen: 49 2001:49f0:d0a5::/48 maxlen: 48 2001:49f0:d0b2::/48 maxlen: 48 2001:49f0:d0b3::/48 maxlen: 48 2001:49f0:d0b4::/48 maxlen: 48 2001:49f0:d0b5::/48 maxlen: 48 2001:49f0:d0b6::/48 maxlen: 48 2001:49f0:d0d5::/48 maxlen: 48 2001:49f0:d0d6::/48 maxlen: 48 2001:49f0:d0d7::/48 maxlen: 48 2001:49f0:d0dd::/48 maxlen: 48 2001:49f0:d0e1::/48 maxlen: 48 2001:49f0:d0e2::/48 maxlen: 48 2001:49f0:d0e3::/48 maxlen: 48 2001:49f0:d105::/48 maxlen: 48 2001:49f0:d106::/48 maxlen: 48 2001:49f0:d107::/48 maxlen: 48 2001:49f0:d108::/48 maxlen: 48 2001:49f0:d109::/48 maxlen: 48 2001:49f0:d10a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:53:0a:df:2f:90:fd:ce:16:e5:14:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Dec 25 14:00:52 2024 GMT Not After : Mar 25 13:00:52 2025 GMT Subject: CN=db445be9-b921-432c-a6cf-bd29d6bd659b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:55:2c:f9:97:33:ce:71:2b:b5:39:1f:7d:80: 78:2e:4c:67:68:cd:b9:1f:89:e0:70:d6:78:4e:cb: 8b:10:9a:5b:c6:ff:2c:cf:73:e5:d4:e9:11:af:9a: 4d:c9:56:cb:5f:e2:52:91:3d:e7:2d:5a:0d:89:b0: 36:f8:62:8a:12:76:1a:dc:5d:17:b5:18:ad:42:28: 39:42:8b:7d:f1:5d:e3:7f:27:35:98:96:af:f8:fa: 42:9f:7c:f6:76:a5:18:05:71:25:31:ef:21:1e:2a: f8:71:bd:33:bd:88:19:e9:e9:db:99:da:3c:7e:3e: 02:83:65:6e:b6:41:e8:87:55:12:80:a9:ae:dd:40: f4:21:1e:54:e5:5b:1f:1b:e9:c5:77:62:9b:ff:3f: cb:95:27:f4:fb:7f:1f:d7:eb:c9:79:08:3e:f5:94: 1c:6f:c8:79:f2:59:a6:75:6a:d6:33:b1:1e:08:a5: 4f:fd:fd:7f:18:25:c7:bd:4d:cf:bd:30:5e:71:d3: 45:0d:bc:74:17:a2:a9:6f:67:89:33:8a:78:a9:51: 50:04:1a:ae:68:3a:1c:98:d4:b3:a2:ae:86:33:0e: 38:0c:ed:fc:c1:39:9d:97:d3:1f:c1:e7:fb:4a:34: dd:d6:08:13:d3:68:7d:4d:71:d2:b9:4a:ca:d6:48: bd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4C:E1:2C:89:B9:E2:8B:29:23:37:0F:23:D8:FF:30:D9:FF:C3:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1da50353-f473-3027-9512-8f06238fa823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv6: 2001:49f0:d049::-2001:49f0:d04a:ffff:ffff:ffff:ffff:ffff 2001:49f0:d077::-2001:49f0:d078:ffff:ffff:ffff:ffff:ffff 2001:49f0:d07a::/47 2001:49f0:d07d::-2001:49f0:d07f:ffff:ffff:ffff:ffff:ffff 2001:49f0:d081::-2001:49f0:d084:ffff:ffff:ffff:ffff:ffff 2001:49f0:d087::/48 2001:49f0:d089::-2001:49f0:d08a:ffff:ffff:ffff:ffff:ffff 2001:49f0:d08f::/48 2001:49f0:d097::/49 2001:49f0:d0a5::/48 2001:49f0:d0b2::-2001:49f0:d0b6:ffff:ffff:ffff:ffff:ffff 2001:49f0:d0d5::-2001:49f0:d0d7:ffff:ffff:ffff:ffff:ffff 2001:49f0:d0dd::/48 2001:49f0:d0e1::-2001:49f0:d0e3:ffff:ffff:ffff:ffff:ffff 2001:49f0:d105::-2001:49f0:d10a:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:71:8f:2d:af:a6:65:35:b2:57:6b:78:c2:60:af:05:d3:d2: f3:a3:27:78:29:68:cd:34:16:e7:86:f9:d8:73:20:95:0e:69: 2b:8c:01:3a:5f:8c:83:c2:0c:bb:58:22:2f:ea:b9:4a:f3:e4: a3:c8:06:cc:3d:f3:2b:79:e7:21:8a:ae:00:4a:b0:4b:e3:18: 1d:40:ad:88:22:2b:fb:9a:d7:65:54:8a:b7:c5:c6:a9:33:f7: 28:00:e0:43:9f:0f:68:61:1b:58:83:ec:08:86:04:ca:de:3d: 75:7c:6b:92:4a:40:ea:c3:fd:97:fe:d0:b1:7f:ea:81:c2:5f: ac:82:d3:3e:ee:96:77:b2:4d:0f:8f:ff:44:13:47:7c:b0:3c: 2d:d4:5d:b5:b1:5a:4c:0b:38:8e:97:d9:66:47:e3:c2:11:44: 06:72:d2:9a:83:a9:52:8b:08:8a:c4:bb:1a:f2:5e:ef:da:07: 2b:45:8e:2e:60:a8:89:bb:34:c0:56:1e:35:d4:65:09:e7:b3: 44:ce:60:3a:09:3d:a7:f5:09:40:23:9e:0f:83:b1:11:32:f0: 40:00:e1:bf:f8:74:22:8f:63:00:17:92:9e:f8:53:4b:5a:02: 6a:b0:47:35:70:d0:23:3e:d4:53:12:58:21:c5:22:86:ea:6e: e4:34:96:43 -----BEGIN CERTIFICATE----- MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWEhTCt8vkP3OFuUUjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZGI0NDViZTktYjkyMS00MzJjLWE2Y2YtYmQyOWQ2YmQ2NTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61Us+ZczznErtTkffYB4LkxnaM25H4ngcNZ4 TsuLEJpbxv8sz3Pl1OkRr5pNyVbLX+JSkT3nLVoNibA2+GKKEnYa3F0XtRitQig5 Qot98V3jfyc1mJav+PpCn3z2dqUYBXElMe8hHir4cb0zvYgZ6enbmdo8fj4Cg2Vu tkHoh1USgKmu3UD0IR5U5VsfG+nFd2Kb/z/LlSf0+38f1+vJeQg+9ZQcb8h58lmm dWrWM7EeCKVP/f1/GCXHvU3PvTBecdNFDbx0F6Kpb2eJM4p4qVFQBBquaDocmNSz oq6GMw44DO38wTmdl9Mfwef7SjTd1ggT02h9TXHSuUrK1ki9pQIDAQABo4IEQDCC BDwwHQYDVR0OBBYEFKZM4SyJueKLKSM3DyPY/zDZ/8NcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMWRhNTAzNTMtZjQ3My0z MDI3LTk1MTItOGYwNjIzOGZhODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMIIBCAYIKwYBBQUHAQcBAf8EgfgwgfUwgfIEAgACMIHrMBID BwAgAUnw0EkDBwAgAUnw0EowEgMHACABSfDQdwMHACABSfDQeAMHASABSfDQejAS AwcAIAFJ8NB9AwcHIAFJ8NAAMBIDBwAgAUnw0IEDBwAgAUnw0IQDBwAgAUnw0Icw EgMHACABSfDQiQMHACABSfDQigMHACABSfDQjwMIByABSfDQlwADBwAgAUnw0KUw EgMHASABSfDQsgMHACABSfDQtjASAwcAIAFJ8NDVAwcDIAFJ8NDQAwcAIAFJ8NDd MBIDBwAgAUnw0OEDBwIgAUnw0OAwEgMHACABSfDRBQMHACABSfDRCjBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQDCcY8tr6ZlNbJXa3jCYK8F09Lzoyd4KWjNNBbnhvnYcyCVDmkrjAE6X4yDwgy7 WCIv6rlK8+SjyAbMPfMreechiq4ASrBL4xgdQK2IIiv7mtdlVIq3xcapM/coAOBD nw9oYRtYg+wIhgTK3j11fGuSSkDqw/2X/tCxf+qBwl+sgtM+7pZ3sk0Pj/9EE0d8 sDwt1F21sVpMCziOl9lmR+PCEUQGctKag6lSiwiKxLsa8l7v2gcrRY4uYKiJuzTA Vh411GUJ57NEzmA6CT2n9QlAI54Pg7ERMvBAAOG/+HQij2MAF5Ke+FNLWgJqsEc1 cNAjPtRTElghxSKG6m7kNJZD -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:46 2025 by rpki-client