$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8077a20a-f0c3-3f44-a701-0556a1962c92.roa File: 8077a20a-f0c3-3f44-a701-0556a1962c92.roa (raw, json) Hash identifier: 1sM6wTjBgrT6TunHPLfCka44x+uRM7lQnJW61+Rd5IE= Subject key identifier: E5:21:75:E9:15:C1:47:6F:53:AB:0B:D6:53:C2:E4:5C:9C:FA:B3:C7 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285848055E6569DA7093035C4C7B60 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8077a20a-f0c3-3f44-a701-0556a1962c92.roa Signing time: Wed 27 Nov 2024 18:16:08 +0000 ROA not before: Wed 27 Nov 2024 18:16:08 +0000 ROA not after: Tue 25 Feb 2025 18:16:08 +0000 asID: 174 IP address blocks: 2001:49f0:d00a::/48 maxlen: 48 2001:49f0:d00d::/48 maxlen: 48 2001:49f0:d023::/48 maxlen: 48 2001:49f0:d0ae::/48 maxlen: 48 2001:49f0:d0f6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:05:5e:65:69:da:70:93:03:5c:4c:7b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Nov 27 18:16:08 2024 GMT Not After : Feb 25 18:16:08 2025 GMT Subject: CN=51ebca03-577a-4d00-a3bf-47fbe6ddb213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:48:9e:ba:b6:20:21:f9:ad:4b:57:9d:10:46: 87:08:01:6f:75:52:fc:44:1d:3b:54:c7:cb:f9:69: ae:69:73:29:84:07:2a:66:68:00:94:19:b3:17:d1: 9c:5c:7c:89:ef:39:98:18:1f:15:64:ec:ba:20:c9: 98:f5:2d:bc:eb:9b:8f:ef:46:78:af:d4:3c:5f:07: 41:8b:f3:7d:1f:3e:ed:7d:10:62:0d:4c:a9:66:c8: 6d:98:d1:17:0b:7f:c2:0d:c6:f0:58:64:f0:e3:0c: 24:f7:e3:aa:70:55:77:35:0d:28:0b:e3:2d:43:be: 48:d7:3c:e5:38:63:55:c0:c9:7f:82:c5:c3:36:80: a6:19:a7:9a:3b:b2:8c:ae:21:56:38:ef:97:ce:b5: c4:59:b0:c2:f1:5a:af:f7:a6:c9:ea:97:23:3a:2b: 05:c8:3b:80:74:0f:c5:cc:93:97:26:3b:e8:80:7a: a7:2a:3e:25:64:7f:ad:7c:81:1d:a4:29:87:81:43: 43:b9:75:06:e5:50:5b:70:06:f4:bf:47:f8:f9:59: 73:d8:19:ac:48:ee:bd:8a:0a:a4:16:44:80:6a:f3: db:7d:dc:bb:61:a7:83:70:2d:bf:c6:e3:13:36:eb: ee:48:9a:fe:ec:91:59:1e:e8:db:7a:9a:c7:82:57: 0a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:21:75:E9:15:C1:47:6F:53:AB:0B:D6:53:C2:E4:5C:9C:FA:B3:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8077a20a-f0c3-3f44-a701-0556a1962c92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv6: 2001:49f0:d00a::/48 2001:49f0:d00d::/48 2001:49f0:d023::/48 2001:49f0:d0ae::/48 2001:49f0:d0f6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:9b:3b:b7:e2:83:55:dd:65:a8:66:0e:62:74:a2:22:40:14: b1:a4:98:1d:85:cc:c7:e1:bf:d2:40:da:7c:f3:cd:2b:54:a6: 61:1f:3b:22:02:dc:cd:7b:e2:b5:21:94:8d:e4:d7:19:4c:0c: 06:09:14:57:98:70:28:f0:7f:97:bd:24:b7:19:9e:f8:02:00: 91:56:c2:76:a7:4b:d2:0d:11:d4:e7:6c:f3:7e:c5:3b:9a:9d: 5d:41:35:b8:f8:40:ca:9b:d8:e6:54:4a:70:4a:c6:8f:92:7e: cb:03:92:3e:ce:9b:5a:00:97:c1:a4:7d:4f:94:fd:4b:d0:e5: 90:10:63:71:d5:a7:2e:6b:a4:a7:22:0c:d3:ef:af:bd:d8:ad: d5:4f:9f:63:c0:43:71:c8:ad:78:39:6d:20:67:89:40:5b:04: 8e:6a:de:b9:ce:b3:cf:04:2d:08:78:22:65:bc:e8:c9:5b:06: bd:81:3b:50:30:ff:be:0a:9b:f1:a7:5f:f0:13:fb:e6:0b:02: 77:53:29:c6:50:af:87:af:3a:55:a8:fa:7f:fd:cf:35:19:35: 77:59:c8:46:db:9b:cd:42:45:bd:7a:4e:05:ea:e3:95:dc:fb: 92:0e:2b:1a:82:86:d6:5b:ea:9b:08:5e:b7:8e:76:cf:e5:21: 84:fc:3a:24 -----BEGIN CERTIFICATE----- MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWEgFXmVp2nCTA1xMe2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI0MTEyNzE4MTYwOFoXDTI1MDIyNTE4MTYwOFowLzEtMCsGA1UEAxMk NTFlYmNhMDMtNTc3YS00ZDAwLWEzYmYtNDdmYmU2ZGRiMjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEieurYgIfmtS1edEEaHCAFvdVL8RB07VMfL +WmuaXMphAcqZmgAlBmzF9GcXHyJ7zmYGB8VZOy6IMmY9S2865uP70Z4r9Q8XwdB i/N9Hz7tfRBiDUypZshtmNEXC3/CDcbwWGTw4wwk9+OqcFV3NQ0oC+MtQ75I1zzl OGNVwMl/gsXDNoCmGaeaO7KMriFWOO+XzrXEWbDC8Vqv96bJ6pcjOisFyDuAdA/F zJOXJjvogHqnKj4lZH+tfIEdpCmHgUNDuXUG5VBbcAb0v0f4+Vlz2BmsSO69igqk FkSAavPbfdy7YaeDcC2/xuMTNuvuSJr+7JFZHujbeprHglcKhwIDAQABo4IDfDCC A3gwHQYDVR0OBBYEFOUhdekVwUdvU6sL1lPC5Fyc+rPHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvODA3N2EyMGEtZjBjMy0z ZjQ0LWE3MDEtMDU1NmExOTYyYzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAAjAtAwcAIAFJ8NAK AwcAIAFJ8NANAwcAIAFJ8NAjAwcAIAFJ8NCuAwcAIAFJ8ND2MFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFKb O7fig1XdZahmDmJ0oiJAFLGkmB2FzMfhv9JA2nzzzStUpmEfOyIC3M174rUhlI3k 1xlMDAYJFFeYcCjwf5e9JLcZnvgCAJFWwnanS9INEdTnbPN+xTuanV1BNbj4QMqb 2OZUSnBKxo+SfssDkj7Om1oAl8GkfU+U/UvQ5ZAQY3HVpy5rpKciDNPvr73YrdVP n2PAQ3HIrXg5bSBniUBbBI5q3rnOs88ELQh4ImW86MlbBr2BO1Aw/74Km/GnX/AT ++YLAndTKcZQr4evOlWo+n/9zzUZNXdZyEbbm81CRb16TgXq45Xc+5IOKxqChtZb 6psIXreOds/lIYT8OiQ= -----END CERTIFICATE-----Generated at Wed Feb 5 10:52:47 2025 by rpki-client