$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/174e44ab-cac0-3427-8ca2-4837cf5a07fe.roa File: 174e44ab-cac0-3427-8ca2-4837cf5a07fe.roa (raw, json) Hash identifier: BOmgWf1yaFnLuwnypKq3yy894oSwkl20KvQdTGUNJZ4= Subject key identifier: 21:67:D1:A1:AE:A4:2A:97:0E:B4:91:AF:02:6F:57:BC:C4:68:65:C9 Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F4328584871C071DDE24837062E380250 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/174e44ab-cac0-3427-8ca2-4837cf5a07fe.roa Signing time: Sun 05 Jan 2025 14:00:52 +0000 ROA not before: Sun 05 Jan 2025 14:00:52 +0000 ROA not after: Sat 05 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 2620:116:800e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:71:c0:71:dd:e2:48:37:06:2e:38:02:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Jan 5 14:00:52 2025 GMT Not After : Apr 5 13:00:52 2025 GMT Subject: CN=be07a107-1faa-4839-9677-f247ed6a0300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b7:f5:40:36:d2:26:7b:ea:ac:10:60:42:71: f4:43:7e:39:68:1f:8a:25:39:37:22:7e:de:74:8f: d3:cb:57:ad:48:4a:fd:71:e7:31:19:56:9e:58:aa: 46:09:3a:11:0e:08:59:f5:d8:b3:95:bd:91:6b:7f: c4:27:70:fb:29:92:18:86:b0:b2:11:8e:ed:05:ab: 86:41:50:95:5d:4f:b4:fe:6e:f9:2b:2c:e6:4a:63: 0b:68:1f:dd:0d:bd:21:4d:77:b9:34:ea:73:87:de: 74:df:08:6e:6e:70:0e:70:fb:d1:5d:3b:c4:04:1d: 5a:fb:55:85:9f:68:48:7f:e9:3a:a6:50:f1:76:fc: ee:ae:19:e8:2d:9e:2b:04:a6:17:40:f3:b9:d3:f2: 51:08:28:e5:db:ab:1e:b0:1f:dd:f5:79:70:e4:25: 64:4d:ec:c5:a3:a5:de:85:c4:75:cb:46:1b:5c:b2: ec:dc:9b:d5:d3:46:5b:bd:26:5c:4c:da:8c:8a:75: 07:ee:69:d4:df:f9:1b:fc:89:fd:4e:69:ed:55:11: 5a:29:45:ce:85:d9:3a:c0:5d:56:80:9c:7a:d1:8b: b1:40:db:9d:93:71:48:53:05:e1:00:b7:58:7e:e6: 81:51:95:64:a8:66:7b:e4:61:cb:48:09:1a:96:13: c3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:67:D1:A1:AE:A4:2A:97:0E:B4:91:AF:02:6F:57:BC:C4:68:65:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/174e44ab-cac0-3427-8ca2-4837cf5a07fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv6: 2620:116:800e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:45:5a:36:ad:c4:f4:fc:bb:35:c3:ae:86:6c:87:b7:a3:48: 8c:73:fb:86:4b:97:1a:13:01:10:f1:27:1f:cb:ba:31:ca:fb: 45:1b:12:f8:2e:37:90:03:ff:d9:08:85:5c:2a:bd:14:df:10: df:fd:1b:c2:d7:73:d0:0e:a8:3d:d1:91:e3:7f:1e:5c:08:57: 34:53:f3:86:20:ef:14:b1:5f:5f:42:07:8b:8e:72:09:6a:cd: be:2a:b8:c9:ac:55:f2:20:d5:33:a0:46:ce:25:c5:03:06:fe: 42:a8:00:52:c9:fe:76:61:a0:7e:49:9a:f0:2b:b1:91:0a:25: 08:32:69:94:29:04:2c:2a:66:00:41:93:bc:fe:01:74:22:32: 67:3c:38:1f:ce:a1:a1:1d:da:65:39:d1:65:97:2d:4e:ff:15: a3:61:d2:98:8e:95:20:9b:50:33:48:bb:3c:cf:67:04:9c:ea: 42:37:9a:ed:38:30:13:60:f2:fb:63:8e:f2:dd:9a:1d:78:fd: 69:39:98:d5:a9:45:b4:18:6d:4f:a9:da:1e:41:2d:15:af:f7: 62:8e:fd:03:e7:14:a4:b6:f6:93:04:6d:c6:fc:d5:e3:29:92: 2c:0b:c5:06:c2:13:bc:8b:cb:74:e6:a9:5b:31:97:53:fe:34: 16:04:6c:10 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhxwHHd4kg3Bi44AlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MDEwNTE0MDA1MloXDTI1MDQwNTEzMDA1MlowLzEtMCsGA1UEAxMk YmUwN2ExMDctMWZhYS00ODM5LTk2NzctZjI0N2VkNmEwMzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7f1QDbSJnvqrBBgQnH0Q345aB+KJTk3In7e dI/Ty1etSEr9cecxGVaeWKpGCToRDghZ9dizlb2Ra3/EJ3D7KZIYhrCyEY7tBauG QVCVXU+0/m75KyzmSmMLaB/dDb0hTXe5NOpzh9503whubnAOcPvRXTvEBB1a+1WF n2hIf+k6plDxdvzurhnoLZ4rBKYXQPO50/JRCCjl26sesB/d9Xlw5CVkTezFo6Xe hcR1y0YbXLLs3JvV00ZbvSZcTNqMinUH7mnU3/kb/In9TmntVRFaKUXOhdk6wF1W gJx60YuxQNudk3FIUwXhALdYfuaBUZVkqGZ75GHLSAkalhPDfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCFn0aGupCqXDrSRrwJvV7zEaGXJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvMTc0ZTQ0YWItY2FjMC0z NDI3LThjYTItNDgzN2NmNWEwN2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFoAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHlFWjatxPT8uzXDroZsh7ejSIxz+4ZLlxoTARDxJx/LujHK+0Ub EvguN5AD/9kIhVwqvRTfEN/9G8LXc9AOqD3RkeN/HlwIVzRT84Yg7xSxX19CB4uO cglqzb4quMmsVfIg1TOgRs4lxQMG/kKoAFLJ/nZhoH5JmvArsZEKJQgyaZQpBCwq ZgBBk7z+AXQiMmc8OB/OoaEd2mU50WWXLU7/FaNh0piOlSCbUDNIuzzPZwSc6kI3 mu04MBNg8vtjjvLdmh14/Wk5mNWpRbQYbU+p2h5BLRWv92KO/QPnFKS29pMEbcb8 1eMpkiwLxQbCE7yLy3TmqVsxl1P+NBYEbBA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:06 2025 by rpki-client