$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/ce9337a4-4e0a-3f9b-a703-32378c8b086f.roa File: ce9337a4-4e0a-3f9b-a703-32378c8b086f.roa (raw, json) Hash identifier: //Toue1d6XordTfkqWv8qAvfMTQJWen5D7+6HH0Y0mA= Subject key identifier: DE:E6:D3:F6:7C:1B:B6:58:92:E9:C4:A2:10:05:DA:AA:6F:5A:97:7C Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F4328584871C071CAF54A256537771800 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/ce9337a4-4e0a-3f9b-a703-32378c8b086f.roa Signing time: Sun 05 Jan 2025 14:00:52 +0000 ROA not before: Sun 05 Jan 2025 14:00:52 +0000 ROA not after: Sat 05 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 2620:116:800d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:71:c0:71:ca:f5:4a:25:65:37:77:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Jan 5 14:00:52 2025 GMT Not After : Apr 5 13:00:52 2025 GMT Subject: CN=a90f13b1-5d88-41c2-9d2b-0c774e9529d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:98:45:c1:e6:9a:5b:9e:e8:44:42:99:de:b7: c4:1f:2c:02:74:75:32:a5:d6:59:d0:af:d2:09:31: 9a:2f:14:c8:29:f7:7a:3f:fb:79:25:43:48:ef:4c: 0b:75:bf:27:57:92:46:61:57:c8:49:fd:5d:72:ad: ff:de:b1:5d:94:88:92:1e:e2:99:31:7d:f9:f5:3a: d1:e0:69:8d:4c:ad:cd:19:da:70:76:89:cb:d4:b7: 9b:ff:83:d1:e5:43:04:8f:a9:68:6b:71:c4:3e:8c: 4d:a2:4a:da:d2:c2:6c:17:9b:a9:82:7f:5a:0e:93: bc:fb:86:72:fd:11:dc:33:1a:61:6a:7b:a9:0d:06: 1f:fb:d8:b2:f7:8b:68:60:8d:fc:8a:aa:76:df:73: c0:d8:0d:a2:cf:60:06:81:9c:39:39:bf:b1:94:2f: 8d:63:ac:94:7a:48:81:fa:d5:23:99:e1:87:f4:c9: 43:87:4c:b6:71:eb:2c:b9:f3:87:70:5d:0e:fb:27: ba:e6:fb:36:5e:c2:80:b2:36:73:61:b1:a9:d0:3a: b3:7b:81:f6:b1:d6:2a:1f:50:da:14:44:de:4f:26: 53:9d:8f:86:17:be:e3:4d:a3:e0:92:b6:c0:e9:e3: 27:4c:8e:02:42:5f:c8:31:02:f0:bb:55:d5:9f:25: 55:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E6:D3:F6:7C:1B:B6:58:92:E9:C4:A2:10:05:DA:AA:6F:5A:97:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/ce9337a4-4e0a-3f9b-a703-32378c8b086f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv6: 2620:116:800d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:dc:bd:38:09:55:c9:75:06:f3:79:18:b0:ff:6f:5e:23:67: 45:1e:6e:b0:e4:c0:1e:a7:02:03:81:3e:f3:d6:9b:15:43:50: 28:e1:99:96:44:fa:62:d9:d0:45:23:91:a9:08:10:78:af:37: e2:d5:26:33:01:f0:1b:eb:ca:bd:a3:52:89:a1:86:72:f2:f6: 90:3f:01:75:7b:ec:80:07:94:8b:44:d4:45:52:08:5a:de:c0: 51:ae:47:20:c0:e5:c8:75:6b:f0:88:7b:db:94:75:6b:a1:d0: e9:78:7b:96:55:6d:88:80:50:05:24:49:52:bf:6c:69:55:13: d5:6e:0a:c5:1b:2a:07:c7:29:70:34:67:36:43:04:e6:d0:24: 6e:4c:28:d2:00:d8:08:f9:2b:ba:4a:ca:65:c6:53:4e:6a:5d: a6:51:b3:86:42:bf:79:45:c3:99:86:56:ff:53:f2:ee:e6:d8: 8b:08:19:4c:93:5b:28:5c:75:48:40:9e:85:b5:21:ae:4b:4a: fe:0a:8b:c3:d8:d4:b5:fb:44:9c:c9:7e:97:8a:ff:5d:9b:78: 3c:80:a5:8e:87:dc:05:be:45:ae:c2:18:6a:2f:7b:55:a8:9a: 77:69:d6:70:54:68:bb:d3:53:dd:69:b4:67:cb:c0:d3:03:f6: 1a:d6:88:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhxwHHK9UolZTd3GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MDEwNTE0MDA1MloXDTI1MDQwNTEzMDA1MlowLzEtMCsGA1UEAxMk YTkwZjEzYjEtNWQ4OC00MWMyLTlkMmItMGM3NzRlOTUyOWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65hFweaaW57oREKZ3rfEHywCdHUypdZZ0K/S CTGaLxTIKfd6P/t5JUNI70wLdb8nV5JGYVfISf1dcq3/3rFdlIiSHuKZMX359TrR 4GmNTK3NGdpwdonL1Leb/4PR5UMEj6loa3HEPoxNokra0sJsF5upgn9aDpO8+4Zy /RHcMxphanupDQYf+9iy94toYI38iqp233PA2A2iz2AGgZw5Ob+xlC+NY6yUekiB +tUjmeGH9MlDh0y2cessufOHcF0O+ye65vs2XsKAsjZzYbGp0Dqze4H2sdYqH1Da FETeTyZTnY+GF77jTaPgkrbA6eMnTI4CQl/IMQLwu1XVnyVVzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN7m0/Z8G7ZYkunEohAF2qpvWpd8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvY2U5MzM3YTQtNGUwYS0z ZjliLWE3MDMtMzIzNzhjOGIwODZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFoAN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK/cvTgJVcl1BvN5GLD/b14jZ0UebrDkwB6nAgOBPvPWmxVDUCjh mZZE+mLZ0EUjkakIEHivN+LVJjMB8Bvryr2jUomhhnLy9pA/AXV77IAHlItE1EVS CFrewFGuRyDA5ch1a/CIe9uUdWuh0Ol4e5ZVbYiAUAUkSVK/bGlVE9VuCsUbKgfH KXA0ZzZDBObQJG5MKNIA2Aj5K7pKymXGU05qXaZRs4ZCv3lFw5mGVv9T8u7m2IsI GUyTWyhcdUhAnoW1Ia5LSv4Ki8PY1LX7RJzJfpeK/12beDyApY6H3AW+Ra7CGGov e1Womndp1nBUaLvTU91ptGfLwNMD9hrWiKs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:09 2025 by rpki-client