$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/e6a05c39-8b32-3b27-98c2-410b4010156f.roa File: e6a05c39-8b32-3b27-98c2-410b4010156f.roa (raw, json) Hash identifier: xAczFNOjT7JC8VBX8Rw34opHG2hRAADSF5R+DmuPnpA= Subject key identifier: 77:CB:A0:4B:91:B1:CA:81:30:A2:17:48:4C:EF:D7:3D:72:53:A9:F1 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F432858487755E1A00C49359C665E3500 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/e6a05c39-8b32-3b27-98c2-410b4010156f.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 30103 IP address blocks: 2620:123:2021::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:e1:a0:0c:49:35:9c:66:5e:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=4e53e644-ebcc-4f78-aead-2b5299edf971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:50:28:22:3c:a2:e3:a6:19:21:00:b4:5f:61: 45:f6:62:02:8c:31:3f:f2:00:36:01:c7:aa:a7:8b: fa:0c:97:f7:e2:e4:8f:29:35:af:8e:b2:99:80:b6: ae:13:25:1c:72:06:96:f6:4d:c6:28:38:16:fd:0d: d3:c3:8d:aa:6e:34:12:08:e8:35:b7:c6:36:de:d6: 97:77:95:8b:81:b0:77:10:d0:1e:7c:78:63:9e:97: 00:cb:72:ab:0c:4f:06:a6:2d:8b:a2:a8:e0:22:d6: 07:57:d5:7d:bc:7a:38:5e:0f:a0:69:d9:19:bb:d4: 42:e5:84:8f:89:dc:98:5e:e2:8b:2e:04:c8:38:1c: 4a:f1:67:91:56:80:4c:02:b0:a0:58:ca:38:2f:67: 00:7c:35:df:54:9b:be:c9:5a:ee:09:37:05:25:ff: ba:51:82:a3:cb:94:85:c9:9a:78:9a:52:23:59:7c: f3:56:02:47:80:8f:cd:54:3a:c1:23:65:a1:d7:6b: f1:d9:14:1d:6c:2b:fc:2c:d4:49:1b:7f:3a:aa:f1: 48:d1:40:8f:17:87:15:d8:6c:5a:09:a7:3d:d0:dd: db:91:1d:cb:56:6a:19:67:b7:8a:7c:f8:90:42:0e: 5d:b2:37:ba:12:e2:12:e6:78:78:52:ce:81:6f:3a: dc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:CB:A0:4B:91:B1:CA:81:30:A2:17:48:4C:EF:D7:3D:72:53:A9:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/e6a05c39-8b32-3b27-98c2-410b4010156f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv6: 2620:123:2021::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:a9:a0:70:b0:95:1e:c4:e0:18:b6:03:77:6e:d0:dc:87:eb: d2:1c:0a:6f:ef:0b:46:9c:a3:a9:dd:03:21:aa:50:79:90:55: 64:9b:de:76:c0:5f:3a:4c:0d:c8:09:d8:f4:8a:ec:52:a6:73: 89:e0:3d:f2:e2:b6:92:5a:4d:20:5d:73:58:ec:6c:85:d3:ad: 0c:8b:ca:f4:80:9e:33:0f:f2:f6:22:3c:68:95:a6:95:28:f8: 32:a0:1b:01:ce:c2:96:02:d2:c4:59:93:00:86:4b:2f:2c:29: 14:85:f6:8d:b2:a1:f5:b0:04:8c:a7:d2:aa:05:7f:e4:87:8a: 24:ab:ab:9b:5a:9e:e9:14:c8:07:02:70:a5:64:c9:ca:a1:b2: 4d:fc:e5:f3:96:c0:9b:5b:26:58:30:69:8c:94:a2:c9:70:a7: 6c:cd:da:7b:b8:74:9d:40:93:9f:2b:fa:83:db:a2:b0:71:6f: 40:ee:11:eb:35:54:59:c7:84:f2:62:7a:a3:20:bb:5f:e4:c7: 6e:eb:28:63:13:98:11:5c:84:41:c1:44:e8:24:e4:b5:b9:d2: 4b:97:0a:88:06:d6:9b:1d:b0:bc:b4:95:68:5d:1e:95:02:f1: b1:49:ef:c7:7d:8d:51:04:6d:ba:70:ce:eb:99:1a:2b:f9:a3: c7:5b:a7:75 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEh3VeGgDEk1nGZeNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk NGU1M2U2NDQtZWJjYy00Zjc4LWFlYWQtMmI1Mjk5ZWRmOTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFAoIjyi46YZIQC0X2FF9mICjDE/8gA2Aceq p4v6DJf34uSPKTWvjrKZgLauEyUccgaW9k3GKDgW/Q3Tw42qbjQSCOg1t8Y23taX d5WLgbB3ENAefHhjnpcAy3KrDE8Gpi2LoqjgItYHV9V9vHo4Xg+gadkZu9RC5YSP idyYXuKLLgTIOBxK8WeRVoBMArCgWMo4L2cAfDXfVJu+yVruCTcFJf+6UYKjy5SF yZp4mlIjWXzzVgJHgI/NVDrBI2Wh12vx2RQdbCv8LNRJG386qvFI0UCPF4cV2Gxa Cac90N3bkR3LVmoZZ7eKfPiQQg5dsje6EuIS5nh4Us6Bbzrc+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHfLoEuRscqBMKIXSEzv1z1yU6nxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZTZhMDVjMzktOGIzMi0z YjI3LTk4YzItNDEwYjQwMTAxNTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABIyAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHGpoHCwlR7E4Bi2A3du0NyH69IcCm/vC0aco6ndAyGqUHmQVWSb 3nbAXzpMDcgJ2PSK7FKmc4ngPfLitpJaTSBdc1jsbIXTrQyLyvSAnjMP8vYiPGiV ppUo+DKgGwHOwpYC0sRZkwCGSy8sKRSF9o2yofWwBIyn0qoFf+SHiiSrq5tanukU yAcCcKVkycqhsk385fOWwJtbJlgwaYyUoslwp2zN2nu4dJ1Ak58r+oPborBxb0Du Ees1VFnHhPJieqMgu1/kx27rKGMTmBFchEHBROgk5LW50kuXCogG1psdsLy0lWhd HpUC8bFJ78d9jVEEbbpwzuuZGiv5o8dbp3U= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:33 2025 by rpki-client