$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/155f4b9b-4ca3-3b31-bf72-238f854d820f.roa File: 155f4b9b-4ca3-3b31-bf72-238f854d820f.roa (raw, json) Hash identifier: izTF4c0ixsQkdjCq+5tBnhNUhMgvxfcAL9O5Q+FIjbw= Subject key identifier: 33:54:21:C2:68:EB:73:B5:17:77:CD:69:2B:C7:80:C9:28:46:1C:F7 Certificate issuer: /CN=df28494f-1d3f-4a45-8a74-bde41c2502a2 Certificate serial: 010D0C9F4328584851A57A9543AB3A8B35083F40 Authority key identifier: A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/155f4b9b-4ca3-3b31-bf72-238f854d820f.roa Signing time: Wed 25 Dec 2024 02:00:38 +0000 ROA not before: Wed 25 Dec 2024 02:00:38 +0000 ROA not after: Tue 25 Mar 2025 01:00:38 +0000 asID: 64236 IP address blocks: 2604:abc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:51:a5:7a:95:43:ab:3a:8b:35:08:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df28494f-1d3f-4a45-8a74-bde41c2502a2 Validity Not Before: Dec 25 02:00:38 2024 GMT Not After : Mar 25 01:00:38 2025 GMT Subject: CN=0d1b95dc-a0e8-4ca1-9b99-094debfae0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:63:f3:1a:13:08:82:03:ab:cf:b2:48:6c:59: 79:5c:1b:c4:00:45:f3:16:a6:5a:87:49:27:31:75: e8:ba:c4:e6:b8:ca:f9:4d:65:b9:51:be:d3:0b:0f: 7f:76:78:d3:ff:0e:fc:6b:97:03:a5:be:cc:2b:e7: 9e:36:c1:b0:fa:5a:79:aa:6f:b3:d4:2f:18:e9:83: 5a:28:c7:ee:b0:06:28:b5:69:4e:e4:c7:cf:a3:fe: 5f:41:de:c8:01:4b:31:ff:25:68:17:70:3e:f0:0b: e2:a6:0c:f2:ac:49:67:ee:38:3f:7b:07:93:80:a3: a4:da:2e:b9:7f:a7:0c:d4:0d:c6:91:72:99:ab:14: 19:64:5c:a6:2b:4e:f2:8b:e7:82:6c:cc:b0:1e:d3: 72:37:73:4d:24:6b:4a:cc:7d:30:62:11:e1:ce:15: 6b:d2:ba:8d:09:a1:2a:1d:fa:e4:1a:09:7c:2e:5a: 09:cc:15:98:6f:65:70:03:d4:db:eb:dd:60:a6:b9: da:7c:fc:1b:ac:66:4b:d1:8d:3f:53:36:04:82:6c: c4:85:8a:c7:52:90:f7:6d:c9:b3:fe:09:53:2d:95: 69:61:5c:51:61:9a:f5:9f:64:6d:54:ce:d1:45:aa: 26:b3:c9:22:78:f2:fa:9b:b3:c5:69:2a:9c:5e:a7: 07:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:54:21:C2:68:EB:73:B5:17:77:CD:69:2B:C7:80:C9:28:46:1C:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/155f4b9b-4ca3-3b31-bf72-238f854d820f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.crl X509v3 Authority Key Identifier: keyid:A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer sbgp-ipAddrBlock: critical IPv6: 2604:abc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:16:78:cb:64:27:21:aa:91:50:c6:02:34:d7:0a:79:aa:14: b1:2e:75:27:a8:2e:e1:c3:a7:f3:2d:b1:4f:11:2d:90:df:00: 4d:ba:32:24:bb:5e:b4:da:ed:80:97:44:f4:d5:e3:d8:75:96: 0e:ce:78:55:62:32:69:cb:fe:41:94:38:7e:84:eb:7b:9c:ec: 65:6a:93:f7:0e:69:d0:4b:bd:f8:8f:ec:90:de:b2:05:14:f5: 31:49:9f:9a:e4:6b:9c:52:0f:56:3b:9b:82:48:f2:bd:06:c5: 84:eb:a1:37:3b:9e:de:2d:27:6c:ba:21:2e:80:7d:5c:28:52: ca:39:2f:a3:ba:48:d2:ee:8a:26:92:62:fa:2b:6a:82:0d:ff: 40:b1:82:39:d4:b2:62:11:6a:58:d6:c2:07:e0:01:f5:39:a0: d1:31:19:b4:b7:db:54:c6:44:0a:c2:37:42:78:3e:2e:52:20: 5b:57:b3:24:38:bf:30:47:74:0f:00:3c:96:6a:b7:8b:39:d6: 36:bc:be:a0:3d:0b:4b:38:e9:32:c4:36:8d:62:19:ba:26:2c: be:34:d0:0f:6f:ec:5b:fc:c1:9c:f4:f0:6b:b3:12:39:f8:8f: a8:18:b2:e1:f2:97:c1:78:5a:c3:dd:bd:44:4e:ac:9f:c9:bf: 5f:15:30:5e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhRpXqVQ6s6izUIP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyODQ5NGYtMWQzZi00YTQ1LThhNzQtYmRlNDFjMjUw MmEyMB4XDTI0MTIyNTAyMDAzOFoXDTI1MDMyNTAxMDAzOFowLzEtMCsGA1UEAxMk MGQxYjk1ZGMtYTBlOC00Y2ExLTliOTktMDk0ZGViZmFlMGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGPzGhMIggOrz7JIbFl5XBvEAEXzFqZah0kn MXXousTmuMr5TWW5Ub7TCw9/dnjT/w78a5cDpb7MK+eeNsGw+lp5qm+z1C8Y6YNa KMfusAYotWlO5MfPo/5fQd7IAUsx/yVoF3A+8AvipgzyrEln7jg/eweTgKOk2i65 f6cM1A3GkXKZqxQZZFymK07yi+eCbMywHtNyN3NNJGtKzH0wYhHhzhVr0rqNCaEq HfrkGgl8LloJzBWYb2VwA9Tb691gprnafPwbrGZL0Y0/UzYEgmzEhYrHUpD3bcmz /glTLZVpYVxRYZr1n2RtVM7RRaoms8kiePL6m7PFaSqcXqcHkQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDNUIcJo63O1F3fNaSvHgMkoRhz3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kZjI4 NDk0Zi0xZDNmLTRhNDUtOGE3NC1iZGU0MWMyNTAyYTIvMTU1ZjRiOWItNGNhMy0z YjMxLWJmNzItMjM4Zjg1NGQ4MjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGYyODQ5NGYtMWQzZi00YTQ1LThh NzQtYmRlNDFjMjUwMmEyL2RmMjg0OTRmLTFkM2YtNGE0NS04YTc0LWJkZTQxYzI1 MDJhMi5jcmwwHwYDVR0jBBgwFoAUqKBljbCvNzrfdrtQvaDMJLEVS5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kZjI4NDk0Zi0xZDNmLTRhNDUtOGE3NC1iZGU0 MWMyNTAyYTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSrwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAwFnjLZCchqpFQxgI01wp5qhSxLnUnqC7hw6fzLbFPES2Q3wBNujIk u1602u2Al0T01ePYdZYOznhVYjJpy/5BlDh+hOt7nOxlapP3DmnQS734j+yQ3rIF FPUxSZ+a5GucUg9WO5uCSPK9BsWE66E3O57eLSdsuiEugH1cKFLKOS+jukjS7oom kmL6K2qCDf9AsYI51LJiEWpY1sIH4AH1OaDRMRm0t9tUxkQKwjdCeD4uUiBbV7Mk OL8wR3QPADyWareLOdY2vL6gPQtLOOkyxDaNYhm6Jiy+NNAPb+xb/MGc9PBrsxI5 +I+oGLLh8pfBeFrD3b1ETqyfyb9fFTBe -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:00 2025 by rpki-client