$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/bcb62d91-1aa3-38f0-aace-721070e9f8a6.roa File: bcb62d91-1aa3-38f0-aace-721070e9f8a6.roa (raw, json) Hash identifier: pRMj/bP0MDjbn1n//h5jJfBCWrLPG0qN82iQFJ/D8+I= Subject key identifier: 2F:BE:DA:63:84:CC:61:08:51:9F:24:7C:4A:1E:49:C1:B3:E4:F8:EC Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F432858488280831AEE8FBE892D25A380 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/bcb62d91-1aa3-38f0-aace-721070e9f8a6.roa Signing time: Sat 11 Jan 2025 14:00:52 +0000 ROA not before: Sat 11 Jan 2025 14:00:52 +0000 ROA not after: Fri 11 Apr 2025 13:00:52 +0000 asID: 64249 IP address blocks: 2001:4830:c900::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:82:80:83:1a:ee:8f:be:89:2d:25:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Jan 11 14:00:52 2025 GMT Not After : Apr 11 13:00:52 2025 GMT Subject: CN=19709e84-3048-4b12-bec9-99b281521a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8c:c4:d3:9c:6c:69:d2:ed:6e:39:c0:4d:24: e3:73:5c:49:90:6f:34:0f:5d:24:08:54:27:4a:1e: 0a:d0:58:94:08:a8:7a:dd:ab:02:73:f8:69:3d:71: 1c:a5:06:db:63:6e:c1:10:66:a3:36:78:48:a5:1c: 43:34:56:da:fb:38:d3:d5:fa:1d:2b:a3:d4:55:a0: 16:5e:c1:97:9e:9d:e0:73:c2:43:94:e0:3e:84:1e: 1a:5f:9e:b2:c9:2d:95:1c:1c:68:47:68:6a:c3:6f: ec:3c:7d:32:2e:16:59:7c:5c:83:c7:99:d8:34:00: 52:18:24:3a:80:e1:31:a8:db:b8:b6:6a:f3:64:4d: f3:84:e9:31:fe:92:ed:57:59:2d:01:cd:58:85:1c: 5f:00:18:e6:0b:ce:33:02:2e:02:74:6f:7d:51:7c: 62:98:53:c0:fc:bd:d5:94:87:27:77:a7:8c:ad:7a: 33:00:6d:09:e5:39:83:7b:70:66:6a:f0:9b:ec:26: 6b:8b:2c:b2:1e:1b:9c:bb:0f:98:b7:68:df:9c:85: 49:e4:c6:7a:62:2f:74:cf:9b:a0:3a:50:cc:eb:c4: b5:cf:a7:4b:a8:81:fe:87:1a:f8:aa:24:6d:73:ea: 50:f9:42:a2:92:4e:44:0e:e7:0d:7f:1d:dc:ed:b1: 27:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:BE:DA:63:84:CC:61:08:51:9F:24:7C:4A:1E:49:C1:B3:E4:F8:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/bcb62d91-1aa3-38f0-aace-721070e9f8a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv6: 2001:4830:c900::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:85:13:0c:0a:b7:a7:b3:f9:61:c6:cd:01:95:fd:40:ee:1b: 51:53:e7:f1:e0:40:8a:6f:29:aa:97:a0:95:34:e8:cb:06:22: 1f:57:5a:da:2a:2b:3a:f0:8b:82:74:97:1c:14:4f:ce:66:70: 65:b8:1b:d5:6f:d6:d3:57:84:49:e6:ff:a8:70:de:e0:b3:9c: 30:b0:14:62:38:db:2c:64:34:d4:5a:49:4b:c0:bb:fa:fd:b5: e3:c6:75:f4:3a:67:80:88:98:b6:e5:cd:7c:15:04:86:a6:94: e2:d7:d2:ec:5f:c4:95:3b:85:50:4c:4c:25:12:71:7a:00:62: 34:ac:39:f8:bd:1f:74:96:7c:5e:e1:e3:ca:03:ad:4d:36:57: f6:bb:84:0d:e8:f0:59:ef:37:1a:8b:05:24:7d:ba:e8:39:9f: 48:c0:cd:2f:9b:50:e0:f9:f1:21:81:b6:48:ea:6a:36:8e:26: 1a:97:82:ca:bf:ca:7c:99:9a:08:77:db:f5:0f:63:e8:53:97: 9b:9a:f5:59:ec:41:6a:7e:2e:63:d7:5f:b9:03:5a:d5:27:e9: d4:71:42:e7:54:3c:d0:99:98:f3:2a:6e:09:2e:fa:8b:aa:dc: f1:bc:92:9e:6b:da:af:39:6b:8b:ec:ab:3a:1e:40:3c:aa:a1: 27:4b:a1:22 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEiCgIMa7o++iS0lo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk MTk3MDllODQtMzA0OC00YjEyLWJlYzktOTliMjgxNTIxYTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ozE05xsadLtbjnATSTjc1xJkG80D10kCFQn Sh4K0FiUCKh63asCc/hpPXEcpQbbY27BEGajNnhIpRxDNFba+zjT1fodK6PUVaAW XsGXnp3gc8JDlOA+hB4aX56yyS2VHBxoR2hqw2/sPH0yLhZZfFyDx5nYNABSGCQ6 gOExqNu4tmrzZE3zhOkx/pLtV1ktAc1YhRxfABjmC84zAi4CdG99UXximFPA/L3V lIcnd6eMrXozAG0J5TmDe3BmavCb7CZriyyyHhucuw+Yt2jfnIVJ5MZ6Yi90z5ug OlDM68S1z6dLqIH+hxr4qiRtc+pQ+UKikk5EDucNfx3c7bEnnQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFC++2mOEzGEIUZ8kfEoeScGz5PjsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvYmNiNjJkOTEtMWFhMy0z OGYwLWFhY2UtNzIxMDcwZTlmOGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAFIMMkw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAV4UTDAq3p7P5YcbNAZX9QO4bUVPn8eBAim8pqpeglTToywYiH1da 2iorOvCLgnSXHBRPzmZwZbgb1W/W01eESeb/qHDe4LOcMLAUYjjbLGQ01FpJS8C7 +v2148Z19DpngIiYtuXNfBUEhqaU4tfS7F/ElTuFUExMJRJxegBiNKw5+L0fdJZ8 XuHjygOtTTZX9ruEDejwWe83GosFJH266DmfSMDNL5tQ4PnxIYG2SOpqNo4mGpeC yr/KfJmaCHfb9Q9j6FOXm5r1WexBan4uY9dfuQNa1Sfp1HFC51Q80JmY8ypuCS76 i6rc8bySnmvarzlri+yrOh5APKqhJ0uhIg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:48 2025 by rpki-client