$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/c4f4ccfc-6cf6-390e-a6d0-9fa3a30cb545.roa File: c4f4ccfc-6cf6-390e-a6d0-9fa3a30cb545.roa (raw, json) Hash identifier: 4XNXr3gFibu07rBRrPlaVU6x49cQ3A9n1S1q5QpEPvo= Subject key identifier: C9:91:CE:06:05:A3:A4:2E:0B:26:F0:55:40:CB:EC:4A:F4:C5:5B:B5 Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F4328584869605A22F8AA3AAC4CB48940 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/c4f4ccfc-6cf6-390e-a6d0-9fa3a30cb545.roa Signing time: Thu 02 Jan 2025 14:00:52 +0000 ROA not before: Thu 02 Jan 2025 14:00:52 +0000 ROA not after: Wed 02 Apr 2025 13:00:52 +0000 asID: 33083 IP address blocks: 2001:4830:c400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:69:60:5a:22:f8:aa:3a:ac:4c:b4:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Jan 2 14:00:52 2025 GMT Not After : Apr 2 13:00:52 2025 GMT Subject: CN=77dc0d39-787f-43fa-b69e-6a0880e6e62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:41:e2:30:cd:2a:86:92:e1:6d:79:af:fa:de: be:b7:8d:ce:e4:d8:cb:ff:8b:b2:77:6b:3c:e6:26: 01:a0:7f:2f:f4:21:ea:88:81:89:22:d2:de:e1:81: 2a:79:06:2e:ed:96:eb:76:f3:25:9b:33:95:e2:58: c7:00:17:b5:cf:77:ea:22:0e:e0:5e:af:38:3d:66: ae:35:8d:71:f2:c0:1f:30:5a:9f:05:3e:30:4f:e2: 24:61:3f:83:b7:05:ab:67:e0:b9:1d:6a:d8:22:7b: ce:11:1b:b8:b0:55:c3:62:5c:04:4a:23:c3:a1:2e: 91:ba:2e:ac:da:7c:db:27:ce:b5:90:75:cc:e4:f2: c0:7b:19:bc:22:16:17:ba:1d:75:9c:6f:62:f3:55: 17:49:24:f4:03:d9:1c:82:c6:d0:12:b7:c6:7f:3a: d6:81:bb:68:54:f2:c7:92:95:52:e2:47:90:16:12: 1c:ea:2c:93:66:49:d6:7f:7d:bd:b1:35:88:f2:39: de:6b:87:04:93:cc:47:a5:1e:12:03:45:7d:64:5b: af:c6:19:87:be:81:d2:75:dd:cd:ec:f5:66:25:aa: d7:95:da:fd:a0:1d:61:56:ff:25:c2:cd:8e:80:6d: 2e:d4:8a:d0:79:69:ad:26:9a:c6:db:bf:05:7c:4e: 2c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:91:CE:06:05:A3:A4:2E:0B:26:F0:55:40:CB:EC:4A:F4:C5:5B:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/c4f4ccfc-6cf6-390e-a6d0-9fa3a30cb545.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv6: 2001:4830:c400::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e1:be:69:38:9e:28:8a:ae:25:79:21:1e:e7:95:0a:6e:49: 7f:04:e9:6a:94:68:62:a8:0d:c0:d2:56:06:df:fe:64:34:b6: f4:b7:fb:df:67:33:2f:1b:d4:cc:67:3b:26:69:b2:bb:36:40: 53:0e:74:e2:c4:0f:43:80:9c:17:55:f6:90:bd:21:11:dd:56: 24:28:bf:81:c9:b9:23:21:0c:fe:be:d1:60:66:a3:ef:4a:5e: c1:99:ac:27:c3:a1:86:51:8f:fc:52:0f:1f:46:9d:10:97:c7: b9:0e:24:65:5d:b7:5d:21:e3:b8:27:31:1d:66:e3:30:22:9f: b2:9b:2f:3b:44:9f:a8:08:ab:18:68:a6:e8:3f:c6:c0:ce:f0: 92:ac:43:5d:8d:74:2a:83:35:78:f0:5f:16:52:ae:52:6f:3d: 11:c2:30:38:ef:8a:69:bf:1d:cf:1e:c2:7d:cd:82:aa:f9:22: f2:ee:d9:28:09:f8:97:12:63:96:e4:e7:e0:9c:64:c6:73:b5: 0c:0d:8a:bc:f5:5e:4e:4f:2a:c2:b9:f8:65:71:59:e4:85:b4: 97:6c:cc:d9:9c:a3:a5:8b:bf:e1:61:0d:3b:6b:cf:38:75:59: b9:f9:54:de:51:88:2c:50:a9:f6:d1:68:74:43:f0:d6:65:f9: e3:8f:76:eb -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEhpYFoi+Ko6rEy0iUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk NzdkYzBkMzktNzg3Zi00M2ZhLWI2OWUtNmEwODgwZTZlNjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEHiMM0qhpLhbXmv+t6+t43O5NjL/4uyd2s8 5iYBoH8v9CHqiIGJItLe4YEqeQYu7ZbrdvMlmzOV4ljHABe1z3fqIg7gXq84PWau NY1x8sAfMFqfBT4wT+IkYT+DtwWrZ+C5HWrYInvOERu4sFXDYlwESiPDoS6Rui6s 2nzbJ861kHXM5PLAexm8IhYXuh11nG9i81UXSST0A9kcgsbQErfGfzrWgbtoVPLH kpVS4keQFhIc6iyTZknWf329sTWI8jnea4cEk8xHpR4SA0V9ZFuvxhmHvoHSdd3N 7PVmJarXldr9oB1hVv8lws2OgG0u1IrQeWmtJprG278FfE4sfwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMmRzgYFo6QuCybwVUDL7Er0xVu1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvYzRmNGNjZmMtNmNmNi0z OTBlLWE2ZDAtOWZhM2EzMGNiNTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAFIMMQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcOG+aTieKIquJXkhHueVCm5JfwTpapRoYqgNwNJWBt/+ZDS29Lf7 32czLxvUzGc7JmmyuzZAUw504sQPQ4CcF1X2kL0hEd1WJCi/gcm5IyEM/r7RYGaj 70pewZmsJ8OhhlGP/FIPH0adEJfHuQ4kZV23XSHjuCcxHWbjMCKfspsvO0SfqAir GGim6D/GwM7wkqxDXY10KoM1ePBfFlKuUm89EcIwOO+Kab8dzx7Cfc2Cqvki8u7Z KAn4lxJjluTn4JxkxnO1DA2KvPVeTk8qwrn4ZXFZ5IW0l2zM2ZyjpYu/4WENO2vP OHVZuflU3lGILFCp9tFodEPw1mX544926w== -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:43 2025 by rpki-client