$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/b6bcaff4-2865-3cfa-ad9a-b65a7569127e.roa File: b6bcaff4-2865-3cfa-ad9a-b65a7569127e.roa (raw, json) Hash identifier: utGVkqhwjoKszwlw2MKbtVpeXX2/Wh6wIjQYTSsfG/w= Subject key identifier: DA:BE:47:AC:4F:93:B2:EC:DE:60:C6:F1:17:47:95:69:95:33:BD:0B Certificate issuer: /CN=f0682b49-784e-4da6-8c82-9a4562d0b08c Certificate serial: 010D0C9F43285848748B1DDD40E9E6D51C73CE80 Authority key identifier: C3:76:B5:48:78:AD:92:A1:DA:19:D5:D4:9D:0D:28:22:AA:E7:47:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/b6bcaff4-2865-3cfa-ad9a-b65a7569127e.roa Signing time: Mon 06 Jan 2025 14:00:52 +0000 ROA not before: Mon 06 Jan 2025 14:00:52 +0000 ROA not after: Sun 06 Apr 2025 13:00:52 +0000 asID: 19382 IP address blocks: 2620:13c:e000::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/f0682b49-784e-4da6-8c82-9a4562d0b08c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/f0682b49-784e-4da6-8c82-9a4562d0b08c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:74:8b:1d:dd:40:e9:e6:d5:1c:73:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0682b49-784e-4da6-8c82-9a4562d0b08c Validity Not Before: Jan 6 14:00:52 2025 GMT Not After : Apr 6 13:00:52 2025 GMT Subject: CN=744c8804-5b91-43ff-aad2-de04ef7e4a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b2:1f:69:c6:7b:fe:c6:92:7c:14:2d:20:3b: 35:c5:68:2a:a6:e4:44:5f:86:38:8d:52:cb:05:17: 81:1a:70:16:0c:e5:92:c9:8a:a8:b4:7c:a1:62:26: ae:db:ee:95:2e:c6:97:e6:8c:ad:a5:6e:b0:f3:8f: 6b:55:2b:7e:95:3d:26:e6:35:48:e9:44:b2:5d:41: 0d:34:b6:03:75:9a:05:40:bd:af:6a:3b:cd:eb:9f: 7f:80:44:0e:e2:63:fc:3b:95:1d:84:ab:53:24:59: ca:a4:80:df:64:9f:ef:4d:8a:7b:f2:fc:e1:b0:7c: b5:9a:e4:36:31:9e:ac:19:03:bb:99:c7:26:ae:41: 6c:53:b1:8d:00:ad:19:33:63:28:04:ac:ca:4e:b2: b2:77:58:d8:61:33:b7:6b:7b:e6:42:04:05:b5:bb: 95:54:27:d1:13:a0:74:76:fd:fa:88:b5:48:da:0e: 45:a7:ab:8d:d3:dc:5d:0f:4f:05:79:59:d8:b7:59: f2:66:b5:ed:d7:13:17:01:84:aa:10:d3:ae:00:0a: b1:5b:85:f4:82:d7:04:7a:24:8a:b4:bd:19:5d:47: 21:2a:14:99:97:60:88:c9:e1:ca:1a:48:4e:88:33: 5b:3c:5c:3a:a2:20:f5:dd:ce:5f:7f:18:4e:24:fe: 7d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:BE:47:AC:4F:93:B2:EC:DE:60:C6:F1:17:47:95:69:95:33:BD:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/b6bcaff4-2865-3cfa-ad9a-b65a7569127e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/f0682b49-784e-4da6-8c82-9a4562d0b08c.crl X509v3 Authority Key Identifier: keyid:C3:76:B5:48:78:AD:92:A1:DA:19:D5:D4:9D:0D:28:22:AA:E7:47:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c.cer sbgp-ipAddrBlock: critical IPv6: 2620:13c:e000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:2e:38:01:4c:e2:af:2a:1a:1e:a6:35:38:b0:64:8d:98:07: c3:5d:07:b6:5f:94:56:2e:cf:97:f2:36:07:e2:44:b5:73:27: 1b:85:72:75:76:6d:c0:41:81:cd:a3:07:42:a7:71:14:5a:68: 80:d6:e9:a6:06:0b:ed:9b:20:f7:a3:bb:26:55:72:0a:c4:e3: 63:d9:c9:07:95:8b:c0:47:cf:dd:42:2f:7e:12:ab:ed:24:bc: 68:2e:41:05:be:ca:86:b5:94:56:50:06:9d:08:21:b9:a8:8c: 80:d6:23:4b:34:f9:b4:3a:52:cc:b4:a7:08:fb:1a:2e:7a:ee: f3:86:85:65:65:fb:9b:7c:af:d8:bc:ce:19:ef:a6:10:a1:62: ea:68:3d:ae:49:1f:09:48:83:e7:00:00:da:99:04:7b:26:09: 9d:e8:78:c5:42:f3:98:d3:e6:06:54:b6:7e:6f:fd:46:77:73: cc:34:75:9d:be:f4:98:2e:a6:72:e7:55:e7:f7:41:fe:0b:3f: 4e:2e:e1:45:e2:68:e8:07:9d:f7:fa:10:ff:8c:75:c0:2e:0c: 36:2c:a8:fe:e3:57:31:f1:54:fd:24:84:45:e7:19:0c:9b:80: 11:05:d4:5f:20:05:9a:77:76:1e:c2:7b:c1:48:00:5c:da:63: 26:c6:50:10 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEh0ix3dQOnm1RxzzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA2ODJiNDktNzg0ZS00ZGE2LThjODItOWE0NTYyZDBi MDhjMB4XDTI1MDEwNjE0MDA1MloXDTI1MDQwNjEzMDA1MlowLzEtMCsGA1UEAxMk NzQ0Yzg4MDQtNWI5MS00M2ZmLWFhZDItZGUwNGVmN2U0YTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbIfacZ7/saSfBQtIDs1xWgqpuREX4Y4jVLL BReBGnAWDOWSyYqotHyhYiau2+6VLsaX5oytpW6w849rVSt+lT0m5jVI6USyXUEN NLYDdZoFQL2vajvN659/gEQO4mP8O5UdhKtTJFnKpIDfZJ/vTYp78vzhsHy1muQ2 MZ6sGQO7mccmrkFsU7GNAK0ZM2MoBKzKTrKyd1jYYTO3a3vmQgQFtbuVVCfRE6B0 dv36iLVI2g5Fp6uN09xdD08FeVnYt1nyZrXt1xMXAYSqENOuAAqxW4X0gtcEeiSK tL0ZXUchKhSZl2CIyeHKGkhOiDNbPFw6oiD13c5ffxhOJP599QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNq+R6xPk7Ls3mDG8RdHlWmVM70LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMDY4 MmI0OS03ODRlLTRkYTYtOGM4Mi05YTQ1NjJkMGIwOGMvYjZiY2FmZjQtMjg2NS0z Y2ZhLWFkOWEtYjY1YTc1NjkxMjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjA2ODJiNDktNzg0ZS00ZGE2LThj ODItOWE0NTYyZDBiMDhjL2YwNjgyYjQ5LTc4NGUtNGRhNi04YzgyLTlhNDU2MmQw YjA4Yy5jcmwwHwYDVR0jBBgwFoAUw3a1SHitkqHaGdXUnQ0oIqrnR4YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMDY4MmI0OS03ODRlLTRkYTYtOGM4Mi05YTQ1 NjJkMGIwOGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABPOAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEguOAFM4q8qGh6mNTiwZI2YB8NdB7ZflFYuz5fyNgfiRLVzJxuF cnV2bcBBgc2jB0KncRRaaIDW6aYGC+2bIPejuyZVcgrE42PZyQeVi8BHz91CL34S q+0kvGguQQW+yoa1lFZQBp0IIbmojIDWI0s0+bQ6Usy0pwj7Gi567vOGhWVl+5t8 r9i8zhnvphChYupoPa5JHwlIg+cAANqZBHsmCZ3oeMVC85jT5gZUtn5v/UZ3c8w0 dZ2+9JgupnLnVef3Qf4LP04u4UXiaOgHnff6EP+MdcAuDDYsqP7jVzHxVP0khEXn GQybgBEF1F8gBZp3dh7Ce8FIAFzaYybGUBA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:48 2025 by rpki-client