$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/1120f28a-f819-38ee-94b2-70a3a857d7b0.roa File: 1120f28a-f819-38ee-94b2-70a3a857d7b0.roa (raw, json) Hash identifier: sp0ujTHZq3FeVw5MKZidcqBIxNqTRSKA5yGyLM29KN8= Subject key identifier: 5D:FB:59:BC:90:54:A2:F6:FD:52:46:E7:88:CF:46:DD:DB:7C:57:24 Certificate issuer: /CN=206290f3-53e1-4d17-8678-29dace17c006 Certificate serial: 010D0C9F43285848C6E63720CD1A30CABE6E4D00 Authority key identifier: B0:75:75:D3:B9:68:A2:49:EF:B9:77:E1:92:46:A5:46:97:EC:1B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/1120f28a-f819-38ee-94b2-70a3a857d7b0.roa Signing time: Wed 05 Feb 2025 02:00:39 +0000 ROA not before: Wed 05 Feb 2025 02:00:39 +0000 ROA not after: Tue 06 May 2025 01:00:39 +0000 asID: 33179 IP address blocks: 2602:fa21:10::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:e6:37:20:cd:1a:30:ca:be:6e:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206290f3-53e1-4d17-8678-29dace17c006 Validity Not Before: Feb 5 02:00:39 2025 GMT Not After : May 6 01:00:39 2025 GMT Subject: CN=af0b9c09-2c61-40a0-99ed-fee026debfb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:52:05:79:b8:5c:77:87:e2:1c:94:fb:f3:46: a3:da:e1:e0:98:b5:a8:5c:95:11:1b:06:9a:a9:b3: 1e:4a:1f:a3:7d:68:41:c9:70:77:bc:70:f1:e1:b9: 0f:b7:ce:0c:68:f4:33:02:d4:96:5c:c7:74:b4:fe: ce:db:e5:3c:3e:fb:e3:bf:94:d2:a3:01:b2:8f:52: d5:a5:0b:86:d6:13:f9:ad:ac:e3:a1:a3:1c:26:68: 10:55:05:01:5f:09:1b:47:5e:96:d6:a7:ae:61:84: 00:b1:80:3b:e4:3c:b3:97:d1:5b:e0:6d:8c:1c:72: b7:e8:a6:dc:41:61:8c:b8:29:33:67:38:e6:c9:fc: 9c:01:f3:1b:e5:09:6d:79:e4:e2:94:44:9c:83:4d: 3d:0b:90:a3:c4:36:ad:1b:61:28:f6:c4:a2:0d:a5: 76:4a:0d:17:e4:cd:1f:e8:ee:4f:2c:47:6a:f5:3b: 80:38:4a:1c:33:5a:33:14:05:7e:49:e6:00:c5:66: d3:fd:60:8d:ac:f6:f3:1f:77:a2:23:f3:d1:61:97: 6b:69:47:eb:d1:bf:29:77:79:f7:e8:39:2b:56:5c: 3d:8e:a2:a5:4a:6b:52:ea:9f:c3:ba:e8:33:2f:9e: 06:9b:db:bd:f7:7f:33:79:d1:6c:d6:16:dd:e0:7c: 50:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FB:59:BC:90:54:A2:F6:FD:52:46:E7:88:CF:46:DD:DB:7C:57:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/1120f28a-f819-38ee-94b2-70a3a857d7b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.crl X509v3 Authority Key Identifier: keyid:B0:75:75:D3:B9:68:A2:49:EF:B9:77:E1:92:46:A5:46:97:EC:1B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa21:10::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:89:c8:94:bc:c8:c2:f0:29:4a:e1:7e:fc:ab:8b:18:1b:bb: 33:d4:20:6f:b2:2a:91:cd:dc:98:6d:1f:9b:1f:a3:4d:46:34: 58:b5:d7:82:0c:8d:84:ae:21:1a:d0:cb:48:3f:6a:ac:e5:a1: 3d:d8:06:85:75:a4:f0:b8:cc:33:8b:00:1b:e4:84:82:ca:a3: e3:fd:15:b8:3a:7f:be:ff:cf:48:20:58:0c:d2:ea:f4:f6:e3: 50:47:03:c3:11:9e:e7:46:e8:92:a9:a9:b3:55:d8:0b:bc:aa: d4:fa:18:20:d3:79:8e:78:a5:28:54:97:db:3f:c1:52:77:19: 76:9b:12:61:bf:05:a5:fa:8c:72:fb:4d:02:c5:57:39:0c:0f: 4e:16:7c:10:05:3a:a1:f3:1c:a1:85:2d:db:1a:b5:59:e7:f1: af:60:05:46:01:8f:ab:85:49:8b:25:41:0d:b1:2b:a0:90:30: 29:38:40:06:07:32:b1:10:c3:20:a7:fc:0d:58:06:4c:ca:d4: ad:ba:ac:b6:66:94:42:fa:67:21:45:28:8c:b5:24:c4:70:bc: ff:24:d4:af:a3:79:68:95:42:35:6f:52:b3:6e:ab:65:0b:bc: e9:29:ae:96:34:27:5f:f8:56:3a:98:9c:cd:ee:14:30:81:f1: e1:cc:00:5b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjG5jcgzRowyr5uTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA2MjkwZjMtNTNlMS00ZDE3LTg2NzgtMjlkYWNlMTdj MDA2MB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk YWYwYjljMDktMmM2MS00MGEwLTk5ZWQtZmVlMDI2ZGViZmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1IFebhcd4fiHJT780aj2uHgmLWoXJURGwaa qbMeSh+jfWhByXB3vHDx4bkPt84MaPQzAtSWXMd0tP7O2+U8Pvvjv5TSowGyj1LV pQuG1hP5razjoaMcJmgQVQUBXwkbR16W1qeuYYQAsYA75Dyzl9Fb4G2MHHK36Kbc QWGMuCkzZzjmyfycAfMb5QlteeTilEScg009C5CjxDatG2Eo9sSiDaV2Sg0X5M0f 6O5PLEdq9TuAOEocM1ozFAV+SeYAxWbT/WCNrPbzH3eiI/PRYZdraUfr0b8pd3n3 6DkrVlw9jqKlSmtS6p/DuugzL54Gm9u9938zedFs1hbd4HxQuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF37WbyQVKL2/VJG54jPRt3bfFckMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yMDYy OTBmMy01M2UxLTRkMTctODY3OC0yOWRhY2UxN2MwMDYvMTEyMGYyOGEtZjgxOS0z OGVlLTk0YjItNzBhM2E4NTdkN2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjA2MjkwZjMtNTNlMS00ZDE3LTg2 NzgtMjlkYWNlMTdjMDA2LzIwNjI5MGYzLTUzZTEtNGQxNy04Njc4LTI5ZGFjZTE3 YzAwNi5jcmwwHwYDVR0jBBgwFoAUsHV107looknvuXfhkkalRpfsG/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yMDYyOTBmMy01M2UxLTRkMTctODY3OC0yOWRh Y2UxN2MwMDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgL6IQAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG2JyJS8yMLwKUrhfvyrixgbuzPUIG+yKpHN3JhtH5sfo01GNFi1 14IMjYSuIRrQy0g/aqzloT3YBoV1pPC4zDOLABvkhILKo+P9Fbg6f77/z0ggWAzS 6vT241BHA8MRnudG6JKpqbNV2Au8qtT6GCDTeY54pShUl9s/wVJ3GXabEmG/BaX6 jHL7TQLFVzkMD04WfBAFOqHzHKGFLdsatVnn8a9gBUYBj6uFSYslQQ2xK6CQMCk4 QAYHMrEQwyCn/A1YBkzK1K26rLZmlEL6ZyFFKIy1JMRwvP8k1K+jeWiVQjVvUrNu q2ULvOkprpY0J1/4VjqYnM3uFDCB8eHMAFs= -----END CERTIFICATE-----Generated at Wed Apr 9 12:46:08 2025 by rpki-client