$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/340a3e8a-e2fd-392e-99e2-8b41efc2edb5.roa File: 340a3e8a-e2fd-392e-99e2-8b41efc2edb5.roa (raw, json) Hash identifier: TgNO4SXmskyovMlq6padFhivYPi8cbh10mrXOMTNxjw= Subject key identifier: 7F:14:93:9E:8A:46:FD:7C:0C:EB:75:46:43:97:EB:FD:2F:E3:93:B6 Certificate issuer: /CN=2fea4f6a-bb4e-46be-b327-330bf8f7e209 Certificate serial: 010D0C9F432858486D904E3E95BE504201C9DA28 Authority key identifier: 46:B8:BD:76:5E:8D:0E:C9:9A:1D:62:0D:0B:0E:2D:E8:BE:4E:D7:11 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/340a3e8a-e2fd-392e-99e2-8b41efc2edb5.roa Signing time: Sat 04 Jan 2025 02:00:39 +0000 ROA not before: Sat 04 Jan 2025 02:00:39 +0000 ROA not after: Fri 04 Apr 2025 01:00:39 +0000 asID: 14618 IP address blocks: 2602:810:6009::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6d:90:4e:3e:95:be:50:42:01:c9:da:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fea4f6a-bb4e-46be-b327-330bf8f7e209 Validity Not Before: Jan 4 02:00:39 2025 GMT Not After : Apr 4 01:00:39 2025 GMT Subject: CN=1fb4a8a0-d7fc-4a01-9651-f4b9d33ea12c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3b:16:fd:ab:3c:8d:8c:b7:55:f0:9b:f7:ca: c5:1e:b0:a3:df:1c:4e:7b:b8:51:a3:1d:5e:89:38: 65:5f:b8:b8:41:c5:ce:fe:17:74:1a:f4:e6:ef:fe: fa:74:a0:18:bf:76:2d:f3:45:0f:8a:91:5e:59:18: 60:78:66:d1:f0:6e:2c:b1:a3:e5:64:eb:2a:cb:72: 36:6d:08:e3:f5:4d:df:fc:eb:bc:29:ee:84:1b:51: 56:24:ce:fe:c5:17:84:d4:01:00:3f:3f:83:cf:9d: af:05:89:06:1f:34:c9:3a:ad:5a:06:85:b2:3b:c9: 16:7d:3e:9f:1f:46:94:27:63:73:88:6f:58:d7:70: cc:7b:7f:cc:b4:19:f7:51:a5:ec:02:53:a9:89:90: e5:b1:18:90:dc:e0:5c:09:26:72:eb:97:d4:17:bd: 25:4a:07:45:65:7e:2b:e6:93:7e:88:8e:52:ea:90: 27:99:e8:b6:34:0a:cd:5f:89:db:74:13:2f:e0:12: 9d:58:2a:32:1d:21:78:26:a0:17:a8:b7:a4:e0:2a: 21:bc:9b:98:20:d0:41:22:29:c1:6d:15:75:99:98: 0f:e9:78:5a:2d:1d:5e:3d:77:c1:74:db:0a:45:a5: 03:83:fb:c9:7c:7b:ca:ed:8f:94:50:3c:aa:ed:a5: 2e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:14:93:9E:8A:46:FD:7C:0C:EB:75:46:43:97:EB:FD:2F:E3:93:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/340a3e8a-e2fd-392e-99e2-8b41efc2edb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.crl X509v3 Authority Key Identifier: keyid:46:B8:BD:76:5E:8D:0E:C9:9A:1D:62:0D:0B:0E:2D:E8:BE:4E:D7:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer sbgp-ipAddrBlock: critical IPv6: 2602:810:6009::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:9e:6b:85:16:06:49:fa:35:63:a6:b7:09:b8:52:81:3b:6c: 4d:a6:22:09:d8:a2:df:6f:c1:dd:27:16:5b:e4:b8:e0:6e:52: e9:a2:b2:e9:51:21:17:40:1c:2e:e4:d4:54:78:9e:ef:9b:da: ce:59:97:50:32:ee:24:dc:20:ed:58:f1:07:35:0b:fc:ba:49: a4:1a:58:ff:4d:f8:dd:8e:29:58:95:29:c3:8f:01:38:0d:35: 73:d5:3e:8f:4f:91:44:af:aa:1d:88:c9:c2:e0:54:d6:21:e2: 5a:54:f9:9a:17:d7:4b:57:ad:f6:41:87:55:e6:2e:09:ce:2a: 45:03:81:c3:0d:1f:24:0f:0b:f8:19:c4:1b:01:f1:d2:ee:f0: 91:9b:e3:96:e3:91:9d:40:7d:ea:c9:08:ec:25:dd:f1:f1:58: f1:6b:89:39:fc:0b:cd:9e:27:7a:45:a5:37:92:b3:d6:a1:d2: d1:0d:6f:fd:ed:27:62:e9:8c:cc:4a:1f:bf:12:df:73:7e:c3: ab:f6:96:2b:33:15:4d:48:23:91:f7:af:50:07:63:36:0e:16: e0:27:49:ae:2b:0a:42:65:59:e4:f2:9c:d5:39:01:8a:f2:06: f8:27:d4:4b:22:7a:5d:15:15:ef:48:61:ff:77:cf:13:bb:13: f1:54:6c:67 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhtkE4+lb5QQgHJ2igwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZlYTRmNmEtYmI0ZS00NmJlLWIzMjctMzMwYmY4Zjdl MjA5MB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk MWZiNGE4YTAtZDdmYy00YTAxLTk2NTEtZjRiOWQzM2VhMTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjsW/as8jYy3VfCb98rFHrCj3xxOe7hRox1e iThlX7i4QcXO/hd0GvTm7/76dKAYv3Yt80UPipFeWRhgeGbR8G4ssaPlZOsqy3I2 bQjj9U3f/Ou8Ke6EG1FWJM7+xReE1AEAPz+Dz52vBYkGHzTJOq1aBoWyO8kWfT6f H0aUJ2NziG9Y13DMe3/MtBn3UaXsAlOpiZDlsRiQ3OBcCSZy65fUF70lSgdFZX4r 5pN+iI5S6pAnmei2NArNX4nbdBMv4BKdWCoyHSF4JqAXqLek4CohvJuYINBBIinB bRV1mZgP6XhaLR1ePXfBdNsKRaUDg/vJfHvK7Y+UUDyq7aUusQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH8Uk56KRv18DOt1RkOX6/0v45O2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZmVh NGY2YS1iYjRlLTQ2YmUtYjMyNy0zMzBiZjhmN2UyMDkvMzQwYTNlOGEtZTJmZC0z OTJlLTk5ZTItOGI0MWVmYzJlZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmZlYTRmNmEtYmI0ZS00NmJlLWIz MjctMzMwYmY4ZjdlMjA5LzJmZWE0ZjZhLWJiNGUtNDZiZS1iMzI3LTMzMGJmOGY3 ZTIwOS5jcmwwHwYDVR0jBBgwFoAURri9dl6NDsmaHWINCw4t6L5O1xEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZmVhNGY2YS1iYjRlLTQ2YmUtYjMyNy0zMzBi ZjhmN2UyMDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIEGAJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEiea4UWBkn6NWOmtwm4UoE7bE2mIgnYot9vwd0nFlvkuOBuUumi sulRIRdAHC7k1FR4nu+b2s5Zl1Ay7iTcIO1Y8Qc1C/y6SaQaWP9N+N2OKViVKcOP ATgNNXPVPo9PkUSvqh2IycLgVNYh4lpU+ZoX10tXrfZBh1XmLgnOKkUDgcMNHyQP C/gZxBsB8dLu8JGb45bjkZ1AferJCOwl3fHxWPFriTn8C82eJ3pFpTeSs9ah0tEN b/3tJ2LpjMxKH78S33N+w6v2liszFU1II5H3r1AHYzYOFuAnSa4rCkJlWeTynNU5 AYryBvgn1Esiel0VFe9IYf93zxO7E/FUbGc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:03 2025 by rpki-client