$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/2267296e-7e5c-3dad-9bcb-b73e0454bb7f.roa File: 2267296e-7e5c-3dad-9bcb-b73e0454bb7f.roa (raw, json) Hash identifier: stGY6oHEZURz0hz430ACWzQOqzjB2AiFBeTX8yv44tU= Subject key identifier: AA:49:D1:29:2F:C3:26:E4:1D:C4:7C:98:E4:79:57:E2:4B:13:0B:F3 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F43285848A6CB6960EC509E9AE6C73640 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/2267296e-7e5c-3dad-9bcb-b73e0454bb7f.roa Signing time: Fri 24 Jan 2025 14:00:52 +0000 ROA not before: Fri 24 Jan 2025 14:00:52 +0000 ROA not after: Thu 24 Apr 2025 13:00:52 +0000 asID: 198949 IP address blocks: 2602:281::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a6:cb:69:60:ec:50:9e:9a:e6:c7:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Jan 24 14:00:52 2025 GMT Not After : Apr 24 13:00:52 2025 GMT Subject: CN=1c2bd0e7-a45a-4d6c-81dd-06cefbe1cf83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e6:72:ff:96:d6:e3:83:22:0f:86:56:55:02: 2f:1e:20:9d:ca:fb:9a:6b:b5:8a:ff:eb:b0:e0:5b: da:3d:25:4a:49:3c:8f:3a:f3:c8:33:e0:e5:f2:3f: a4:52:09:05:b6:84:1b:38:2a:9b:4d:fa:14:01:fe: fa:93:e1:71:75:3b:f9:4f:15:fa:65:76:ef:cd:c0: 22:7c:90:6d:4c:4e:5e:f6:bd:04:47:98:77:70:e5: 3c:7c:4e:0a:71:59:b5:06:a0:96:85:d0:17:bb:0a: ad:ce:a3:90:a1:ff:89:50:72:19:13:fe:9e:9d:61: 58:bb:64:9e:5c:38:b1:2e:d4:19:2e:ca:3e:48:e2: 83:a7:e1:47:1a:e9:90:42:1b:11:a3:5b:c4:2e:f2: e8:8e:72:80:34:78:ca:ee:1e:a9:43:9a:cd:e5:25: f3:75:dd:3d:92:5c:87:ab:de:17:61:6a:9f:ac:3a: 4c:9b:4a:97:60:79:e3:f2:46:31:f5:f0:2c:21:4f: 96:75:da:f1:c3:40:41:92:dc:6f:1a:53:25:ce:f2: 35:51:38:41:3c:c5:25:db:06:b7:b6:72:6a:82:7a: e0:6d:fd:ac:8e:49:17:1c:98:8d:aa:89:54:85:17: 48:5d:4c:01:65:54:19:26:ce:b3:02:b3:75:86:a5: 7e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:49:D1:29:2F:C3:26:E4:1D:C4:7C:98:E4:79:57:E2:4B:13:0B:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/2267296e-7e5c-3dad-9bcb-b73e0454bb7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2602:281::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:2d:93:fc:e9:70:8f:36:6f:1e:c2:de:9e:67:66:b2:56:9c: 5e:c5:43:6e:10:98:8b:8b:e3:82:32:a8:27:62:10:76:51:0e: 0a:25:1d:d9:fb:d2:d8:a8:71:5b:28:8b:cc:ef:31:4b:87:87: a1:17:b0:4d:3e:6d:39:02:4e:4c:df:ea:c9:eb:d9:21:7a:79: 0c:ed:96:d8:dc:84:b4:8e:8b:eb:dc:e1:0e:8f:ad:70:85:92: 15:4d:93:5d:5d:97:01:c9:85:51:54:93:81:44:6a:b8:c3:2f: 34:39:46:a7:13:ae:32:9c:86:cc:30:01:1f:8f:77:69:1d:e4: 21:a6:de:27:f8:87:1a:81:2e:9f:81:54:07:4d:5d:11:8f:d3: 2c:2c:0f:3d:ab:bb:32:c7:bc:fe:75:fc:98:f1:3b:78:88:96: 75:b7:0d:0e:8e:0b:31:07:8a:35:12:5f:44:2b:71:71:75:1d: 44:5c:ef:4f:19:4b:d5:86:7b:81:40:26:aa:90:4b:17:5a:53: eb:ac:2a:8d:72:ae:d2:b0:a6:a7:f9:5f:f2:0d:cd:03:11:f4: ea:8d:62:6b:5d:0f:10:1e:45:c6:46:d4:7e:a9:72:f0:f6:63: e4:8f:71:29:b0:69:df:23:f8:b5:60:a0:92:6b:9c:c9:78:09: d4:49:05:6a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEimy2lg7FCemubHNkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI1MDEyNDE0MDA1MloXDTI1MDQyNDEzMDA1MlowLzEtMCsGA1UEAxMk MWMyYmQwZTctYTQ1YS00ZDZjLTgxZGQtMDZjZWZiZTFjZjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuZy/5bW44MiD4ZWVQIvHiCdyvuaa7WK/+uw 4FvaPSVKSTyPOvPIM+Dl8j+kUgkFtoQbOCqbTfoUAf76k+FxdTv5TxX6ZXbvzcAi fJBtTE5e9r0ER5h3cOU8fE4KcVm1BqCWhdAXuwqtzqOQof+JUHIZE/6enWFYu2Se XDixLtQZLso+SOKDp+FHGumQQhsRo1vELvLojnKANHjK7h6pQ5rN5SXzdd09klyH q94XYWqfrDpMm0qXYHnj8kYx9fAsIU+Wddrxw0BBktxvGlMlzvI1UThBPMUl2wa3 tnJqgnrgbf2sjkkXHJiNqolUhRdIXUwBZVQZJs6zArN1hqV+QwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKpJ0SkvwybkHcR8mOR5V+JLEwvzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvMjI2NzI5NmUtN2U1Yy0z ZGFkLTliY2ItYjczZTA0NTRiYjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgICgTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCSLZP86XCPNm8ewt6eZ2ayVpxexUNuEJiLi+OCMqgnYhB2UQ4KJR3Z +9LYqHFbKIvM7zFLh4ehF7BNPm05Ak5M3+rJ69khenkM7ZbY3IS0jovr3OEOj61w hZIVTZNdXZcByYVRVJOBRGq4wy80OUanE64ynIbMMAEfj3dpHeQhpt4n+IcagS6f gVQHTV0Rj9MsLA89q7syx7z+dfyY8Tt4iJZ1tw0OjgsxB4o1El9EK3FxdR1EXO9P GUvVhnuBQCaqkEsXWlPrrCqNcq7SsKan+V/yDc0DEfTqjWJrXQ8QHkXGRtR+qXLw 9mPkj3EpsGnfI/i1YKCSa5zJeAnUSQVq -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:53 2025 by rpki-client