$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/0c939b79-4781-3540-90ff-69ea7b2d3d30.roa File: 0c939b79-4781-3540-90ff-69ea7b2d3d30.roa (raw, json) Hash identifier: Jvklm1EuEFrDXb2zWvzKm2n0i7kexh8xwDknOTEW9jM= Subject key identifier: A5:2D:5A:0C:25:D4:86:E0:AB:04:50:AF:2B:4B:EB:44:58:3C:A2:B3 Certificate issuer: /CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee Certificate serial: 010D0C9F4328584858A0531D9C08823EFEE99E80 Authority key identifier: 71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/0c939b79-4781-3540-90ff-69ea7b2d3d30.roa Signing time: Fri 27 Dec 2024 14:00:52 +0000 ROA not before: Fri 27 Dec 2024 14:00:52 +0000 ROA not after: Thu 27 Mar 2025 13:00:52 +0000 asID: 398351 IP address blocks: 2602:80f:900a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:58:a0:53:1d:9c:08:82:3e:fe:e9:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee Validity Not Before: Dec 27 14:00:52 2024 GMT Not After : Mar 27 13:00:52 2025 GMT Subject: CN=b90e4aa5-9461-400e-9cf8-b69c3f5b3c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:77:4d:79:0a:dc:58:d5:bb:79:53:81:01:29: 51:4c:71:2b:22:7f:96:78:f2:b1:02:fa:75:8d:11: af:b1:07:d2:c1:6c:eb:f8:bb:30:06:5b:00:34:e5: 36:38:db:d0:94:9d:3a:ac:8f:cb:4c:78:b8:9d:ba: b7:d8:3e:64:fe:19:9b:3f:17:f5:e0:7c:a4:ef:d8: 60:8c:30:bf:50:12:41:06:4e:56:33:1c:32:ca:c8: cb:3b:3b:03:d9:6d:4f:ec:25:f4:07:a2:2d:c9:c5: 5a:cd:4f:ad:05:66:49:85:e0:ef:71:85:3f:c7:96: c5:47:3f:cf:97:f4:ec:69:ba:5f:af:d3:b6:16:e7: 53:d9:5e:ce:31:77:36:07:6b:3f:c9:4d:16:bc:06: 7c:08:5d:de:a4:15:19:e3:b8:9f:51:ac:f3:06:0b: a5:79:cc:da:22:91:a4:4a:cc:6d:66:cb:4f:4f:77: 9f:f8:8b:48:50:74:9d:71:52:6b:a0:2c:05:13:aa: 1d:90:7e:73:43:53:51:f5:b0:a6:e1:46:20:19:1d: 2f:d5:3f:84:ab:bd:64:45:6e:b0:82:48:41:74:a5: 00:78:40:8a:b9:bd:2e:ff:ac:cb:33:ed:e5:ec:81: 2b:8a:5d:a3:87:83:57:73:db:b3:f0:c5:b7:81:c9: da:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2D:5A:0C:25:D4:86:E0:AB:04:50:AF:2B:4B:EB:44:58:3C:A2:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/0c939b79-4781-3540-90ff-69ea7b2d3d30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl X509v3 Authority Key Identifier: keyid:71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer sbgp-ipAddrBlock: critical IPv6: 2602:80f:900a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:f2:bc:96:67:95:61:54:93:26:4b:ca:66:03:50:f1:a5:9b: 71:68:58:3d:ac:e7:15:4b:65:c9:13:c9:12:d0:63:be:e9:4f: 48:8d:15:0b:87:be:b3:fc:3b:01:98:ec:be:1d:2e:e3:aa:16: f9:eb:b6:18:0c:3a:bd:f5:5c:6f:ad:2e:6c:c2:46:71:bf:f1: bf:22:bf:a0:5a:2f:b3:46:1b:14:8d:65:bd:7e:73:9a:e4:8a: f0:9c:4e:16:e1:77:31:13:b6:a3:ae:4f:00:80:e7:ec:16:68: 81:17:27:91:a1:e8:e4:1c:b3:68:1d:ce:f5:4d:4a:a5:b4:74: a1:32:77:15:a6:da:4f:17:c1:b1:65:4b:95:53:87:c8:50:cc: b8:02:cd:50:fe:97:05:81:7e:c1:e2:79:4f:f6:5d:3e:0f:4a: b1:8e:bc:21:d1:7d:7e:0a:8e:79:14:16:2a:44:2e:79:c5:5f: 70:e5:f6:9c:ca:46:6e:43:ec:8b:72:d1:8f:af:62:8a:8a:c2: e4:40:15:1b:1c:72:55:2b:bb:f4:eb:dd:cb:1a:0e:fd:ad:04: 95:d4:0b:87:5d:46:88:1a:f0:7c:82:69:e6:3e:c6:48:61:e4: 1c:ba:8b:cf:27:0a:1f:62:8d:c9:7b:65:41:b1:70:5f:65:f9: f0:90:b1:3c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhYoFMdnAiCPv7pnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM0NzY4N2MtZDgwZC00NmUyLWIzMGUtMTBhZTY4ZDhl MWVlMB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk YjkwZTRhYTUtOTQ2MS00MDBlLTljZjgtYjY5YzNmNWIzYzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXdNeQrcWNW7eVOBASlRTHErIn+WePKxAvp1 jRGvsQfSwWzr+LswBlsANOU2ONvQlJ06rI/LTHi4nbq32D5k/hmbPxf14Hyk79hg jDC/UBJBBk5WMxwyysjLOzsD2W1P7CX0B6ItycVazU+tBWZJheDvcYU/x5bFRz/P l/Tsabpfr9O2FudT2V7OMXc2B2s/yU0WvAZ8CF3epBUZ47ifUazzBguleczaIpGk SsxtZstPT3ef+ItIUHSdcVJroCwFE6odkH5zQ1NR9bCm4UYgGR0v1T+Eq71kRW6w gkhBdKUAeECKub0u/6zLM+3l7IEril2jh4NXc9uz8MW3gcnaEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKUtWgwl1IbgqwRQrytL60RYPKKzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMzQ3 Njg3Yy1kODBkLTQ2ZTItYjMwZS0xMGFlNjhkOGUxZWUvMGM5MzliNzktNDc4MS0z NTQwLTkwZmYtNjllYTdiMmQzZDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTM0NzY4N2MtZDgwZC00NmUyLWIz MGUtMTBhZTY4ZDhlMWVlL2UzNDc2ODdjLWQ4MGQtNDZlMi1iMzBlLTEwYWU2OGQ4 ZTFlZS5jcmwwHwYDVR0jBBgwFoAUcaIz1Ch+MfU34SL6UnnC6wYl1ZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMzQ3Njg3Yy1kODBkLTQ2ZTItYjMwZS0xMGFl NjhkOGUxZWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIID5AK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG3yvJZnlWFUkyZLymYDUPGlm3FoWD2s5xVLZckTyRLQY77pT0iN FQuHvrP8OwGY7L4dLuOqFvnrthgMOr31XG+tLmzCRnG/8b8iv6BaL7NGGxSNZb1+ c5rkivCcThbhdzETtqOuTwCA5+wWaIEXJ5Gh6OQcs2gdzvVNSqW0dKEydxWm2k8X wbFlS5VTh8hQzLgCzVD+lwWBfsHieU/2XT4PSrGOvCHRfX4KjnkUFipELnnFX3Dl 9pzKRm5D7Ity0Y+vYoqKwuRAFRscclUru/Tr3csaDv2tBJXUC4ddRoga8HyCaeY+ xkhh5By6i88nCh9ijcl7ZUGxcF9l+fCQsTw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:56 2025 by rpki-client