$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/7933fd8a-a3a1-3f7b-aa5a-a78d1115d50f.roa File: 7933fd8a-a3a1-3f7b-aa5a-a78d1115d50f.roa (raw, json) Hash identifier: eL9bdPI5b4xuhxdrV1blLFxK3qmu5jS2Rcp4OvFHmRA= Subject key identifier: AF:96:61:66:1F:D4:FE:FC:69:2E:D6:91:EE:79:CF:41:B9:64:F3:1F Certificate issuer: /CN=34592396-ac3d-4a48-97f1-caed65436525 Certificate serial: 010D0C9F4328584863CB006856A30564CD98AF80 Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/7933fd8a-a3a1-3f7b-aa5a-a78d1115d50f.roa Signing time: Tue 31 Dec 2024 14:00:53 +0000 ROA not before: Tue 31 Dec 2024 14:00:53 +0000 ROA not after: Mon 31 Mar 2025 13:00:53 +0000 asID: 16509 IP address blocks: 2602:fdeb:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:63:cb:00:68:56:a3:05:64:cd:98:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525 Validity Not Before: Dec 31 14:00:53 2024 GMT Not After : Mar 31 13:00:53 2025 GMT Subject: CN=221046be-de95-41b7-b01c-677de2ef1bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:82:d7:64:fa:5e:cd:99:45:2a:40:0b:5e:39: 64:5a:6a:06:a3:66:e1:2a:7c:52:5b:ec:ca:4a:25: b9:f8:c6:b3:01:ae:94:b3:8c:db:7b:54:17:92:c3: ed:a4:96:c0:59:11:fb:84:8b:dc:81:a3:2a:92:86: e8:c0:98:10:38:d2:1b:ce:e1:17:c8:36:22:4e:74: c0:cf:be:7d:79:27:b1:40:54:7a:ba:00:4b:0d:54: 39:6e:ed:48:6a:7e:62:ed:9a:93:41:cd:30:7f:32: 87:9b:6b:f4:05:78:96:2d:e0:2f:71:1e:1c:29:f5: 84:c3:1a:55:b0:d1:da:b7:74:38:70:5c:c0:f1:3e: b5:4f:e2:92:9f:e2:e1:a0:d3:86:d1:50:47:27:c0: ad:5c:4e:19:22:d8:71:c2:b5:ae:fb:b8:12:ee:1a: 70:6e:be:23:3f:20:d8:a0:20:8a:0e:25:1e:36:e3: 1e:42:74:80:ed:df:4d:cc:02:92:4e:db:f3:1a:ae: 08:ea:55:19:62:37:87:c8:39:96:f7:ef:20:02:d8: 78:5f:d3:dc:9b:4a:e9:09:ab:45:66:b1:15:50:5d: ca:3f:8b:f8:5e:c3:da:1f:75:fa:17:a8:02:8f:50: 3b:60:37:b9:95:c3:08:6e:de:d3:2b:99:ce:9c:9e: 91:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:96:61:66:1F:D4:FE:FC:69:2E:D6:91:EE:79:CF:41:B9:64:F3:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/7933fd8a-a3a1-3f7b-aa5a-a78d1115d50f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl X509v3 Authority Key Identifier: keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer sbgp-ipAddrBlock: critical IPv6: 2602:fdeb:5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:94:9f:fa:71:8f:f9:44:91:91:d0:d1:d8:cf:4c:d6:b6:99: a8:45:5e:8a:33:48:b3:e0:20:ac:c3:5e:c2:15:75:15:e7:01: 68:7a:c1:06:4c:54:4c:9d:62:16:b7:08:df:7e:0d:3a:7b:4a: c8:c7:fe:af:b3:0d:84:e9:a6:39:8b:2a:33:ab:6d:2f:81:3a: ca:2b:c9:98:06:bf:28:f7:11:46:06:41:28:37:35:bf:75:c8: 43:eb:ff:25:25:65:de:11:f5:42:f1:be:eb:a8:25:40:ec:0f: 0b:44:70:7c:87:3f:3e:d7:e5:c5:ec:33:e6:9c:91:60:f1:01: f1:1a:f3:3b:d3:9c:37:c2:b0:dc:3e:d5:22:ce:76:9a:81:f6: 1b:91:2f:9f:75:ef:87:75:60:96:62:6f:6a:fd:ab:34:97:09: b2:f6:e5:3a:f3:9c:e4:8f:15:e7:0b:7b:2d:97:56:46:cf:c8: 2a:2e:a4:e0:81:f5:e9:e8:83:93:d9:83:47:c3:32:c1:30:c1: 56:5f:54:b4:3a:5a:14:87:b1:c5:c6:cf:57:fa:3e:ff:3d:45: 03:b3:54:aa:37:36:24:3c:6e:4d:a7:3a:2c:fc:d8:88:9e:f4: 9b:a7:3e:af:33:9a:1d:87:9f:5b:6a:7e:9e:77:5f:4c:4d:65: ad:22:2d:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhjywBoVqMFZM2Yr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ1OTIzOTYtYWMzZC00YTQ4LTk3ZjEtY2FlZDY1NDM2 NTI1MB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk MjIxMDQ2YmUtZGU5NS00MWI3LWIwMWMtNjc3ZGUyZWYxYmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4LXZPpezZlFKkALXjlkWmoGo2bhKnxSW+zK SiW5+MazAa6Us4zbe1QXksPtpJbAWRH7hIvcgaMqkobowJgQONIbzuEXyDYiTnTA z759eSexQFR6ugBLDVQ5bu1Ian5i7ZqTQc0wfzKHm2v0BXiWLeAvcR4cKfWEwxpV sNHat3Q4cFzA8T61T+KSn+LhoNOG0VBHJ8CtXE4ZIthxwrWu+7gS7hpwbr4jPyDY oCCKDiUeNuMeQnSA7d9NzAKSTtvzGq4I6lUZYjeHyDmW9+8gAth4X9Pcm0rpCatF ZrEVUF3KP4v4XsPaH3X6F6gCj1A7YDe5lcMIbt7TK5nOnJ6RMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK+WYWYf1P78aS7Wke55z0G5ZPMfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDU5 MjM5Ni1hYzNkLTRhNDgtOTdmMS1jYWVkNjU0MzY1MjUvNzkzM2ZkOGEtYTNhMS0z ZjdiLWFhNWEtYTc4ZDExMTVkNTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzQ1OTIzOTYtYWMzZC00YTQ4LTk3 ZjEtY2FlZDY1NDM2NTI1LzM0NTkyMzk2LWFjM2QtNGE0OC05N2YxLWNhZWQ2NTQz NjUyNS5jcmwwHwYDVR0jBBgwFoAU4Pkf4Q9Z7oe8umGKzul0yYPhQUEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDU5MjM5Ni1hYzNkLTRhNDgtOTdmMS1jYWVk NjU0MzY1MjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL96wAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABeUn/pxj/lEkZHQ0djPTNa2mahFXoozSLPgIKzDXsIVdRXnAWh6 wQZMVEydYha3CN9+DTp7SsjH/q+zDYTppjmLKjOrbS+BOsoryZgGvyj3EUYGQSg3 Nb91yEPr/yUlZd4R9ULxvuuoJUDsDwtEcHyHPz7X5cXsM+ackWDxAfEa8zvTnDfC sNw+1SLOdpqB9huRL59174d1YJZib2r9qzSXCbL25TrznOSPFecLey2XVkbPyCou pOCB9enog5PZg0fDMsEwwVZfVLQ6WhSHscXGz1f6Pv89RQOzVKo3NiQ8bk2nOiz8 2Iie9JunPq8zmh2Hn1tqfp53X0xNZa0iLeg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:06 2025 by rpki-client