$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/5237a8f7-1744-3119-91ea-26b40463c896.roa File: 5237a8f7-1744-3119-91ea-26b40463c896.roa (raw, json) Hash identifier: roWzJGSFT2VAor0qk0ZDzcWa0f56BHXmAgOF+4lBQVU= Subject key identifier: 2A:DD:DD:45:71:2D:59:84:43:07:57:7F:62:E5:4D:E6:2E:6A:8F:53 Certificate issuer: /CN=e66a6121-7784-4ce4-af34-0e56530ce3c1 Certificate serial: 010D0C9F43285848F9269462297AA57D5B7352D0 Authority key identifier: 3A:2F:CF:39:C8:82:0B:07:83:25:65:3A:5A:10:56:03:74:07:FF:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/5237a8f7-1744-3119-91ea-26b40463c896.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 397677 IP address blocks: 2602:800:1005::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:94:62:29:7a:a5:7d:5b:73:52:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e66a6121-7784-4ce4-af34-0e56530ce3c1 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=f0ffdb4e-e11f-42e5-964b-2a5c7163d492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8f:93:75:e4:19:c9:d2:f4:fc:1e:98:e9:07: 05:8f:ce:cd:17:7c:18:38:d8:51:d0:45:3f:e1:d5: e0:4b:72:1e:fa:d7:75:96:32:ad:c2:40:3b:5c:6e: 66:60:67:f3:c0:85:f5:12:01:68:01:ef:6b:1a:a7: c6:eb:4d:c9:f1:11:ec:7b:a1:9d:f3:44:17:25:05: db:fb:d1:e0:6d:d2:15:79:33:d3:c3:90:89:22:06: f6:cb:a2:43:35:f1:a2:d5:91:cd:bc:90:5a:69:ff: 87:b4:a9:14:9e:dd:af:e7:cd:30:93:d4:51:9d:a6: d5:f7:63:e1:29:ba:c4:9b:59:f1:88:ee:a6:b6:92: cd:2b:99:4a:7c:c9:41:e2:b6:bd:29:3e:ab:11:14: 13:4d:5e:28:84:31:a0:79:e6:a0:dc:42:ab:84:fb: 5f:8f:c0:8d:71:97:75:dd:10:31:f4:50:51:43:bf: 63:c0:ba:e5:29:0e:74:10:50:d9:11:be:1c:0b:85: 86:30:5d:68:b0:a2:fc:96:7d:31:41:24:ce:96:1c: 41:ed:4e:a6:7f:f3:03:a4:82:8e:49:4b:e6:86:a0: bf:2d:e4:92:60:9b:e4:68:08:12:9d:31:24:26:2f: 89:80:7b:77:79:74:cf:da:52:6f:f1:e4:bf:17:e0: f8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DD:DD:45:71:2D:59:84:43:07:57:7F:62:E5:4D:E6:2E:6A:8F:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/5237a8f7-1744-3119-91ea-26b40463c896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.crl X509v3 Authority Key Identifier: keyid:3A:2F:CF:39:C8:82:0B:07:83:25:65:3A:5A:10:56:03:74:07:FF:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer sbgp-ipAddrBlock: critical IPv6: 2602:800:1005::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:03:87:15:e1:55:e9:f8:bb:ac:67:42:df:c1:19:12:c0:3d: 6a:76:a0:7c:93:53:a9:23:60:cf:4e:e0:e6:92:62:1b:55:8d: 88:52:cc:6a:c2:20:23:45:2c:0b:da:3c:ad:80:08:56:e5:ed: 00:9b:c6:b3:df:bd:b8:17:5f:96:39:26:08:77:93:f6:30:2a: 71:0c:09:95:db:0e:02:d7:c9:a8:e7:b0:1d:a4:73:db:d5:28: ae:7c:83:5d:c7:b3:e9:14:71:13:d3:5f:1e:12:2e:99:ef:bf: 7d:a4:aa:29:52:e8:91:04:51:0b:af:1b:0c:7d:92:ff:77:15: c2:a1:05:45:5d:21:5d:04:f2:43:20:36:ef:dd:58:5c:8b:e9: cf:41:4e:29:09:bb:fe:97:a0:bf:17:5c:1d:a0:09:b1:5e:13: 1f:8c:97:a0:2c:d3:c4:a8:55:86:40:2f:c3:72:9b:61:4e:07: 84:e5:55:f9:a0:e0:a1:e5:21:f9:a3:c9:35:fd:4f:73:d3:97: ce:02:a1:e2:91:64:5b:0b:aa:44:df:dc:95:ee:00:98:d4:57: c7:55:b2:fc:8a:15:2f:5b:89:9a:e9:a1:98:9b:ac:ac:d5:58: 62:51:04:72:b2:39:c8:f1:17:63:1a:5b:c0:62:aa:cd:19:1e: 19:03:ce:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JpRiKXqlfVtzUtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTY2YTYxMjEtNzc4NC00Y2U0LWFmMzQtMGU1NjUzMGNl M2MxMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ZjBmZmRiNGUtZTExZi00MmU1LTk2NGItMmE1YzcxNjNkNDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4+TdeQZydL0/B6Y6QcFj87NF3wYONhR0EU/ 4dXgS3Ie+td1ljKtwkA7XG5mYGfzwIX1EgFoAe9rGqfG603J8RHse6Gd80QXJQXb +9HgbdIVeTPTw5CJIgb2y6JDNfGi1ZHNvJBaaf+HtKkUnt2v580wk9RRnabV92Ph KbrEm1nxiO6mtpLNK5lKfMlB4ra9KT6rERQTTV4ohDGgeeag3EKrhPtfj8CNcZd1 3RAx9FBRQ79jwLrlKQ50EFDZEb4cC4WGMF1osKL8ln0xQSTOlhxB7U6mf/MDpIKO SUvmhqC/LeSSYJvkaAgSnTEkJi+JgHt3eXTP2lJv8eS/F+D4NwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCrd3UVxLVmEQwdXf2LlTeYuao9TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNjZh NjEyMS03Nzg0LTRjZTQtYWYzNC0wZTU2NTMwY2UzYzEvNTIzN2E4ZjctMTc0NC0z MTE5LTkxZWEtMjZiNDA0NjNjODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTY2YTYxMjEtNzc4NC00Y2U0LWFm MzQtMGU1NjUzMGNlM2MxL2U2NmE2MTIxLTc3ODQtNGNlNC1hZjM0LTBlNTY1MzBj ZTNjMS5jcmwwHwYDVR0jBBgwFoAUOi/POciCCweDJWU6WhBWA3QH/+kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNjZhNjEyMS03Nzg0LTRjZTQtYWYzNC0wZTU2 NTMwY2UzYzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIABAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADoDhxXhVen4u6xnQt/BGRLAPWp2oHyTU6kjYM9O4OaSYhtVjYhS zGrCICNFLAvaPK2ACFbl7QCbxrPfvbgXX5Y5Jgh3k/YwKnEMCZXbDgLXyajnsB2k c9vVKK58g13Hs+kUcRPTXx4SLpnvv32kqilS6JEEUQuvGwx9kv93FcKhBUVdIV0E 8kMgNu/dWFyL6c9BTikJu/6XoL8XXB2gCbFeEx+Ml6As08SoVYZAL8Nym2FOB4Tl Vfmg4KHlIfmjyTX9T3PTl84CoeKRZFsLqkTf3JXuAJjUV8dVsvyKFS9biZrpoZib rKzVWGJRBHKyOcjxF2MaW8Biqs0ZHhkDzkk= -----END CERTIFICATE-----Generated at Fri Mar 14 11:27:42 2025 by rpki-client