$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/8c89d20a-f5c2-3352-9d83-ea21ce71cac4.roa File: 8c89d20a-f5c2-3352-9d83-ea21ce71cac4.roa (raw, json) Hash identifier: q9NXhRfvaPZ0DhexUV7nH+mVjUDEmyP6Tx7OCvYRzdo= Subject key identifier: 5E:5C:EB:E4:23:77:06:56:7A:53:E6:27:C7:FA:DF:82:2F:3E:BA:47 Certificate issuer: /CN=f375140c-52cc-401f-b3a0-476ffa367076 Certificate serial: 010D0C9F43285848547029B31CA09C1EA801A380 Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/8c89d20a-f5c2-3352-9d83-ea21ce71cac4.roa Signing time: Thu 26 Dec 2024 02:00:40 +0000 ROA not before: Thu 26 Dec 2024 02:00:40 +0000 ROA not after: Wed 26 Mar 2025 01:00:40 +0000 asID: 399976 IP address blocks: 2602:80c:202e::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:54:70:29:b3:1c:a0:9c:1e:a8:01:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076 Validity Not Before: Dec 26 02:00:40 2024 GMT Not After : Mar 26 01:00:40 2025 GMT Subject: CN=df4a9d49-52da-4d21-b433-a4891373073f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9a:28:bb:ee:c1:44:e2:29:9f:4c:51:6a:0e: d7:58:ec:e1:31:6e:e5:e5:33:cf:0a:af:65:b4:d0: 33:21:6c:5c:04:eb:a3:d0:41:97:10:9c:61:0e:12: 53:89:c4:df:5c:8b:54:7b:c9:24:75:2b:fb:da:f1: 27:00:0a:c6:44:3b:9a:0c:5c:5c:2b:1e:7f:0e:d9: b2:f5:0a:69:50:ae:2e:a4:b2:65:56:a8:62:27:c5: c6:47:a1:60:8a:4e:23:be:29:04:7c:b1:82:c1:55: a4:e2:1b:e6:bf:03:44:d6:69:af:5e:79:2b:5d:e9: a1:d6:f7:99:d8:2e:fe:7a:54:3f:b8:cc:ef:a3:92: 6e:70:bc:94:f9:5c:b9:fd:3f:a0:f6:1d:c7:13:67: f5:54:ea:36:44:1d:64:8c:1d:11:c6:30:b4:68:0a: 55:40:4f:b8:b5:0d:0b:6a:17:cb:b3:3f:6c:95:58: 78:5f:e6:86:65:78:49:10:88:a7:00:56:a8:b7:ad: 81:99:e0:19:9f:f8:68:50:ab:cc:6a:9b:dc:61:85: 7d:7a:72:b7:e3:1e:32:b0:27:60:6a:0f:b7:50:77: 9d:94:e2:12:f2:95:75:27:ec:2f:b9:f8:32:1c:fc: d9:67:ad:49:d1:cb:a6:a2:ab:4b:71:20:d0:b5:04: 50:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5C:EB:E4:23:77:06:56:7A:53:E6:27:C7:FA:DF:82:2F:3E:BA:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/8c89d20a-f5c2-3352-9d83-ea21ce71cac4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl X509v3 Authority Key Identifier: keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer sbgp-ipAddrBlock: critical IPv6: 2602:80c:202e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:b7:e9:0e:03:c3:7c:32:1d:3a:22:25:ba:1f:2f:da:b2:8a: d6:88:45:95:bc:08:29:ee:56:07:7b:54:f6:90:ad:b4:43:5a: 66:65:27:05:ed:72:42:f6:b3:e9:f8:b2:0d:42:7d:60:e5:44: b0:d9:96:c0:c6:34:cc:40:f5:0f:e7:08:23:95:c6:5e:d5:c7: e5:c9:21:e0:a3:d2:b1:d2:6c:7c:8c:d4:40:ba:1b:37:1a:39: 65:e7:25:18:f7:ad:ff:dd:9e:d0:dc:67:37:77:fd:d1:fa:60: 3f:6d:f2:8b:d4:10:3e:61:e9:91:5b:77:bb:03:13:0c:9f:e8: 94:fd:16:23:fd:a9:0f:9f:70:91:f8:17:0e:55:38:2a:88:f7: 1b:3c:1e:59:42:20:cc:1e:4e:f4:80:dc:88:03:c2:7c:fa:e4: 6f:fd:4f:a3:a4:a5:28:d7:ad:80:bd:87:f5:e0:06:2c:1f:34: 16:c7:f1:17:ad:01:3c:78:e8:fd:7b:c4:d2:27:cc:4b:88:ed: 05:1f:09:cf:1f:b5:c5:c3:40:38:19:1b:99:ad:ee:96:b7:27: c1:61:78:76:ac:5e:a9:20:a3:fe:71:ea:89:f8:ec:19:3d:67: 69:35:be:87:0b:e2:f4:7e:aa:cf:fe:b2:f9:c1:85:11:42:ab: 6a:b5:75:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhUcCmzHKCcHqgBo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3 MDc2MB4XDTI0MTIyNjAyMDA0MFoXDTI1MDMyNjAxMDA0MFowLzEtMCsGA1UEAxMk ZGY0YTlkNDktNTJkYS00ZDIxLWI0MzMtYTQ4OTEzNzMwNzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupoou+7BROIpn0xRag7XWOzhMW7l5TPPCq9l tNAzIWxcBOuj0EGXEJxhDhJTicTfXItUe8kkdSv72vEnAArGRDuaDFxcKx5/Dtmy 9QppUK4upLJlVqhiJ8XGR6Fgik4jvikEfLGCwVWk4hvmvwNE1mmvXnkrXemh1veZ 2C7+elQ/uMzvo5JucLyU+Vy5/T+g9h3HE2f1VOo2RB1kjB0RxjC0aApVQE+4tQ0L ahfLsz9slVh4X+aGZXhJEIinAFaot62BmeAZn/hoUKvMapvcYYV9enK34x4ysCdg ag+3UHedlOIS8pV1J+wvufgyHPzZZ61J0cumoqtLcSDQtQRQuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF5c6+QjdwZWelPmJ8f634IvPrpHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1 MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvOGM4OWQyMGEtZjVjMi0z MzUyLTlkODMtZWEyMWNlNzFjYWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2 NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCAu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI636Q4Dw3wyHToiJbofL9qyitaIRZW8CCnuVgd7VPaQrbRDWmZl JwXtckL2s+n4sg1CfWDlRLDZlsDGNMxA9Q/nCCOVxl7Vx+XJIeCj0rHSbHyM1EC6 GzcaOWXnJRj3rf/dntDcZzd3/dH6YD9t8ovUED5h6ZFbd7sDEwyf6JT9FiP9qQ+f cJH4Fw5VOCqI9xs8HllCIMweTvSA3IgDwnz65G/9T6OkpSjXrYC9h/XgBiwfNBbH 8RetATx46P17xNInzEuI7QUfCc8ftcXDQDgZG5mt7pa3J8FheHasXqkgo/5x6on4 7Bk9Z2k1vocL4vR+qs/+svnBhRFCq2q1dXk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:39 2025 by rpki-client