$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d0b219ed-b1b8-358a-9724-fc8738ce6ac7.roa File: d0b219ed-b1b8-358a-9724-fc8738ce6ac7.roa (raw, json) Hash identifier: unKXb4TF2+HiL9JjdWI9dLOhhjj1WxLvd61JKBlIqqg= Subject key identifier: 17:8F:A9:BC:D4:70:0D:90:00:AA:AA:3F:C4:9C:60:CF:EB:1E:86:5C Certificate issuer: /CN=f375140c-52cc-401f-b3a0-476ffa367076 Certificate serial: 010D0C9F4328584854702DD6F21EEF3AE2D02E80 Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d0b219ed-b1b8-358a-9724-fc8738ce6ac7.roa Signing time: Thu 26 Dec 2024 02:00:40 +0000 ROA not before: Thu 26 Dec 2024 02:00:40 +0000 ROA not after: Wed 26 Mar 2025 01:00:40 +0000 asID: 399976 IP address blocks: 2602:80c:20cd::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:54:70:2d:d6:f2:1e:ef:3a:e2:d0:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076 Validity Not Before: Dec 26 02:00:40 2024 GMT Not After : Mar 26 01:00:40 2025 GMT Subject: CN=2c1bbfcf-e1f4-49e9-937a-f445ca60f466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:27:d4:95:2c:54:5c:74:fa:c1:b5:d6:3c:8b: 83:7a:05:15:46:79:48:2d:9f:cd:6c:85:ce:be:dc: 85:e8:57:7f:ba:9e:89:35:36:cf:44:03:24:61:0a: fd:47:0e:3c:f4:56:83:ea:c8:13:4d:54:01:b4:da: 52:41:21:c2:a0:29:67:68:74:17:0e:66:2c:4e:19: a0:f1:94:6c:60:bd:b2:4a:89:40:57:c6:a2:b8:fa: ac:aa:25:d0:fc:c3:2c:e3:52:5e:29:bd:03:df:22: 6a:99:61:07:66:7c:47:3c:a3:51:08:70:5b:95:43: 85:b9:a2:75:36:89:49:4f:7b:5c:29:fa:84:23:1a: 99:13:52:0f:a7:8b:0c:02:07:37:a5:f4:43:b6:e6: 9c:52:92:0b:e6:a8:e7:ca:fc:72:3e:c1:e2:90:4a: 67:cc:55:09:eb:1e:48:f5:2f:c3:5c:0d:86:07:e3: b5:1d:6e:7d:e0:2b:f9:78:85:b1:50:50:64:c8:11: 83:51:67:6e:e1:e1:30:a6:ad:b5:6c:c6:de:fa:0e: 22:7a:f6:03:26:ad:5d:43:05:2f:a8:62:08:43:c4: 48:a2:ab:17:52:ff:79:03:39:22:f9:30:51:06:40: 42:4c:e5:6b:60:9e:d1:05:a4:06:59:5c:31:18:41: 0e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8F:A9:BC:D4:70:0D:90:00:AA:AA:3F:C4:9C:60:CF:EB:1E:86:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d0b219ed-b1b8-358a-9724-fc8738ce6ac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl X509v3 Authority Key Identifier: keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer sbgp-ipAddrBlock: critical IPv6: 2602:80c:20cd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:1d:8a:1d:cc:19:df:39:e3:eb:1d:b1:7c:0c:01:f5:1d:70: c6:32:39:15:e7:80:12:70:dd:46:d7:1a:36:04:f0:01:34:0c: 85:f0:be:98:f6:f7:60:eb:3c:d2:60:52:9b:fc:34:26:05:34: 4b:1e:cf:27:82:7e:30:93:dc:71:77:b8:16:95:30:57:a2:ff: 46:8e:69:29:ea:08:d3:b1:97:7a:77:cf:ad:1a:cc:2f:ab:85: e3:16:5f:67:c6:4a:bd:60:71:5c:ad:62:d3:5d:f0:39:99:ff: c0:6f:cf:27:f6:2d:6f:23:78:f3:28:12:76:d1:a4:cf:d2:19: fa:07:ad:ca:0e:96:40:e5:0d:23:5e:aa:37:a1:73:0b:f1:00: 0a:d2:31:6c:d3:57:1e:74:21:f3:4f:f6:53:0c:94:d2:f6:19: 9f:46:68:20:0a:51:fa:48:50:68:17:6f:c0:3d:eb:ac:12:99: b6:d7:3d:6c:e6:b5:b7:78:6a:44:b0:6b:33:32:dc:bf:77:5c: 9e:68:d7:70:45:29:bb:9e:ba:50:74:dc:19:0d:b0:fc:ce:42: f9:d9:eb:26:37:49:2e:b7:08:af:e5:bf:86:b0:87:37:d1:89: f3:a3:03:57:da:da:1a:97:dc:95:29:c2:ad:8a:21:5a:7b:34: 4b:4f:7b:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhUcC3W8h7vOuLQLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3 MDc2MB4XDTI0MTIyNjAyMDA0MFoXDTI1MDMyNjAxMDA0MFowLzEtMCsGA1UEAxMk MmMxYmJmY2YtZTFmNC00OWU5LTkzN2EtZjQ0NWNhNjBmNDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSfUlSxUXHT6wbXWPIuDegUVRnlILZ/NbIXO vtyF6Fd/up6JNTbPRAMkYQr9Rw489FaD6sgTTVQBtNpSQSHCoClnaHQXDmYsThmg 8ZRsYL2ySolAV8aiuPqsqiXQ/MMs41JeKb0D3yJqmWEHZnxHPKNRCHBblUOFuaJ1 NolJT3tcKfqEIxqZE1IPp4sMAgc3pfRDtuacUpIL5qjnyvxyPsHikEpnzFUJ6x5I 9S/DXA2GB+O1HW594Cv5eIWxUFBkyBGDUWdu4eEwpq21bMbe+g4ievYDJq1dQwUv qGIIQ8RIoqsXUv95Azki+TBRBkBCTOVrYJ7RBaQGWVwxGEEO9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBePqbzUcA2QAKqqP8ScYM/rHoZcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1 MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvZDBiMjE5ZWQtYjFiOC0z NThhLTk3MjQtZmM4NzM4Y2U2YWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2 NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCDN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHkdih3MGd854+sdsXwMAfUdcMYyORXngBJw3UbXGjYE8AE0DIXw vpj292DrPNJgUpv8NCYFNEsezyeCfjCT3HF3uBaVMFei/0aOaSnqCNOxl3p3z60a zC+rheMWX2fGSr1gcVytYtNd8DmZ/8Bvzyf2LW8jePMoEnbRpM/SGfoHrcoOlkDl DSNeqjehcwvxAArSMWzTVx50IfNP9lMMlNL2GZ9GaCAKUfpIUGgXb8A966wSmbbX PWzmtbd4akSwazMy3L93XJ5o13BFKbueulB03BkNsPzOQvnZ6yY3SS63CK/lv4aw hzfRifOjA1fa2hqX3JUpwq2KIVp7NEtPeyA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:26 2025 by rpki-client