$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/7c21021d-b3c6-3128-89cf-35ee6d572d09.roa File: 7c21021d-b3c6-3128-89cf-35ee6d572d09.roa (raw, json) Hash identifier: nxVHLRS+s2M1O8Vf/yegUaEVd2lz5YdsbzUW2iYCC88= Subject key identifier: 2B:E0:3A:AB:2A:00:EC:45:B0:BE:7F:81:AC:8B:C2:1D:35:02:57:E4 Certificate issuer: /CN=0ae79a05-4455-41de-a4a5-312c5d617c94 Certificate serial: 010D0C9F4328584827C54DFD8095C7A2FB2EAAC0 Authority key identifier: 7D:08:94:80:BC:CF:85:CB:69:22:7A:85:48:0B:DC:1E:E9:C9:D9:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/7c21021d-b3c6-3128-89cf-35ee6d572d09.roa Signing time: Tue 10 Dec 2024 02:00:40 +0000 ROA not before: Tue 10 Dec 2024 02:00:40 +0000 ROA not after: Mon 10 Mar 2025 01:00:40 +0000 asID: 400918 IP address blocks: 2602:f999::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/0ae79a05-4455-41de-a4a5-312c5d617c94.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/0ae79a05-4455-41de-a4a5-312c5d617c94.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:27:c5:4d:fd:80:95:c7:a2:fb:2e:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ae79a05-4455-41de-a4a5-312c5d617c94 Validity Not Before: Dec 10 02:00:40 2024 GMT Not After : Mar 10 01:00:40 2025 GMT Subject: CN=8ad7a5db-aa6c-45ee-aaee-b30bb0659b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b3:af:5b:f1:bf:6b:39:b2:49:eb:f4:23:f0: 7a:18:bb:13:d2:aa:2e:74:0d:09:9d:28:5c:e9:83: af:c5:26:76:32:39:79:04:ce:4d:22:7c:60:c0:ba: a7:7f:b9:15:02:5d:ff:5c:19:27:07:eb:0f:18:81: 00:b2:90:46:35:77:8c:2c:0e:43:ee:a7:19:33:54: 56:25:c8:96:5b:ec:e9:fd:0b:ec:32:02:4d:1a:39: be:e7:18:c1:92:9b:b5:2c:2f:6a:95:fa:1c:6f:4d: 7c:67:60:82:83:4e:40:71:5a:a7:ba:fc:f0:73:72: 85:f6:aa:fa:66:09:f8:89:88:16:51:c3:7b:4b:bb: 18:f1:f3:21:ed:00:93:84:52:d6:70:78:50:89:64: 00:96:9a:72:af:fd:ae:f0:c8:27:fe:ec:27:58:0e: 0f:c4:e0:08:37:58:d6:9a:c9:d7:fb:9f:dc:c1:d8: 04:e7:73:35:13:4f:3f:66:d9:93:5c:68:f9:3e:41: cb:87:83:65:92:8c:14:90:c7:06:6e:7f:48:8b:87: 77:d7:d7:fa:f9:40:c3:c8:57:84:e6:24:b2:c0:3f: 08:54:77:2e:d6:9c:74:18:72:b6:83:3a:c1:7f:02: a1:ab:59:3a:69:09:14:a4:5b:e4:50:1a:5c:82:3f: 42:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E0:3A:AB:2A:00:EC:45:B0:BE:7F:81:AC:8B:C2:1D:35:02:57:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/7c21021d-b3c6-3128-89cf-35ee6d572d09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/0ae79a05-4455-41de-a4a5-312c5d617c94.crl X509v3 Authority Key Identifier: keyid:7D:08:94:80:BC:CF:85:CB:69:22:7A:85:48:0B:DC:1E:E9:C9:D9:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94.cer sbgp-ipAddrBlock: critical IPv6: 2602:f999::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:b2:61:4d:cf:72:69:27:1b:71:6b:3c:76:d0:8f:a1:c0:e6: 3c:94:e5:92:bd:60:0c:42:a9:ff:8c:a1:ae:e3:a0:d0:db:de: da:d4:c5:86:aa:56:45:20:62:63:fc:95:81:7b:8f:e8:2d:d9: 25:70:e5:76:5f:8a:3b:ab:2e:77:62:c8:50:5d:67:cb:2f:4d: 15:30:9f:13:c6:50:9a:ad:50:7f:47:6f:90:bf:14:c7:e0:41: d0:f3:46:80:1c:13:13:32:c8:93:8e:23:f9:34:28:b2:b9:28: c0:0e:3c:bc:e4:62:9e:4e:a9:30:a9:11:76:c0:30:c1:6f:d4: 65:02:21:0a:35:23:2d:6a:1d:f9:4f:e2:8c:32:cc:fd:d5:cd: 5c:39:4c:9b:f8:6b:09:63:59:45:8d:83:fc:d8:10:55:f7:b1: b6:7b:02:1b:b8:d1:8c:36:4d:fc:85:59:0e:3e:c6:4c:e3:7d: 4e:bb:98:3a:6e:e9:9d:32:0f:de:51:21:de:95:65:f3:75:b9: a5:9f:09:9c:02:dd:1d:dc:a6:53:e4:74:0a:ce:ae:0c:40:98: 3d:31:90:48:04:e9:fc:9a:4e:b5:16:ca:b3:c9:f6:f1:fe:97: 24:b3:e4:53:1c:2f:1c:f6:93:be:12:7d:91:16:53:4d:55:37: b2:c7:6f:7d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEgnxU39gJXHovsuqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFlNzlhMDUtNDQ1NS00MWRlLWE0YTUtMzEyYzVkNjE3 Yzk0MB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk OGFkN2E1ZGItYWE2Yy00NWVlLWFhZWUtYjMwYmIwNjU5YjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbOvW/G/azmySev0I/B6GLsT0qoudA0JnShc 6YOvxSZ2Mjl5BM5NInxgwLqnf7kVAl3/XBknB+sPGIEAspBGNXeMLA5D7qcZM1RW JciWW+zp/QvsMgJNGjm+5xjBkpu1LC9qlfocb018Z2CCg05AcVqnuvzwc3KF9qr6 Zgn4iYgWUcN7S7sY8fMh7QCThFLWcHhQiWQAlppyr/2u8Mgn/uwnWA4PxOAIN1jW msnX+5/cwdgE53M1E08/ZtmTXGj5PkHLh4NlkowUkMcGbn9Ii4d319f6+UDDyFeE 5iSywD8IVHcu1px0GHK2gzrBfwKhq1k6aQkUpFvkUBpcgj9CkQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCvgOqsqAOxFsL5/gayLwh01AlfkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wYWU3 OWEwNS00NDU1LTQxZGUtYTRhNS0zMTJjNWQ2MTdjOTQvN2MyMTAyMWQtYjNjNi0z MTI4LTg5Y2YtMzVlZTZkNTcyZDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMGFlNzlhMDUtNDQ1NS00MWRlLWE0 YTUtMzEyYzVkNjE3Yzk0LzBhZTc5YTA1LTQ0NTUtNDFkZS1hNGE1LTMxMmM1ZDYx N2M5NC5jcmwwHwYDVR0jBBgwFoAUfQiUgLzPhctpInqFSAvcHunJ2SwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wYWU3OWEwNS00NDU1LTQxZGUtYTRhNS0zMTJj NWQ2MTdjOTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL5mQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAlbJhTc9yaScbcWs8dtCPocDmPJTlkr1gDEKp/4yhruOg0Nve2tTF hqpWRSBiY/yVgXuP6C3ZJXDldl+KO6sud2LIUF1nyy9NFTCfE8ZQmq1Qf0dvkL8U x+BB0PNGgBwTEzLIk44j+TQosrkowA48vORink6pMKkRdsAwwW/UZQIhCjUjLWod +U/ijDLM/dXNXDlMm/hrCWNZRY2D/NgQVfextnsCG7jRjDZN/IVZDj7GTON9TruY Om7pnTIP3lEh3pVl83W5pZ8JnALdHdymU+R0Cs6uDECYPTGQSATp/JpOtRbKs8n2 8f6XJLPkUxwvHPaTvhJ9kRZTTVU3ssdvfQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:47 2025 by rpki-client