$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1b83cec9-d72a-399f-8798-eca9e3a6ba3b.roa File: 1b83cec9-d72a-399f-8798-eca9e3a6ba3b.roa (raw, json) Hash identifier: rULKzy9pmiluCe6vjXXtS3NPm/WHJbIMHqFrJg2ib8k= Subject key identifier: D2:1F:89:09:96:4A:7C:E8:F7:B7:82:D6:70:5B:CD:2F:FA:1E:85:23 Certificate issuer: /CN=1a767fb3-0911-435a-a3a4-189b82622157 Certificate serial: 010D0C9F43285848F9267F597D082B055C1FBF00 Authority key identifier: 31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1b83cec9-d72a-399f-8798-eca9e3a6ba3b.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 400919 IP address blocks: 2602:817:2000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:7f:59:7d:08:2b:05:5c:1f:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a767fb3-0911-435a-a3a4-189b82622157 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=14660aca-2c00-48ec-85a7-d2dbe2661f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b6:73:d4:96:59:ca:15:3d:ee:71:52:c8:eb: f9:d1:b8:e5:41:d2:60:ef:96:36:94:1a:26:60:96: 78:a7:a9:f8:ff:87:1f:3d:c6:0d:33:5b:ef:d2:ac: 2e:fc:69:96:c1:fb:69:73:53:15:53:32:66:77:af: f0:7a:a2:18:ac:31:26:0c:a0:a4:05:a6:85:f4:a7: 33:0c:9e:7c:cf:62:e2:42:43:65:f5:e6:54:26:2d: e2:ce:f3:8d:cc:6a:aa:ba:09:44:07:f1:f7:c0:f4: 21:31:c9:bf:83:1c:5c:9c:0f:34:7b:3e:bd:9b:02: f9:dc:ac:8e:02:d7:07:28:43:4c:84:ed:ff:b0:cd: 7f:6a:c0:a4:37:08:15:1e:d2:0e:2e:03:af:a5:ac: 10:47:ef:c9:50:5b:50:bc:67:a6:7d:af:d5:bc:16: 6a:ac:1d:ac:c1:f4:4c:74:4f:47:36:e9:38:35:33: 08:6e:d9:80:66:3e:14:22:32:7c:21:98:9c:aa:55: f1:53:75:30:1e:b2:2e:ae:83:3b:1e:0b:bd:0d:9c: c1:56:b2:19:10:e3:19:f5:68:da:e6:a9:0e:10:b5: e7:a3:b1:5f:d9:8a:ee:35:d2:c1:5e:2a:0f:a2:d3: ce:f6:3f:d9:2c:a6:c8:2b:90:9c:4a:75:bb:47:75: f4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:1F:89:09:96:4A:7C:E8:F7:B7:82:D6:70:5B:CD:2F:FA:1E:85:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1b83cec9-d72a-399f-8798-eca9e3a6ba3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl X509v3 Authority Key Identifier: keyid:31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer sbgp-ipAddrBlock: critical IPv6: 2602:817:2000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:5c:ae:93:22:f8:5d:39:5b:58:84:f8:3d:b3:52:16:fc:12: 49:e6:4c:b8:2e:6f:29:77:10:dd:a2:15:5e:4d:27:86:f8:6c: 26:4c:57:27:d9:3e:11:9d:66:bd:27:63:eb:89:f9:9f:d1:ca: 5a:db:1c:c2:00:7e:18:2f:ac:68:32:0b:0b:05:da:3e:55:de: 42:74:c1:29:e2:f0:02:2f:2b:10:5d:7f:ad:af:4d:f7:29:ab: d7:91:02:f8:88:21:2c:d6:12:e9:03:52:66:15:31:5c:4b:ee: 76:e4:8d:43:b6:b8:8e:82:9e:f4:e1:60:2d:e5:6d:c9:d8:1a: db:f3:83:62:4a:c9:03:7a:6d:c9:ca:55:e5:2e:3e:b9:f6:fc: 9c:15:4a:a2:70:ea:cc:53:2d:76:ce:0e:6c:58:91:f2:d4:69: aa:f8:78:f4:b2:6d:e3:25:dc:41:5f:61:ad:28:15:21:e3:b2: 39:50:56:d0:a7:e5:ad:32:ce:1c:83:21:38:a5:38:67:de:16: fa:a7:c2:59:19:0b:47:79:bf:39:9e:9b:22:30:81:e0:c3:b8: 23:31:be:d8:01:ec:a2:fa:91:9a:a7:09:98:9c:b2:50:f7:29: 1d:95:be:85:44:11:64:0d:95:02:d4:15:9d:da:61:5a:ca:6c: be:16:b7:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Jn9ZfQgrBVwfvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3NjdmYjMtMDkxMS00MzVhLWEzYTQtMTg5YjgyNjIy MTU3MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MTQ2NjBhY2EtMmMwMC00OGVjLTg1YTctZDJkYmUyNjYxZjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLZz1JZZyhU97nFSyOv50bjlQdJg75Y2lBom YJZ4p6n4/4cfPcYNM1vv0qwu/GmWwftpc1MVUzJmd6/weqIYrDEmDKCkBaaF9Kcz DJ58z2LiQkNl9eZUJi3izvONzGqquglEB/H3wPQhMcm/gxxcnA80ez69mwL53KyO AtcHKENMhO3/sM1/asCkNwgVHtIOLgOvpawQR+/JUFtQvGemfa/VvBZqrB2swfRM dE9HNuk4NTMIbtmAZj4UIjJ8IZicqlXxU3UwHrIuroM7Hgu9DZzBVrIZEOMZ9Wja 5qkOELXno7Ff2YruNdLBXioPotPO9j/ZLKbIK5CcSnW7R3X0FQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNIfiQmWSnzo97eC1nBbzS/6HoUjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xYTc2 N2ZiMy0wOTExLTQzNWEtYTNhNC0xODliODI2MjIxNTcvMWI4M2NlYzktZDcyYS0z OTlmLTg3OTgtZWNhOWUzYTZiYTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWE3NjdmYjMtMDkxMS00MzVhLWEz YTQtMTg5YjgyNjIyMTU3LzFhNzY3ZmIzLTA5MTEtNDM1YS1hM2E0LTE4OWI4MjYy MjE1Ny5jcmwwHwYDVR0jBBgwFoAUMZd8fKTs1HliGSxrDAQkrzTVdKEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xYTc2N2ZiMy0wOTExLTQzNWEtYTNhNC0xODli ODI2MjIxNTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIFyAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABJcrpMi+F05W1iE+D2zUhb8EknmTLgubyl3EN2iFV5NJ4b4bCZM VyfZPhGdZr0nY+uJ+Z/RylrbHMIAfhgvrGgyCwsF2j5V3kJ0wSni8AIvKxBdf62v Tfcpq9eRAviIISzWEukDUmYVMVxL7nbkjUO2uI6CnvThYC3lbcnYGtvzg2JKyQN6 bcnKVeUuPrn2/JwVSqJw6sxTLXbODmxYkfLUaar4ePSybeMl3EFfYa0oFSHjsjlQ VtCn5a0yzhyDITilOGfeFvqnwlkZC0d5vzmemyIwgeDDuCMxvtgB7KL6kZqnCZic slD3KR2VvoVEEWQNlQLUFZ3aYVrKbL4Wt7E= -----END CERTIFICATE-----Generated at Fri Apr 4 16:12:03 2025 by rpki-client