$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/3d9ce023-0de3-3125-a98a-468a1abb87f4.roa File: 3d9ce023-0de3-3125-a98a-468a1abb87f4.roa (raw, json) Hash identifier: 1l5L4s5CetJHHINUTjUSLM2tQ2hoHS0+hYYNxYb32pc= Subject key identifier: EB:5A:5D:02:06:29:9B:52:1A:79:6F:BF:48:EA:CB:BB:AA:1B:A0:90 Certificate issuer: /CN=868a7747-d16d-4c1e-b36c-28d03effd7eb Certificate serial: 010D0C9F432858489E6B6CFD10E8B344E8216400 Authority key identifier: C0:EB:6D:CC:1A:A3:55:C6:38:2C:BA:06:CD:71:23:0A:77:F7:0C:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/3d9ce023-0de3-3125-a98a-468a1abb87f4.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 150698 IP address blocks: 2602:f969:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/868a7747-d16d-4c1e-b36c-28d03effd7eb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/868a7747-d16d-4c1e-b36c-28d03effd7eb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:6c:fd:10:e8:b3:44:e8:21:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=868a7747-d16d-4c1e-b36c-28d03effd7eb Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=73ba3411-5da5-475c-a2cf-45581de99a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:59:9c:33:26:0a:79:52:41:95:b1:57:b1:4a: 64:5d:00:81:d9:18:58:a8:74:42:16:6c:17:6b:fb: ad:66:b5:ce:d0:b0:d2:94:e1:20:d0:25:b6:91:b4: 35:ac:cc:4d:43:9f:d8:ae:09:81:55:28:00:8a:20: e7:32:09:ff:94:88:14:cd:c0:04:05:d0:da:82:b1: a1:01:7b:30:78:ba:c6:7f:06:a4:ca:65:41:e7:83: c2:28:1a:ff:7e:03:d5:b8:96:86:dd:2f:6c:2a:e1: 97:f0:c3:d6:39:7c:ca:07:80:3b:02:03:01:02:fc: e1:42:10:d3:e1:e1:41:28:0b:06:0c:78:6a:22:16: 08:a0:d5:22:72:b7:82:af:f5:c2:9d:80:a7:9a:29: dd:06:e8:18:74:8d:ef:28:d0:65:66:58:1d:ba:a1: 22:22:ae:c5:c9:4c:f3:7d:7e:4d:5e:20:69:85:d9: 66:0b:ca:4d:76:34:1c:ce:7b:18:81:e3:16:dd:b2: b5:f1:10:f4:2e:4e:64:be:81:ba:58:0f:62:31:0e: b7:15:62:9f:a3:ab:f5:67:eb:15:b4:b9:f3:fc:81: ee:85:d3:10:ec:aa:f1:80:09:7b:43:10:07:72:50: 28:4e:01:00:80:70:bd:e7:ef:6b:62:86:fa:b1:b8: e9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:5A:5D:02:06:29:9B:52:1A:79:6F:BF:48:EA:CB:BB:AA:1B:A0:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/3d9ce023-0de3-3125-a98a-468a1abb87f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/868a7747-d16d-4c1e-b36c-28d03effd7eb.crl X509v3 Authority Key Identifier: keyid:C0:EB:6D:CC:1A:A3:55:C6:38:2C:BA:06:CD:71:23:0A:77:F7:0C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb.cer sbgp-ipAddrBlock: critical IPv6: 2602:f969:100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:bd:0f:8a:17:94:43:a6:e5:27:fd:22:36:be:e6:b8:ae:2c: 88:e6:fc:1f:29:5f:52:c6:aa:70:08:33:b7:3f:de:7a:3b:af: 44:83:21:e4:69:28:16:7b:f0:bc:42:6c:20:54:6c:fd:58:8f: 78:e7:05:ef:6a:5a:78:4e:39:e1:af:97:9e:78:0b:16:fe:68: 60:94:3d:d1:dd:bf:e6:5e:dc:8a:da:9c:ea:51:fd:fa:3b:c6: ba:ba:13:03:9e:8c:ec:ee:95:d0:70:56:1a:60:b3:46:ae:8d: 8a:e0:eb:43:20:bc:ef:c6:b8:6b:b8:84:d1:9b:93:c9:a5:b5: 0c:f0:9e:f6:0b:48:68:4d:7d:23:cc:3f:3f:eb:24:1a:71:83: 1b:2e:6a:ba:8a:ad:e9:ec:04:36:a9:9f:ee:6d:55:0f:a4:8b: 47:cf:e3:11:1f:d4:47:fc:ed:04:19:a8:04:8d:8e:db:31:7e: 4f:79:7c:77:bc:03:58:b1:0d:46:fc:7d:39:5c:d6:c8:9e:c8: 8a:ba:0a:89:72:cb:d3:fe:32:82:4f:50:7a:ff:8e:a3:de:90: b5:97:71:03:10:be:cd:06:bf:ce:0a:c1:18:d8:83:5e:d6:f3: 76:a2:36:32:1e:51:7f:19:93:b6:24:d3:97:3b:49:78:f1:91: 61:ce:b2:51 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEiea2z9EOizROghZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY4YTc3NDctZDE2ZC00YzFlLWIzNmMtMjhkMDNlZmZk N2ViMB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NzNiYTM0MTEtNWRhNS00NzVjLWEyY2YtNDU1ODFkZTk5YTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFmcMyYKeVJBlbFXsUpkXQCB2RhYqHRCFmwX a/utZrXO0LDSlOEg0CW2kbQ1rMxNQ5/YrgmBVSgAiiDnMgn/lIgUzcAEBdDagrGh AXsweLrGfwakymVB54PCKBr/fgPVuJaG3S9sKuGX8MPWOXzKB4A7AgMBAvzhQhDT 4eFBKAsGDHhqIhYIoNUicreCr/XCnYCnmindBugYdI3vKNBlZlgduqEiIq7FyUzz fX5NXiBphdlmC8pNdjQcznsYgeMW3bK18RD0Lk5kvoG6WA9iMQ63FWKfo6v1Z+sV tLnz/IHuhdMQ7KrxgAl7QxAHclAoTgEAgHC95+9rYob6sbjpYwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOtaXQIGKZtSGnlvv0jqy7uqG6CQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84Njhh Nzc0Ny1kMTZkLTRjMWUtYjM2Yy0yOGQwM2VmZmQ3ZWIvM2Q5Y2UwMjMtMGRlMy0z MTI1LWE5OGEtNDY4YTFhYmI4N2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvODY4YTc3NDctZDE2ZC00YzFlLWIz NmMtMjhkMDNlZmZkN2ViLzg2OGE3NzQ3LWQxNmQtNGMxZS1iMzZjLTI4ZDAzZWZm ZDdlYi5jcmwwHwYDVR0jBBgwFoAUwOttzBqjVcY4LLoGzXEjCnf3DNgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84NjhhNzc0Ny1kMTZkLTRjMWUtYjM2Yy0yOGQw M2VmZmQ3ZWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5aQEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAjb0PiheUQ6blJ/0iNr7muK4siOb8HylfUsaqcAgztz/eejuvRIMh 5GkoFnvwvEJsIFRs/ViPeOcF72paeE454a+XnngLFv5oYJQ90d2/5l7citqc6lH9 +jvGuroTA56M7O6V0HBWGmCzRq6NiuDrQyC878a4a7iE0ZuTyaW1DPCe9gtIaE19 I8w/P+skGnGDGy5quoqt6ewENqmf7m1VD6SLR8/jER/UR/ztBBmoBI2O2zF+T3l8 d7wDWLENRvx9OVzWyJ7IiroKiXLL0/4ygk9Qev+Oo96QtZdxAxC+zQa/zgrBGNiD XtbzdqI2Mh5RfxmTtiTTlztJePGRYc6yUQ== -----END CERTIFICATE-----Generated at Fri Apr 4 16:08:13 2025 by rpki-client