$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/f137b2b7-e4a6-3cb1-b79b-c6cc3c7b4307.roa File: f137b2b7-e4a6-3cb1-b79b-c6cc3c7b4307.roa (raw, json) Hash identifier: fOjQXhdBu+AT794pwQpHcAuA+8SRBi/3dszu0JCFkS4= Subject key identifier: 7C:77:65:43:EF:1D:A5:6E:84:D1:CF:2E:51:9A:73:50:67:F7:0B:BD Certificate issuer: /CN=908b5814-2031-4b54-b9e1-bc5eaacf8745 Certificate serial: 010D0C9F43285848D6410C75167380F0D27C8400 Authority key identifier: C7:2D:23:07:FB:59:EE:C0:F9:36:6D:95:10:B0:DD:10:27:EB:FC:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/f137b2b7-e4a6-3cb1-b79b-c6cc3c7b4307.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 401167 IP address blocks: 2602:f8a1::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/908b5814-2031-4b54-b9e1-bc5eaacf8745.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/908b5814-2031-4b54-b9e1-bc5eaacf8745.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:0c:75:16:73:80:f0:d2:7c:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908b5814-2031-4b54-b9e1-bc5eaacf8745 Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=21a0923c-30e2-42a3-a4f9-1a7dd3865a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:48:b9:8f:35:e9:67:72:56:fb:1f:04:a8:97: b1:49:c0:9d:e0:f1:4e:02:ab:01:06:db:43:e4:d3: f8:88:ac:20:ee:70:52:8a:de:30:b6:e9:b6:64:d5: 24:cf:0c:c4:7b:b4:eb:c4:8d:54:bb:40:52:15:f6: e5:1b:6f:5f:66:a9:7f:f7:60:4f:e7:db:0c:ad:97: e9:8d:14:39:a3:67:8a:85:6c:df:d3:f4:a2:17:10: 91:75:47:dc:06:0d:60:ad:8a:8a:e4:09:a0:13:83: 77:69:ac:8c:c2:a1:70:33:fe:85:e2:5e:9a:ca:e5: 56:de:05:b1:31:d2:5c:6b:18:2e:b0:6a:35:78:28: 64:13:f7:e7:07:12:7f:c1:7e:73:a7:ea:75:f3:0c: b5:01:06:24:29:ce:47:df:54:1e:a5:13:22:e2:6b: 0a:f1:08:76:af:65:f0:e5:b8:1a:85:71:dc:7b:34: 8c:81:15:97:49:b9:f3:58:fb:77:b9:cd:00:59:12: bb:6f:f9:be:f5:a1:87:25:3d:79:31:be:bc:25:69: 2d:7b:e2:ef:4b:1d:42:70:69:66:17:79:da:3f:38: ea:b5:c0:20:e4:e7:79:29:e7:17:8f:0c:06:bc:30: dd:c3:c4:ea:74:23:62:69:30:49:a5:21:90:d4:44: d7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:77:65:43:EF:1D:A5:6E:84:D1:CF:2E:51:9A:73:50:67:F7:0B:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/f137b2b7-e4a6-3cb1-b79b-c6cc3c7b4307.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/908b5814-2031-4b54-b9e1-bc5eaacf8745.crl X509v3 Authority Key Identifier: keyid:C7:2D:23:07:FB:59:EE:C0:F9:36:6D:95:10:B0:DD:10:27:EB:FC:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745.cer sbgp-ipAddrBlock: critical IPv6: 2602:f8a1::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:78:87:1a:53:d4:db:cb:27:ac:bb:f2:f5:b4:7e:85:56:43: a9:48:76:4a:c3:f3:5d:4b:30:27:8e:4d:a6:f8:8b:90:67:67: 86:2e:a8:ab:6f:4c:9c:29:be:5c:de:44:ad:46:67:34:26:72: f3:5a:5b:fe:87:c2:2c:a6:7d:2f:ad:da:f6:1a:d5:27:ed:62: 3f:a3:f3:85:cc:8a:e3:1f:3a:b4:86:95:22:f6:25:3e:40:12: 81:7e:26:aa:de:4a:bd:b1:95:29:38:13:52:01:f1:95:f5:de: 6f:52:d1:e7:e1:27:21:65:27:61:e4:31:38:89:2e:91:04:88: 6d:84:99:f2:ed:3e:07:e6:fe:9f:24:ae:a6:df:67:94:9a:3d: 63:86:bb:ba:cc:91:06:82:d2:44:36:a1:07:69:6a:ca:25:a5: 00:0a:aa:90:f4:cc:52:3f:f6:6e:79:e1:67:cb:1c:eb:24:4a: 03:68:95:b4:f1:53:8f:fb:04:aa:15:f6:ae:1f:09:18:f7:fb: 24:cc:04:33:0d:c5:83:60:ab:1d:07:8b:59:ee:c4:e6:30:ef: c0:88:02:98:e6:2c:72:a1:6f:e9:70:9c:5c:5b:a8:6f:53:d3: 06:77:20:44:1e:54:da:e6:be:8a:74:52:c3:9b:26:ee:54:2d: 8b:d8:a0:8e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjWQQx1FnOA8NJ8hAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4YjU4MTQtMjAzMS00YjU0LWI5ZTEtYmM1ZWFhY2Y4 NzQ1MB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk MjFhMDkyM2MtMzBlMi00MmEzLWE0ZjktMWE3ZGQzODY1YTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0i5jzXpZ3JW+x8EqJexScCd4PFOAqsBBttD 5NP4iKwg7nBSit4wtum2ZNUkzwzEe7TrxI1Uu0BSFfblG29fZql/92BP59sMrZfp jRQ5o2eKhWzf0/SiFxCRdUfcBg1grYqK5AmgE4N3aayMwqFwM/6F4l6ayuVW3gWx MdJcaxgusGo1eChkE/fnBxJ/wX5zp+p18wy1AQYkKc5H31QepRMi4msK8Qh2r2Xw 5bgahXHcezSMgRWXSbnzWPt3uc0AWRK7b/m+9aGHJT15Mb68JWkte+LvSx1CcGlm F3naPzjqtcAg5Od5KecXjwwGvDDdw8TqdCNiaTBJpSGQ1ETXVQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHx3ZUPvHaVuhNHPLlGac1Bn9wu9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDhi NTgxNC0yMDMxLTRiNTQtYjllMS1iYzVlYWFjZjg3NDUvZjEzN2IyYjctZTRhNi0z Y2IxLWI3OWItYzZjYzNjN2I0MzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4YjU4MTQtMjAzMS00YjU0LWI5 ZTEtYmM1ZWFhY2Y4NzQ1LzkwOGI1ODE0LTIwMzEtNGI1NC1iOWUxLWJjNWVhYWNm ODc0NS5jcmwwHwYDVR0jBBgwFoAUxy0jB/tZ7sD5Nm2VELDdECfr/HwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDhiNTgxNC0yMDMxLTRiNTQtYjllMS1iYzVl YWFjZjg3NDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4oQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEASXiHGlPU28snrLvy9bR+hVZDqUh2SsPzXUswJ45NpviLkGdnhi6o q29MnCm+XN5ErUZnNCZy81pb/ofCLKZ9L63a9hrVJ+1iP6PzhcyK4x86tIaVIvYl PkASgX4mqt5KvbGVKTgTUgHxlfXeb1LR5+EnIWUnYeQxOIkukQSIbYSZ8u0+B+b+ nySupt9nlJo9Y4a7usyRBoLSRDahB2lqyiWlAAqqkPTMUj/2bnnhZ8sc6yRKA2iV tPFTj/sEqhX2rh8JGPf7JMwEMw3Fg2CrHQeLWe7E5jDvwIgCmOYscqFv6XCcXFuo b1PTBncgRB5U2ua+inRSw5sm7lQti9igjg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:35 2025 by rpki-client