$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/bc97280e-58ac-34bd-b6b0-31818047edb3.roa File: bc97280e-58ac-34bd-b6b0-31818047edb3.roa (raw, json) Hash identifier: OZuEz+r54aTT/h+K0VEAdnmAb9AKjnRbABraZgAsYMY= Subject key identifier: 05:A9:39:7F:7C:ED:44:4D:0F:1E:AA:A8:45:99:A3:8C:78:26:87:6A Certificate issuer: /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3 Certificate serial: 010D0C9F43285848705AFD9F2044ECE20622A7C0 Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/bc97280e-58ac-34bd-b6b0-31818047edb3.roa Signing time: Sun 05 Jan 2025 02:00:39 +0000 ROA not before: Sun 05 Jan 2025 02:00:39 +0000 ROA not after: Sat 05 Apr 2025 01:00:39 +0000 asID: 53727 IP address blocks: 2602:f982:200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:70:5a:fd:9f:20:44:ec:e2:06:22:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3 Validity Not Before: Jan 5 02:00:39 2025 GMT Not After : Apr 5 01:00:39 2025 GMT Subject: CN=91f12fad-d94b-485e-9dad-09a4a05ecee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5b:d7:41:ba:8d:00:af:de:71:47:fe:b3:2e: 12:89:3e:75:5f:16:63:98:fd:b5:be:d4:58:17:6a: 1b:d8:43:8d:31:c9:90:20:c3:6a:6d:e2:18:f1:e5: 8e:7f:23:8f:19:bc:30:37:92:67:15:fd:26:4d:44: a8:f6:d5:dc:c1:dd:7c:98:16:19:b9:68:fc:36:bf: f7:af:7a:e3:24:a8:62:0b:0a:b9:71:53:66:b0:3a: b2:2b:a8:1a:92:18:18:d9:c5:91:28:c0:39:f1:3a: 12:b1:b1:c5:f0:ca:90:f2:4e:6e:3b:21:96:37:1d: d8:7b:2f:cc:6e:a6:35:a7:aa:85:5e:c1:36:34:c8: 31:65:33:02:f9:47:75:0b:ab:45:b8:38:04:2a:7b: 05:2e:d2:a5:75:aa:52:91:21:28:ec:bb:42:d4:5e: 98:3d:a3:7e:aa:35:c6:f2:97:cd:6f:ff:89:43:0a: 39:bf:cc:84:fe:b2:c0:58:53:2f:80:76:8c:0c:31: 27:4a:b0:16:e7:94:91:21:de:68:84:fe:31:af:6f: 68:3a:97:07:d0:64:c0:00:26:be:22:47:f6:cd:14: bd:97:0b:ef:2a:5d:38:b9:b9:da:2f:d6:da:14:dc: 69:22:b0:e2:88:51:a7:f6:71:5b:25:aa:de:b2:f0: 49:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A9:39:7F:7C:ED:44:4D:0F:1E:AA:A8:45:99:A3:8C:78:26:87:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/bc97280e-58ac-34bd-b6b0-31818047edb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl X509v3 Authority Key Identifier: keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f982:200::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:26:74:72:f6:57:a5:80:81:40:15:e9:64:3c:95:6e:c5:14: 89:36:31:60:7c:87:9a:6a:71:f2:ee:cd:92:83:20:2c:f7:08: fc:aa:69:93:45:2f:44:d0:f3:e2:70:fa:8f:c9:ff:de:20:4d: 09:e9:77:96:76:39:94:fc:cf:52:31:5b:9c:4b:d8:f7:3e:b0: 3c:65:b9:16:9e:01:a6:cd:0a:e9:14:e4:d6:08:91:55:44:e0: 01:b2:5a:ed:73:0f:34:e5:f1:99:09:ff:75:4a:73:de:0a:59: f5:cc:9a:cc:87:60:4e:1e:87:07:43:80:ab:13:7e:00:3e:f6: 5a:f0:53:a1:fb:03:56:62:0f:7a:60:0e:fb:04:56:e0:c9:40: 44:51:5e:13:0f:79:2b:0b:e8:b1:da:b2:05:b8:76:46:72:47: 5b:c9:8b:7b:da:fd:12:ab:e3:2b:aa:90:b0:ac:a3:1e:27:56: 90:15:5d:5b:b9:ab:a5:bc:a9:48:95:50:09:45:7a:46:20:e8: 3b:1c:80:80:c7:5e:72:62:12:25:a5:79:48:ab:3c:01:53:1d: 03:74:47:a3:21:b5:5f:43:13:93:47:c4:d1:3a:1e:16:84:d0: 04:42:97:35:9f:0a:75:57:1e:87:c6:bd:33:57:c8:10:d7:e2: f8:3d:a5:f5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhwWv2fIETs4gYip8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQyY2Q3OGQtYzNmMS00NzFhLTkzMWEtMjZlYWY1YTg3 MmYzMB4XDTI1MDEwNTAyMDAzOVoXDTI1MDQwNTAxMDAzOVowLzEtMCsGA1UEAxMk OTFmMTJmYWQtZDk0Yi00ODVlLTlkYWQtMDlhNGEwNWVjZWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51vXQbqNAK/ecUf+sy4SiT51XxZjmP21vtRY F2ob2EONMcmQIMNqbeIY8eWOfyOPGbwwN5JnFf0mTUSo9tXcwd18mBYZuWj8Nr/3 r3rjJKhiCwq5cVNmsDqyK6gakhgY2cWRKMA58ToSsbHF8MqQ8k5uOyGWNx3Yey/M bqY1p6qFXsE2NMgxZTMC+Ud1C6tFuDgEKnsFLtKldapSkSEo7LtC1F6YPaN+qjXG 8pfNb/+JQwo5v8yE/rLAWFMvgHaMDDEnSrAW55SRId5ohP4xr29oOpcH0GTAACa+ Ikf2zRS9lwvvKl04ubnaL9baFNxpIrDiiFGn9nFbJaresvBJVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAWpOX987URNDx6qqEWZo4x4JodqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNDJj ZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVhZjVhODcyZjMvYmM5NzI4MGUtNThhYy0z NGJkLWI2YjAtMzE4MTgwNDdlZGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjQyY2Q3OGQtYzNmMS00NzFhLTkz MWEtMjZlYWY1YTg3MmYzL2I0MmNkNzhkLWMzZjEtNDcxYS05MzFhLTI2ZWFmNWE4 NzJmMy5jcmwwHwYDVR0jBBgwFoAUCvMe9nHLW/UmAy037mbdyIttVN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNDJjZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVh ZjVhODcyZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5ggIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACImdHL2V6WAgUAV6WQ8lW7FFIk2MWB8h5pqcfLuzZKDICz3CPyq aZNFL0TQ8+Jw+o/J/94gTQnpd5Z2OZT8z1IxW5xL2Pc+sDxluRaeAabNCukU5NYI kVVE4AGyWu1zDzTl8ZkJ/3VKc94KWfXMmsyHYE4ehwdDgKsTfgA+9lrwU6H7A1Zi D3pgDvsEVuDJQERRXhMPeSsL6LHasgW4dkZyR1vJi3va/RKr4yuqkLCsox4nVpAV XVu5q6W8qUiVUAlFekYg6DscgIDHXnJiEiWleUirPAFTHQN0R6MhtV9DE5NHxNE6 HhaE0ARClzWfCnVXHofGvTNXyBDX4vg9pfU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:55 2025 by rpki-client