$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/4c3a35b0-85d3-337d-b34e-65627f15cb1e.roa File: 4c3a35b0-85d3-337d-b34e-65627f15cb1e.roa (raw, json) Hash identifier: jHj/Lvr92dJQXZwgF00NVk0dIWmW2svExXWXSfeFBX8= Subject key identifier: 60:EA:63:2C:55:32:F4:4E:E7:AA:73:83:F4:41:CB:99:A8:7D:45:AC Certificate issuer: /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb Certificate serial: 010D0C9F432858485F9AE7BF7667F13702B9C820 Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/4c3a35b0-85d3-337d-b34e-65627f15cb1e.roa Signing time: Mon 30 Dec 2024 02:00:39 +0000 ROA not before: Mon 30 Dec 2024 02:00:39 +0000 ROA not after: Sun 30 Mar 2025 01:00:39 +0000 asID: 393448 IP address blocks: 2602:f96c:de::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:9a:e7:bf:76:67:f1:37:02:b9:c8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb Validity Not Before: Dec 30 02:00:39 2024 GMT Not After : Mar 30 01:00:39 2025 GMT Subject: CN=44639c3f-afab-410a-a240-335bf3f29937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8e:aa:67:d5:df:26:04:08:ff:45:61:21:0e: af:a6:06:41:91:a1:1f:01:08:73:9f:b0:d5:28:1b: f9:15:28:f0:bd:a7:a9:00:f1:1d:a4:71:83:ea:4b: 43:95:b0:7e:7c:ae:cf:02:e5:7a:dd:4b:5b:f1:25: cb:e2:23:34:ca:e5:70:7d:bb:e6:48:f4:86:3c:50: aa:4e:ae:94:bb:4a:55:1f:95:03:2c:5f:2a:73:52: 27:1a:2f:46:d4:f2:f7:a5:14:59:f0:8b:60:a0:94: c4:1e:0d:9e:dd:90:60:67:b9:1f:88:b4:88:9f:a6: b2:ef:b3:88:95:d4:3b:63:2a:5f:ed:30:cd:cd:50: 17:85:58:74:c1:d4:1c:1b:04:e6:af:9e:dc:d1:5d: 92:25:3c:84:99:20:03:f0:34:7d:eb:5a:82:5a:ff: 8e:e0:06:1c:9c:d5:34:4b:6b:58:bb:c5:81:9c:83: cf:03:fa:dd:b1:04:43:0b:45:18:02:b1:d2:10:be: e8:cd:e4:61:2f:4b:c0:ce:7d:17:95:e4:d4:07:0c: ab:40:97:f4:ec:2e:f3:71:68:36:4b:9e:e0:1d:7b: e9:12:39:fe:f3:42:43:98:d7:38:39:b1:31:84:df: 2d:80:3d:7a:d1:c8:86:ff:29:d0:36:ec:d6:e9:10: b3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EA:63:2C:55:32:F4:4E:E7:AA:73:83:F4:41:CB:99:A8:7D:45:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/4c3a35b0-85d3-337d-b34e-65627f15cb1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl X509v3 Authority Key Identifier: keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer sbgp-ipAddrBlock: critical IPv6: 2602:f96c:de::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:f7:3e:d8:ef:a5:28:7e:3f:8e:92:da:95:bb:57:0f:a4:97: c8:ef:5e:89:78:ef:3f:43:b6:26:95:4b:aa:41:e2:dc:81:2c: 99:ff:ef:d2:26:b1:ff:d0:63:2c:f4:ce:99:d6:30:f5:b1:a4: ec:f5:2c:05:3a:70:e3:a0:cf:6e:2b:be:59:82:c3:c6:44:10: 4a:59:4a:c7:20:9e:30:fb:e4:53:bf:4a:f1:13:9d:2b:54:0c: 4e:e9:c4:4e:7d:25:0e:f4:5d:f7:a2:7c:9c:ea:cf:0d:ec:36: cc:85:18:a8:07:2a:11:ef:98:d2:4e:5c:3a:ae:d4:f8:52:66: 39:f2:01:3b:d9:2a:d3:6d:24:a3:01:89:a6:de:6b:03:b8:68: d8:50:a2:9c:07:92:61:fa:a5:b2:11:c8:4d:19:12:96:4a:e2: 23:3c:80:89:ee:55:04:af:ca:47:55:dd:62:bc:34:53:b8:f2: ef:d9:78:52:54:8e:2f:8d:69:1c:34:d8:a7:fe:c3:af:26:bf: 6c:88:c5:0e:de:07:ff:b9:42:0e:06:0a:61:21:c7:8f:12:1a: 31:da:0b:30:2c:97:dd:cf:c0:4f:a8:9f:1e:4f:38:17:78:d3: e9:90:7c:5f:ea:83:41:9b:04:ea:ce:98:af:25:62:c6:cf:25: ab:f1:04:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhfmue/dmfxNwK5yCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UwYWNjODUtNGRjMS00ZGRjLThlYmItNTk4ZjNjYmMw ZWZiMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk NDQ2MzljM2YtYWZhYi00MTBhLWEyNDAtMzM1YmYzZjI5OTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi46qZ9XfJgQI/0VhIQ6vpgZBkaEfAQhzn7DV KBv5FSjwvaepAPEdpHGD6ktDlbB+fK7PAuV63Utb8SXL4iM0yuVwfbvmSPSGPFCq Tq6Uu0pVH5UDLF8qc1InGi9G1PL3pRRZ8ItgoJTEHg2e3ZBgZ7kfiLSIn6ay77OI ldQ7Yypf7TDNzVAXhVh0wdQcGwTmr57c0V2SJTyEmSAD8DR961qCWv+O4AYcnNU0 S2tYu8WBnIPPA/rdsQRDC0UYArHSEL7ozeRhL0vAzn0XleTUBwyrQJf07C7zcWg2 S57gHXvpEjn+80JDmNc4ObExhN8tgD160ciG/ynQNuzW6RCzVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGDqYyxVMvRO56pzg/RBy5mofUWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTBh Y2M4NS00ZGMxLTRkZGMtOGViYi01OThmM2NiYzBlZmIvNGMzYTM1YjAtODVkMy0z MzdkLWIzNGUtNjU2MjdmMTVjYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2UwYWNjODUtNGRjMS00ZGRjLThl YmItNTk4ZjNjYmMwZWZiL2NlMGFjYzg1LTRkYzEtNGRkYy04ZWJiLTU5OGYzY2Jj MGVmYi5jcmwwHwYDVR0jBBgwFoAUPnTKwypVMPwS8HSGrAwm83VIWo0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZTBhY2M4NS00ZGMxLTRkZGMtOGViYi01OThm M2NiYzBlZmIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5bADe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA73PtjvpSh+P46S2pW7Vw+kl8jvXol47z9DtiaVS6pB4tyBLJn/ 79Imsf/QYyz0zpnWMPWxpOz1LAU6cOOgz24rvlmCw8ZEEEpZSscgnjD75FO/SvET nStUDE7pxE59JQ70XfeifJzqzw3sNsyFGKgHKhHvmNJOXDqu1PhSZjnyATvZKtNt JKMBiabeawO4aNhQopwHkmH6pbIRyE0ZEpZK4iM8gInuVQSvykdV3WK8NFO48u/Z eFJUji+NaRw02Kf+w68mv2yIxQ7eB/+5Qg4GCmEhx48SGjHaCzAsl93PwE+onx5P OBd40+mQfF/qg0GbBOrOmK8lYsbPJavxBKE= -----END CERTIFICATE-----Generated at Sun Feb 16 20:49:43 2025 by rpki-client