$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/36906e46-bec5-3393-be66-d1b8539c5d00.roa File: 36906e46-bec5-3393-be66-d1b8539c5d00.roa (raw, json) Hash identifier: 8rkgooLzyqfgpBk/lEOuTPebT8+IMiA7uG+FlNoiir0= Subject key identifier: 55:A8:74:D1:B3:F7:93:84:09:D4:CE:DD:C2:C8:D6:C6:BC:29:AF:42 Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Certificate serial: 010D0C9F43285848D6410B3CCFDA73F806A136C0 Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/36906e46-bec5-3393-be66-d1b8539c5d00.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 400226 IP address blocks: 2602:fc05::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:0b:3c:cf:da:73:f8:06:a1:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=66cb2018-fcb5-4297-ad7b-ac2fa98bcf6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6a:4a:77:de:eb:13:e0:ca:e0:ba:69:cd:41: 71:a8:5f:bc:1a:44:73:75:a0:79:81:c3:c1:6f:71: f4:61:6b:09:8a:fb:f6:30:ea:f0:42:56:4a:1a:f7: 75:87:58:8f:10:9b:77:4d:41:02:97:80:54:2f:bc: a0:7b:72:91:d1:c4:d4:8e:5b:33:1f:6f:6b:1e:96: 6a:d8:e0:0a:fb:7b:2c:da:0b:6e:fe:d7:e9:d9:e1: 69:a4:3f:9b:a4:dc:0f:32:07:d3:db:29:89:86:23: e0:3d:74:63:1b:4b:ed:54:3b:ad:0b:68:23:ff:95: 04:fc:46:ad:ac:b7:3d:77:85:48:5b:4e:d1:a8:e1: 9e:9b:6d:49:e9:50:04:96:ce:fa:33:17:9d:b7:4a: 72:33:68:aa:25:df:fb:9d:00:0f:cf:f6:a1:b0:03: db:ed:21:9f:3f:91:3c:59:2c:bb:a7:a0:49:ff:11: 8b:19:84:28:2f:e5:93:8a:aa:c8:c7:cb:7d:1a:2c: 01:33:93:a8:9d:98:cf:a2:a9:cc:f0:25:83:13:47: fc:11:65:e3:f9:6e:ef:d1:97:0b:68:c7:89:a4:18: 18:b2:5b:18:00:6e:bc:87:01:9d:94:d2:ba:df:17: c2:7d:73:cf:cc:1c:cd:4c:c6:ab:67:aa:e6:32:2a: 77:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A8:74:D1:B3:F7:93:84:09:D4:CE:DD:C2:C8:D6:C6:BC:29:AF:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/36906e46-bec5-3393-be66-d1b8539c5d00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl X509v3 Authority Key Identifier: keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc05::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:4b:5e:96:d8:c9:b8:31:53:14:a8:27:87:16:96:a9:be:ee: 5b:83:3c:a6:9d:7f:89:1c:77:5b:aa:f6:4a:b6:f7:83:87:3f: bb:dd:32:e3:bc:55:c8:dc:5a:f7:90:bd:f1:b6:b2:bf:21:17: 90:f1:25:17:98:d4:bd:60:a4:5b:3b:bf:c1:64:f0:d4:2c:41: ce:86:a0:71:e8:78:21:1a:8c:96:c6:6f:44:75:55:46:3c:27: 33:58:48:7e:b4:da:10:80:e1:19:ae:82:06:9f:2a:de:a9:60: 07:61:b5:e1:35:76:d8:33:93:cd:a0:6a:a2:6c:92:69:00:ab: 25:3e:9d:13:17:55:eb:f3:7a:70:ed:e8:fa:58:05:28:1f:9e: 3f:32:d1:00:b8:b0:af:bc:36:e2:c2:83:89:84:06:5a:f4:f9: 78:4d:65:b4:cc:a9:f1:29:c2:89:57:4d:b2:f4:ff:1d:b3:9e: 26:4f:4e:10:a5:7b:4b:92:69:39:87:f8:dc:de:a9:c2:07:c6: cd:68:4c:57:64:bc:d9:d3:b1:f4:39:fe:10:b2:1a:c4:c2:82: 00:cf:84:71:32:a8:59:df:01:d8:d8:dc:37:99:9c:be:b9:49: 27:7c:e8:32:9d:ef:96:13:93:61:17:80:d5:33:e7:b8:96:24: 2a:cd:f0:de -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjWQQs8z9pz+AahNsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkzM2FmNzAtZmFlNC00NGM2LTllNDItMmI5ZWRhM2Mx ZTBlMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk NjZjYjIwMTgtZmNiNS00Mjk3LWFkN2ItYWMyZmE5OGJjZjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGpKd97rE+DK4LppzUFxqF+8GkRzdaB5gcPB b3H0YWsJivv2MOrwQlZKGvd1h1iPEJt3TUECl4BUL7yge3KR0cTUjlszH29rHpZq 2OAK+3ss2gtu/tfp2eFppD+bpNwPMgfT2ymJhiPgPXRjG0vtVDutC2gj/5UE/Eat rLc9d4VIW07RqOGem21J6VAEls76Mxedt0pyM2iqJd/7nQAPz/ahsAPb7SGfP5E8 WSy7p6BJ/xGLGYQoL+WTiqrIx8t9GiwBM5OonZjPoqnM8CWDE0f8EWXj+W7v0ZcL aMeJpBgYslsYAG68hwGdlNK63xfCfXPPzBzNTMarZ6rmMip3dwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFWodNGz95OECdTO3cLI1sa8Ka9CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OTMz YWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjllZGEzYzFlMGUvMzY5MDZlNDYtYmVjNS0z MzkzLWJlNjYtZDFiODUzOWM1ZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTkzM2FmNzAtZmFlNC00NGM2LTll NDItMmI5ZWRhM2MxZTBlLzU5MzNhZjcwLWZhZTQtNDRjNi05ZTQyLTJiOWVkYTNj MWUwZS5jcmwwHwYDVR0jBBgwFoAUX0piry7HhCrgxdrmtpTYiRdP1RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OTMzYWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjll ZGEzYzFlMGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL8BQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAbUteltjJuDFTFKgnhxaWqb7uW4M8pp1/iRx3W6r2Srb3g4c/u90y 47xVyNxa95C98bayvyEXkPElF5jUvWCkWzu/wWTw1CxBzoagceh4IRqMlsZvRHVV RjwnM1hIfrTaEIDhGa6CBp8q3qlgB2G14TV22DOTzaBqomySaQCrJT6dExdV6/N6 cO3o+lgFKB+ePzLRALiwr7w24sKDiYQGWvT5eE1ltMyp8SnCiVdNsvT/HbOeJk9O EKV7S5JpOYf43N6pwgfGzWhMV2S82dOx9Dn+ELIaxMKCAM+EcTKoWd8B2NjcN5mc vrlJJ3zoMp3vlhOTYReA1TPnuJYkKs3w3g== -----END CERTIFICATE-----Generated at Sun Feb 16 20:12:53 2025 by rpki-client