$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/97a70c16-3543-3f7c-8c2a-42f698a941c5.roa File: 97a70c16-3543-3f7c-8c2a-42f698a941c5.roa (raw, json) Hash identifier: xzK64oVtCzrh7EzFCV/1A7O87VEER3Y0Axc2JWyxQN0= Subject key identifier: 73:EB:63:8D:0D:F8:C4:9B:35:0B:47:9E:C4:49:4D:49:53:01:E1:6C Certificate issuer: /CN=5e6c5242-5ff7-40a8-b144-1f151915227e Certificate serial: 010D0C9F432858483F801E0485D2361E51DD3C40 Authority key identifier: BF:7E:0B:08:D0:1C:22:F8:E0:C5:D4:7E:63:D7:3B:56:D5:B8:D7:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/97a70c16-3543-3f7c-8c2a-42f698a941c5.roa Signing time: Wed 18 Dec 2024 14:00:52 +0000 ROA not before: Wed 18 Dec 2024 14:00:52 +0000 ROA not after: Tue 18 Mar 2025 13:00:52 +0000 asID: 14618 IP address blocks: 2602:fd3a:228::/45 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/5e6c5242-5ff7-40a8-b144-1f151915227e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/5e6c5242-5ff7-40a8-b144-1f151915227e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3f:80:1e:04:85:d2:36:1e:51:dd:3c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e6c5242-5ff7-40a8-b144-1f151915227e Validity Not Before: Dec 18 14:00:52 2024 GMT Not After : Mar 18 13:00:52 2025 GMT Subject: CN=1dcecbd8-6efe-44d6-8c76-911a1ff61c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ce:ac:34:f5:14:42:16:61:71:a9:15:67:26: 51:36:0c:73:15:2a:f8:a5:22:6b:1b:7e:55:e1:20: 1e:d1:69:9f:7c:9f:0c:19:c8:14:b4:cc:6c:d4:1d: 3a:d5:b4:4e:f8:eb:f1:86:dc:84:4b:a4:15:09:1c: 28:c5:87:15:b2:cf:b5:15:48:02:09:17:58:45:99: 85:b8:94:fd:d9:4c:a0:b4:a9:1a:bb:f2:76:e1:bd: ae:3d:51:47:36:c2:b6:42:cd:85:54:b4:34:21:a5: a4:35:bb:4c:81:3a:e4:43:82:c9:82:f9:8a:c5:fd: c5:15:22:6d:31:3c:a8:d4:f5:01:a9:ce:54:62:1a: 3e:a2:b5:f5:95:25:00:45:63:09:d9:49:33:36:ee: 00:45:d7:b9:57:50:d4:19:ab:9d:44:11:07:45:d1: 90:bc:a0:e4:a7:fc:32:70:96:f5:a7:70:92:5c:01: 10:c6:9d:88:5f:d9:52:c6:d8:e7:06:94:19:ca:23: f5:2b:f1:30:73:09:46:25:b9:49:4d:45:cf:9b:88: 1c:1a:75:2a:8f:6b:83:f4:35:56:cd:db:dd:37:11: b4:b5:a8:a6:3b:18:16:6d:f7:fe:6a:66:46:78:7c: 5c:f6:49:2b:b7:e5:ea:3e:60:77:3d:f3:a1:f0:1a: 33:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:EB:63:8D:0D:F8:C4:9B:35:0B:47:9E:C4:49:4D:49:53:01:E1:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/97a70c16-3543-3f7c-8c2a-42f698a941c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/5e6c5242-5ff7-40a8-b144-1f151915227e.crl X509v3 Authority Key Identifier: keyid:BF:7E:0B:08:D0:1C:22:F8:E0:C5:D4:7E:63:D7:3B:56:D5:B8:D7:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd3a:228::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:f5:cf:69:a8:92:f6:e0:3a:99:2a:32:11:76:7f:2b:82:4a: ce:ed:c9:e2:21:39:97:f5:0a:95:d9:81:cf:01:16:4b:fd:03: 94:1b:74:c1:2f:3e:19:ed:c9:5c:b8:25:82:06:94:d3:ea:9b: 88:3e:6d:51:9e:1b:16:7a:eb:1a:1b:03:90:d3:c7:1c:b9:be: 77:28:0c:87:e3:03:4c:03:c0:21:4f:3d:b5:c2:91:17:1d:9b: 6b:c2:89:71:28:8a:d5:e3:fd:67:30:fa:b6:36:e1:34:d3:13: 42:33:39:b6:20:62:75:9d:f6:57:2e:c4:1c:4b:86:f5:2d:5f: ac:29:ac:40:e2:14:0f:57:5c:a9:30:8f:30:5f:4c:9a:e9:e9: ae:a7:8e:77:b8:82:3a:10:96:e9:9d:d3:d8:fb:12:bf:80:c2: f7:6c:2b:67:46:20:e2:54:0e:c7:2f:ce:a7:7f:7f:02:55:72: 6a:41:90:83:61:1d:bc:8a:d0:81:04:0c:a1:bc:20:74:f6:0d: a4:1a:6d:34:f5:5f:d5:40:af:4a:19:86:45:b4:59:a5:67:e9: f0:41:07:e1:ff:37:cf:94:7e:45:34:10:2f:12:9e:b6:89:a1: a4:d6:cd:99:12:f2:10:d5:44:ca:88:2b:d8:2e:c2:29:a9:fe: 55:27:3b:c2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEg/gB4EhdI2HlHdPEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU2YzUyNDItNWZmNy00MGE4LWIxNDQtMWYxNTE5MTUy MjdlMB4XDTI0MTIxODE0MDA1MloXDTI1MDMxODEzMDA1MlowLzEtMCsGA1UEAxMk MWRjZWNiZDgtNmVmZS00NGQ2LThjNzYtOTExYTFmZjYxYzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg86sNPUUQhZhcakVZyZRNgxzFSr4pSJrG35V 4SAe0WmffJ8MGcgUtMxs1B061bRO+OvxhtyES6QVCRwoxYcVss+1FUgCCRdYRZmF uJT92UygtKkau/J24b2uPVFHNsK2Qs2FVLQ0IaWkNbtMgTrkQ4LJgvmKxf3FFSJt MTyo1PUBqc5UYho+orX1lSUARWMJ2UkzNu4ARde5V1DUGaudRBEHRdGQvKDkp/wy cJb1p3CSXAEQxp2IX9lSxtjnBpQZyiP1K/EwcwlGJblJTUXPm4gcGnUqj2uD9DVW zdvdNxG0taimOxgWbff+amZGeHxc9kkrt+XqPmB3PfOh8BozmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHPrY40N+MSbNQtHnsRJTUlTAeFsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZTZj NTI0Mi01ZmY3LTQwYTgtYjE0NC0xZjE1MTkxNTIyN2UvOTdhNzBjMTYtMzU0My0z ZjdjLThjMmEtNDJmNjk4YTk0MWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWU2YzUyNDItNWZmNy00MGE4LWIx NDQtMWYxNTE5MTUyMjdlLzVlNmM1MjQyLTVmZjctNDBhOC1iMTQ0LTFmMTUxOTE1 MjI3ZS5jcmwwHwYDVR0jBBgwFoAUv34LCNAcIvjgxdR+Y9c7VtW41+EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZTZjNTI0Mi01ZmY3LTQwYTgtYjE0NC0xZjE1 MTkxNTIyN2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgL9OgIo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAH1z2mokvbgOpkqMhF2fyuCSs7tyeIhOZf1CpXZgc8BFkv9A5Qb dMEvPhntyVy4JYIGlNPqm4g+bVGeGxZ66xobA5DTxxy5vncoDIfjA0wDwCFPPbXC kRcdm2vCiXEoitXj/Wcw+rY24TTTE0IzObYgYnWd9lcuxBxLhvUtX6wprEDiFA9X XKkwjzBfTJrp6a6njne4gjoQlumd09j7Er+AwvdsK2dGIOJUDscvzqd/fwJVcmpB kINhHbyK0IEEDKG8IHT2DaQabTT1X9VAr0oZhkW0WaVn6fBBB+H/N8+UfkU0EC8S nraJoaTWzZkS8hDVRMqIK9guwimp/lUnO8I= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:06 2025 by rpki-client