$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/7ef25e37-4a09-3253-a970-a0546e63a3fe.roa File: 7ef25e37-4a09-3253-a970-a0546e63a3fe.roa (raw, json) Hash identifier: tcCPMB03l71+456bR5XwDB/IxUESDacoO9C4o6UCfj0= Subject key identifier: E1:3D:93:7C:91:54:52:6A:9B:84:D3:2C:BF:1E:1B:7B:E6:73:33:A8 Certificate issuer: /CN=ab0439ab-3236-4080-a238-62d21f65e1ad Certificate serial: 010D0C9F432858484C101F603571F5C9C2390C50 Authority key identifier: 17:40:B2:F6:E4:5E:2D:0D:BA:67:3A:EE:11:E0:18:68:C3:F0:5D:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/7ef25e37-4a09-3253-a970-a0546e63a3fe.roa Signing time: Mon 23 Dec 2024 02:00:40 +0000 ROA not before: Mon 23 Dec 2024 02:00:40 +0000 ROA not after: Sun 23 Mar 2025 01:00:40 +0000 asID: 198622 IP address blocks: 2602:80e:c000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ab0439ab-3236-4080-a238-62d21f65e1ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ab0439ab-3236-4080-a238-62d21f65e1ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4c:10:1f:60:35:71:f5:c9:c2:39:0c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0439ab-3236-4080-a238-62d21f65e1ad Validity Not Before: Dec 23 02:00:40 2024 GMT Not After : Mar 23 01:00:40 2025 GMT Subject: CN=ef03dc4a-1baf-4231-8946-9a9aa5ac4c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:35:c0:de:d7:1e:cc:76:4e:4a:7c:66:24:df: 3b:cc:8d:bd:a8:3b:e6:7e:4d:31:b6:94:05:b6:99: df:66:25:33:68:1f:11:8d:84:74:d2:33:a3:d8:c4: fd:87:86:c5:be:c4:cd:da:54:f5:8e:9b:db:79:a7: 30:cb:e7:b8:41:0c:62:f3:d0:58:90:20:3e:2e:7a: 01:f6:c2:df:83:f0:1b:fb:96:56:67:2a:60:ec:69: 08:c9:e8:3f:35:b2:7a:0b:26:23:d0:69:d6:65:3a: f4:95:db:0a:79:cc:b1:b2:91:2f:c1:da:e6:00:c4: 2d:25:e0:ca:52:4d:4c:eb:fe:3b:34:ac:4b:14:80: 5b:cd:73:6e:82:bf:12:71:4e:28:b6:9c:56:70:84: 2b:e8:b2:8e:a2:31:0d:61:b5:0d:be:0b:33:3f:de: 92:5a:ab:0a:2b:4f:ee:13:b4:02:de:f9:27:b9:d6: 14:12:6c:89:bd:c7:61:cf:f5:a4:fe:1c:ff:75:40: c4:ff:8a:80:1e:18:8e:0e:26:5f:06:9d:63:47:9c: ec:2d:6c:6a:53:6a:3e:ac:f0:ce:fd:28:94:e1:3c: 6a:9d:dd:09:11:3c:1f:d6:a3:ac:05:f0:16:55:a2: d7:0f:d6:16:22:18:27:2e:f3:74:f2:31:d4:8d:ce: 66:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3D:93:7C:91:54:52:6A:9B:84:D3:2C:BF:1E:1B:7B:E6:73:33:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/7ef25e37-4a09-3253-a970-a0546e63a3fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ab0439ab-3236-4080-a238-62d21f65e1ad.crl X509v3 Authority Key Identifier: keyid:17:40:B2:F6:E4:5E:2D:0D:BA:67:3A:EE:11:E0:18:68:C3:F0:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad.cer sbgp-ipAddrBlock: critical IPv6: 2602:80e:c000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:0b:e3:43:89:31:b0:5e:0d:3c:86:8d:d6:1a:24:2c:f7:46: 58:a9:b0:87:5b:82:fa:62:00:82:0d:5a:db:ef:ea:fb:0a:ea: e9:4d:57:18:7a:b2:a0:7f:40:e8:d2:bc:f7:ad:49:5d:d0:bf: c6:f2:e0:09:8d:42:2b:30:19:db:c4:24:28:70:0a:dd:b6:ae: e4:56:4b:e8:d6:e4:2d:f8:34:74:26:12:ea:61:24:b2:5c:b8: b5:df:b1:8d:66:86:43:b7:2d:bf:55:0d:e6:21:28:4c:3d:27: 96:90:5b:b4:e9:c6:73:39:59:54:8e:a9:f9:3d:a9:79:67:67: 2a:76:dc:b8:b9:43:30:6f:d8:fd:df:df:f0:99:35:a8:44:52: 89:91:30:bf:4a:28:79:93:f8:b4:3b:ec:df:b3:d0:e5:c2:7b: 35:a1:c6:6d:41:cb:7e:96:62:ee:f2:d2:bf:03:fe:17:e4:f3: 8f:4e:8b:55:9d:1e:d8:03:40:00:30:94:e4:e0:a3:d9:9e:e2: 55:83:84:90:a2:39:90:04:9c:70:06:46:f1:83:8f:fe:f8:c8: d8:dd:3e:ab:0b:22:1b:49:dc:4f:c5:fe:e7:bc:64:b9:fa:29: 4c:2b:45:70:86:58:2d:c4:eb:b0:e4:e1:22:fb:38:36:df:ec: f8:68:4e:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhMEB9gNXH1ycI5DFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIwNDM5YWItMzIzNi00MDgwLWEyMzgtNjJkMjFmNjVl MWFkMB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk ZWYwM2RjNGEtMWJhZi00MjMxLTg5NDYtOWE5YWE1YWM0YzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDXA3tcezHZOSnxmJN87zI29qDvmfk0xtpQF tpnfZiUzaB8RjYR00jOj2MT9h4bFvsTN2lT1jpvbeacwy+e4QQxi89BYkCA+LnoB 9sLfg/Ab+5ZWZypg7GkIyeg/NbJ6CyYj0GnWZTr0ldsKecyxspEvwdrmAMQtJeDK Uk1M6/47NKxLFIBbzXNugr8ScU4otpxWcIQr6LKOojENYbUNvgszP96SWqsKK0/u E7QC3vknudYUEmyJvcdhz/Wk/hz/dUDE/4qAHhiODiZfBp1jR5zsLWxqU2o+rPDO /SiU4Txqnd0JETwf1qOsBfAWVaLXD9YWIhgnLvN08jHUjc5mhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOE9k3yRVFJqm4TTLL8eG3vmczOoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjA0 MzlhYi0zMjM2LTQwODAtYTIzOC02MmQyMWY2NWUxYWQvN2VmMjVlMzctNGEwOS0z MjUzLWE5NzAtYTA1NDZlNjNhM2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWIwNDM5YWItMzIzNi00MDgwLWEy MzgtNjJkMjFmNjVlMWFkL2FiMDQzOWFiLTMyMzYtNDA4MC1hMjM4LTYyZDIxZjY1 ZTFhZC5jcmwwHwYDVR0jBBgwFoAUF0Cy9uReLQ26ZzruEeAYaMPwXa8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjA0MzlhYi0zMjM2LTQwODAtYTIzOC02MmQy MWY2NWUxYWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIDsAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIAL40OJMbBeDTyGjdYaJCz3RlipsIdbgvpiAIINWtvv6vsK6ulN Vxh6sqB/QOjSvPetSV3Qv8by4AmNQiswGdvEJChwCt22ruRWS+jW5C34NHQmEuph JLJcuLXfsY1mhkO3Lb9VDeYhKEw9J5aQW7TpxnM5WVSOqfk9qXlnZyp23Li5QzBv 2P3f3/CZNahEUomRML9KKHmT+LQ77N+z0OXCezWhxm1By36WYu7y0r8D/hfk849O i1WdHtgDQAAwlOTgo9me4lWDhJCiOZAEnHAGRvGDj/74yNjdPqsLIhtJ3E/F/ue8 ZLn6KUwrRXCGWC3E67Dk4SL7ODbf7PhoTjE= -----END CERTIFICATE-----Generated at Sun Feb 16 20:30:46 2025 by rpki-client