$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/ffd9f8d6-0f97-3fc2-87fc-63cc08d4488f.roa File: ffd9f8d6-0f97-3fc2-87fc-63cc08d4488f.roa (raw, json) Hash identifier: 0yK0rOUtDCUC8eAUE7Jg8Sj7juiJ45r+qN17ezlwIQU= Subject key identifier: 5E:21:C5:1E:2C:20:FF:6E:F5:80:8B:AE:64:F2:18:45:B5:00:0A:44 Certificate issuer: /CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6 Certificate serial: 010D0C9F43285848494564B39E36439997164B80 Authority key identifier: 4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/ffd9f8d6-0f97-3fc2-87fc-63cc08d4488f.roa Signing time: Sun 22 Dec 2024 02:00:39 +0000 ROA not before: Sun 22 Dec 2024 02:00:39 +0000 ROA not after: Sat 22 Mar 2025 01:00:39 +0000 asID: 174 IP address blocks: 2602:fc39:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:49:45:64:b3:9e:36:43:99:97:16:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6 Validity Not Before: Dec 22 02:00:39 2024 GMT Not After : Mar 22 01:00:39 2025 GMT Subject: CN=d821eb45-77d9-4906-8955-a04cca78ffd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:00:aa:ab:bd:91:bd:84:da:00:cb:d6:20:00: a9:b6:f2:f9:90:09:66:65:4e:a9:2d:3f:6a:95:37: b4:01:0c:9b:5d:0e:a2:1e:1f:eb:c5:ac:95:e3:ef: e5:6f:26:8d:9b:96:75:d4:e1:ac:f2:c8:b9:32:45: 12:92:59:7d:f2:80:25:78:b5:f1:a6:e6:3a:ff:24: e8:7f:e1:44:a6:10:fa:0b:54:90:89:79:d9:9d:98: 99:03:cd:cb:61:9d:30:3c:a7:c8:47:39:96:00:c5: 0a:65:93:c0:92:ee:40:41:65:bd:c5:7f:97:ca:9f: 20:7f:e5:26:3a:b3:73:d1:3d:22:db:bc:9a:dd:56: 7f:59:c4:ee:e1:1a:6b:38:e5:d9:0c:7b:cb:db:58: 6a:71:88:95:69:e0:32:86:be:74:19:67:f1:b1:0f: 56:e5:a8:58:ba:ba:d3:3d:7c:37:a8:9e:cc:13:74: 8d:95:c6:f3:e6:f3:4d:55:62:02:c8:54:df:da:fd: 20:37:8f:26:bb:af:94:81:30:f7:20:14:3c:28:b5: 75:a0:ba:9c:4c:03:50:d8:09:82:14:e6:e2:da:78: 4c:bd:94:ea:cc:ff:fb:e8:8b:d3:5e:5e:4b:be:2a: 8c:61:18:93:ed:48:56:79:6d:1d:83:0d:d8:e5:71: 81:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:21:C5:1E:2C:20:FF:6E:F5:80:8B:AE:64:F2:18:45:B5:00:0A:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/ffd9f8d6-0f97-3fc2-87fc-63cc08d4488f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl X509v3 Authority Key Identifier: keyid:4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc39:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:f8:1e:9e:9b:f7:37:4a:87:c7:dd:32:3c:22:25:9d:13:e3: a6:2d:79:9b:49:42:93:ab:51:39:21:38:27:d0:9c:24:56:e1: 97:cf:00:a5:ff:0e:86:61:fa:8a:34:4a:ff:2f:3e:21:5e:ac: 32:43:0f:06:a4:b8:8a:18:cd:51:25:e5:2a:ff:d2:b2:7a:66: cd:be:fe:24:d7:ac:1b:f8:22:e9:c6:ee:48:e7:6c:2b:71:3d: 18:5b:b5:be:ee:ca:10:4e:74:83:3a:b2:b2:e4:d5:13:f4:09: 17:3b:c3:e6:f6:41:c3:9f:fc:38:aa:f9:05:b0:45:ff:dd:54: 00:a1:b1:b8:d0:93:5e:2e:c8:2a:04:cd:66:5e:42:51:b6:0a: 03:06:43:62:85:ad:de:56:22:d5:7a:42:5a:5c:29:f3:e1:30: 45:58:14:d5:b1:6a:b6:53:68:b4:86:0d:8b:1c:76:14:58:57: 56:29:dc:60:75:7d:5f:6e:06:78:0d:1c:5d:9f:2a:64:8f:e0: d0:33:f9:ef:3c:1a:17:5b:95:7a:53:a8:4d:6b:81:6c:c1:30: e2:95:31:9f:c5:40:cb:ca:e3:f9:aa:cc:ba:4a:5f:89:3d:32: 24:6b:ab:a6:42:b2:1e:ce:15:23:e8:fd:ae:9e:f4:34:c2:e2: ab:fc:60:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhJRWSznjZDmZcWS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRkNzFkYTktNmZmMS00OWFiLWExZTUtNmM0OGY4ZjBj MWQ2MB4XDTI0MTIyMjAyMDAzOVoXDTI1MDMyMjAxMDAzOVowLzEtMCsGA1UEAxMk ZDgyMWViNDUtNzdkOS00OTA2LTg5NTUtYTA0Y2NhNzhmZmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgCqq72RvYTaAMvWIACptvL5kAlmZU6pLT9q lTe0AQybXQ6iHh/rxayV4+/lbyaNm5Z11OGs8si5MkUSkll98oAleLXxpuY6/yTo f+FEphD6C1SQiXnZnZiZA83LYZ0wPKfIRzmWAMUKZZPAku5AQWW9xX+Xyp8gf+Um OrNz0T0i27ya3VZ/WcTu4RprOOXZDHvL21hqcYiVaeAyhr50GWfxsQ9W5ahYurrT PXw3qJ7ME3SNlcbz5vNNVWICyFTf2v0gN48mu6+UgTD3IBQ8KLV1oLqcTANQ2AmC FObi2nhMvZTqzP/76IvTXl5LviqMYRiT7UhWeW0dgw3Y5XGBNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF4hxR4sIP9u9YCLrmTyGEW1AApEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3 MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4ZjhmMGMxZDYvZmZkOWY4ZDYtMGY5Ny0z ZmMyLTg3ZmMtNjNjYzA4ZDQ0ODhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjRkNzFkYTktNmZmMS00OWFiLWEx ZTUtNmM0OGY4ZjBjMWQ2L2I0ZDcxZGE5LTZmZjEtNDlhYi1hMWU1LTZjNDhmOGYw YzFkNi5jcmwwHwYDVR0jBBgwFoAUT4QpIPFqZbJeSMpRP7Uli1CK9fswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4 ZjhmMGMxZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OQAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGP4Hp6b9zdKh8fdMjwiJZ0T46YteZtJQpOrUTkhOCfQnCRW4ZfP AKX/DoZh+oo0Sv8vPiFerDJDDwakuIoYzVEl5Sr/0rJ6Zs2+/iTXrBv4IunG7kjn bCtxPRhbtb7uyhBOdIM6srLk1RP0CRc7w+b2QcOf/Diq+QWwRf/dVAChsbjQk14u yCoEzWZeQlG2CgMGQ2KFrd5WItV6QlpcKfPhMEVYFNWxarZTaLSGDYscdhRYV1Yp 3GB1fV9uBngNHF2fKmSP4NAz+e88GhdblXpTqE1rgWzBMOKVMZ/FQMvK4/mqzLpK X4k9MiRrq6ZCsh7OFSPo/a6e9DTC4qv8YN8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:53 2025 by rpki-client