$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f30c9c21-4317-3091-8c73-74cf7dd4b318.roa File: f30c9c21-4317-3091-8c73-74cf7dd4b318.roa (raw, json) Hash identifier: Cpt40mX2SZYeHAObyhf00AQrStrzqVYhBfaYpzfs6Ys= Subject key identifier: 12:9D:5F:C6:E5:FB:38:AA:0E:AC:6C:A0:65:25:C4:91:36:ED:5B:5D Certificate issuer: /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Certificate serial: 010D0C9F4328584863CB062EA843548839EFD700 Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f30c9c21-4317-3091-8c73-74cf7dd4b318.roa Signing time: Tue 31 Dec 2024 14:00:53 +0000 ROA not before: Tue 31 Dec 2024 14:00:53 +0000 ROA not after: Mon 31 Mar 2025 13:00:53 +0000 asID: 400679 IP address blocks: 2602:fb82::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:63:cb:06:2e:a8:43:54:88:39:ef:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Validity Not Before: Dec 31 14:00:53 2024 GMT Not After : Mar 31 13:00:53 2025 GMT Subject: CN=dcf72c24-61f9-4fdb-af11-8bdcafd0fd9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e2:89:6c:36:0b:6b:6a:70:e0:91:1e:05:e9: 12:7b:63:c0:48:10:a6:c0:6c:f7:6c:09:e0:14:d9: 4f:c8:45:f9:9c:32:7f:d7:55:4a:83:a2:84:26:02: 6a:86:2c:89:52:21:3f:5e:ea:a9:a6:ef:1b:eb:08: fe:0d:2b:f5:d7:03:59:49:1f:dd:84:55:50:cf:91: ff:7c:3c:01:d4:6e:2f:75:5f:93:3a:99:25:2d:12: 29:11:dd:f5:05:5a:b8:27:23:1a:9a:0c:89:b5:ff: 9c:9b:af:57:9a:78:d0:dc:ac:d1:db:16:54:d2:76: 36:9c:2f:e0:c7:76:3d:f8:14:70:f0:6c:d0:c1:98: c8:37:91:39:a2:41:03:7e:40:3c:fa:89:91:0b:8a: 06:f0:40:9f:49:8e:63:b0:07:80:11:d1:7c:2d:e9: ef:f7:6f:e1:68:c2:f2:85:79:7c:a1:6d:af:b7:40: 11:2f:a9:f5:78:53:6d:22:83:fa:7d:1f:80:3e:ef: ff:db:88:ad:6f:60:4e:7e:33:bf:b2:ac:c5:36:ef: 6a:1c:7b:4a:37:0c:9b:41:91:4d:72:96:a3:27:b9: f4:76:3a:9e:b8:4a:15:86:20:ab:13:63:8b:e3:76: 7c:ad:f5:b5:19:e7:e9:34:35:79:f3:ad:4b:43:92: 36:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9D:5F:C6:E5:FB:38:AA:0E:AC:6C:A0:65:25:C4:91:36:ED:5B:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f30c9c21-4317-3091-8c73-74cf7dd4b318.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl X509v3 Authority Key Identifier: keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb82::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:74:8a:37:5a:00:9f:c8:e2:bc:27:d9:d2:fe:21:48:ed:f0: 97:36:b5:cd:0f:e8:b9:74:26:99:17:98:81:42:88:50:df:ad: a8:87:79:37:34:66:57:20:1d:b7:f3:45:cb:5e:a9:a3:82:62: 2c:5a:33:dd:66:74:d8:bd:ca:04:1c:74:a7:51:c3:c8:5a:44: f4:bb:b3:12:3b:68:c6:81:41:f0:e9:0e:0f:c6:89:1d:26:69: f7:71:9e:f3:52:c4:bb:3a:2d:84:41:5d:cc:f2:1d:43:96:6c: cc:26:fa:bf:8e:c9:0f:d5:01:26:50:ac:a1:60:8c:9b:47:de: 7d:ca:5b:e8:0d:ac:4e:5a:7a:71:3d:d7:10:0e:63:65:dd:04: 2a:41:b1:d2:47:0c:46:f3:8a:76:3c:5f:54:92:bd:97:fd:dc: 5c:1e:90:9b:ef:28:52:5d:97:85:7d:c8:e5:83:a7:da:5f:dc: 06:36:87:7e:4f:ee:d5:75:ac:bc:d0:6f:60:e4:15:ef:7c:4d: 9e:fd:60:07:7b:51:27:a8:2c:94:b1:09:ca:76:dc:01:dd:cb: 68:d5:d3:7d:3a:72:48:49:78:13:b5:01:01:8a:2b:0a:43:04: f9:80:cc:57:10:60:00:51:d1:20:31:b7:a9:b9:13:4b:24:e6: 5f:12:9d:74 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEhjywYuqENUiDnv1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU4OWYzZTQtMjcwMS00OGY1LTljNmItN2VhOGQwNzFl Y2U3MB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk ZGNmNzJjMjQtNjFmOS00ZmRiLWFmMTEtOGJkY2FmZDBmZDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOKJbDYLa2pw4JEeBekSe2PASBCmwGz3bAng FNlPyEX5nDJ/11VKg6KEJgJqhiyJUiE/Xuqppu8b6wj+DSv11wNZSR/dhFVQz5H/ fDwB1G4vdV+TOpklLRIpEd31BVq4JyMamgyJtf+cm69XmnjQ3KzR2xZU0nY2nC/g x3Y9+BRw8GzQwZjIN5E5okEDfkA8+omRC4oG8ECfSY5jsAeAEdF8Lenv92/haMLy hXl8oW2vt0ARL6n1eFNtIoP6fR+APu//24itb2BOfjO/sqzFNu9qHHtKNwybQZFN cpajJ7n0djqeuEoVhiCrE2OL43Z8rfW1GefpNDV5861LQ5I2uQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBKdX8bl+ziqDqxsoGUlxJE27VtdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5 ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4ZDA3MWVjZTcvZjMwYzljMjEtNDMxNy0z MDkxLThjNzMtNzRjZjdkZDRiMzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDU4OWYzZTQtMjcwMS00OGY1LTlj NmItN2VhOGQwNzFlY2U3L2Q1ODlmM2U0LTI3MDEtNDhmNS05YzZiLTdlYThkMDcx ZWNlNy5jcmwwHwYDVR0jBBgwFoAUQbmkG8YihK7ly7p7M2I7+iT7/yIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4 ZDA3MWVjZTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL7ggAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGnSKN1oAn8jivCfZ0v4hSO3wlza1zQ/ouXQmmReYgUKIUN+tqId5 NzRmVyAdt/NFy16po4JiLFoz3WZ02L3KBBx0p1HDyFpE9LuzEjtoxoFB8OkOD8aJ HSZp93Ge81LEuzothEFdzPIdQ5ZszCb6v47JD9UBJlCsoWCMm0fefcpb6A2sTlp6 cT3XEA5jZd0EKkGx0kcMRvOKdjxfVJK9l/3cXB6Qm+8oUl2XhX3I5YOn2l/cBjaH fk/u1XWsvNBvYOQV73xNnv1gB3tRJ6gslLEJynbcAd3LaNXTfTpySEl4E7UBAYor CkME+YDMVxBgAFHRIDG3qbkTSyTmXxKddA== -----END CERTIFICATE-----Generated at Sun Feb 16 20:23:11 2025 by rpki-client