$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/cf0646b3-a270-3e91-a9bb-005e44df8feb.roa File: cf0646b3-a270-3e91-a9bb-005e44df8feb.roa (raw, json) Hash identifier: Z7GG+oSv2mqec6EpgJYmNLoR8ajQWrTSDI322K+CgDk= Subject key identifier: 45:A1:8C:7A:2D:78:8A:35:FB:1E:D7:73:BD:EE:E1:CC:C6:C2:EA:28 Certificate issuer: /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Certificate serial: 010D0C9F4328584898D60D8B3F5255F6C7BB03C0 Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/cf0646b3-a270-3e91-a9bb-005e44df8feb.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 399805 IP address blocks: 2602:fc88:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:0d:8b:3f:52:55:f6:c7:bb:03:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=cb270bf5-31c8-4f4f-8d07-214276dfc3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0d:86:99:25:74:04:7b:35:38:a3:6b:d1:0e: bc:5f:b5:97:e2:e2:b9:8b:38:c1:04:b8:7b:f7:b5: f0:a1:1e:87:a3:02:fb:f5:42:0d:68:ff:77:b8:b4: 00:0c:98:88:2d:d2:0d:4b:6d:93:da:9f:03:b4:97: c9:df:4e:61:34:73:ae:b3:9e:5d:91:80:30:28:ec: 08:6d:ac:a8:74:76:2b:00:04:e6:0a:a4:84:ec:7e: 0f:c2:81:61:b5:87:df:d3:58:50:a2:6d:61:69:b8: e6:26:0f:94:38:f5:4d:57:90:1c:cf:fe:e5:a0:40: 4d:5e:3d:a7:4f:ca:1c:59:e7:86:c1:59:07:10:9a: 88:92:3a:d1:50:90:56:5c:21:0c:ed:d0:c6:8c:54: 11:b2:6f:80:b1:64:95:d8:51:dc:81:5f:2e:93:b9: 45:35:e4:fe:84:8f:0b:c3:cf:81:14:76:6f:d8:50: 4b:eb:37:e4:5c:9f:6b:cf:17:ba:54:7a:dc:4a:b6: 8a:c6:13:f7:17:eb:e6:9d:98:80:39:8c:37:4d:cf: 80:f3:38:e5:1e:bb:34:29:39:2d:76:7f:18:a6:d0: d4:49:8f:2c:4f:51:40:7c:05:a9:92:93:a5:87:56: 4b:bf:1c:be:6f:25:03:b1:88:c7:06:c4:9e:23:21: 29:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A1:8C:7A:2D:78:8A:35:FB:1E:D7:73:BD:EE:E1:CC:C6:C2:EA:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/cf0646b3-a270-3e91-a9bb-005e44df8feb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl X509v3 Authority Key Identifier: keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc88:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:54:fe:07:06:1a:cb:4d:0f:65:f9:90:8b:3b:99:a2:d6:43: ee:52:a3:46:a1:7e:84:2c:1a:03:9f:cd:e5:e3:45:e0:18:da: 3a:8b:4e:55:53:e6:60:62:7f:40:30:7d:4e:d9:a9:a8:1a:91: 16:73:17:fc:bb:fe:34:95:c5:17:06:93:6d:ff:eb:6b:d2:66: 0f:8a:c3:79:f2:9d:8b:99:8a:f5:47:0d:57:dc:0b:4d:6a:7a: 36:3d:3b:a0:d3:2b:57:4d:d9:81:15:18:5e:4b:7b:63:3b:23: 08:c9:73:c1:df:b9:82:52:1b:1f:41:6f:9d:ca:6f:85:b1:06: 07:95:e6:3a:04:c6:8f:62:7d:de:18:0d:26:02:27:c9:f7:b5: 58:c2:7b:53:ff:27:ff:5a:27:c0:93:01:2b:c8:fe:20:1c:a6: 72:ea:ff:de:a8:d5:9f:5a:81:28:e2:d6:86:7f:92:e4:2e:2b: e4:3a:c4:e3:0a:75:82:3f:3f:a6:a7:ef:a6:a0:dd:2c:15:a1: d2:ce:68:6c:56:b0:6d:2f:61:61:3f:bc:86:23:68:97:51:b9: f7:7e:0d:cd:90:3e:93:c3:82:08:1f:b3:da:5c:13:dc:1b:b4: 55:c6:a7:98:71:43:54:2a:f5:f8:05:6e:a8:03:b8:76:0e:38: bd:71:3c:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiY1g2LP1JV9se7A8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdmNTU4OWUtNGZhMS00MWFmLTlkM2YtN2RiZDVmYmRi Mzk1MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk Y2IyNzBiZjUtMzFjOC00ZjRmLThkMDctMjE0Mjc2ZGZjM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg2GmSV0BHs1OKNr0Q68X7WX4uK5izjBBLh7 97XwoR6HowL79UINaP93uLQADJiILdINS22T2p8DtJfJ305hNHOus55dkYAwKOwI bayodHYrAATmCqSE7H4PwoFhtYff01hQom1habjmJg+UOPVNV5Acz/7loEBNXj2n T8ocWeeGwVkHEJqIkjrRUJBWXCEM7dDGjFQRsm+AsWSV2FHcgV8uk7lFNeT+hI8L w8+BFHZv2FBL6zfkXJ9rzxe6VHrcSraKxhP3F+vmnZiAOYw3Tc+A8zjlHrs0KTkt dn8YptDUSY8sT1FAfAWpkpOlh1ZLvxy+byUDsYjHBsSeIyEpYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEWhjHoteIo1+x7Xc73u4czGwuooMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1 NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJkNWZiZGIzOTUvY2YwNjQ2YjMtYTI3MC0z ZTkxLWE5YmItMDA1ZTQ0ZGY4ZmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTdmNTU4OWUtNGZhMS00MWFmLTlk M2YtN2RiZDVmYmRiMzk1L2U3ZjU1ODllLTRmYTEtNDFhZi05ZDNmLTdkYmQ1ZmJk YjM5NS5jcmwwHwYDVR0jBBgwFoAUKZPwH6li6cLOB/UgG+8dRa8tWRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJk NWZiZGIzOTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8iAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEhU/gcGGstND2X5kIs7maLWQ+5So0ahfoQsGgOfzeXjReAY2jqL TlVT5mBif0AwfU7ZqagakRZzF/y7/jSVxRcGk23/62vSZg+Kw3nynYuZivVHDVfc C01qejY9O6DTK1dN2YEVGF5Le2M7IwjJc8HfuYJSGx9Bb53Kb4WxBgeV5joExo9i fd4YDSYCJ8n3tVjCe1P/J/9aJ8CTASvI/iAcpnLq/96o1Z9agSji1oZ/kuQuK+Q6 xOMKdYI/P6an76ag3SwVodLOaGxWsG0vYWE/vIYjaJdRufd+Dc2QPpPDgggfs9pc E9wbtFXGp5hxQ1Qq9fgFbqgDuHYOOL1xPEE= -----END CERTIFICATE-----Generated at Mon Apr 7 13:07:09 2025 by rpki-client