$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e6a8ea0e-9dc4-37d7-8af9-9f071ebcce04.roa File: e6a8ea0e-9dc4-37d7-8af9-9f071ebcce04.roa (raw, json) Hash identifier: 0Vwg0FiVVqZl1Ho4BgKZdLgxOPyNtr7xyM27zilEDAk= Subject key identifier: 0C:5B:A9:C8:D9:C5:ED:F4:65:1D:B3:7A:5F:85:23:EF:73:22:EB:7B Certificate issuer: /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Certificate serial: 010D0C9F4328584898D60D9FDE5073275215AEC0 Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e6a8ea0e-9dc4-37d7-8af9-9f071ebcce04.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 14618 IP address blocks: 2602:fc88:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:0d:9f:de:50:73:27:52:15:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=42234bb1-dcd3-43cc-8514-d3c741402ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:58:ab:5c:9c:17:fe:5c:e4:14:0f:c4:0f:52: eb:ac:e7:0a:df:1a:c8:ee:3d:43:9f:5f:11:58:5c: d1:85:3b:32:2f:94:f2:74:4c:ff:68:38:d3:9b:ea: 4f:fe:32:c2:32:14:07:f8:28:5e:b5:5c:fc:76:f5: 4a:13:ae:a3:be:6a:ef:7a:ee:50:67:f8:15:81:0b: 8d:35:11:24:04:5e:43:69:35:14:57:3d:8e:b8:ef: 47:9a:28:7f:8a:61:ec:ea:b3:8b:6d:f7:0d:8e:39: 77:f3:0d:f6:9b:ef:ca:3c:22:3a:ec:d9:72:2a:4c: ca:8c:99:09:84:12:6e:0c:77:e2:26:4f:12:29:a5: e5:42:7a:e8:77:4c:ac:f4:fe:00:32:25:a6:77:7d: d1:63:93:71:67:dc:4a:a9:82:5f:d9:04:04:44:e8: 0c:0d:60:4f:b8:60:1b:c2:9d:8d:cd:10:9b:20:67: 96:76:46:4d:37:d3:ae:c8:a6:4f:df:70:28:d6:b6: 65:30:80:ab:6d:6e:bf:4c:5f:24:64:c1:30:58:0d: 2f:af:bd:4b:33:d5:7e:8e:3d:e4:15:dc:c4:ed:c8: 1f:7c:ee:65:ec:7c:9a:c9:af:86:58:64:96:d2:bf: 22:2a:3d:59:d0:db:2f:f2:5d:61:9f:c2:53:b9:6f: 4c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5B:A9:C8:D9:C5:ED:F4:65:1D:B3:7A:5F:85:23:EF:73:22:EB:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e6a8ea0e-9dc4-37d7-8af9-9f071ebcce04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl X509v3 Authority Key Identifier: keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc88:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:af:e9:87:30:83:7d:f2:af:40:68:ee:e2:f4:cc:20:ad:16: 1e:a0:87:09:be:19:51:1a:bf:60:54:c1:49:4b:38:f7:96:d5: fd:2e:71:b6:83:91:a8:01:2a:ac:a9:7d:b1:00:0b:5e:3c:0c: 29:fa:3c:0a:08:b2:35:da:f9:1c:1c:2d:a9:d1:78:10:17:a4: 61:3e:c9:34:79:21:d2:79:49:fa:bc:81:a6:8f:ce:d4:9c:c9: c8:01:f8:6f:fd:21:9d:f4:8a:87:fe:d5:d6:0c:95:ac:ca:fc: ee:b8:9f:11:82:46:35:0b:47:78:47:30:f8:c5:4d:d1:26:7e: 71:6d:8a:78:77:2a:cb:6d:c3:ee:d0:1d:d6:7c:f4:31:47:b9: 2b:43:60:cc:e2:dc:85:0e:2e:91:8b:64:12:a8:2d:7b:69:fb: 00:6c:c6:a0:12:76:cb:3e:8c:cc:fb:46:ab:e9:36:8d:93:16: 62:e1:26:84:11:56:1f:d7:7f:3c:da:38:33:cf:c6:50:0e:57: 2b:7f:f5:a9:57:46:a7:69:fb:2b:76:d0:4c:33:e9:bf:f6:54: 38:bc:9f:7b:f3:6f:17:b9:65:76:01:77:36:e7:6c:9a:f0:7e: 5a:d6:4c:a4:0a:d2:04:a5:3d:32:bb:01:6f:f0:db:a7:3e:50: 87:25:de:9e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiY1g2f3lBzJ1IVrsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdmNTU4OWUtNGZhMS00MWFmLTlkM2YtN2RiZDVmYmRi Mzk1MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk NDIyMzRiYjEtZGNkMy00M2NjLTg1MTQtZDNjNzQxNDAyYWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVirXJwX/lzkFA/ED1LrrOcK3xrI7j1Dn18R WFzRhTsyL5TydEz/aDjTm+pP/jLCMhQH+ChetVz8dvVKE66jvmrveu5QZ/gVgQuN NREkBF5DaTUUVz2OuO9Hmih/imHs6rOLbfcNjjl38w32m+/KPCI67NlyKkzKjJkJ hBJuDHfiJk8SKaXlQnrod0ys9P4AMiWmd33RY5NxZ9xKqYJf2QQEROgMDWBPuGAb wp2NzRCbIGeWdkZNN9OuyKZP33Ao1rZlMICrbW6/TF8kZMEwWA0vr71LM9V+jj3k FdzE7cgffO5l7Hyaya+GWGSW0r8iKj1Z0Nsv8l1hn8JTuW9MJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAxbqcjZxe30ZR2zel+FI+9zIut7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1 NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJkNWZiZGIzOTUvZTZhOGVhMGUtOWRjNC0z N2Q3LThhZjktOWYwNzFlYmNjZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTdmNTU4OWUtNGZhMS00MWFmLTlk M2YtN2RiZDVmYmRiMzk1L2U3ZjU1ODllLTRmYTEtNDFhZi05ZDNmLTdkYmQ1ZmJk YjM5NS5jcmwwHwYDVR0jBBgwFoAUKZPwH6li6cLOB/UgG+8dRa8tWRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJk NWZiZGIzOTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8iAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIOv6Ycwg33yr0Bo7uL0zCCtFh6ghwm+GVEav2BUwUlLOPeW1f0u cbaDkagBKqypfbEAC148DCn6PAoIsjXa+RwcLanReBAXpGE+yTR5IdJ5Sfq8gaaP ztScycgB+G/9IZ30iof+1dYMlazK/O64nxGCRjULR3hHMPjFTdEmfnFtinh3Kstt w+7QHdZ89DFHuStDYMzi3IUOLpGLZBKoLXtp+wBsxqASdss+jMz7RqvpNo2TFmLh JoQRVh/XfzzaODPPxlAOVyt/9alXRqdp+yt20Ewz6b/2VDi8n3vzbxe5ZXYBdzbn bJrwflrWTKQK0gSlPTK7AW/w26c+UIcl3p4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:32 2025 by rpki-client