$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/d66ba33e-1a87-3f7a-a3ca-829c23db2bc2.roa File: d66ba33e-1a87-3f7a-a3ca-829c23db2bc2.roa (raw, json) Hash identifier: +LVq12M9OGXA4pHzneTxMkcICXRfdbMvRCBhrdRvOi0= Subject key identifier: 80:FC:FF:CD:DE:0A:F0:5F:6E:71:E0:67:4C:9C:A0:8C:E1:20:AF:E8 Certificate issuer: /CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Certificate serial: 010D0C9F4328584869606CA23F3DC56A01F87F00 Authority key identifier: F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/d66ba33e-1a87-3f7a-a3ca-829c23db2bc2.roa Signing time: Thu 02 Jan 2025 14:00:52 +0000 ROA not before: Thu 02 Jan 2025 14:00:52 +0000 ROA not after: Wed 02 Apr 2025 13:00:52 +0000 asID: 54309 IP address blocks: 2602:fa3c::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:69:60:6c:a2:3f:3d:c5:6a:01:f8:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Validity Not Before: Jan 2 14:00:52 2025 GMT Not After : Apr 2 13:00:52 2025 GMT Subject: CN=5822a665-c3b7-4392-b872-8470c8d157b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b7:d4:01:2b:45:b7:1d:6b:45:10:82:82:65: 8f:f4:0a:7c:45:0d:3d:a8:e9:d1:e5:d4:b2:55:83: 17:50:b4:6b:ef:9f:31:7e:d0:2f:93:7f:97:d7:f0: 12:34:5b:1f:d6:fc:ed:0b:24:a6:43:8b:be:91:ed: fa:af:a9:16:9d:f2:11:f3:ca:df:ca:86:15:53:1f: 51:b7:98:8d:ee:41:cb:ac:25:38:49:53:2c:a0:d7: af:a1:6d:41:9b:ee:69:a9:56:a1:38:1e:96:79:0d: 5c:05:fa:93:1d:16:06:66:a9:5c:71:92:67:21:33: d2:bf:12:c5:b7:e9:d9:54:79:ee:3d:62:e0:d5:47: 89:05:05:36:ad:1f:84:20:db:de:cb:6f:0c:4f:7a: 1a:a3:f7:ab:a3:6f:dc:4f:86:ca:a7:38:2b:29:cb: 2f:90:86:28:60:4a:61:59:3e:7f:92:f6:2c:47:f7: c6:e8:39:c9:3e:56:4c:dd:27:25:b1:91:79:38:59: 9b:66:ef:93:b9:80:2a:ed:72:3c:2b:0a:22:aa:8a: d7:8f:0f:9e:7c:11:87:11:31:a8:9e:fc:db:4a:67: 13:e7:26:b6:26:57:aa:fc:29:13:2a:2f:a8:41:1f: 33:18:b9:dc:21:13:9d:20:a9:15:30:c4:79:89:40: a1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FC:FF:CD:DE:0A:F0:5F:6E:71:E0:67:4C:9C:A0:8C:E1:20:AF:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/d66ba33e-1a87-3f7a-a3ca-829c23db2bc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl X509v3 Authority Key Identifier: keyid:F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa3c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:0f:83:dc:87:1d:a2:98:99:76:72:a7:c1:76:d4:36:e4:ef: 4c:d3:71:fa:d1:3e:d2:f2:e3:db:07:72:4f:63:50:bd:e1:ed: 3d:f5:a8:67:09:63:75:b5:a9:e3:9c:43:01:e9:e0:d0:f8:34: 8c:d7:17:94:1d:4e:77:75:4d:73:a2:56:1c:a1:1d:80:16:01: c3:33:56:e5:bc:7d:f0:76:4d:5e:ab:66:0f:f6:8e:4b:25:7b: 73:74:b2:08:ce:d7:c7:c7:98:78:07:0d:62:be:21:47:4d:5d: 94:f9:7d:06:24:56:93:6f:5a:24:e6:a9:55:00:46:cd:b9:c1: a6:3f:eb:8d:8e:b2:a5:a1:d0:ac:10:7f:6d:25:cd:6c:8f:6f: 82:ed:6f:b1:7f:ab:fc:3f:71:ff:c1:92:c0:04:5b:0c:0e:3c: 94:b1:6f:c3:c4:95:4f:1e:e4:fb:97:43:9f:21:7f:c8:6c:33: 83:7f:c8:2d:29:32:7b:c5:65:ca:f9:d7:8e:78:f6:0c:91:32: 58:b1:c2:a8:44:34:df:b1:ce:78:16:e8:75:52:0f:f3:92:04: 88:17:f7:4b:ae:f8:b5:93:12:32:76:67:e1:a9:0d:b6:f6:1b: 33:91:e4:eb:46:09:a9:85:88:8d:5d:62:3a:10:be:49:f0:07: 22:46:f0:2b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEhpYGyiPz3FagH4fwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE4OWQ2MmMtYTA4ZS00YzRlLTlmNDctYTQwZDE2Mjlm MDkxMB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk NTgyMmE2NjUtYzNiNy00MzkyLWI4NzItODQ3MGM4ZDE1N2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrfUAStFtx1rRRCCgmWP9Ap8RQ09qOnR5dSy VYMXULRr758xftAvk3+X1/ASNFsf1vztCySmQ4u+ke36r6kWnfIR88rfyoYVUx9R t5iN7kHLrCU4SVMsoNevoW1Bm+5pqVahOB6WeQ1cBfqTHRYGZqlccZJnITPSvxLF t+nZVHnuPWLg1UeJBQU2rR+EINvey28MT3oao/ero2/cT4bKpzgrKcsvkIYoYEph WT5/kvYsR/fG6DnJPlZM3SclsZF5OFmbZu+TuYAq7XI8KwoiqorXjw+efBGHETGo nvzbSmcT5ya2Jleq/CkTKi+oQR8zGLncIROdIKkVMMR5iUChwwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFID8/83eCvBfbnHgZ0ycoIzhIK/oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5 ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBkMTYyOWYwOTEvZDY2YmEzM2UtMWE4Ny0z ZjdhLWEzY2EtODI5YzIzZGIyYmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWE4OWQ2MmMtYTA4ZS00YzRlLTlm NDctYTQwZDE2MjlmMDkxLzVhODlkNjJjLWEwOGUtNGM0ZS05ZjQ3LWE0MGQxNjI5 ZjA5MS5jcmwwHwYDVR0jBBgwFoAU8FWyS0Mw1eDX0obNoZJEPF1KgJowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBk MTYyOWYwOTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6PAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWw+D3IcdopiZdnKnwXbUNuTvTNNx+tE+0vLj2wdyT2NQveHtPfWo ZwljdbWp45xDAeng0Pg0jNcXlB1Od3VNc6JWHKEdgBYBwzNW5bx98HZNXqtmD/aO SyV7c3SyCM7Xx8eYeAcNYr4hR01dlPl9BiRWk29aJOapVQBGzbnBpj/rjY6ypaHQ rBB/bSXNbI9vgu1vsX+r/D9x/8GSwARbDA48lLFvw8SVTx7k+5dDnyF/yGwzg3/I LSkye8VlyvnXjnj2DJEyWLHCqEQ037HOeBbodVIP85IEiBf3S674tZMSMnZn4akN tvYbM5Hk60YJqYWIjV1iOhC+SfAHIkbwKw== -----END CERTIFICATE-----Generated at Fri Mar 14 09:51:59 2025 by rpki-client