$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/f91c0a63-030d-37c7-a148-7c9cce96e5b2.roa File: f91c0a63-030d-37c7-a148-7c9cce96e5b2.roa (raw, json) Hash identifier: oEoh8mdT7lLlL9X2h5O1SRVDgVtjoapQsJhVtJNMcLY= Subject key identifier: 2F:ED:44:92:BD:1D:20:0F:2A:36:A3:16:58:D9:57:26:0E:DD:BE:34 Certificate issuer: /CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080 Certificate serial: 010D0C9F432858483E1AB781CCEC5B3EBD0F8E40 Authority key identifier: 33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/f91c0a63-030d-37c7-a148-7c9cce96e5b2.roa Signing time: Wed 18 Dec 2024 02:00:39 +0000 ROA not before: Wed 18 Dec 2024 02:00:39 +0000 ROA not after: Tue 18 Mar 2025 01:00:39 +0000 asID: 64289 IP address blocks: 2602:2ea:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3e:1a:b7:81:cc:ec:5b:3e:bd:0f:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080 Validity Not Before: Dec 18 02:00:39 2024 GMT Not After : Mar 18 01:00:39 2025 GMT Subject: CN=6d1d4c93-9710-48d9-8498-da3d5f2aeec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:67:28:4d:03:37:f8:27:5e:d4:b0:a9:62:cf: 33:b1:56:79:fb:8d:7e:95:2a:02:85:fc:27:ad:e4: a4:33:a5:b2:00:f1:06:88:2d:0c:8f:a9:11:e3:80: e3:cd:85:78:4d:ce:5c:49:7b:d1:21:7f:9e:0e:b1: 2f:e2:e0:18:eb:39:71:1c:af:70:b3:e7:ed:6f:cd: 2d:f8:bd:76:22:36:53:3f:8e:f6:84:8c:e3:ff:84: e6:35:15:5b:ba:30:5d:0c:5d:33:d9:e8:c5:b7:dc: 8c:19:5f:c3:13:b8:af:2b:e0:07:30:52:c1:d5:15: 20:96:e0:59:e7:8f:d0:0a:4f:f4:39:39:1d:fe:ca: 41:f6:28:3e:6b:4f:77:eb:ee:07:1c:d4:eb:69:b8: 0d:c8:af:fc:f1:34:b5:07:6a:67:1d:33:ad:58:94: 79:a5:9d:e8:b1:0a:f3:5e:83:af:15:67:ff:9b:24: 4b:64:76:7b:cc:9e:79:82:de:10:68:3d:a8:7a:c0: 2c:6e:06:c6:be:2d:b7:fd:7c:b6:01:88:3a:90:b0: 0a:5f:c2:48:52:11:95:f0:ee:34:5e:f6:98:f1:c2: 80:47:7f:06:0c:56:9d:33:20:f2:ad:03:59:8c:91: 55:4b:d1:ec:24:3e:4b:21:ff:fd:d0:67:f8:39:35: 64:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:ED:44:92:BD:1D:20:0F:2A:36:A3:16:58:D9:57:26:0E:DD:BE:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/f91c0a63-030d-37c7-a148-7c9cce96e5b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl X509v3 Authority Key Identifier: keyid:33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer sbgp-ipAddrBlock: critical IPv6: 2602:2ea:8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:fd:81:cc:2b:ec:92:f8:f7:dd:68:f8:6b:cb:11:21:fa:30: a8:d4:05:47:b5:7b:06:0b:18:d2:d5:58:f0:6e:7e:9e:2f:a2: 15:97:0f:4c:f1:6f:5c:30:02:c8:2e:88:24:c1:f7:bd:8a:ee: af:c0:5d:3e:1d:52:b5:c6:2e:98:bf:f4:9c:26:aa:e0:bd:f3: 31:0b:52:ea:14:96:f2:8f:16:55:d2:31:21:5d:07:a9:93:48: da:f4:50:3f:5a:20:40:4e:ae:16:60:8b:fd:4b:99:af:26:3e: 7b:7e:d2:db:a9:90:a0:76:1e:5e:db:fa:d5:c5:3a:8b:9d:f1: 34:6b:e3:f7:b3:ab:0e:9e:e8:6e:5c:13:16:92:07:ba:36:bf: 98:89:9a:04:61:23:f7:fa:3c:21:a4:6e:6e:e4:3e:80:51:07: 5f:9c:1a:2e:1a:bb:f5:fc:fb:82:e0:ab:cb:88:7c:ab:be:7e: 79:c6:11:fc:94:10:a7:be:1a:13:ce:56:00:66:7e:22:0f:cc: 04:a0:63:81:7a:64:94:2b:54:b4:12:50:16:12:60:c6:70:0d: 31:0e:3a:a7:c6:0a:0f:8f:f8:91:05:6a:d0:8b:41:99:bd:d5: 6b:a8:48:68:fe:14:82:b3:30:02:39:ee:9e:68:ab:7c:b0:d3: 99:e5:f1:ac -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEg+GreBzOxbPr0PjkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIzYmMwN2QtNTRjNi00MTVmLTlkYzEtYzFhMjA5ZjJk MDgwMB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk NmQxZDRjOTMtOTcxMC00OGQ5LTg0OTgtZGEzZDVmMmFlZWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGcoTQM3+Cde1LCpYs8zsVZ5+41+lSoChfwn reSkM6WyAPEGiC0Mj6kR44DjzYV4Tc5cSXvRIX+eDrEv4uAY6zlxHK9ws+ftb80t +L12IjZTP472hIzj/4TmNRVbujBdDF0z2ejFt9yMGV/DE7ivK+AHMFLB1RUgluBZ 54/QCk/0OTkd/spB9ig+a0936+4HHNTrabgNyK/88TS1B2pnHTOtWJR5pZ3osQrz XoOvFWf/myRLZHZ7zJ55gt4QaD2oesAsbgbGvi23/Xy2AYg6kLAKX8JIUhGV8O40 XvaY8cKAR38GDFadMyDyrQNZjJFVS9HsJD5LIf/90Gf4OTVk3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC/tRJK9HSAPKjajFljZVyYO3b40MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMjNi YzA3ZC01NGM2LTQxNWYtOWRjMS1jMWEyMDlmMmQwODAvZjkxYzBhNjMtMDMwZC0z N2M3LWExNDgtN2M5Y2NlOTZlNWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTIzYmMwN2QtNTRjNi00MTVmLTlk YzEtYzFhMjA5ZjJkMDgwL2EyM2JjMDdkLTU0YzYtNDE1Zi05ZGMxLWMxYTIwOWYy ZDA4MC5jcmwwHwYDVR0jBBgwFoAUMw3RU/41EgfdV4opG2vmF9scWPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMjNiYzA3ZC01NGM2LTQxNWYtOWRjMS1jMWEy MDlmMmQwODAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIC6gAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAb9gcwr7JL4991o+GvLESH6MKjUBUe1ewYLGNLVWPBufp4vohWX D0zxb1wwAsguiCTB972K7q/AXT4dUrXGLpi/9JwmquC98zELUuoUlvKPFlXSMSFd B6mTSNr0UD9aIEBOrhZgi/1Lma8mPnt+0tupkKB2Hl7b+tXFOoud8TRr4/ezqw6e 6G5cExaSB7o2v5iJmgRhI/f6PCGkbm7kPoBRB1+cGi4au/X8+4Lgq8uIfKu+fnnG EfyUEKe+GhPOVgBmfiIPzASgY4F6ZJQrVLQSUBYSYMZwDTEOOqfGCg+P+JEFatCL QZm91WuoSGj+FIKzMAI57p5oq3yw05nl8aw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:49 2025 by rpki-client