$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/a50faf7e-80ed-3540-8863-2e3533723c21.roa File: a50faf7e-80ed-3540-8863-2e3533723c21.roa (raw, json) Hash identifier: 4aleUrWqGP5jcUGJ7UR0Fr7JdSJt2BNtDKMc1GwRyCk= Subject key identifier: 5C:30:CA:65:BC:29:84:25:9C:96:7E:75:F4:6C:78:0F:39:50:15:CE Certificate issuer: /CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Certificate serial: 010D0C9F43285848BBBB806450726AAF07EF5C80 Authority key identifier: 2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/a50faf7e-80ed-3540-8863-2e3533723c21.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 3356 IP address blocks: 2602:814:b000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:80:64:50:72:6a:af:07:ef:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=c19ea335-f935-4dc5-b40a-f5db19d44b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:df:6b:d4:59:5b:0c:32:ef:8d:2c:7f:0e:0f: 8c:ca:34:54:04:7f:52:61:e3:4f:96:ba:1b:03:cb: 78:73:a6:23:05:4f:f2:7a:62:61:62:46:b5:80:5a: 38:bb:5d:47:b9:ad:cd:38:e8:f1:d9:29:79:24:1c: e5:f0:20:03:2c:59:fa:a5:c6:6c:be:62:97:5d:ef: 30:6f:77:db:0c:03:f2:5e:31:ef:9e:bb:d8:da:f7: c7:b5:6c:78:e1:ee:d4:a8:0b:b0:5a:63:33:08:02: c4:bd:08:df:2e:c2:1f:86:53:6d:bf:83:1e:ed:14: 65:bd:f2:c7:d6:65:68:bd:b5:ed:12:78:51:9c:b9: 64:51:60:9f:a2:e1:2c:04:2a:b1:81:18:50:1f:96: 7f:2a:97:f4:13:a9:1f:95:f5:fb:f0:e2:18:d4:8a: de:b1:23:0e:f0:a7:fc:d9:92:77:e2:77:6e:01:cb: c4:5f:9b:ba:19:a8:64:19:f3:ab:52:8e:ff:3e:1b: 00:4e:3e:df:d9:88:b8:34:6f:96:b0:87:d0:7f:0f: 42:0c:25:90:d0:f9:bf:0c:b9:b0:ea:2b:fc:9b:8b: 7a:a9:60:b7:25:16:4d:7b:52:43:e1:fb:bd:6a:de: 5e:09:b4:9b:46:5c:21:06:3e:23:40:cb:de:fe:43: f9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:30:CA:65:BC:29:84:25:9C:96:7E:75:F4:6C:78:0F:39:50:15:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/a50faf7e-80ed-3540-8863-2e3533723c21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl X509v3 Authority Key Identifier: keyid:2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer sbgp-ipAddrBlock: critical IPv6: 2602:814:b000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:90:0a:5f:12:d5:bd:ad:64:b0:7a:8a:24:b5:94:8e:07:34: 84:eb:e8:ac:73:e9:cf:c2:d7:f7:00:e0:91:64:09:68:bd:68: 88:82:bf:56:8c:d4:71:ec:c6:0f:53:81:56:f0:22:ab:31:23: c5:e5:a7:25:7d:f4:84:3d:3f:db:1e:0f:80:fd:58:49:c4:4e: d7:c1:58:0d:82:89:6d:99:5f:ca:af:2e:82:f8:3e:03:29:db: dc:2d:47:f2:64:fc:c1:3d:32:75:21:92:1f:46:1d:83:58:40: f6:c5:9a:09:3d:3c:f2:b7:81:13:81:95:e9:17:ab:18:99:48: d1:03:0b:51:ce:3c:89:ba:e6:3d:c7:ad:cb:e2:3c:15:e2:1e: 5b:a5:1f:a9:0a:9b:22:be:13:70:f8:15:99:9a:61:e5:d9:85: 00:d8:44:50:e0:05:70:28:33:35:06:29:fc:95:de:83:bd:f5: 08:5d:8e:93:ba:ae:a7:db:4d:60:9f:6e:ac:b5:70:a7:a0:b0: 22:d2:70:f8:e1:27:60:72:74:f8:56:b1:32:a9:9a:16:b6:c1: 78:cf:e4:bb:43:f8:c9:48:e8:27:73:f2:c7:58:22:2d:47:df: 73:8f:93:7a:0b:33:7f:29:ac:ab:21:f6:1b:04:2e:3a:51:8c: 40:2a:76:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEi7u4BkUHJqrwfvXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBmYThlM2YtNjdlOS00ZThmLTlkMTgtNjIxMWRkNjEz MDczMB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk YzE5ZWEzMzUtZjkzNS00ZGM1LWI0MGEtZjVkYjE5ZDQ0YjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA399r1FlbDDLvjSx/Dg+MyjRUBH9SYeNPlrob A8t4c6YjBU/yemJhYka1gFo4u11Hua3NOOjx2Sl5JBzl8CADLFn6pcZsvmKXXe8w b3fbDAPyXjHvnrvY2vfHtWx44e7UqAuwWmMzCALEvQjfLsIfhlNtv4Me7RRlvfLH 1mVovbXtEnhRnLlkUWCfouEsBCqxgRhQH5Z/Kpf0E6kflfX78OIY1IresSMO8Kf8 2ZJ34nduAcvEX5u6GahkGfOrUo7/PhsATj7f2Yi4NG+WsIfQfw9CDCWQ0Pm/DLmw 6iv8m4t6qWC3JRZNe1JD4fu9at5eCbSbRlwhBj4jQMve/kP5wwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFwwymW8KYQlnJZ+dfRseA85UBXOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZh OGUzZi02N2U5LTRlOGYtOWQxOC02MjExZGQ2MTMwNzMvYTUwZmFmN2UtODBlZC0z NTQwLTg4NjMtMmUzNTMzNzIzYzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBmYThlM2YtNjdlOS00ZThmLTlk MTgtNjIxMWRkNjEzMDczL2QwZmE4ZTNmLTY3ZTktNGU4Zi05ZDE4LTYyMTFkZDYx MzA3My5jcmwwHwYDVR0jBBgwFoAUK7RjzmcAGdo63rw75WI23btNwp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZhOGUzZi02N2U5LTRlOGYtOWQxOC02MjEx ZGQ2MTMwNzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIFLAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADKQCl8S1b2tZLB6iiS1lI4HNITr6Kxz6c/C1/cA4JFkCWi9aIiC v1aM1HHsxg9TgVbwIqsxI8XlpyV99IQ9P9seD4D9WEnETtfBWA2CiW2ZX8qvLoL4 PgMp29wtR/Jk/ME9MnUhkh9GHYNYQPbFmgk9PPK3gROBlekXqxiZSNEDC1HOPIm6 5j3HrcviPBXiHlulH6kKmyK+E3D4FZmaYeXZhQDYRFDgBXAoMzUGKfyV3oO99Qhd jpO6rqfbTWCfbqy1cKegsCLScPjhJ2BydPhWsTKpmha2wXjP5LtD+MlI6Cdz8sdY Ii1H33OPk3oLM38prKsh9hsELjpRjEAqdvA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:31:02 2025 by rpki-client