$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/1d6b7359-9fa8-32fe-8de3-f31be739cf6e.roa File: 1d6b7359-9fa8-32fe-8de3-f31be739cf6e.roa (raw, json) Hash identifier: WcHqIN1RFgXw4+gU/w9VmZKB9Zl9WrcVTgtqsurdzNM= Subject key identifier: 1F:FC:B3:37:AA:09:B2:D9:C1:3D:8B:44:06:A0:F3:AA:78:F1:2C:ED Certificate issuer: /CN=08e3f98b-676d-49af-91dd-964a1e63df3b Certificate serial: 010D0C9F43285848BFEBA40F845C85DF0982EE20 Authority key identifier: FB:EC:CD:B3:66:98:39:A6:94:58:CD:4D:D2:2B:01:99:FE:8A:B1:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/1d6b7359-9fa8-32fe-8de3-f31be739cf6e.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 8075 IP address blocks: 2602:faa7::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/08e3f98b-676d-49af-91dd-964a1e63df3b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/08e3f98b-676d-49af-91dd-964a1e63df3b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:a4:0f:84:5c:85:df:09:82:ee:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08e3f98b-676d-49af-91dd-964a1e63df3b Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=42c9a7bc-4c20-4d15-b604-9b176e5a0c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b6:c4:52:a0:24:81:be:6f:1b:0e:57:3a:cb: 83:f6:d8:96:f5:1a:f2:e8:c4:f6:4d:2b:0f:40:1d: 8f:51:21:59:f3:6c:d3:55:11:80:34:5d:60:5f:69: dc:53:08:01:25:13:86:50:48:33:fe:c8:86:a1:92: a7:96:26:33:af:02:4c:23:be:84:99:42:27:51:bc: 50:cb:fe:0a:2b:8d:8d:5c:f0:4f:14:de:e1:96:5d: 3d:90:93:f1:47:56:ea:e0:39:77:8a:aa:4c:1a:5b: b1:a1:29:b2:f8:b5:f5:bb:3a:53:c9:fd:94:b2:90: 42:2b:7c:3f:4e:fb:99:69:94:9f:4d:49:ae:d0:05: df:64:6b:fe:ce:55:df:5b:49:c0:e7:c0:4c:34:82: 98:2d:39:76:cd:a0:5b:84:f6:b9:44:e7:77:bf:7d: 28:12:aa:43:08:ee:9e:e4:68:71:09:75:cf:29:77: 2c:70:4a:1a:57:02:09:7a:4f:d7:5e:af:c4:08:ce: b5:aa:5c:06:9f:59:48:ae:b3:f1:84:07:6c:32:36: 58:50:5f:0f:d6:b6:d7:96:66:e4:5e:23:f1:58:60: 6c:77:6d:c4:02:6b:9f:52:59:a4:f2:a5:e4:e7:cc: 7a:54:73:95:30:75:be:2c:59:7a:95:5a:ff:82:42: ca:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:FC:B3:37:AA:09:B2:D9:C1:3D:8B:44:06:A0:F3:AA:78:F1:2C:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/1d6b7359-9fa8-32fe-8de3-f31be739cf6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/08e3f98b-676d-49af-91dd-964a1e63df3b.crl X509v3 Authority Key Identifier: keyid:FB:EC:CD:B3:66:98:39:A6:94:58:CD:4D:D2:2B:01:99:FE:8A:B1:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b.cer sbgp-ipAddrBlock: critical IPv6: 2602:faa7::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:8f:9e:b6:f5:08:b0:09:e2:e6:f1:63:1f:df:71:c5:52:38: 2e:3c:60:31:cf:c5:c6:8a:44:14:26:7e:c8:39:0a:c9:61:a2: 09:1f:79:bb:30:6e:f7:04:11:b7:f4:c6:22:10:37:43:d3:ba: c3:5d:04:c2:27:f1:08:e3:bd:57:2f:cf:e5:7e:bd:10:41:20: c3:98:07:1d:b3:53:61:94:1a:95:fb:be:ca:55:e4:93:fd:40: 21:5c:77:43:8c:53:c3:43:ce:99:5e:dc:2a:b4:55:b9:5d:a5: 81:e7:9c:11:1b:ee:09:52:11:ed:42:e0:25:f3:0e:75:1c:da: d2:06:ad:8f:9e:f9:75:63:db:2d:3d:ec:99:d5:cf:c8:50:22: 80:42:6c:64:6b:b4:ad:9a:e8:1d:b2:f7:6d:41:44:07:03:ca: 43:97:d9:74:b4:a3:22:38:34:10:d5:32:ab:4d:1e:6b:1b:f4: 1e:17:43:b3:f2:aa:11:a4:56:c6:b2:51:4d:83:4d:79:bf:df: 71:ed:a9:1e:5c:6d:2a:12:17:49:fb:64:f6:5f:3f:0e:88:74: 4d:8b:e0:3c:37:6b:c2:96:31:53:f4:76:0a:be:a3:61:2b:a3: 78:0d:ed:e7:6e:7e:3a:ef:cf:9c:bf:c7:54:52:eb:ec:4a:47: af:ae:66:a3 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEi/66QPhFyF3wmC7iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDhlM2Y5OGItNjc2ZC00OWFmLTkxZGQtOTY0YTFlNjNk ZjNiMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk NDJjOWE3YmMtNGMyMC00ZDE1LWI2MDQtOWIxNzZlNWEwYzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7bEUqAkgb5vGw5XOsuD9tiW9Rry6MT2TSsP QB2PUSFZ82zTVRGANF1gX2ncUwgBJROGUEgz/siGoZKnliYzrwJMI76EmUInUbxQ y/4KK42NXPBPFN7hll09kJPxR1bq4Dl3iqpMGluxoSmy+LX1uzpTyf2UspBCK3w/ TvuZaZSfTUmu0AXfZGv+zlXfW0nA58BMNIKYLTl2zaBbhPa5ROd3v30oEqpDCO6e 5GhxCXXPKXcscEoaVwIJek/XXq/ECM61qlwGn1lIrrPxhAdsMjZYUF8P1rbXlmbk XiPxWGBsd23EAmufUlmk8qXk58x6VHOVMHW+LFl6lVr/gkLKAwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFB/8szeqCbLZwT2LRAag86p48SztMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wOGUz Zjk4Yi02NzZkLTQ5YWYtOTFkZC05NjRhMWU2M2RmM2IvMWQ2YjczNTktOWZhOC0z MmZlLThkZTMtZjMxYmU3MzljZjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDhlM2Y5OGItNjc2ZC00OWFmLTkx ZGQtOTY0YTFlNjNkZjNiLzA4ZTNmOThiLTY3NmQtNDlhZi05MWRkLTk2NGExZTYz ZGYzYi5jcmwwHwYDVR0jBBgwFoAU++zNs2aYOaaUWM1N0isBmf6KsQ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wOGUzZjk4Yi02NzZkLTQ5YWYtOTFkZC05NjRh MWU2M2RmM2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6pwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGI+etvUIsAni5vFjH99xxVI4LjxgMc/FxopEFCZ+yDkKyWGiCR95 uzBu9wQRt/TGIhA3Q9O6w10EwifxCOO9Vy/P5X69EEEgw5gHHbNTYZQalfu+ylXk k/1AIVx3Q4xTw0POmV7cKrRVuV2lgeecERvuCVIR7ULgJfMOdRza0gatj575dWPb LT3smdXPyFAigEJsZGu0rZroHbL3bUFEBwPKQ5fZdLSjIjg0ENUyq00eaxv0HhdD s/KqEaRWxrJRTYNNeb/fce2pHlxtKhIXSftk9l8/Doh0TYvgPDdrwpYxU/R2Cr6j YSujeA3t525+Ou/PnL/HVFLr7EpHr65mow== -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:38 2025 by rpki-client