$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/17073da9-1980-383a-b12c-971b97acfc86.roa File: 17073da9-1980-383a-b12c-971b97acfc86.roa (raw, json) Hash identifier: /zzcEjkLt/gxQtmw2bp174+Sxs2/0xuNUStsw8TnBww= Subject key identifier: 85:AA:F7:86:32:29:52:C1:63:2D:CB:6F:43:72:CA:D4:D6:BE:B7:8F Certificate issuer: /CN=5cafbd32-7d6e-4297-9ac5-dc120aaa97da Certificate serial: 010D0C9F432858489A3B4EEB2260AE46F8598800 Authority key identifier: 04:0D:7B:D5:83:B8:8B:76:6F:49:88:24:4C:50:70:8B:4C:B7:87:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/17073da9-1980-383a-b12c-971b97acfc86.roa Signing time: Mon 20 Jan 2025 02:00:40 +0000 ROA not before: Mon 20 Jan 2025 02:00:40 +0000 ROA not after: Sun 20 Apr 2025 01:00:40 +0000 asID: 32507 IP address blocks: 2602:f84c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9a:3b:4e:eb:22:60:ae:46:f8:59:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cafbd32-7d6e-4297-9ac5-dc120aaa97da Validity Not Before: Jan 20 02:00:40 2025 GMT Not After : Apr 20 01:00:40 2025 GMT Subject: CN=3f9a7d10-e34b-432a-8956-d1ccce08409d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:76:60:f5:e3:73:a6:96:6e:f6:e1:9f:ae:3e: 01:81:d7:28:20:ce:6f:92:a1:0b:35:98:1e:92:11: 82:ff:13:a3:6d:58:30:5d:cb:33:82:3f:ae:52:0e: cf:62:38:e7:97:3c:ce:be:00:16:1a:f4:53:4c:ff: 4a:7b:29:aa:d8:76:b6:fb:f0:49:31:a6:b6:fe:72: 05:e1:5e:5d:ed:29:46:7c:fc:8c:d4:2b:ea:41:c7: 21:ca:96:51:d0:32:ed:75:b0:46:f7:ba:f5:df:22: c5:2b:28:53:50:1e:ab:2d:94:42:db:42:5e:95:7a: ed:fd:62:3c:f8:a9:1d:82:94:4c:6c:74:ff:49:05: 74:7d:ae:86:d6:50:85:79:f3:24:ac:4c:ff:e5:09: ab:cd:49:aa:6d:ee:b3:63:ca:99:76:8b:16:c1:1f: 80:ab:61:29:ff:9d:61:b1:3e:64:94:2f:1c:13:8e: e7:a6:ff:f3:0e:ce:c2:5d:22:8c:c3:49:99:c6:52: eb:02:6c:66:a6:82:12:df:0b:5d:0d:62:61:70:b3: 89:9d:0b:da:2d:e4:2d:83:9f:f3:55:4d:88:a7:6a: 94:ba:7f:43:73:a9:a0:0c:fb:4c:a2:0b:23:9d:b8: d8:10:27:c8:8e:3e:05:4b:1e:9c:f1:90:5b:58:9c: a0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AA:F7:86:32:29:52:C1:63:2D:CB:6F:43:72:CA:D4:D6:BE:B7:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/17073da9-1980-383a-b12c-971b97acfc86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.crl X509v3 Authority Key Identifier: keyid:04:0D:7B:D5:83:B8:8B:76:6F:49:88:24:4C:50:70:8B:4C:B7:87:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer sbgp-ipAddrBlock: critical IPv6: 2602:f84c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:12:3f:06:55:21:64:7d:10:ff:f9:35:d8:f8:50:0b:43:d4: e3:c9:29:b9:b3:25:7f:9a:47:50:cc:3b:e8:19:2d:28:5d:90: 26:8e:06:a8:68:3f:f5:8e:20:40:c3:54:ed:49:59:60:1e:2e: 79:f2:59:92:88:2d:53:00:4b:9e:90:53:9a:14:b7:c0:cc:16: 01:12:68:46:52:5a:16:50:dd:97:69:d6:0c:eb:2c:5e:f3:b9: ec:a9:88:1f:fc:0d:a9:63:2d:27:c8:2b:97:5c:24:0e:d4:df: d4:a0:93:67:6c:40:4f:51:a9:18:85:65:5f:77:6a:d1:eb:fd: 21:e1:51:36:33:d6:0b:a1:72:1c:a8:b7:7d:6d:6b:15:60:a7: b9:fa:0c:0b:20:2f:66:ca:47:55:fe:ca:a9:43:83:40:b4:29: 70:76:7e:91:c6:0c:79:c8:f2:a7:fb:cd:cc:7d:70:ac:17:26: 1b:78:7f:1c:9b:ed:fb:44:15:77:19:12:35:52:35:70:ac:d4: ad:5f:59:cb:fc:c2:d6:cf:fd:98:67:b3:c5:9d:c3:2a:ab:e4: 70:55:53:c7:43:bc:a4:ac:69:27:5f:f1:db:2c:88:af:b6:c4: 08:2f:1c:9b:14:e2:71:8f:aa:1c:9e:85:de:42:10:f6:ab:03: 98:82:6d:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiaO07rImCuRvhZiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNhZmJkMzItN2Q2ZS00Mjk3LTlhYzUtZGMxMjBhYWE5 N2RhMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk M2Y5YTdkMTAtZTM0Yi00MzJhLTg5NTYtZDFjY2NlMDg0MDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonZg9eNzppZu9uGfrj4BgdcoIM5vkqELNZge khGC/xOjbVgwXcszgj+uUg7PYjjnlzzOvgAWGvRTTP9Keymq2Ha2+/BJMaa2/nIF 4V5d7SlGfPyM1CvqQcchypZR0DLtdbBG97r13yLFKyhTUB6rLZRC20JelXrt/WI8 +KkdgpRMbHT/SQV0fa6G1lCFefMkrEz/5QmrzUmqbe6zY8qZdosWwR+Aq2Ep/51h sT5klC8cE47npv/zDs7CXSKMw0mZxlLrAmxmpoIS3wtdDWJhcLOJnQvaLeQtg5/z VU2Ip2qUun9Dc6mgDPtMogsjnbjYECfIjj4FSx6c8ZBbWJygtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIWq94YyKVLBYy3Lb0NyytTWvrePMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81Y2Fm YmQzMi03ZDZlLTQyOTctOWFjNS1kYzEyMGFhYTk3ZGEvMTcwNzNkYTktMTk4MC0z ODNhLWIxMmMtOTcxYjk3YWNmYzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWNhZmJkMzItN2Q2ZS00Mjk3LTlh YzUtZGMxMjBhYWE5N2RhLzVjYWZiZDMyLTdkNmUtNDI5Ny05YWM1LWRjMTIwYWFh OTdkYS5jcmwwHwYDVR0jBBgwFoAUBA171YO4i3ZvSYgkTFBwi0y3h1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81Y2FmYmQzMi03ZDZlLTQyOTctOWFjNS1kYzEy MGFhYTk3ZGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4TAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJISPwZVIWR9EP/5Ndj4UAtD1OPJKbmzJX+aR1DMO+gZLShdkCaO BqhoP/WOIEDDVO1JWWAeLnnyWZKILVMAS56QU5oUt8DMFgESaEZSWhZQ3Zdp1gzr LF7zueypiB/8DaljLSfIK5dcJA7U39Sgk2dsQE9RqRiFZV93atHr/SHhUTYz1guh chyot31taxVgp7n6DAsgL2bKR1X+yqlDg0C0KXB2fpHGDHnI8qf7zcx9cKwXJht4 fxyb7ftEFXcZEjVSNXCs1K1fWcv8wtbP/Zhns8Wdwyqr5HBVU8dDvKSsaSdf8dss iK+2xAgvHJsU4nGPqhyehd5CEParA5iCbU4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:19 2025 by rpki-client