$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/fb852d4e-c641-3f9b-9b30-7dd2284f817c.roa File: fb852d4e-c641-3f9b-9b30-7dd2284f817c.roa (raw, json) Hash identifier: x9e4jxTEJqgR/uLhbIQD1Yqj8MDFJJ8hUTVHmXIUwkg= Subject key identifier: C7:56:6E:D2:0D:65:F4:D2:CB:8B:F1:D2:25:81:A8:A3:45:F4:62:05 Certificate issuer: /CN=8a57b69a-d683-4350-83d4-e449c0242b7d Certificate serial: 010D0C9F43285848B35B68A6A96F122612FEDC40 Authority key identifier: 38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/fb852d4e-c641-3f9b-9b30-7dd2284f817c.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 55134 IP address blocks: 2602:fc67::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:68:a6:a9:6f:12:26:12:fe:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a57b69a-d683-4350-83d4-e449c0242b7d Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=aaa69d00-55bd-44f7-9e48-b8c43c15c958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2d:b6:29:7e:8b:1e:b8:39:4a:a9:e0:97:c2: 90:54:f9:0f:31:8b:10:27:f8:0f:80:4e:15:98:f4: d0:ce:58:75:9b:22:5b:e2:53:7e:39:53:bd:a9:3f: d9:f6:d9:ac:e2:bc:fe:f1:b1:5e:86:d1:ac:13:ed: 33:4c:d2:6c:27:5d:df:50:59:04:5e:5c:a3:5d:26: 98:54:6e:2a:45:51:83:79:e9:31:3d:78:2c:94:53: b4:9a:64:69:d9:d3:27:b2:82:ec:67:e8:51:53:3f: 17:1d:b8:b5:97:41:08:90:71:34:3e:40:62:a5:23: bf:3c:22:0f:92:6f:85:4c:90:65:62:12:ee:b5:9c: de:f6:ac:29:72:60:8e:72:ec:b9:23:d4:dc:c5:9f: 63:8a:27:1a:48:22:ad:fb:ab:4b:f5:ee:a3:48:e4: 80:9e:d3:4e:cb:c9:da:96:02:13:44:e0:ba:0d:2f: 6d:47:ee:9a:5a:68:76:b1:e3:c9:04:ac:6e:d9:82: ac:1e:e0:e1:99:ca:d9:cc:11:09:5c:1c:97:ce:3a: 10:82:e6:bd:a8:2d:4c:07:84:57:68:aa:5b:4c:62: 2c:b6:ad:80:fe:94:69:72:d7:27:f7:ff:15:d7:3e: f5:eb:90:5c:a4:a8:50:9a:44:bb:87:0a:5b:a9:94: 63:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:56:6E:D2:0D:65:F4:D2:CB:8B:F1:D2:25:81:A8:A3:45:F4:62:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/fb852d4e-c641-3f9b-9b30-7dd2284f817c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl X509v3 Authority Key Identifier: keyid:38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc67::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:b2:82:82:dc:35:6a:a5:7d:3d:77:cc:d5:b4:d4:1a:1a:18: be:9c:1a:d4:71:5b:e1:27:7b:8d:cc:40:42:a4:61:f5:1b:29: b5:50:13:fc:03:ab:39:5a:9b:f3:72:d6:ea:0e:69:24:05:d0: 1d:ca:85:e4:0e:ff:39:cf:4c:ae:f2:60:64:49:50:e9:e7:9b: 5a:19:57:0c:df:e6:17:24:ff:89:21:ea:94:d8:bc:f1:2b:fc: 1e:b0:ef:6a:72:62:5b:e0:57:76:a1:2b:d2:9f:49:a2:10:4b: e8:22:95:df:6c:a4:37:f0:d0:10:42:bf:5c:4a:e8:4c:e3:0f: d0:e8:a3:80:d6:4a:4f:84:82:ed:e2:cb:2d:0f:1e:36:39:d5: 90:b7:71:70:fb:68:74:a2:d5:9d:52:11:32:84:71:7f:cf:e1: 04:7e:73:70:4f:a7:cd:4d:05:b8:34:f3:75:96:8a:bf:c5:db: 7a:bd:09:70:01:82:a5:49:0a:10:6b:88:e9:2d:08:77:97:0b: cc:1b:a8:98:d0:ab:dd:9d:11:cb:f6:5b:30:48:39:c2:8a:85: 4c:73:88:ff:1a:7c:6a:78:e8:22:6c:02:c3:fe:dc:6d:af:37: a0:6b:83:16:39:30:66:1f:91:84:12:ee:28:dc:6b:8b:22:44: e3:7b:d7:e4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEizW2imqW8SJhL+3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1N2I2OWEtZDY4My00MzUwLTgzZDQtZTQ0OWMwMjQy YjdkMB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk YWFhNjlkMDAtNTViZC00NGY3LTllNDgtYjhjNDNjMTVjOTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi22KX6LHrg5Sqngl8KQVPkPMYsQJ/gPgE4V mPTQzlh1myJb4lN+OVO9qT/Z9tms4rz+8bFehtGsE+0zTNJsJ13fUFkEXlyjXSaY VG4qRVGDeekxPXgslFO0mmRp2dMnsoLsZ+hRUz8XHbi1l0EIkHE0PkBipSO/PCIP km+FTJBlYhLutZze9qwpcmCOcuy5I9TcxZ9jiicaSCKt+6tL9e6jSOSAntNOy8na lgITROC6DS9tR+6aWmh2sePJBKxu2YKsHuDhmcrZzBEJXByXzjoQgua9qC1MB4RX aKpbTGIstq2A/pRpctcn9/8V1z7165BcpKhQmkS7hwpbqZRjJwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMdWbtINZfTSy4vx0iWBqKNF9GIFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3 YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5YzAyNDJiN2QvZmI4NTJkNGUtYzY0MS0z ZjliLTliMzAtN2RkMjI4NGY4MTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE1N2I2OWEtZDY4My00MzUwLTgz ZDQtZTQ0OWMwMjQyYjdkLzhhNTdiNjlhLWQ2ODMtNDM1MC04M2Q0LWU0NDljMDI0 MmI3ZC5jcmwwHwYDVR0jBBgwFoAUOI0GpLjVtS4yQPkEl81TEdyFbwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5 YzAyNDJiN2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8ZwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEABrKCgtw1aqV9PXfM1bTUGhoYvpwa1HFb4Sd7jcxAQqRh9RsptVAT /AOrOVqb83LW6g5pJAXQHcqF5A7/Oc9MrvJgZElQ6eebWhlXDN/mFyT/iSHqlNi8 8Sv8HrDvanJiW+BXdqEr0p9JohBL6CKV32ykN/DQEEK/XEroTOMP0OijgNZKT4SC 7eLLLQ8eNjnVkLdxcPtodKLVnVIRMoRxf8/hBH5zcE+nzU0FuDTzdZaKv8Xber0J cAGCpUkKEGuI6S0Id5cLzBuomNCr3Z0Ry/ZbMEg5woqFTHOI/xp8anjoImwCw/7c ba83oGuDFjkwZh+RhBLuKNxriyJE43vX5A== -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:43 2025 by rpki-client