$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/3dfe514e-fdc8-3a3e-8a80-5db3e5e6ccb0.roa File: 3dfe514e-fdc8-3a3e-8a80-5db3e5e6ccb0.roa (raw, json) Hash identifier: wr8w6E8gHEya2WTuQM7AN7mK2O4+J/2Tn0sD+LoGB3I= Subject key identifier: D8:01:62:56:5D:0D:E2:CE:1E:28:7E:C8:42:90:C7:E6:39:38:4E:F3 Certificate issuer: /CN=c04d5752-0429-45a3-a347-607b7dc70707 Certificate serial: 010D0C9F43285848D6410D46DA49404E86F553C0 Authority key identifier: 9A:BF:C2:54:66:DF:73:F4:CD:FE:24:4F:FD:AA:10:9E:13:7B:0B:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/3dfe514e-fdc8-3a3e-8a80-5db3e5e6ccb0.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 32668 IP address blocks: 2602:f86a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/c04d5752-0429-45a3-a347-607b7dc70707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/c04d5752-0429-45a3-a347-607b7dc70707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:0d:46:da:49:40:4e:86:f5:53:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c04d5752-0429-45a3-a347-607b7dc70707 Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=2794063a-58e7-4102-92f4-bfc59ccb1999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d0:98:a6:0c:10:67:6b:16:8a:73:fd:75:58: 1c:ad:2c:ac:36:8e:ff:c3:10:e0:b5:d6:bb:67:4b: 6a:03:95:23:4d:49:e6:d4:bd:04:e5:55:be:74:ba: 6a:e1:b0:0a:65:ff:7d:ac:d2:a8:46:f8:dd:e6:e7: 5c:75:ee:da:a9:56:31:d4:f1:ff:e9:8b:c0:f8:92: 45:13:65:11:9d:b6:68:f2:b4:29:0d:27:7b:99:f4: f7:b9:c4:47:ac:7b:c3:dd:d5:74:8a:fc:dd:74:47: 8d:59:7b:cf:ef:93:fe:b0:69:22:8c:23:6c:5e:7e: e8:49:9c:20:56:ee:51:2e:ee:4f:98:e0:21:75:a0: 27:93:d3:2f:70:cf:ce:81:52:8b:ed:0b:65:92:f1: 80:5e:0f:c4:2c:01:6a:86:97:37:aa:c0:49:5d:da: 3f:58:13:d5:da:75:a5:6e:a4:40:af:28:e5:cd:29: 3d:07:1d:21:4e:49:7a:6d:8b:87:57:82:8e:12:d8: be:87:c2:8d:52:85:e8:63:8c:59:d0:ea:60:85:12: c8:4e:bb:32:c4:61:36:19:6f:4a:31:4c:e4:29:cf: e1:98:33:f3:a2:25:08:5a:40:e8:cf:32:fd:3a:7a: 71:2c:f8:6b:84:18:c1:9d:60:52:10:a0:3d:e7:77: 0b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:01:62:56:5D:0D:E2:CE:1E:28:7E:C8:42:90:C7:E6:39:38:4E:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/3dfe514e-fdc8-3a3e-8a80-5db3e5e6ccb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/c04d5752-0429-45a3-a347-607b7dc70707.crl X509v3 Authority Key Identifier: keyid:9A:BF:C2:54:66:DF:73:F4:CD:FE:24:4F:FD:AA:10:9E:13:7B:0B:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707.cer sbgp-ipAddrBlock: critical IPv6: 2602:f86a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:97:f1:56:94:4a:4b:f4:f5:32:e9:37:6c:2a:2e:72:66:80: fe:08:d6:94:74:28:06:75:d3:6e:34:8f:71:48:1e:90:11:1f: 1e:a3:d5:1b:87:76:15:85:9e:cf:a1:7c:1a:36:72:8d:9d:48: 02:d5:58:f2:1e:4a:8e:48:b9:67:6c:a3:48:21:1e:43:2e:20: b4:e3:a2:2f:6b:16:b9:a9:0d:9d:54:da:8b:94:7e:d9:3d:94: b7:17:f7:fd:d1:0f:69:9c:3b:73:71:ec:14:4c:18:9f:76:0c: 3c:5c:c9:8c:ca:27:f2:2f:68:c1:10:c7:b6:e8:94:e2:47:2a: e6:48:d6:23:a8:b0:33:17:d2:09:69:ee:df:4b:10:0d:27:00: 69:f1:b4:91:97:92:7f:fc:db:ef:d5:51:61:c2:98:3b:a6:87: 32:3a:ea:4c:83:46:44:ba:a0:b7:5c:9b:fe:f6:d1:29:0f:14: 40:dd:21:31:a1:f8:3c:a0:54:19:12:d3:b9:40:70:f1:1d:c8: d6:32:2a:50:b0:ea:26:ab:5f:eb:1d:e3:16:1c:92:60:76:34: 71:b0:f9:df:f5:7b:2f:c5:e7:81:e2:6c:76:08:1f:6b:ea:e1: e8:44:2a:ca:f2:97:32:8e:f0:c2:e5:e6:12:ee:0e:4c:13:54: 29:2c:d8:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjWQQ1G2klATob1U8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA0ZDU3NTItMDQyOS00NWEzLWEzNDctNjA3YjdkYzcw NzA3MB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk Mjc5NDA2M2EtNThlNy00MTAyLTkyZjQtYmZjNTljY2IxOTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtCYpgwQZ2sWinP9dVgcrSysNo7/wxDgtda7 Z0tqA5UjTUnm1L0E5VW+dLpq4bAKZf99rNKoRvjd5udcde7aqVYx1PH/6YvA+JJF E2URnbZo8rQpDSd7mfT3ucRHrHvD3dV0ivzddEeNWXvP75P+sGkijCNsXn7oSZwg Vu5RLu5PmOAhdaAnk9MvcM/OgVKL7QtlkvGAXg/ELAFqhpc3qsBJXdo/WBPV2nWl bqRAryjlzSk9Bx0hTkl6bYuHV4KOEti+h8KNUoXoY4xZ0OpghRLITrsyxGE2GW9K MUzkKc/hmDPzoiUIWkDozzL9OnpxLPhrhBjBnWBSEKA953cLOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNgBYlZdDeLOHih+yEKQx+Y5OE7zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jMDRk NTc1Mi0wNDI5LTQ1YTMtYTM0Ny02MDdiN2RjNzA3MDcvM2RmZTUxNGUtZmRjOC0z YTNlLThhODAtNWRiM2U1ZTZjY2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzA0ZDU3NTItMDQyOS00NWEzLWEz NDctNjA3YjdkYzcwNzA3L2MwNGQ1NzUyLTA0MjktNDVhMy1hMzQ3LTYwN2I3ZGM3 MDcwNy5jcmwwHwYDVR0jBBgwFoAUmr/CVGbfc/TN/iRP/aoQnhN7Cw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jMDRkNTc1Mi0wNDI5LTQ1YTMtYTM0Ny02MDdi N2RjNzA3MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4agAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGmX8VaUSkv09TLpN2wqLnJmgP4I1pR0KAZ10240j3FIHpARHx6j 1RuHdhWFns+hfBo2co2dSALVWPIeSo5IuWdso0ghHkMuILTjoi9rFrmpDZ1U2ouU ftk9lLcX9/3RD2mcO3Nx7BRMGJ92DDxcyYzKJ/IvaMEQx7bolOJHKuZI1iOosDMX 0glp7t9LEA0nAGnxtJGXkn/82+/VUWHCmDumhzI66kyDRkS6oLdcm/720SkPFEDd ITGh+DygVBkS07lAcPEdyNYyKlCw6iarX+sd4xYckmB2NHGw+d/1ey/F54HibHYI H2vq4ehEKsrylzKO8MLl5hLuDkwTVCks2K0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:22 2025 by rpki-client