$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/5f4cf2d6-3f8e-3a0d-98aa-64556b5e99a7.roa File: 5f4cf2d6-3f8e-3a0d-98aa-64556b5e99a7.roa (raw, json) Hash identifier: /gXSgbcD/Jxu4/Ss0kBjisyYRXKzk28wxLk6gLfCfrI= Subject key identifier: 96:65:3F:C1:F5:E3:B5:33:5B:D9:D0:3B:90:F6:AF:13:23:CD:9B:67 Certificate issuer: /CN=cf602fb3-e0a4-4315-96e3-52b1359c9d10 Certificate serial: 010D0C9F43285848C41B7F90845B8265FA870B00 Authority key identifier: 29:72:FB:6B:B1:9E:91:73:94:55:C1:A8:AE:05:66:73:D5:52:55:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/5f4cf2d6-3f8e-3a0d-98aa-64556b5e99a7.roa Signing time: Tue 04 Feb 2025 02:00:40 +0000 ROA not before: Tue 04 Feb 2025 02:00:40 +0000 ROA not after: Mon 05 May 2025 01:00:40 +0000 asID: 63302 IP address blocks: 2620:88:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/cf602fb3-e0a4-4315-96e3-52b1359c9d10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/cf602fb3-e0a4-4315-96e3-52b1359c9d10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c4:1b:7f:90:84:5b:82:65:fa:87:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf602fb3-e0a4-4315-96e3-52b1359c9d10 Validity Not Before: Feb 4 02:00:40 2025 GMT Not After : May 5 01:00:40 2025 GMT Subject: CN=6b94d823-bc89-4dba-93ce-658f26b7b037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:64:8a:ec:ad:be:da:4d:d2:b1:d4:df:8b:bd: 87:e4:01:cb:3d:a8:9d:20:c0:d7:e1:5c:9c:d1:77: 5e:95:2b:5d:d7:66:6f:5b:13:30:0a:91:a4:02:ed: 64:1f:26:47:b2:24:c9:af:45:95:57:f0:63:21:d9: f6:11:27:55:bc:9a:66:cc:7a:62:6e:3e:40:26:c9: 53:be:39:d7:9d:e1:a7:4f:01:ab:79:f3:ad:00:83: 83:d3:56:9e:fd:1c:ad:2b:79:55:85:7e:d8:31:7c: f8:cd:44:95:d5:5b:d6:cf:1a:9c:a5:4e:95:dd:15: 9c:6a:f6:00:8a:d2:06:ce:9e:e9:5b:be:4b:f2:3c: b2:16:1f:03:87:e1:69:62:44:f4:62:82:d3:7e:ad: fd:28:6d:e4:1f:29:ff:b4:b4:04:c3:2b:b2:70:9c: 18:68:17:c0:b5:13:49:6e:47:02:50:5f:e7:3f:29: 97:2c:38:13:c4:a4:a2:9f:dc:b8:c4:eb:3b:74:06: 90:40:82:0b:17:db:39:8f:6e:b1:e4:1a:46:0b:5b: 28:1a:cd:54:bd:df:5c:b7:ae:44:16:9b:4e:ea:c3: 6c:c9:13:aa:0a:90:59:bf:14:df:f3:01:fb:05:29: 1c:5a:ed:fa:f6:1a:a0:00:e0:61:54:3b:5e:9f:1e: e8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:65:3F:C1:F5:E3:B5:33:5B:D9:D0:3B:90:F6:AF:13:23:CD:9B:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/5f4cf2d6-3f8e-3a0d-98aa-64556b5e99a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/cf602fb3-e0a4-4315-96e3-52b1359c9d10.crl X509v3 Authority Key Identifier: keyid:29:72:FB:6B:B1:9E:91:73:94:55:C1:A8:AE:05:66:73:D5:52:55:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10.cer sbgp-ipAddrBlock: critical IPv6: 2620:88:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:89:a2:40:ad:9e:29:54:c1:c3:c2:36:d8:38:67:95:46:d5: a8:30:9c:36:4b:41:62:29:a8:76:b0:5b:b8:00:a8:a7:02:9c: 5b:60:67:e1:54:fe:8c:dd:72:ac:e2:42:6e:c9:d9:59:cf:10: 7c:58:0b:c9:6c:95:cd:51:c0:f9:b6:0f:08:72:0c:e1:69:63: f9:4c:04:7a:8b:2a:2c:a1:b4:d5:7d:ac:96:91:20:06:2d:04: af:d8:83:21:66:27:83:21:05:58:dc:32:fc:72:b5:fe:9c:10: d7:7a:36:e5:30:4d:d8:07:5e:1b:c0:c1:41:dd:3c:95:11:69: 62:15:cb:af:b5:a0:15:83:18:aa:fd:07:2d:99:79:3b:d8:d2: 2c:3a:fc:81:99:8e:a6:51:aa:dc:a7:a4:8d:4e:26:41:95:c9: 61:ca:26:c0:8e:ff:10:c7:a2:e2:fd:39:94:cc:3c:14:c2:dd: c7:90:32:56:a7:01:75:9c:6a:d7:f6:dd:d5:c2:15:bb:2b:7b: 87:61:3a:ae:ef:32:3e:54:79:06:01:d4:24:73:a4:93:a6:a8: 86:31:8d:e6:5d:82:ed:7d:bd:c0:c9:ce:13:b6:ee:e2:e4:51: 5a:7e:79:6b:f6:e5:99:be:3c:a9:2c:e8:f7:4f:1d:b7:36:9c: e1:cf:6e:bb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjEG3+QhFuCZfqHCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Y2MDJmYjMtZTBhNC00MzE1LTk2ZTMtNTJiMTM1OWM5 ZDEwMB4XDTI1MDIwNDAyMDA0MFoXDTI1MDUwNTAxMDA0MFowLzEtMCsGA1UEAxMk NmI5NGQ4MjMtYmM4OS00ZGJhLTkzY2UtNjU4ZjI2YjdiMDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GSK7K2+2k3SsdTfi72H5AHLPaidIMDX4Vyc 0XdelStd12ZvWxMwCpGkAu1kHyZHsiTJr0WVV/BjIdn2ESdVvJpmzHpibj5AJslT vjnXneGnTwGrefOtAIOD01ae/RytK3lVhX7YMXz4zUSV1VvWzxqcpU6V3RWcavYA itIGzp7pW75L8jyyFh8Dh+FpYkT0YoLTfq39KG3kHyn/tLQEwyuycJwYaBfAtRNJ bkcCUF/nPymXLDgTxKSin9y4xOs7dAaQQIILF9s5j26x5BpGC1soGs1Uvd9ct65E FptO6sNsyROqCpBZvxTf8wH7BSkcWu369hqgAOBhVDtenx7o6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJZlP8H147UzW9nQO5D2rxMjzZtnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jZjYw MmZiMy1lMGE0LTQzMTUtOTZlMy01MmIxMzU5YzlkMTAvNWY0Y2YyZDYtM2Y4ZS0z YTBkLTk4YWEtNjQ1NTZiNWU5OWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2Y2MDJmYjMtZTBhNC00MzE1LTk2 ZTMtNTJiMTM1OWM5ZDEwL2NmNjAyZmIzLWUwYTQtNDMxNS05NmUzLTUyYjEzNTlj OWQxMC5jcmwwHwYDVR0jBBgwFoAUKXL7a7GekXOUVcGorgVmc9VSVSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jZjYwMmZiMy1lMGE0LTQzMTUtOTZlMy01MmIx MzU5YzlkMTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAiCAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIOJokCtnilUwcPCNtg4Z5VG1agwnDZLQWIpqHawW7gAqKcCnFtg Z+FU/ozdcqziQm7J2VnPEHxYC8lslc1RwPm2DwhyDOFpY/lMBHqLKiyhtNV9rJaR IAYtBK/YgyFmJ4MhBVjcMvxytf6cENd6NuUwTdgHXhvAwUHdPJURaWIVy6+1oBWD GKr9By2ZeTvY0iw6/IGZjqZRqtynpI1OJkGVyWHKJsCO/xDHouL9OZTMPBTC3ceQ MlanAXWcatf23dXCFbsre4dhOq7vMj5UeQYB1CRzpJOmqIYxjeZdgu19vcDJzhO2 7uLkUVp+eWv25Zm+PKks6PdPHbc2nOHPbrs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:23 2025 by rpki-client