$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/e888c9e1-ca31-3769-89fa-4e80979f3f2b.roa File: e888c9e1-ca31-3769-89fa-4e80979f3f2b.roa (raw, json) Hash identifier: 3S9HzzyKVGMIa7yBuj/P5i0xLCbr2U80mQUtKUK4Kcw= Subject key identifier: 77:A3:1F:42:78:08:D7:56:A8:48:E2:0C:25:1C:98:53:95:CA:9F:4F Certificate issuer: /CN=dfbfe00a-3fd7-40c7-b3be-10f9b6968836 Certificate serial: 010D0C9F4328584898D5F8F12575B2CD9A31A300 Authority key identifier: 6A:F4:80:FA:0B:58:28:C8:C6:2D:5E:09:A5:B0:4D:2F:BE:C0:50:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/e888c9e1-ca31-3769-89fa-4e80979f3f2b.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 20417 IP address blocks: 2602:f7d1::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d5:f8:f1:25:75:b2:cd:9a:31:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfbfe00a-3fd7-40c7-b3be-10f9b6968836 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=4019fcf3-3b3c-443a-a162-b15e6d828db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7e:e0:8d:14:e4:f5:ca:e1:ab:d3:db:97:f6: 9d:e7:49:90:29:3f:1d:60:01:f2:10:ed:b8:5f:78: 94:d4:1b:e8:9c:e5:6e:b7:f0:d5:71:6b:c9:74:4e: 4c:28:f1:05:dc:e6:d2:66:70:6d:7d:f3:59:fa:2b: 01:ca:de:db:09:95:fd:ec:88:e9:e1:f3:8f:5b:6c: 4e:65:09:0e:eb:3f:e3:83:3e:aa:78:5d:51:c3:f4: 27:a8:d9:74:cd:2d:21:6e:10:4b:44:e5:b7:fa:96: 1e:12:9e:88:d4:2a:2f:e0:42:54:9e:1d:75:25:69: fc:45:fe:3d:34:24:74:9e:6d:27:44:2b:39:00:2e: 80:01:53:21:f7:18:60:0b:8a:34:ee:3e:7c:69:18: 2b:36:7a:ff:32:09:21:50:3a:b9:30:c2:ad:85:b7: 69:1c:b4:5a:1c:2d:3c:33:75:86:75:eb:de:12:7d: c0:70:77:17:1e:6e:3e:f6:dc:0d:93:74:da:6f:65: d3:3e:b2:4c:ae:b9:d0:3e:8d:ad:94:79:27:0c:51: 9c:c7:72:aa:ea:9c:a6:f6:17:52:6c:0c:bb:e8:28: 80:4a:df:f1:98:72:cc:0a:85:07:3c:f9:18:5b:16: b6:6b:fb:ec:31:d4:c7:4e:1c:2b:4b:13:b8:53:82: f6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A3:1F:42:78:08:D7:56:A8:48:E2:0C:25:1C:98:53:95:CA:9F:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/e888c9e1-ca31-3769-89fa-4e80979f3f2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.crl X509v3 Authority Key Identifier: keyid:6A:F4:80:FA:0B:58:28:C8:C6:2D:5E:09:A5:B0:4D:2F:BE:C0:50:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7d1::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ff:80:80:4f:93:47:ca:be:20:8d:40:be:67:25:cf:c1:33: dd:22:07:3b:29:fe:5f:88:c3:1f:a1:6e:41:e3:1f:0e:f0:92: b1:37:cb:07:17:bd:50:dc:bf:ae:12:85:b6:3a:70:d4:f4:3e: 82:9e:0f:15:80:c9:dd:9d:f9:59:91:08:b0:0b:2e:45:12:ed: 36:73:e3:55:25:2f:b1:dc:ed:a9:ae:bc:90:4f:6e:cf:0a:07: 86:f4:7e:80:29:73:8e:77:f5:37:0f:6d:be:4d:61:08:be:62: a7:2c:8d:3e:7c:26:75:29:3c:28:4c:e3:f9:36:fd:b5:6b:ef: 13:73:26:f4:ed:e4:1f:f9:54:7c:60:d3:33:f3:6f:cf:b3:59: 82:c5:ad:1e:2f:21:4c:f5:98:3b:30:d4:31:32:d4:c2:e1:62: df:3e:7b:22:0b:49:e6:9e:84:d7:28:3b:dc:a3:bf:57:20:81: f2:a5:4a:10:4d:55:6f:3b:0a:5f:ce:3f:0d:18:15:76:80:da: fe:13:77:62:ae:79:2f:d7:bb:fd:8a:ef:10:9d:f3:8f:5c:4e: bc:dd:fc:f2:03:8a:9d:1c:f1:3f:44:c0:94:3b:e2:87:e4:e7: d4:86:08:98:0d:11:6a:70:ee:8f:dc:72:09:a6:64:fe:e7:1f: 72:f7:15:f8 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEiY1fjxJXWyzZoxowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZiZmUwMGEtM2ZkNy00MGM3LWIzYmUtMTBmOWI2OTY4 ODM2MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk NDAxOWZjZjMtM2IzYy00NDNhLWExNjItYjE1ZTZkODI4ZGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn7gjRTk9crhq9Pbl/ad50mQKT8dYAHyEO24 X3iU1BvonOVut/DVcWvJdE5MKPEF3ObSZnBtffNZ+isByt7bCZX97Ijp4fOPW2xO ZQkO6z/jgz6qeF1Rw/QnqNl0zS0hbhBLROW3+pYeEp6I1Cov4EJUnh11JWn8Rf49 NCR0nm0nRCs5AC6AAVMh9xhgC4o07j58aRgrNnr/MgkhUDq5MMKthbdpHLRaHC08 M3WGdeveEn3AcHcXHm4+9twNk3Tab2XTPrJMrrnQPo2tlHknDFGcx3Kq6pym9hdS bAy76CiASt/xmHLMCoUHPPkYWxa2a/vsMdTHThwrSxO4U4L2uQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHejH0J4CNdWqEjiDCUcmFOVyp9PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZmJm ZTAwYS0zZmQ3LTQwYzctYjNiZS0xMGY5YjY5Njg4MzYvZTg4OGM5ZTEtY2EzMS0z NzY5LTg5ZmEtNGU4MDk3OWYzZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGZiZmUwMGEtM2ZkNy00MGM3LWIz YmUtMTBmOWI2OTY4ODM2L2RmYmZlMDBhLTNmZDctNDBjNy1iM2JlLTEwZjliNjk2 ODgzNi5jcmwwHwYDVR0jBBgwFoAUavSA+gtYKMjGLV4JpbBNL77AUG0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZmJmZTAwYS0zZmQ3LTQwYzctYjNiZS0xMGY5 YjY5Njg4MzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL30QAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXf+AgE+TR8q+II1Avmclz8Ez3SIHOyn+X4jDH6FuQeMfDvCSsTfL Bxe9UNy/rhKFtjpw1PQ+gp4PFYDJ3Z35WZEIsAsuRRLtNnPjVSUvsdztqa68kE9u zwoHhvR+gClzjnf1Nw9tvk1hCL5ipyyNPnwmdSk8KEzj+Tb9tWvvE3Mm9O3kH/lU fGDTM/Nvz7NZgsWtHi8hTPWYOzDUMTLUwuFi3z57IgtJ5p6E1yg73KO/VyCB8qVK EE1VbzsKX84/DRgVdoDa/hN3Yq55L9e7/YrvEJ3zj1xOvN388gOKnRzxP0TAlDvi h+Tn1IYImA0RanDuj9xyCaZk/ucfcvcV+A== -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:21 2025 by rpki-client