$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/2d1f9cfc-b5ff-3417-84b3-43b9c96706c6.roa File: 2d1f9cfc-b5ff-3417-84b3-43b9c96706c6.roa (raw, json) Hash identifier: 0ZQqFWOTX5ve7RlKvlAU50CReQssmBrHTB4Lv33zE/g= Subject key identifier: 98:19:87:49:4C:79:62:83:E9:FC:97:D1:5C:C1:90:9F:9E:B8:3A:FD Certificate issuer: /CN=e0010d92-35a7-4dba-807b-0f229b3e2e50 Certificate serial: 010D0C9F43285848A64343BE3D0A7F6BC8428C80 Authority key identifier: A8:0D:A4:D9:0D:AA:9A:84:78:46:1C:00:A5:75:D2:08:D0:1A:3E:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/2d1f9cfc-b5ff-3417-84b3-43b9c96706c6.roa Signing time: Fri 24 Jan 2025 09:26:36 +0000 ROA not before: Fri 24 Jan 2025 09:26:36 +0000 ROA not after: Thu 24 Apr 2025 08:26:36 +0000 asID: 201351 IP address blocks: 2602:f803::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/e0010d92-35a7-4dba-807b-0f229b3e2e50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/e0010d92-35a7-4dba-807b-0f229b3e2e50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a6:43:43:be:3d:0a:7f:6b:c8:42:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0010d92-35a7-4dba-807b-0f229b3e2e50 Validity Not Before: Jan 24 09:26:36 2025 GMT Not After : Apr 24 08:26:36 2025 GMT Subject: CN=a58e97eb-64cf-44bf-8e6f-3100015e466b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:96:44:36:26:7a:0d:bc:e7:2a:3b:42:f3:2c: 4d:a8:1c:b1:ba:0f:9c:53:0c:1e:b5:c9:16:e3:7c: 77:5e:a2:48:7a:65:4c:cd:38:67:72:95:3b:15:2a: 86:4e:4a:cb:2d:4e:4c:33:74:b4:4c:77:0f:01:9e: 25:3b:a5:38:4b:65:8a:26:29:b9:ef:6a:06:c9:e1: 31:a6:88:29:ca:20:46:15:15:48:67:ff:12:11:db: 94:5f:cf:dc:67:06:2e:c6:13:ec:85:d7:2f:f6:68: 95:b6:c8:ba:3b:c4:e1:ad:1f:c7:7d:4d:6b:1a:f5: 1c:f0:5a:ba:87:ce:97:ca:ab:b4:84:aa:86:18:ac: 9e:40:8a:5b:df:5d:da:26:0a:3e:99:95:55:72:4b: 6a:6e:15:1e:76:52:5e:42:b2:f5:e1:44:16:61:7b: d9:61:79:22:f6:a2:38:d0:66:0a:d2:46:6b:e0:c1: 4f:17:76:20:e3:2a:89:cf:92:e8:28:84:6b:ec:e0: 13:6b:26:4b:ee:8a:67:de:7a:14:5b:40:a0:34:88: 0d:b9:0d:65:e7:51:33:6f:5b:b6:d9:c5:98:02:b9: ff:38:a4:e5:94:2f:d2:c9:ca:ad:ea:80:8e:ea:95: 83:ed:47:58:01:b2:79:72:28:c8:b6:1e:20:85:a6: 1f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:19:87:49:4C:79:62:83:E9:FC:97:D1:5C:C1:90:9F:9E:B8:3A:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/2d1f9cfc-b5ff-3417-84b3-43b9c96706c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/e0010d92-35a7-4dba-807b-0f229b3e2e50.crl X509v3 Authority Key Identifier: keyid:A8:0D:A4:D9:0D:AA:9A:84:78:46:1C:00:A5:75:D2:08:D0:1A:3E:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50.cer sbgp-ipAddrBlock: critical IPv6: 2602:f803::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:0b:58:14:ce:2f:f8:c3:93:af:6c:80:36:ea:66:f1:c5:48: 74:74:2a:6c:bf:46:ee:79:74:74:a1:b9:17:cb:fa:2d:2d:ed: 0f:01:4a:7d:0b:1d:53:d7:44:12:79:e2:29:69:aa:cb:ef:9c: 46:70:7f:60:00:dd:9e:35:c5:d2:60:fb:a6:2c:1c:fc:c1:e9: b0:83:9f:98:3e:35:b0:41:ba:d9:fe:ba:1e:1f:21:d7:ae:63: f6:dc:b1:c4:4f:22:d2:0a:84:85:d0:63:f1:90:28:b2:6b:23: bd:48:55:b1:62:82:13:11:0e:f3:0b:87:e6:fb:d8:75:61:ec: a7:97:a7:f9:23:5c:ab:6d:a6:36:dd:1c:22:70:56:7e:78:7a: 25:d3:5a:56:18:db:1e:d7:32:75:4d:3c:f3:a7:f0:e4:d6:2a: bb:ec:2c:24:4f:64:d2:8c:b3:83:ec:13:84:9b:e5:b7:d0:c7: dd:64:f1:72:0a:2e:58:5e:64:99:1f:c9:24:75:14:d2:0a:61: 6c:6e:4d:3d:8d:50:92:1a:2b:10:76:46:95:ed:b8:17:cb:09: 56:27:6f:69:cd:eb:1e:20:cc:80:16:b3:33:63:0a:87:b8:52: ac:ea:3d:ed:0a:d9:54:49:88:08:0e:76:76:ce:a2:12:20:e5: 17:49:dc:42 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEimQ0O+PQp/a8hCjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAwMTBkOTItMzVhNy00ZGJhLTgwN2ItMGYyMjliM2Uy ZTUwMB4XDTI1MDEyNDA5MjYzNloXDTI1MDQyNDA4MjYzNlowLzEtMCsGA1UEAxMk YTU4ZTk3ZWItNjRjZi00NGJmLThlNmYtMzEwMDAxNWU0NjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5ZENiZ6DbznKjtC8yxNqByxug+cUwwetckW 43x3XqJIemVMzThncpU7FSqGTkrLLU5MM3S0THcPAZ4lO6U4S2WKJim572oGyeEx pogpyiBGFRVIZ/8SEduUX8/cZwYuxhPshdcv9miVtsi6O8ThrR/HfU1rGvUc8Fq6 h86Xyqu0hKqGGKyeQIpb313aJgo+mZVVcktqbhUedlJeQrL14UQWYXvZYXki9qI4 0GYK0kZr4MFPF3Yg4yqJz5LoKIRr7OATayZL7opn3noUW0CgNIgNuQ1l51Ezb1u2 2cWYArn/OKTllC/Sycqt6oCO6pWD7UdYAbJ5cijIth4ghaYfTQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJgZh0lMeWKD6fyX0VzBkJ+euDr9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lMDAx MGQ5Mi0zNWE3LTRkYmEtODA3Yi0wZjIyOWIzZTJlNTAvMmQxZjljZmMtYjVmZi0z NDE3LTg0YjMtNDNiOWM5NjcwNmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTAwMTBkOTItMzVhNy00ZGJhLTgw N2ItMGYyMjliM2UyZTUwL2UwMDEwZDkyLTM1YTctNGRiYS04MDdiLTBmMjI5YjNl MmU1MC5jcmwwHwYDVR0jBBgwFoAUqA2k2Q2qmoR4RhwApXXSCNAaPpAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lMDAxMGQ5Mi0zNWE3LTRkYmEtODA3Yi0wZjIy OWIzZTJlNTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4AwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYQtYFM4v+MOTr2yANupm8cVIdHQqbL9G7nl0dKG5F8v6LS3tDwFK fQsdU9dEEnniKWmqy++cRnB/YADdnjXF0mD7piwc/MHpsIOfmD41sEG62f66Hh8h 165j9tyxxE8i0gqEhdBj8ZAosmsjvUhVsWKCExEO8wuH5vvYdWHsp5en+SNcq22m Nt0cInBWfnh6JdNaVhjbHtcydU0886fw5NYqu+wsJE9k0oyzg+wThJvlt9DH3WTx cgouWF5kmR/JJHUU0gphbG5NPY1QkhorEHZGle24F8sJVidvac3rHiDMgBazM2MK h7hSrOo97QrZVEmICA52ds6iEiDlF0ncQg== -----END CERTIFICATE-----Generated at Wed Feb 19 20:39:42 2025 by rpki-client