$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/05f0c1d2-6f73-316b-bfe0-7eddb73aa9f8.roa File: 05f0c1d2-6f73-316b-bfe0-7eddb73aa9f8.roa (raw, json) Hash identifier: 9LsBgQBfTAelp0Odb0AGzng7JFyub5z7trpA3fPXE0Y= Subject key identifier: C7:30:D6:B3:9B:F1:07:A1:6E:A6:2C:5E:3E:A0:F0:E5:1C:2F:AF:99 Certificate issuer: /CN=f4df3738-fdb2-48c0-a548-b9ecc7f28709 Certificate serial: 010D0C9F43285848A29B55EC0B7E947BE3330200 Authority key identifier: 10:9C:A2:4E:05:E8:4D:9F:B8:DF:06:E6:69:45:DD:DC:2D:EB:F5:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/05f0c1d2-6f73-316b-bfe0-7eddb73aa9f8.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 401275 IP address blocks: 2602:f84f::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/f4df3738-fdb2-48c0-a548-b9ecc7f28709.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/f4df3738-fdb2-48c0-a548-b9ecc7f28709.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:55:ec:0b:7e:94:7b:e3:33:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4df3738-fdb2-48c0-a548-b9ecc7f28709 Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=a5b8fddf-2a38-418f-9825-3235bb5f140c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4c:1b:27:d2:eb:ce:a3:f4:82:f8:55:d1:df: cf:fd:67:91:fe:83:39:e1:f6:a8:4b:65:3a:4f:27: ea:83:51:cd:16:af:11:ec:f7:6c:7d:3e:f9:22:37: f3:86:20:d4:80:39:01:15:58:fa:5e:17:41:2e:59: dd:b8:10:21:6d:40:4a:f1:cb:f2:1b:ba:5f:81:31: df:fe:8c:ef:82:b6:02:87:82:e7:fd:68:fd:52:e8: ab:97:9e:3e:7e:2f:fe:8c:9b:19:f8:a8:60:bd:31: 55:fa:48:68:19:47:7a:29:0d:03:7f:dd:46:e3:76: 1d:e2:4d:e3:aa:1b:96:dc:05:93:76:73:31:fb:a1: 20:94:51:ce:75:d8:41:d1:f1:83:97:4c:56:ae:63: 6f:0d:17:2d:7c:4f:3d:9f:9e:5a:a3:b2:33:d6:5a: de:73:3e:ce:10:a8:4d:40:e6:e5:d2:5f:8a:6e:f9: 3d:dc:b3:49:38:83:fc:8c:ae:f6:8a:0e:4e:3c:f4: b8:13:0a:90:cc:8f:3f:cf:62:ed:74:85:f6:f5:3e: 85:55:ca:61:88:03:96:94:0f:98:84:46:e2:17:80: 12:6e:a9:ec:1e:5d:c2:6b:5c:75:f2:0f:ea:2f:14: cc:25:00:b1:b0:a6:14:b0:21:9d:eb:d8:a5:89:bb: 96:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:30:D6:B3:9B:F1:07:A1:6E:A6:2C:5E:3E:A0:F0:E5:1C:2F:AF:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/05f0c1d2-6f73-316b-bfe0-7eddb73aa9f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/f4df3738-fdb2-48c0-a548-b9ecc7f28709.crl X509v3 Authority Key Identifier: keyid:10:9C:A2:4E:05:E8:4D:9F:B8:DF:06:E6:69:45:DD:DC:2D:EB:F5:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709.cer sbgp-ipAddrBlock: critical IPv6: 2602:f84f::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:97:f5:18:d9:58:d7:11:7f:65:dc:36:16:f4:2b:be:ec:d6: e8:5e:f9:0d:0d:06:51:34:8e:20:22:5f:82:df:f4:42:da:10: 32:db:34:f1:5e:36:4f:85:03:6f:04:dd:52:98:bb:f3:16:df: 50:68:a7:91:ce:e4:82:32:26:7f:6b:2f:6b:06:61:91:b0:e1: ba:74:60:d0:a9:46:71:1c:cc:40:ff:b2:da:12:df:22:b1:93: 6f:40:84:59:b9:c4:86:1e:a1:3b:cf:33:9a:99:3e:04:43:93: 54:e6:df:70:b3:41:ac:dc:fa:b4:8e:8f:45:8f:2a:c4:8d:8f: 19:8c:83:00:3f:db:63:03:c7:b6:12:a4:27:28:d3:bc:61:5d: 17:db:fb:66:54:fd:a1:5f:fc:1f:f8:b4:d5:a5:27:6a:6e:9b: 0c:5c:00:04:45:b7:fe:d1:de:be:c7:96:02:84:35:99:8f:0a: 9b:28:db:24:08:6c:80:6f:21:cb:da:b5:bb:ce:dc:34:15:06: da:1c:d3:27:62:3d:40:f2:f9:d8:c2:18:ef:f3:90:53:bf:a6: ba:0e:1f:cb:9b:ad:46:cb:7c:28:22:16:50:22:8c:f8:28:b1: bf:b0:b1:ec:7d:3c:ca:d5:d4:78:01:f0:6c:ea:3b:fb:cb:42: 27:65:10:42 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEiim1XsC36Ue+MzAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRkZjM3MzgtZmRiMi00OGMwLWE1NDgtYjllY2M3ZjI4 NzA5MB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk YTViOGZkZGYtMmEzOC00MThmLTk4MjUtMzIzNWJiNWYxNDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30wbJ9LrzqP0gvhV0d/P/WeR/oM54faoS2U6 Tyfqg1HNFq8R7PdsfT75IjfzhiDUgDkBFVj6XhdBLlnduBAhbUBK8cvyG7pfgTHf /ozvgrYCh4Ln/Wj9Uuirl54+fi/+jJsZ+KhgvTFV+khoGUd6KQ0Df91G43Yd4k3j qhuW3AWTdnMx+6EglFHOddhB0fGDl0xWrmNvDRctfE89n55ao7Iz1lrecz7OEKhN QObl0l+Kbvk93LNJOIP8jK72ig5OPPS4EwqQzI8/z2LtdIX29T6FVcphiAOWlA+Y hEbiF4ASbqnsHl3Ca1x18g/qLxTMJQCxsKYUsCGd69ilibuW2QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMcw1rOb8QehbqYsXj6g8OUcL6+ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mNGRm MzczOC1mZGIyLTQ4YzAtYTU0OC1iOWVjYzdmMjg3MDkvMDVmMGMxZDItNmY3My0z MTZiLWJmZTAtN2VkZGI3M2FhOWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjRkZjM3MzgtZmRiMi00OGMwLWE1 NDgtYjllY2M3ZjI4NzA5L2Y0ZGYzNzM4LWZkYjItNDhjMC1hNTQ4LWI5ZWNjN2Yy ODcwOS5jcmwwHwYDVR0jBBgwFoAUEJyiTgXoTZ+43wbmaUXd3C3r9f8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mNGRmMzczOC1mZGIyLTQ4YzAtYTU0OC1iOWVj YzdmMjg3MDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4TwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAL5f1GNlY1xF/Zdw2FvQrvuzW6F75DQ0GUTSOICJfgt/0QtoQMts0 8V42T4UDbwTdUpi78xbfUGinkc7kgjImf2svawZhkbDhunRg0KlGcRzMQP+y2hLf IrGTb0CEWbnEhh6hO88zmpk+BEOTVObfcLNBrNz6tI6PRY8qxI2PGYyDAD/bYwPH thKkJyjTvGFdF9v7ZlT9oV/8H/i01aUnam6bDFwABEW3/tHevseWAoQ1mY8Kmyjb JAhsgG8hy9q1u87cNBUG2hzTJ2I9QPL52MIY7/OQU7+mug4fy5utRst8KCIWUCKM +Cixv7Cx7H08ytXUeAHwbOo7+8tCJ2UQQg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:17 2025 by rpki-client