$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/e9d86d76-3de7-3e04-8a33-86a309f1833d.roa File: e9d86d76-3de7-3e04-8a33-86a309f1833d.roa (raw, json) Hash identifier: xQlEz9bKxXcx4wVfieTYRnIuklbihZJL0j2TqJAuuIc= Subject key identifier: 15:AD:4F:C2:4E:5B:6D:D4:CB:58:BB:3D:51:C7:42:87:EF:AA:02:96 Certificate issuer: /CN=f4df3738-fdb2-48c0-a548-b9ecc7f28709 Certificate serial: 010D0C9F43285848A29B55DB316D12F999AE80E0 Authority key identifier: 10:9C:A2:4E:05:E8:4D:9F:B8:DF:06:E6:69:45:DD:DC:2D:EB:F5:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/e9d86d76-3de7-3e04-8a33-86a309f1833d.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 401275 IP address blocks: 2602:f84f:1::/48 maxlen: 48 2602:f84f:2::/48 maxlen: 48 2602:f84f:3::/48 maxlen: 48 2602:f84f:4::/48 maxlen: 48 2602:f84f:5::/48 maxlen: 48 2602:f84f:6::/48 maxlen: 48 2602:f84f:7::/48 maxlen: 48 2602:f84f:8::/48 maxlen: 48 2602:f84f:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/f4df3738-fdb2-48c0-a548-b9ecc7f28709.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/f4df3738-fdb2-48c0-a548-b9ecc7f28709.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:55:db:31:6d:12:f9:99:ae:80:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4df3738-fdb2-48c0-a548-b9ecc7f28709 Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=95a3a0c7-113e-4de1-90c4-187b98e9fe11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5c:43:92:e0:53:2d:66:d5:de:36:e6:62:03: b1:19:e9:a8:0b:7e:61:6d:71:5c:bc:5d:07:27:f7: 00:57:0a:2e:88:6d:ca:c8:22:e9:cf:2b:cf:7f:95: a6:f3:fd:cf:89:13:af:27:09:47:ea:1e:0b:78:a5: de:1e:8b:42:08:c1:b1:52:dc:87:63:7f:63:b8:d2: 36:36:83:05:c3:fb:cd:35:57:9b:e0:7e:17:54:1f: 32:6e:af:e7:b0:99:dc:cd:ad:a3:a4:b4:b2:bc:73: de:60:4d:6d:4b:8b:92:8a:ac:b8:c1:da:18:03:fa: f6:9d:bc:1c:d0:b4:16:62:20:45:6d:45:02:5c:e4: eb:b6:49:ea:d4:17:9b:17:12:29:01:a9:85:1b:ac: 7f:86:40:83:58:42:72:7d:ed:47:cb:4c:d2:91:70: fc:ee:d7:5f:11:3c:68:56:f2:51:f9:b9:a9:7a:c2: 51:d2:d3:f1:64:16:d9:11:5a:bd:f2:38:be:97:de: 25:a6:84:88:f7:01:4d:1b:79:0e:1b:ad:4d:a5:8e: f4:bf:e8:75:fe:77:41:4f:9a:7a:f0:97:d5:36:5b: 00:6a:90:2f:88:d8:ea:15:e1:19:3c:0a:73:35:d0: 0c:bd:89:17:70:14:b3:67:38:71:1c:9b:03:ca:d6: c8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:AD:4F:C2:4E:5B:6D:D4:CB:58:BB:3D:51:C7:42:87:EF:AA:02:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/e9d86d76-3de7-3e04-8a33-86a309f1833d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/f4df3738-fdb2-48c0-a548-b9ecc7f28709.crl X509v3 Authority Key Identifier: keyid:10:9C:A2:4E:05:E8:4D:9F:B8:DF:06:E6:69:45:DD:DC:2D:EB:F5:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709.cer sbgp-ipAddrBlock: critical IPv6: 2602:f84f:1::-2602:f84f:9:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:5a:96:b9:d7:be:dc:c2:a0:85:bc:a5:34:bc:68:1a:32:dc: ff:32:0a:dc:68:f5:2a:c5:7e:41:c3:8f:8e:2c:e8:a9:75:59: de:70:8c:15:d7:a0:fd:e0:29:b1:c5:83:de:bc:a0:bf:d7:86: 60:9b:b2:6d:bb:fb:ab:5b:57:bd:5b:cc:1c:e2:88:0f:df:fb: 8e:cf:3a:df:ca:5a:32:ce:42:60:28:f5:8c:c1:83:d0:9b:81: c7:1c:75:7d:93:4f:35:6a:45:73:b6:a9:eb:90:0f:8e:54:48: 6e:8e:a3:0c:88:d1:bd:6b:53:11:01:60:13:db:55:46:6f:b7: b4:a4:4b:7c:98:06:71:2b:bc:c3:c4:d3:20:8d:87:d5:27:36: e2:82:73:4c:cd:bd:81:f7:f6:90:6b:db:17:42:bf:67:9c:ef: 4c:b8:db:08:3c:7b:94:94:46:d5:5b:e5:60:a9:67:bc:c6:77: 00:69:c3:71:f2:59:79:25:49:71:82:66:21:e7:96:b8:cf:8f: 3c:f8:65:cd:ae:ad:ae:69:8c:a4:a2:e5:b0:08:a0:c7:dd:8e: a1:a7:91:a9:16:34:ad:e2:43:16:c9:70:33:68:48:2c:28:92: 95:68:2f:d6:1e:bf:80:3d:b8:b9:a9:26:85:45:fa:d7:1c:2b: da:e4:3b:66 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEiim1XbMW0S+ZmugOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRkZjM3MzgtZmRiMi00OGMwLWE1NDgtYjllY2M3ZjI4 NzA5MB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk OTVhM2EwYzctMTEzZS00ZGUxLTkwYzQtMTg3Yjk4ZTlmZTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplxDkuBTLWbV3jbmYgOxGemoC35hbXFcvF0H J/cAVwouiG3KyCLpzyvPf5Wm8/3PiROvJwlH6h4LeKXeHotCCMGxUtyHY39juNI2 NoMFw/vNNVeb4H4XVB8ybq/nsJncza2jpLSyvHPeYE1tS4uSiqy4wdoYA/r2nbwc 0LQWYiBFbUUCXOTrtknq1BebFxIpAamFG6x/hkCDWEJyfe1Hy0zSkXD87tdfETxo VvJR+bmpesJR0tPxZBbZEVq98ji+l94lpoSI9wFNG3kOG61NpY70v+h1/ndBT5p6 8JfVNlsAapAviNjqFeEZPApzNdAMvYkXcBSzZzhxHJsDytbIFQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFBWtT8JOW23Uy1i7PVHHQofvqgKWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mNGRm MzczOC1mZGIyLTQ4YzAtYTU0OC1iOWVjYzdmMjg3MDkvZTlkODZkNzYtM2RlNy0z ZTA0LThhMzMtODZhMzA5ZjE4MzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjRkZjM3MzgtZmRiMi00OGMwLWE1 NDgtYjllY2M3ZjI4NzA5L2Y0ZGYzNzM4LWZkYjItNDhjMC1hNTQ4LWI5ZWNjN2Yy ODcwOS5jcmwwHwYDVR0jBBgwFoAUEJyiTgXoTZ+43wbmaUXd3C3r9f8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mNGRmMzczOC1mZGIyLTQ4YzAtYTU0OC1iOWVj YzdmMjg3MDkuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmAvhP AAEDBwEmAvhPAAgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAZVqWude+3MKghbylNLxoGjLc/zIK3Gj1KsV+ QcOPjizoqXVZ3nCMFdeg/eApscWD3rygv9eGYJuybbv7q1tXvVvMHOKID9/7js86 38paMs5CYCj1jMGD0JuBxxx1fZNPNWpFc7ap65APjlRIbo6jDIjRvWtTEQFgE9tV Rm+3tKRLfJgGcSu8w8TTII2H1Sc24oJzTM29gff2kGvbF0K/Z5zvTLjbCDx7lJRG 1VvlYKlnvMZ3AGnDcfJZeSVJcYJmIeeWuM+PPPhlza6trmmMpKLlsAigx92OoaeR qRY0reJDFslwM2hILCiSlWgv1h6/gD24uakmhUX61xwr2uQ7Zg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:26 2025 by rpki-client