$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/0c266f64-95af-3bd2-88bc-11fae1300adb.roa File: 0c266f64-95af-3bd2-88bc-11fae1300adb.roa (raw, json) Hash identifier: 6+52JsQg39XnAm/Gg+sLkGabRfuTu5IooPGDX0DR/nk= Subject key identifier: 29:63:93:DC:E4:6E:3C:D8:F6:5B:77:9F:01:70:76:0B:87:7B:6B:B8 Certificate issuer: /CN=fa1ef48c-319b-4888-9b6e-efede6d159ca Certificate serial: 010D0C9F43285848A565F9F0305E5D8734928B00 Authority key identifier: EB:D9:DF:05:13:B5:23:E2:E3:AF:74:39:88:D1:0B:23:63:BA:5E:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/0c266f64-95af-3bd2-88bc-11fae1300adb.roa Signing time: Fri 24 Jan 2025 02:00:39 +0000 ROA not before: Fri 24 Jan 2025 02:00:39 +0000 ROA not after: Thu 24 Apr 2025 01:00:39 +0000 asID: 401323 IP address blocks: 2602:f83c::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/fa1ef48c-319b-4888-9b6e-efede6d159ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/fa1ef48c-319b-4888-9b6e-efede6d159ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a5:65:f9:f0:30:5e:5d:87:34:92:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa1ef48c-319b-4888-9b6e-efede6d159ca Validity Not Before: Jan 24 02:00:39 2025 GMT Not After : Apr 24 01:00:39 2025 GMT Subject: CN=10f0a465-b019-4b17-81fe-d2c3b7a36e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:39:74:d9:56:56:50:2b:26:76:5a:76:54:59: 54:12:13:bf:1d:c0:a7:66:eb:24:97:8f:9e:b4:fd: 04:4e:67:96:83:f9:0b:08:55:d3:a8:0d:2d:3c:a5: c6:ff:63:ad:1a:85:12:00:a6:f1:76:d6:51:99:60: 55:0e:b6:59:4d:08:bd:df:26:ed:a0:b9:b2:9f:13: 8d:79:d2:74:17:9b:c6:0b:ab:14:b7:b4:a1:e7:e0: 75:c1:c7:5b:58:d3:43:f6:9b:8a:7b:fd:06:c4:5a: 2e:52:c7:2c:4e:64:fe:e0:f2:2d:96:80:8c:1a:86: 80:b3:a7:c5:7a:87:50:34:8d:71:04:a9:7b:1e:0b: 3c:29:56:16:81:0a:cb:da:51:19:c3:c6:e2:45:74: f6:0b:7d:3f:6e:21:68:d9:6e:c1:f9:76:f6:39:0e: 74:c8:3f:fd:86:60:21:6d:8d:3a:89:a3:08:cb:39: a6:1b:35:cb:08:ec:e4:1c:6c:a4:16:ab:a9:07:72: 12:db:9b:fc:c7:77:50:fb:20:04:2e:34:26:e4:87: b1:6b:ec:9f:92:4a:b5:e0:ac:59:b7:09:57:09:d6: 92:cb:99:20:37:ef:10:9b:4d:5b:3e:8d:bf:a9:d1: f8:62:e3:bb:07:fc:a9:b4:e6:77:a3:17:c4:9b:20: 63:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:63:93:DC:E4:6E:3C:D8:F6:5B:77:9F:01:70:76:0B:87:7B:6B:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/0c266f64-95af-3bd2-88bc-11fae1300adb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/fa1ef48c-319b-4888-9b6e-efede6d159ca.crl X509v3 Authority Key Identifier: keyid:EB:D9:DF:05:13:B5:23:E2:E3:AF:74:39:88:D1:0B:23:63:BA:5E:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca.cer sbgp-ipAddrBlock: critical IPv6: 2602:f83c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:e9:96:05:88:71:e0:e9:8f:38:6f:9b:12:ca:88:9c:a0:49: da:5e:fb:ac:84:4b:08:b5:d8:9a:95:f8:47:37:7a:e2:51:c5: a8:62:8b:0c:b9:50:d2:6c:d3:91:dd:c7:c0:ac:cc:f3:47:ee: b5:af:d1:ce:db:7d:ae:d4:33:0d:a0:8c:9c:32:13:f8:ee:f6: 4d:50:ee:a1:19:4a:6d:89:fb:09:ab:b6:43:e3:34:7b:fc:b7: cf:ce:26:c7:5e:c3:d3:ad:ff:64:35:82:be:c1:d3:b5:ee:e9: 64:95:73:8b:d5:56:88:6c:70:29:5f:61:11:d1:3f:83:2b:3f: 3e:d8:63:36:f6:0c:3b:09:95:16:46:fd:68:c8:10:9c:8c:e5: 2b:27:38:05:bb:35:31:45:97:8a:05:5e:52:19:79:b0:01:a4: 6f:89:16:ea:00:a5:b1:7c:6d:9d:c3:f0:22:21:8f:09:ab:0c: 59:5a:5e:64:20:9f:3d:e4:11:05:15:c7:3c:9b:61:e7:48:2a: 33:79:df:c2:ee:c9:9d:bf:b4:ec:18:af:76:05:0b:2d:f9:b5: b6:7e:98:0d:31:77:06:23:69:a4:03:e5:5c:9f:19:a3:53:42: 47:e2:3d:3d:b6:cb:d4:89:62:92:1d:8e:88:73:2b:ec:43:62: 3c:20:05:c1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEilZfnwMF5dhzSSiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmExZWY0OGMtMzE5Yi00ODg4LTliNmUtZWZlZGU2ZDE1 OWNhMB4XDTI1MDEyNDAyMDAzOVoXDTI1MDQyNDAxMDAzOVowLzEtMCsGA1UEAxMk MTBmMGE0NjUtYjAxOS00YjE3LTgxZmUtZDJjM2I3YTM2ZTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDl02VZWUCsmdlp2VFlUEhO/HcCnZuskl4+e tP0ETmeWg/kLCFXTqA0tPKXG/2OtGoUSAKbxdtZRmWBVDrZZTQi93ybtoLmynxON edJ0F5vGC6sUt7Sh5+B1wcdbWNND9puKe/0GxFouUscsTmT+4PItloCMGoaAs6fF eodQNI1xBKl7Hgs8KVYWgQrL2lEZw8biRXT2C30/biFo2W7B+Xb2OQ50yD/9hmAh bY06iaMIyzmmGzXLCOzkHGykFqupB3IS25v8x3dQ+yAELjQm5Iexa+yfkkq14KxZ twlXCdaSy5kgN+8Qm01bPo2/qdH4YuO7B/yptOZ3oxfEmyBj7wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCljk9zkbjzY9lt3nwFwdguHe2u4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mYTFl ZjQ4Yy0zMTliLTQ4ODgtOWI2ZS1lZmVkZTZkMTU5Y2EvMGMyNjZmNjQtOTVhZi0z YmQyLTg4YmMtMTFmYWUxMzAwYWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmExZWY0OGMtMzE5Yi00ODg4LTli NmUtZWZlZGU2ZDE1OWNhL2ZhMWVmNDhjLTMxOWItNDg4OC05YjZlLWVmZWRlNmQx NTljYS5jcmwwHwYDVR0jBBgwFoAU69nfBRO1I+Ljr3Q5iNELI2O6Xo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mYTFlZjQ4Yy0zMTliLTQ4ODgtOWI2ZS1lZmVk ZTZkMTU5Y2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4PAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEACemWBYhx4OmPOG+bEsqInKBJ2l77rIRLCLXYmpX4Rzd64lHFqGKL DLlQ0mzTkd3HwKzM80futa/Rztt9rtQzDaCMnDIT+O72TVDuoRlKbYn7Cau2Q+M0 e/y3z84mx17D063/ZDWCvsHTte7pZJVzi9VWiGxwKV9hEdE/gys/PthjNvYMOwmV Fkb9aMgQnIzlKyc4Bbs1MUWXigVeUhl5sAGkb4kW6gClsXxtncPwIiGPCasMWVpe ZCCfPeQRBRXHPJth50gqM3nfwu7Jnb+07BivdgULLfm1tn6YDTF3BiNppAPlXJ8Z o1NCR+I9PbbL1Ilikh2OiHMr7ENiPCAFwQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:40 2025 by rpki-client