$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/d5bf06b2-a1b9-3ae7-b3af-3451c6396196.roa File: d5bf06b2-a1b9-3ae7-b3af-3451c6396196.roa (raw, json) Hash identifier: cRKykfkgqgB7I49Ips/NBwNMZWLZdXsh2rUea8ROjic= Subject key identifier: 94:74:C7:91:BC:7B:3C:E6:CF:F8:1D:77:93:66:53:20:51:1F:11:48 Certificate issuer: /CN=fc019755-a466-4511-8e5f-83781d1aca46 Certificate serial: 010D0C9F43285848A1361E1281EB82D6572BFCC0 Authority key identifier: 84:FA:EE:9A:A7:8E:05:3C:78:94:E0:09:1F:04:47:CA:FD:2D:B9:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/d5bf06b2-a1b9-3ae7-b3af-3451c6396196.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 2602:f994::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/fc019755-a466-4511-8e5f-83781d1aca46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/fc019755-a466-4511-8e5f-83781d1aca46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:1e:12:81:eb:82:d6:57:2b:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc019755-a466-4511-8e5f-83781d1aca46 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=9d4c38de-0c79-4179-8402-3b988354752d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:76:19:5d:9a:d4:d8:6d:04:08:3b:31:8b:48: b9:64:f8:5a:e2:f4:6f:df:39:8b:e1:59:99:74:b9: 43:53:10:11:d3:0c:fb:b3:82:1d:43:d6:f3:06:ab: 14:34:3e:5f:47:de:b1:1b:2a:99:f2:2c:d0:87:d6: 71:66:f6:57:be:e1:ec:af:a1:eb:5b:cb:1f:98:8b: 14:a2:0e:48:a9:32:e8:9c:7c:67:5e:48:d6:22:55: ae:4f:97:aa:7c:87:56:65:cb:cd:27:24:4f:1f:9e: dd:61:0a:b1:d6:b2:d3:c4:55:02:f1:f9:30:29:f0: 07:47:45:a2:84:12:1c:13:dd:d2:ca:9f:5b:35:64: 6a:34:9e:e7:41:00:ae:61:9d:5d:9f:1d:8a:ab:d4: 03:d4:e4:23:28:4a:8c:d3:e6:8c:58:08:b0:5a:e5: ea:0a:25:10:8e:ff:15:48:31:8d:2b:0f:9a:d4:ea: 26:4d:5e:56:01:cf:51:14:32:82:7d:3c:f6:70:17: bc:c3:67:f7:26:35:cd:6e:08:56:f0:6b:3f:e9:45: 20:c7:62:03:0d:4c:8c:29:f6:24:a2:98:05:3a:a3: 1e:2f:54:d9:34:c5:e6:3b:d8:ae:47:25:d9:2c:f5: de:d3:83:87:91:4e:4a:06:f5:fc:33:1e:e0:3d:9f: 59:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:74:C7:91:BC:7B:3C:E6:CF:F8:1D:77:93:66:53:20:51:1F:11:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/d5bf06b2-a1b9-3ae7-b3af-3451c6396196.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/fc019755-a466-4511-8e5f-83781d1aca46.crl X509v3 Authority Key Identifier: keyid:84:FA:EE:9A:A7:8E:05:3C:78:94:E0:09:1F:04:47:CA:FD:2D:B9:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46.cer sbgp-ipAddrBlock: critical IPv6: 2602:f994::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:06:9c:7d:9f:ac:95:4d:e5:f8:c1:93:51:6d:f5:5f:4e:f8: 59:4a:78:1d:53:d6:8a:44:71:00:84:77:d7:a0:9a:1e:33:28: c4:be:46:25:da:19:1f:77:18:d9:84:5b:6c:7d:71:b6:5e:0a: be:e6:3d:93:26:ec:64:2c:d2:17:79:64:db:d7:3c:70:13:ed: 1e:a4:96:9c:22:70:39:67:33:7b:21:96:24:61:e9:39:6e:c1: 29:9a:11:ad:19:01:31:b0:c9:e6:74:8f:bf:40:7f:38:fe:b7: 49:69:33:0c:8b:0e:5a:38:0f:26:12:d9:e5:da:ab:3e:26:77: 80:ea:95:71:48:b3:39:97:7f:f7:6b:6a:f7:57:9b:83:0b:0f: 3d:09:61:4f:4e:b1:58:7b:8e:0c:9c:a1:eb:32:d8:2c:88:19: 4f:f7:1c:1c:3e:f4:55:a2:b3:56:8b:9d:26:7d:56:f6:b7:41: f2:3b:51:f0:af:41:62:25:c7:7b:94:21:af:b9:85:3c:ce:a3: c1:ef:78:59:31:8d:e4:f9:f2:27:c2:aa:fc:55:55:41:1e:ba: 55:bf:9e:65:8b:3a:9c:76:2e:0d:9f:c5:65:92:95:07:f9:9e: 27:f5:a8:27:aa:db:c9:9e:a7:71:e2:a2:e7:6e:09:d2:c2:b2: a9:79:20:a4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNh4SgeuC1lcr/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMwMTk3NTUtYTQ2Ni00NTExLThlNWYtODM3ODFkMWFj YTQ2MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk OWQ0YzM4ZGUtMGM3OS00MTc5LTg0MDItM2I5ODgzNTQ3NTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXYZXZrU2G0ECDsxi0i5ZPha4vRv3zmL4VmZ dLlDUxAR0wz7s4IdQ9bzBqsUND5fR96xGyqZ8izQh9ZxZvZXvuHsr6HrW8sfmIsU og5IqTLonHxnXkjWIlWuT5eqfIdWZcvNJyRPH57dYQqx1rLTxFUC8fkwKfAHR0Wi hBIcE93Syp9bNWRqNJ7nQQCuYZ1dnx2Kq9QD1OQjKEqM0+aMWAiwWuXqCiUQjv8V SDGNKw+a1OomTV5WAc9RFDKCfTz2cBe8w2f3JjXNbghW8Gs/6UUgx2IDDUyMKfYk opgFOqMeL1TZNMXmO9iuRyXZLPXe04OHkU5KBvX8Mx7gPZ9ZpQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJR0x5G8ezzmz/gdd5NmUyBRHxFIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mYzAx OTc1NS1hNDY2LTQ1MTEtOGU1Zi04Mzc4MWQxYWNhNDYvZDViZjA2YjItYTFiOS0z YWU3LWIzYWYtMzQ1MWM2Mzk2MTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmMwMTk3NTUtYTQ2Ni00NTExLThl NWYtODM3ODFkMWFjYTQ2L2ZjMDE5NzU1LWE0NjYtNDUxMS04ZTVmLTgzNzgxZDFh Y2E0Ni5jcmwwHwYDVR0jBBgwFoAUhPrumqeOBTx4lOAJHwRHyv0tuXMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mYzAxOTc1NS1hNDY2LTQ1MTEtOGU1Zi04Mzc4 MWQxYWNhNDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5lAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAsGnH2frJVN5fjBk1Ft9V9O+FlKeB1T1opEcQCEd9egmh4zKMS+ RiXaGR93GNmEW2x9cbZeCr7mPZMm7GQs0hd5ZNvXPHAT7R6klpwicDlnM3shliRh 6TluwSmaEa0ZATGwyeZ0j79Afzj+t0lpMwyLDlo4DyYS2eXaqz4md4DqlXFIszmX f/dravdXm4MLDz0JYU9OsVh7jgycoesy2CyIGU/3HBw+9FWis1aLnSZ9Vva3QfI7 UfCvQWIlx3uUIa+5hTzOo8HveFkxjeT58ifCqvxVVUEeulW/nmWLOpx2Lg2fxWWS lQf5nif1qCeq28mep3HiouduCdLCsql5IKQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:37 2025 by rpki-client