$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/10a98a9b-b733-37e9-901d-63dd77533c16.roa File: 10a98a9b-b733-37e9-901d-63dd77533c16.roa (raw, json) Hash identifier: 7WQFTwm3ZazXVx0+7xZZiQtpKVXF59nRbXxOJ2L53Lw= Subject key identifier: BA:99:54:46:A7:23:21:76:F7:0D:52:5F:09:73:C6:22:A6:6A:C5:86 Certificate issuer: /CN=3f8ce937-b65c-4889-8a3c-145d71949e14 Certificate serial: 010D0C9F43285848DEA11EE88B96256B37957C40 Authority key identifier: 73:7A:94:97:DE:E3:83:C1:8B:9D:50:15:D3:04:28:51:E9:B6:B8:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/10a98a9b-b733-37e9-901d-63dd77533c16.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 149522 IP address blocks: 2602:f829::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:1e:e8:8b:96:25:6b:37:95:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ce937-b65c-4889-8a3c-145d71949e14 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=23e93622-bc9d-4656-8151-c7a36e077537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c4:40:50:a5:3a:fe:d2:02:d0:bc:f0:5c:3c: fc:d0:24:3b:dc:b9:c3:cf:dd:b7:89:45:a1:aa:f2: bd:97:ab:bc:b9:dd:b8:ac:ba:83:bc:e0:62:c3:d7: fe:d0:46:c0:81:5e:25:0b:9c:1d:4b:69:22:41:6b: 1f:96:ce:ae:95:f8:dd:f5:e6:79:29:64:d3:32:16: ef:98:93:23:4e:94:c3:22:2a:5c:1c:07:d0:8a:17: e1:60:38:39:c7:54:f7:a3:ea:ed:70:04:a2:d9:e4: 1d:60:48:5b:e7:8c:96:64:05:24:d1:7c:27:64:15: c2:30:ef:e5:23:e2:95:38:e1:80:c7:85:fb:ab:64: 4b:b8:d2:ec:f5:ca:fe:9f:ba:8e:12:bd:9f:d8:b0: f3:19:c7:5e:3b:0c:23:1e:d0:43:45:6c:75:a8:d3: d4:62:58:f8:8c:c6:c0:ef:94:05:a5:ab:8a:1e:8b: e6:ec:4a:e2:a5:65:1c:c9:1e:bb:01:97:b4:2d:44: 5a:4d:45:71:90:22:b6:1b:60:da:eb:ed:b1:46:58: a6:14:f4:c3:b3:68:b9:0c:1f:a7:25:d4:80:dd:a6: 45:fe:76:c7:ef:26:4d:40:f7:56:be:f0:c2:6b:81: 56:ea:5c:68:f5:a5:8c:22:1e:a8:b1:fd:d9:73:f3: 50:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:99:54:46:A7:23:21:76:F7:0D:52:5F:09:73:C6:22:A6:6A:C5:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/10a98a9b-b733-37e9-901d-63dd77533c16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.crl X509v3 Authority Key Identifier: keyid:73:7A:94:97:DE:E3:83:C1:8B:9D:50:15:D3:04:28:51:E9:B6:B8:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer sbgp-ipAddrBlock: critical IPv6: 2602:f829::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:bc:cc:fa:12:7e:bc:68:54:b0:ee:de:52:65:d2:cc:ca:00: 30:d4:59:01:fb:00:5d:8f:d5:c8:50:ca:a2:fc:19:33:c4:13: 02:ce:42:f7:87:78:14:38:12:59:8a:66:dd:4a:bc:17:4c:c9: 26:8c:b4:fe:e2:1a:af:0e:7a:9c:c6:3d:7f:c9:21:fe:02:7f: 69:24:4d:41:29:6a:49:cf:ff:75:b5:d5:ac:d7:65:bf:e6:d9: 66:a9:86:f4:6b:da:a7:8c:91:c5:1d:d6:46:a1:27:12:96:af: b5:60:70:2f:a7:f4:7a:a2:63:99:35:de:62:77:98:a6:3d:09: 8e:2d:83:0f:85:3e:e0:68:26:3d:7c:73:7d:37:50:d0:ca:9c: f5:a8:79:b4:d2:b1:75:e4:4e:ee:1f:d0:ab:bb:8f:73:42:7b: 78:ca:ea:f8:b3:e3:8e:00:d3:5c:bd:de:e1:49:e7:38:69:7b: 36:03:0c:cc:72:8d:e6:f4:0a:b3:40:07:0b:cc:a2:52:20:e5: 8a:a9:4d:cb:d4:db:9a:dd:73:29:e6:15:9d:b8:9d:e4:24:c8: 5a:b3:d3:b5:4e:22:2c:0b:f7:54:46:6e:34:ea:43:d2:d1:55: 7e:aa:7a:08:d0:60:31:3a:c7:51:40:11:3f:6f:ce:d1:f4:ec: 28:1b:d4:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjeoR7oi5YlazeVfEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4Y2U5MzctYjY1Yy00ODg5LThhM2MtMTQ1ZDcxOTQ5 ZTE0MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk MjNlOTM2MjItYmM5ZC00NjU2LTgxNTEtYzdhMzZlMDc3NTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8RAUKU6/tIC0LzwXDz80CQ73LnDz923iUWh qvK9l6u8ud24rLqDvOBiw9f+0EbAgV4lC5wdS2kiQWsfls6ulfjd9eZ5KWTTMhbv mJMjTpTDIipcHAfQihfhYDg5x1T3o+rtcASi2eQdYEhb54yWZAUk0XwnZBXCMO/l I+KVOOGAx4X7q2RLuNLs9cr+n7qOEr2f2LDzGcdeOwwjHtBDRWx1qNPUYlj4jMbA 75QFpauKHovm7EripWUcyR67AZe0LURaTUVxkCK2G2Da6+2xRlimFPTDs2i5DB+n JdSA3aZF/nbH7yZNQPdWvvDCa4FW6lxo9aWMIh6osf3Zc/NQLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLqZVEanIyF29w1SXwlzxiKmasWGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zZjhj ZTkzNy1iNjVjLTQ4ODktOGEzYy0xNDVkNzE5NDllMTQvMTBhOThhOWItYjczMy0z N2U5LTkwMWQtNjNkZDc3NTMzYzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2Y4Y2U5MzctYjY1Yy00ODg5LThh M2MtMTQ1ZDcxOTQ5ZTE0LzNmOGNlOTM3LWI2NWMtNDg4OS04YTNjLTE0NWQ3MTk0 OWUxNC5jcmwwHwYDVR0jBBgwFoAUc3qUl97jg8GLnVAV0wQoUem2uAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zZjhjZTkzNy1iNjVjLTQ4ODktOGEzYy0xNDVk NzE5NDllMTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL4KQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKS8zPoSfrxoVLDu3lJl0szKADDUWQH7AF2P1chQyqL8GTPEEwLO QveHeBQ4ElmKZt1KvBdMySaMtP7iGq8OepzGPX/JIf4Cf2kkTUEpaknP/3W11azX Zb/m2WaphvRr2qeMkcUd1kahJxKWr7VgcC+n9HqiY5k13mJ3mKY9CY4tgw+FPuBo Jj18c303UNDKnPWoebTSsXXkTu4f0Ku7j3NCe3jK6viz444A01y93uFJ5zhpezYD DMxyjeb0CrNABwvMolIg5YqpTcvU25rdcynmFZ24neQkyFqz07VOIiwL91RGbjTq Q9LRVX6qegjQYDE6x1FAET9vztH07Cgb1Oc= -----END CERTIFICATE-----Generated at Sun Feb 16 20:16:41 2025 by rpki-client