$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/879a7052-68b4-4d45-b181-40921854faa6/f7aac3a4-ea14-3cab-a887-ab585f15e63c.roa File: f7aac3a4-ea14-3cab-a887-ab585f15e63c.roa (raw, json) Hash identifier: IHvBlaG124ULd0RavSgWSivK21q7mKgw1Bcsq0fTXu4= Subject key identifier: BB:CB:8E:AA:48:A8:2A:88:FD:4C:85:49:7F:67:84:3C:C8:96:26:25 Certificate issuer: /CN=879a7052-68b4-4d45-b181-40921854faa6 Certificate serial: 010D0C9F43285848811B14C1DE3D8E9B345529A0 Authority key identifier: D8:14:4E:D4:C7:C9:65:EA:47:C7:3F:D1:5A:9B:49:BB:7E:3B:07:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/879a7052-68b4-4d45-b181-40921854faa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/879a7052-68b4-4d45-b181-40921854faa6/f7aac3a4-ea14-3cab-a887-ab585f15e63c.roa Signing time: Sat 11 Jan 2025 02:00:39 +0000 ROA not before: Sat 11 Jan 2025 02:00:39 +0000 ROA not after: Fri 11 Apr 2025 01:00:39 +0000 asID: 401068 IP address blocks: 2602:819::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/879a7052-68b4-4d45-b181-40921854faa6/879a7052-68b4-4d45-b181-40921854faa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/879a7052-68b4-4d45-b181-40921854faa6/879a7052-68b4-4d45-b181-40921854faa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/879a7052-68b4-4d45-b181-40921854faa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:81:1b:14:c1:de:3d:8e:9b:34:55:29:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=879a7052-68b4-4d45-b181-40921854faa6 Validity Not Before: Jan 11 02:00:39 2025 GMT Not After : Apr 11 01:00:39 2025 GMT Subject: CN=b5622396-0227-4948-ae53-5182822abe33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a1:00:ab:4a:53:33:cf:49:6c:6d:39:f8:7e: 0a:1a:3f:b5:77:73:42:27:d1:ee:9d:e1:c2:13:eb: 1a:a3:bc:9e:61:b3:03:7b:8a:81:26:82:92:1e:91: 12:cd:0f:33:21:08:48:98:50:17:e5:cd:10:51:5d: 41:c5:e2:c1:1b:60:75:39:b6:08:ed:68:a6:be:d6: 13:7a:6a:24:63:08:b9:5d:ef:fa:d2:42:ab:da:93: 18:b2:29:81:12:cd:58:32:c8:e2:55:9a:42:f3:7b: 5a:6c:50:a2:b5:10:a2:df:93:e5:d2:c4:82:3c:cd: 7a:3c:f1:70:a1:7c:e7:78:a9:c4:2c:7d:89:ab:67: 2a:f4:a0:95:e9:64:f0:7c:b5:d6:b3:1e:1d:0c:3a: b7:c2:b4:9b:44:80:cc:56:9d:48:ca:0d:61:c8:54: 59:67:2a:a9:28:82:89:74:65:08:d0:59:4d:ad:8b: ca:ce:29:a0:62:06:33:bd:04:8f:ea:6a:cc:0e:de: 55:ae:ae:b0:17:79:b8:97:48:a4:33:4d:24:e5:7a: 15:74:f7:4c:33:6d:49:c4:48:d3:b9:00:4e:7f:6c: 2d:8c:ec:9b:82:53:c9:09:c9:86:cb:54:69:10:1f: 28:d6:bf:26:82:e7:d1:4d:cd:c5:dd:28:81:a9:e2: a9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CB:8E:AA:48:A8:2A:88:FD:4C:85:49:7F:67:84:3C:C8:96:26:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/879a7052-68b4-4d45-b181-40921854faa6/f7aac3a4-ea14-3cab-a887-ab585f15e63c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/879a7052-68b4-4d45-b181-40921854faa6/879a7052-68b4-4d45-b181-40921854faa6.crl X509v3 Authority Key Identifier: keyid:D8:14:4E:D4:C7:C9:65:EA:47:C7:3F:D1:5A:9B:49:BB:7E:3B:07:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/879a7052-68b4-4d45-b181-40921854faa6.cer sbgp-ipAddrBlock: critical IPv6: 2602:819::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:8c:89:a5:01:80:7c:48:18:93:36:6f:36:dd:4a:7f:f0:f8: 43:bb:fb:72:cd:b1:1e:f0:b8:7b:f7:35:73:4f:4f:ea:d1:9a: 94:67:1c:2e:c7:d0:78:fd:f2:d8:5f:a2:66:ea:8b:87:20:a1: 9d:80:5c:5a:27:53:fa:8f:de:b9:0b:89:4d:fb:45:5d:9a:d0: 08:67:00:d7:eb:06:03:18:9f:d8:32:32:5b:40:bf:79:82:ce: 1f:7a:c1:1e:64:1c:c4:8f:3f:1d:8a:29:bb:c7:f7:90:25:a6: dd:7f:c6:25:c2:8e:a4:79:86:5b:d3:a0:b9:2a:b5:39:7b:c3: 2d:b3:68:36:2a:9a:3d:e3:30:b1:5c:db:f5:47:64:da:9a:4b: 76:d0:de:70:49:a3:f8:e0:62:f7:4f:3f:bc:02:ef:5c:b4:02: 4e:e5:40:d6:ff:8f:ec:f0:8d:b3:9f:f7:4c:a0:7a:7b:8c:dd: e5:ff:a9:83:66:3d:f8:ef:1e:be:04:d7:53:5c:24:c3:97:f8: b5:1e:f4:9b:a7:f9:1f:1a:fe:a8:60:59:ce:51:2a:2f:08:12: 61:b9:a6:2f:76:de:20:8f:c7:42:78:8c:9a:66:41:38:07:09: 64:f3:b1:16:7a:78:6d:45:09:d9:bb:cd:87:c8:86:58:31:14: 52:ff:7c:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiBGxTB3j2OmzRVKaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODc5YTcwNTItNjhiNC00ZDQ1LWIxODEtNDA5MjE4NTRm YWE2MB4XDTI1MDExMTAyMDAzOVoXDTI1MDQxMTAxMDAzOVowLzEtMCsGA1UEAxMk YjU2MjIzOTYtMDIyNy00OTQ4LWFlNTMtNTE4MjgyMmFiZTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaEAq0pTM89JbG05+H4KGj+1d3NCJ9HuneHC E+sao7yeYbMDe4qBJoKSHpESzQ8zIQhImFAX5c0QUV1BxeLBG2B1ObYI7WimvtYT emokYwi5Xe/60kKr2pMYsimBEs1YMsjiVZpC83tabFCitRCi35Pl0sSCPM16PPFw oXzneKnELH2Jq2cq9KCV6WTwfLXWsx4dDDq3wrSbRIDMVp1Iyg1hyFRZZyqpKIKJ dGUI0FlNrYvKzimgYgYzvQSP6mrMDt5Vrq6wF3m4l0ikM00k5XoVdPdMM21JxEjT uQBOf2wtjOybglPJCcmGy1RpEB8o1r8mgufRTc3F3SiBqeKpLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLvLjqpIqCqI/UyFSX9nhDzIliYlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84Nzlh NzA1Mi02OGI0LTRkNDUtYjE4MS00MDkyMTg1NGZhYTYvZjdhYWMzYTQtZWExNC0z Y2FiLWE4ODctYWI1ODVmMTVlNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODc5YTcwNTItNjhiNC00ZDQ1LWIx ODEtNDA5MjE4NTRmYWE2Lzg3OWE3MDUyLTY4YjQtNGQ0NS1iMTgxLTQwOTIxODU0 ZmFhNi5jcmwwHwYDVR0jBBgwFoAU2BRO1MfJZepHxz/RWptJu347B+EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NzlhNzA1Mi02OGI0LTRkNDUtYjE4MS00MDky MTg1NGZhYTYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIGQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAICMiaUBgHxIGJM2bzbdSn/w+EO7+3LNsR7wuHv3NXNPT+rRmpRn HC7H0Hj98thfombqi4cgoZ2AXFonU/qP3rkLiU37RV2a0AhnANfrBgMYn9gyMltA v3mCzh96wR5kHMSPPx2KKbvH95Alpt1/xiXCjqR5hlvToLkqtTl7wy2zaDYqmj3j MLFc2/VHZNqaS3bQ3nBJo/jgYvdPP7wC71y0Ak7lQNb/j+zwjbOf90ygenuM3eX/ qYNmPfjvHr4E11NcJMOX+LUe9Jun+R8a/qhgWc5RKi8IEmG5pi923iCPx0J4jJpm QTgHCWTzsRZ6eG1FCdm7zYfIhlgxFFL/fKI= -----END CERTIFICATE-----Generated at Sun Feb 16 20:17:09 2025 by rpki-client