$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/075de4d6-ac9a-33be-b7cc-f8d6a1002804.roa File: 075de4d6-ac9a-33be-b7cc-f8d6a1002804.roa (raw, json) Hash identifier: WV9EeY7K2+5hafsrEv8uGLEUCiBULVOsQOMQvs0qv2Q= Subject key identifier: 4D:7B:E8:0F:9D:71:C6:76:91:BB:D5:F6:1C:7F:41:D5:10:CC:D1:CC Certificate issuer: /CN=9de2e0c2-2707-42c9-b26d-59fe7d0b342f Certificate serial: 010D0C9F43285848CB1657A2AB88722281360E00 Authority key identifier: 44:24:09:83:D6:FE:E5:17:5D:60:BD:AC:DC:B3:27:E5:CC:C5:BF:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/075de4d6-ac9a-33be-b7cc-f8d6a1002804.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 399542 IP address blocks: 2602:f8ef:fd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:57:a2:ab:88:72:22:81:36:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de2e0c2-2707-42c9-b26d-59fe7d0b342f Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=93aa7ed8-e901-4ab0-81cc-e72460c3eeb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:15:72:e1:0d:c8:2c:ac:27:8f:db:c0:f3:71: c7:e4:d6:ef:4f:72:50:b1:1f:1c:10:75:d9:f6:f8: c0:21:8b:28:8a:c3:a3:80:fb:51:ca:e6:64:bd:e1: 6f:1d:5b:89:92:cd:72:07:93:b5:46:3e:45:81:82: 63:40:73:12:9d:e6:c4:d1:ba:46:52:f6:82:10:f7: d4:da:61:bd:af:d1:e5:11:e3:19:b3:51:39:62:f3: 69:9e:e2:c8:a2:c5:14:5c:4b:c2:30:ef:63:1b:2e: 2c:e6:c2:ad:77:a6:a0:0c:dc:b5:39:05:ad:cf:57: 3e:37:84:fd:d8:8f:f5:c4:68:36:90:1f:e1:c2:a5: ac:ec:94:6a:67:f0:58:e3:8a:54:5a:01:bf:4d:c5: 48:60:bf:55:1c:86:49:f3:2c:94:cf:fc:40:bf:6f: 79:91:ba:7c:30:bf:af:75:d8:30:e7:25:17:80:42: 65:3d:25:67:74:40:2e:e8:ee:d6:80:7f:c2:22:0a: 53:2d:a7:d1:34:b4:eb:a3:c8:90:19:b7:c0:26:cc: e2:35:74:95:48:9e:f8:0a:cc:1d:f7:5d:13:f7:c7: 61:1a:03:2d:f8:4e:4f:c3:7a:e4:99:3b:e7:e9:5a: 9f:06:44:09:5a:aa:72:b4:bd:c8:07:e4:11:9a:46: 4c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7B:E8:0F:9D:71:C6:76:91:BB:D5:F6:1C:7F:41:D5:10:CC:D1:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/075de4d6-ac9a-33be-b7cc-f8d6a1002804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.crl X509v3 Authority Key Identifier: keyid:44:24:09:83:D6:FE:E5:17:5D:60:BD:AC:DC:B3:27:E5:CC:C5:BF:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer sbgp-ipAddrBlock: critical IPv6: 2602:f8ef:fd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:72:99:54:5e:49:c2:d4:12:49:dd:39:69:33:85:49:7c:d9: 63:d7:27:5e:0d:b2:a9:f1:21:12:e5:d9:3d:ca:83:22:b3:02: 60:be:03:96:e7:bd:18:25:29:c3:3c:6a:ee:21:ca:64:3e:77: 29:21:be:ca:d3:50:40:5c:3c:da:d4:14:58:c0:bb:20:e0:8b: c9:4c:20:30:29:84:48:25:27:27:87:75:6b:c4:cc:6d:c1:3e: c8:e2:e1:53:44:ba:6c:54:89:b8:ff:56:c4:18:d2:60:c9:4d: 03:6e:4a:28:f6:06:2b:1f:ac:c4:e7:b1:2a:9f:09:24:a4:f8: 55:bf:8f:e1:9b:e0:12:77:da:f2:bc:c0:9c:29:ed:67:28:28: 88:68:b0:a1:c8:85:ca:16:ea:eb:53:48:2d:f1:12:f7:72:60: ad:03:3b:38:6d:a0:29:10:7e:00:ca:df:e0:3d:23:44:21:1e: 99:e5:d6:f2:76:dd:af:f6:af:e1:ee:78:d9:ef:14:a3:eb:e8: 57:92:d5:b2:70:8f:15:31:c5:7f:ee:08:15:6f:0d:61:42:86: af:a1:f7:b3:81:e7:96:2c:3d:39:0d:51:db:9c:53:6d:8f:6c: e1:2f:8d:e0:fa:8f:9b:fa:2f:f2:d1:e1:a3:c6:2d:35:31:29: 1c:7b:31:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjLFleiq4hyIoE2DgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlMmUwYzItMjcwNy00MmM5LWIyNmQtNTlmZTdkMGIz NDJmMB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk OTNhYTdlZDgtZTkwMS00YWIwLTgxY2MtZTcyNDYwYzNlZWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBVy4Q3ILKwnj9vA83HH5NbvT3JQsR8cEHXZ 9vjAIYsoisOjgPtRyuZkveFvHVuJks1yB5O1Rj5FgYJjQHMSnebE0bpGUvaCEPfU 2mG9r9HlEeMZs1E5YvNpnuLIosUUXEvCMO9jGy4s5sKtd6agDNy1OQWtz1c+N4T9 2I/1xGg2kB/hwqWs7JRqZ/BY44pUWgG/TcVIYL9VHIZJ8yyUz/xAv295kbp8ML+v ddgw5yUXgEJlPSVndEAu6O7WgH/CIgpTLafRNLTro8iQGbfAJsziNXSVSJ74Cswd 910T98dhGgMt+E5Pw3rkmTvn6VqfBkQJWqpytL3IB+QRmkZMzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE176A+dccZ2kbvV9hx/QdUQzNHMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85ZGUy ZTBjMi0yNzA3LTQyYzktYjI2ZC01OWZlN2QwYjM0MmYvMDc1ZGU0ZDYtYWM5YS0z M2JlLWI3Y2MtZjhkNmExMDAyODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOWRlMmUwYzItMjcwNy00MmM5LWIy NmQtNTlmZTdkMGIzNDJmLzlkZTJlMGMyLTI3MDctNDJjOS1iMjZkLTU5ZmU3ZDBi MzQyZi5jcmwwHwYDVR0jBBgwFoAURCQJg9b+5RddYL2s3LMn5czFvyEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85ZGUyZTBjMi0yNzA3LTQyYzktYjI2ZC01OWZl N2QwYjM0MmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL47wD9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGpymVReScLUEkndOWkzhUl82WPXJ14NsqnxIRLl2T3KgyKzAmC+ A5bnvRglKcM8au4hymQ+dykhvsrTUEBcPNrUFFjAuyDgi8lMIDAphEglJyeHdWvE zG3BPsji4VNEumxUibj/VsQY0mDJTQNuSij2BisfrMTnsSqfCSSk+FW/j+Gb4BJ3 2vK8wJwp7WcoKIhosKHIhcoW6utTSC3xEvdyYK0DOzhtoCkQfgDK3+A9I0QhHpnl 1vJ23a/2r+HueNnvFKPr6FeS1bJwjxUxxX/uCBVvDWFChq+h97OB55YsPTkNUduc U22PbOEvjeD6j5v6L/LR4aPGLTUxKRx7MUs= -----END CERTIFICATE-----Generated at Sun Feb 16 21:04:47 2025 by rpki-client