$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a/1948be53-e17c-3047-b5fd-ce7874d44769.roa File: 1948be53-e17c-3047-b5fd-ce7874d44769.roa (raw, json) Hash identifier: 5c+QSgNOjv9VXjkMMNjhC6iV3YAyYJsMevHpu2w60l4= Subject key identifier: F9:D7:97:3C:A3:05:27:C3:75:F2:A6:BD:E2:54:8F:7F:0E:E8:0C:F7 Certificate issuer: /CN=bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a Certificate serial: 010D0C9F43285848E16BEE776788A2EE2A606100 Authority key identifier: 5E:87:0B:B5:65:AC:44:E9:2C:ED:8B:5C:3C:07:B5:99:5B:10:21:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a/1948be53-e17c-3047-b5fd-ce7874d44769.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 401147 IP address blocks: 2602:f8ae::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:ee:77:67:88:a2:ee:2a:60:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=21147c68-b225-42a6-ad85-d487583ebe86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8e:c0:dc:36:e4:df:cf:ed:2f:9e:4e:c1:c9: 2e:c4:7e:69:99:bb:f9:e4:13:b1:41:28:db:a5:26: 30:95:9f:97:53:c9:3b:37:58:67:d6:bc:80:36:88: 06:10:fd:b0:b0:fa:e5:f4:b5:e9:75:b7:f6:77:12: 88:2d:ae:43:ba:6c:ae:83:f4:77:40:9f:88:5a:98: 55:9b:15:db:d7:13:7d:48:e2:42:70:ed:1f:57:8c: 86:16:a3:f7:bf:d4:66:4c:5e:f9:31:55:72:62:5f: 70:1f:d0:26:51:67:f6:b7:a5:ac:4d:5c:eb:44:dc: e8:36:cf:ec:9e:d0:7c:45:0c:d3:95:af:70:92:00: ae:93:55:3d:c0:49:86:1f:4c:0e:08:42:fb:aa:4a: f7:79:96:0f:2f:14:ae:c2:fe:8d:ae:8f:92:c5:bc: 14:ce:4d:66:dc:ba:6e:44:26:0b:21:04:9d:59:d2: 25:ee:27:3f:3b:e6:c8:50:42:78:17:a7:c6:5c:07: 9c:7c:cb:1e:23:87:7a:57:c3:7b:bb:85:98:f2:85: 10:dc:69:5f:78:86:ef:61:fa:d8:7c:15:56:cc:ee: 94:01:90:35:68:e2:ff:23:ff:85:1e:d3:78:cf:16: 93:35:b2:29:e7:b6:74:6e:73:f2:67:ac:8b:9c:88: 53:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D7:97:3C:A3:05:27:C3:75:F2:A6:BD:E2:54:8F:7F:0E:E8:0C:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a/1948be53-e17c-3047-b5fd-ce7874d44769.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a.crl X509v3 Authority Key Identifier: keyid:5E:87:0B:B5:65:AC:44:E9:2C:ED:8B:5C:3C:07:B5:99:5B:10:21:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a.cer sbgp-ipAddrBlock: critical IPv6: 2602:f8ae::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:81:36:45:a7:b7:24:61:54:df:56:5d:51:c3:84:fb:4b:20: f8:2c:cc:dd:82:46:ef:f9:8d:f4:0b:6c:e7:d2:11:94:e3:9f: c7:5a:9a:0c:f8:35:4f:cf:10:9f:7b:57:5b:f9:32:0d:c0:a7: 85:57:2f:4b:70:7d:64:77:d9:5f:92:72:54:bc:52:04:fd:fc: 02:f6:07:d9:8b:dc:3a:98:ba:f8:0c:93:ba:38:22:c8:97:74: 33:10:c5:5b:f0:ce:d3:eb:56:5c:e1:29:07:40:db:06:78:74: 35:d8:fb:60:74:d0:e0:ae:17:9f:0a:ae:14:6a:2b:f3:35:9a: 9e:cf:44:a4:cd:97:82:1c:a7:46:6d:ec:d9:dc:84:37:42:2f: ce:b5:00:8a:e1:ba:f4:12:9d:46:cc:e1:6d:01:d5:87:ef:ba: 4e:42:1b:1a:cb:b9:b9:30:b4:f0:d4:9f:73:22:a7:29:61:af: 8b:00:33:ac:fd:2c:da:81:3c:a2:ef:00:bc:ab:b0:79:0c:ca: 8d:1e:0d:58:e6:9a:83:c7:38:9e:97:01:c4:14:24:3f:d6:9f: 0b:54:cc:a3:ce:2e:6a:4a:2e:a2:b1:b1:82:19:26:d9:fb:70: b9:91:d1:1e:a4:fe:11:ea:0c:a0:ca:44:39:92:d6:af:c7:35: 52:90:35:18 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjha+53Z4ii7ipgYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmI3OWNkOGMtYmVhMS00NWIwLWJiNTMtOWM0ZTk3NmUx YzFhMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk MjExNDdjNjgtYjIyNS00MmE2LWFkODUtZDQ4NzU4M2ViZTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI7A3Dbk38/tL55OwckuxH5pmbv55BOxQSjb pSYwlZ+XU8k7N1hn1ryANogGEP2wsPrl9LXpdbf2dxKILa5Dumyug/R3QJ+IWphV mxXb1xN9SOJCcO0fV4yGFqP3v9RmTF75MVVyYl9wH9AmUWf2t6WsTVzrRNzoNs/s ntB8RQzTla9wkgCuk1U9wEmGH0wOCEL7qkr3eZYPLxSuwv6Nro+SxbwUzk1m3Lpu RCYLIQSdWdIl7ic/O+bIUEJ4F6fGXAecfMseI4d6V8N7u4WY8oUQ3GlfeIbvYfrY fBVWzO6UAZA1aOL/I/+FHtN4zxaTNbIp57Z0bnPyZ6yLnIhT7QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPnXlzyjBSfDdfKmveJUj38O6Az3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYjc5 Y2Q4Yy1iZWExLTQ1YjAtYmI1My05YzRlOTc2ZTFjMWEvMTk0OGJlNTMtZTE3Yy0z MDQ3LWI1ZmQtY2U3ODc0ZDQ0NzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmI3OWNkOGMtYmVhMS00NWIwLWJi NTMtOWM0ZTk3NmUxYzFhL2JiNzljZDhjLWJlYTEtNDViMC1iYjUzLTljNGU5NzZl MWMxYS5jcmwwHwYDVR0jBBgwFoAUXocLtWWsROks7YtcPAe1mVsQIQYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYjc5Y2Q4Yy1iZWExLTQ1YjAtYmI1My05YzRl OTc2ZTFjMWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4rgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAgoE2Rae3JGFU31ZdUcOE+0sg+CzM3YJG7/mN9Ats59IRlOOfx1qa DPg1T88Qn3tXW/kyDcCnhVcvS3B9ZHfZX5JyVLxSBP38AvYH2YvcOpi6+AyTujgi yJd0MxDFW/DO0+tWXOEpB0DbBnh0Ndj7YHTQ4K4XnwquFGor8zWans9EpM2Xghyn Rm3s2dyEN0IvzrUAiuG69BKdRszhbQHVh++6TkIbGsu5uTC08NSfcyKnKWGviwAz rP0s2oE8ou8AvKuweQzKjR4NWOaag8c4npcBxBQkP9afC1TMo84uakouorGxghkm 2ftwuZHRHqT+EeoMoMpEOZLWr8c1UpA1GA== -----END CERTIFICATE-----Generated at Sun Feb 16 20:58:53 2025 by rpki-client