$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/509af7b6-c10d-3059-8625-85cb76d6114e.roa File: 509af7b6-c10d-3059-8625-85cb76d6114e.roa (raw, json) Hash identifier: CAatNSwkXrJs0vwTOA6O6DKHnhKQTjWDsCpNkKM0zcI= Subject key identifier: D0:0D:AE:4E:42:99:26:A6:C2:C2:B6:D6:1C:24:AF:40:9C:7F:3E:33 Certificate issuer: /CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd Certificate serial: 010D0C9F432858486695B8F994C38C571D4AD700 Authority key identifier: F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/509af7b6-c10d-3059-8625-85cb76d6114e.roa Signing time: Wed 01 Jan 2025 14:00:53 +0000 ROA not before: Wed 01 Jan 2025 14:00:53 +0000 ROA not after: Tue 01 Apr 2025 13:00:53 +0000 asID: 982 IP address blocks: 2602:809:300c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:66:95:b8:f9:94:c3:8c:57:1d:4a:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd Validity Not Before: Jan 1 14:00:53 2025 GMT Not After : Apr 1 13:00:53 2025 GMT Subject: CN=9f241ac6-6323-4494-aaaf-6b36d1023a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bc:3c:3c:95:a7:51:0a:0e:5e:e6:54:5f:a4: 7f:5d:01:65:89:50:ac:89:94:33:37:47:a9:04:d4: c1:ec:81:65:53:6b:00:03:c4:72:72:15:2f:2a:69: 34:01:14:31:93:b1:d8:30:ad:ce:0c:34:37:25:c2: 7a:79:0e:a3:17:aa:41:b3:81:3d:e6:86:61:26:e0: 75:24:fd:83:64:0b:49:68:18:5f:50:42:0b:67:fc: 30:93:e3:e2:b9:e2:8b:f6:ac:2f:86:0c:dd:a8:e5: e8:3a:6e:1d:79:b2:f5:51:c3:c5:8b:e1:91:6c:8b: 77:8f:d9:a1:7a:f2:ce:75:2c:00:3d:6c:c7:d6:16: b9:0b:cf:a2:0f:22:ef:47:f6:f0:6a:c2:a6:e5:f5: 91:52:b3:87:33:4d:b5:9f:83:2b:d7:db:b0:37:45: 1c:dc:73:5a:95:b4:fc:c7:53:8d:18:09:23:ce:dd: c9:13:88:4b:23:14:14:8b:5c:9e:de:a2:7e:ec:8c: 0c:56:e1:85:c8:0c:c8:27:29:a7:7b:07:7c:e7:94: 0b:80:6b:cb:ab:cc:3d:b5:c3:fd:cc:70:a6:08:29: 5a:ae:d4:68:fe:59:d4:b7:68:f4:dc:5f:82:d0:f8: d2:2c:ef:f3:5d:dc:ff:60:c3:a7:a7:2f:72:97:3e: 18:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0D:AE:4E:42:99:26:A6:C2:C2:B6:D6:1C:24:AF:40:9C:7F:3E:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/509af7b6-c10d-3059-8625-85cb76d6114e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl X509v3 Authority Key Identifier: keyid:F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer sbgp-ipAddrBlock: critical IPv6: 2602:809:300c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:0b:7d:13:36:71:99:3c:3d:8d:07:df:50:8d:c2:ec:72:b5: d6:1f:4a:f4:6c:40:de:9e:aa:3a:56:ff:02:31:35:0a:38:44: a5:2d:f1:21:ab:a7:0a:0d:8a:55:9d:92:91:cc:f9:16:d9:17: 11:8c:86:7e:ea:f4:fe:c5:bc:f6:95:b5:5e:7d:94:55:a0:62: bb:ea:a8:b9:1f:46:c8:a3:eb:c2:35:29:f3:12:71:af:ef:35: 13:e0:36:2f:79:e7:36:ad:66:52:80:85:e0:86:0f:36:a5:a4: 2b:8f:56:39:20:c6:dd:1b:2c:dd:d3:7f:04:e5:ef:eb:b5:e6: 53:ff:6e:13:f4:59:b7:3c:a7:6d:33:47:7e:16:79:78:9c:dc: 58:96:db:d3:8d:11:24:44:f2:28:c6:ca:0d:68:e2:88:ad:7a: 0f:ce:2f:bc:de:6e:c7:dd:0d:f8:6d:5b:8d:89:81:18:3e:d2: ac:49:d2:54:58:bb:2d:3e:89:29:7b:62:33:a5:61:69:99:95: 9b:a3:3b:07:d1:de:9e:eb:f2:54:24:58:d4:54:6b:c2:8d:40: 7c:e9:01:db:a6:77:44:cd:4f:dc:ac:07:b4:92:45:b6:d5:8d: c0:a3:5a:12:e4:02:00:b6:74:f0:01:df:c0:22:4d:96:68:08: 11:59:b0:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhmlbj5lMOMVx1K1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM3NzJiNGItMTVmYi00YjM4LWI1MDUtZGZlOTE1ZGFl OWNkMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk OWYyNDFhYzYtNjMyMy00NDk0LWFhYWYtNmIzNmQxMDIzYTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrw8PJWnUQoOXuZUX6R/XQFliVCsiZQzN0ep BNTB7IFlU2sAA8RychUvKmk0ARQxk7HYMK3ODDQ3JcJ6eQ6jF6pBs4E95oZhJuB1 JP2DZAtJaBhfUEILZ/wwk+PiueKL9qwvhgzdqOXoOm4debL1UcPFi+GRbIt3j9mh evLOdSwAPWzH1ha5C8+iDyLvR/bwasKm5fWRUrOHM021n4Mr19uwN0Uc3HNalbT8 x1ONGAkjzt3JE4hLIxQUi1ye3qJ+7IwMVuGFyAzIJymnewd855QLgGvLq8w9tcP9 zHCmCClartRo/lnUt2j03F+C0PjSLO/zXdz/YMOnpy9ylz4YjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNANrk5CmSamwsK21hwkr0Ccfz4zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wYzc3 MmI0Yi0xNWZiLTRiMzgtYjUwNS1kZmU5MTVkYWU5Y2QvNTA5YWY3YjYtYzEwZC0z MDU5LTg2MjUtODVjYjc2ZDYxMTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGM3NzJiNGItMTVmYi00YjM4LWI1 MDUtZGZlOTE1ZGFlOWNkLzBjNzcyYjRiLTE1ZmItNGIzOC1iNTA1LWRmZTkxNWRh ZTljZC5jcmwwHwYDVR0jBBgwFoAU8UVSzOYiTilOFS1c5L3dBToItXIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wYzc3MmI0Yi0xNWZiLTRiMzgtYjUwNS1kZmU5 MTVkYWU5Y2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIICTAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABwLfRM2cZk8PY0H31CNwuxytdYfSvRsQN6eqjpW/wIxNQo4RKUt 8SGrpwoNilWdkpHM+RbZFxGMhn7q9P7FvPaVtV59lFWgYrvqqLkfRsij68I1KfMS ca/vNRPgNi955zatZlKAheCGDzalpCuPVjkgxt0bLN3TfwTl7+u15lP/bhP0Wbc8 p20zR34WeXic3FiW29ONESRE8ijGyg1o4oiteg/OL7zebsfdDfhtW42JgRg+0qxJ 0lRYuy0+iSl7YjOlYWmZlZujOwfR3p7r8lQkWNRUa8KNQHzpAdumd0TNT9ysB7SS RbbVjcCjWhLkAgC2dPAB38AiTZZoCBFZsJo= -----END CERTIFICATE-----Generated at Fri Mar 14 11:06:57 2025 by rpki-client