$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/589b6e74-2743-3343-aa66-6bfc3894aa50.roa File: 589b6e74-2743-3343-aa66-6bfc3894aa50.roa (raw, json) Hash identifier: JU1hKiEuLKrMS1qGhZ0J0z8XGu7B85Vr33AIGSTAfiA= Subject key identifier: C1:95:BE:76:BB:38:F3:90:3A:03:79:0F:A1:28:65:A5:B7:A1:8F:E7 Certificate issuer: /CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd Certificate serial: 010D0C9F432858486695B2E7593984C15CBB2460 Authority key identifier: F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/589b6e74-2743-3343-aa66-6bfc3894aa50.roa Signing time: Wed 01 Jan 2025 14:00:53 +0000 ROA not before: Wed 01 Jan 2025 14:00:53 +0000 ROA not after: Tue 01 Apr 2025 13:00:53 +0000 asID: 968 IP address blocks: 2602:809:300b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:66:95:b2:e7:59:39:84:c1:5c:bb:24:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd Validity Not Before: Jan 1 14:00:53 2025 GMT Not After : Apr 1 13:00:53 2025 GMT Subject: CN=c7fc44ae-fe4c-4050-8df2-873f784e1ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d4:06:b7:5a:a7:1a:0e:dd:93:ca:31:06:e5: 67:82:7e:33:a3:dd:f5:67:52:fc:e6:2e:3b:a7:61: ed:0d:00:59:f0:41:98:61:fa:66:e7:54:86:f7:24: 39:1f:1f:6f:ac:d8:4f:55:94:a4:07:58:5d:b3:e1: 4c:45:ef:d1:88:25:ba:59:a9:af:c9:ec:50:cb:20: f5:39:e5:80:9a:a5:6b:1c:e5:33:29:28:42:bc:b9: 06:d4:25:f9:49:ad:d0:ee:56:70:98:74:04:d8:de: 70:13:c5:98:e7:95:a4:0a:80:87:b3:3f:11:3e:3c: 76:02:75:2c:0e:8e:b1:f3:bc:19:8f:75:9f:c3:18: ba:2f:5c:99:5d:cd:74:2e:5d:a5:1d:85:b0:fe:41: 31:9c:d2:08:e5:5c:37:d1:0e:77:74:01:d6:1b:dc: f3:5f:23:0e:40:dd:80:5c:98:c5:75:95:e7:94:57: 63:60:98:5e:26:08:ab:0b:e0:6c:49:37:66:cf:26: 17:61:e0:7f:ab:1e:04:90:01:f7:a9:64:af:15:a2: f5:5a:e9:b1:26:60:32:e3:7c:f4:6a:74:59:a6:57: ec:d8:83:9f:5d:cc:5c:89:d1:ed:69:77:7d:11:e4: 46:cd:6d:4f:83:23:b3:70:c1:56:4b:62:b1:e1:c1: cd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:95:BE:76:BB:38:F3:90:3A:03:79:0F:A1:28:65:A5:B7:A1:8F:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/589b6e74-2743-3343-aa66-6bfc3894aa50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl X509v3 Authority Key Identifier: keyid:F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer sbgp-ipAddrBlock: critical IPv6: 2602:809:300b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:fc:20:a8:19:f2:a6:dd:26:02:d8:e9:c9:09:9d:f7:70:7c: ff:90:23:33:84:f7:49:a0:23:5c:d7:9b:eb:70:9a:1c:a1:4a: 73:c3:2a:8e:d6:50:0d:d8:77:38:34:02:d6:22:59:8c:ee:8f: 7f:9d:31:3a:b0:bd:05:0f:e4:21:ae:51:d2:f7:f4:b5:39:64: a2:e2:df:da:4a:07:6c:b6:9a:7e:c4:9e:a9:66:a3:02:0a:10: 35:8d:6b:28:49:7e:e8:1e:3e:96:7b:f8:df:76:f3:c4:e4:25: 86:f0:72:12:cb:6d:26:2d:2c:77:1e:f1:a4:26:6f:40:6b:6f: d4:f6:ef:bc:87:1f:7d:0f:8d:f2:57:31:04:2f:1a:a2:e0:3b: 5c:09:44:6f:76:b9:29:a7:28:44:78:b1:c5:6d:26:d8:fb:fd: fa:7b:5e:a9:8c:60:54:69:df:aa:be:65:70:ee:5b:79:36:18: eb:11:f0:ab:3a:38:a0:df:81:f2:9f:b0:45:d3:3e:2f:a1:ea: 0f:45:97:73:c1:dd:dc:7d:ca:2e:5e:1a:50:db:7d:b0:26:81: 8c:d9:20:8e:54:90:cb:1c:26:6f:0d:06:84:ca:b6:cc:c7:a3: ce:bc:4e:f2:f5:a5:38:7f:01:0c:01:85:76:cf:83:fc:6f:34: 59:71:82:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhmlbLnWTmEwVy7JGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM3NzJiNGItMTVmYi00YjM4LWI1MDUtZGZlOTE1ZGFl OWNkMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk YzdmYzQ0YWUtZmU0Yy00MDUwLThkZjItODczZjc4NGUxZmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdQGt1qnGg7dk8oxBuVngn4zo931Z1L85i47 p2HtDQBZ8EGYYfpm51SG9yQ5Hx9vrNhPVZSkB1hds+FMRe/RiCW6WamvyexQyyD1 OeWAmqVrHOUzKShCvLkG1CX5Sa3Q7lZwmHQE2N5wE8WY55WkCoCHsz8RPjx2AnUs Do6x87wZj3Wfwxi6L1yZXc10Ll2lHYWw/kExnNII5Vw30Q53dAHWG9zzXyMOQN2A XJjFdZXnlFdjYJheJgirC+BsSTdmzyYXYeB/qx4EkAH3qWSvFaL1WumxJmAy43z0 anRZplfs2IOfXcxcidHtaXd9EeRGzW1PgyOzcMFWS2Kx4cHN9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMGVvna7OPOQOgN5D6EoZaW3oY/nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wYzc3 MmI0Yi0xNWZiLTRiMzgtYjUwNS1kZmU5MTVkYWU5Y2QvNTg5YjZlNzQtMjc0My0z MzQzLWFhNjYtNmJmYzM4OTRhYTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGM3NzJiNGItMTVmYi00YjM4LWI1 MDUtZGZlOTE1ZGFlOWNkLzBjNzcyYjRiLTE1ZmItNGIzOC1iNTA1LWRmZTkxNWRh ZTljZC5jcmwwHwYDVR0jBBgwFoAU8UVSzOYiTilOFS1c5L3dBToItXIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wYzc3MmI0Yi0xNWZiLTRiMzgtYjUwNS1kZmU5 MTVkYWU5Y2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIICTAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB/8IKgZ8qbdJgLY6ckJnfdwfP+QIzOE90mgI1zXm+twmhyhSnPD Ko7WUA3Ydzg0AtYiWYzuj3+dMTqwvQUP5CGuUdL39LU5ZKLi39pKB2y2mn7Enqlm owIKEDWNayhJfugePpZ7+N9288TkJYbwchLLbSYtLHce8aQmb0Brb9T277yHH30P jfJXMQQvGqLgO1wJRG92uSmnKER4scVtJtj7/fp7XqmMYFRp36q+ZXDuW3k2GOsR 8Ks6OKDfgfKfsEXTPi+h6g9Fl3PB3dx9yi5eGlDbfbAmgYzZII5UkMscJm8NBoTK tszHo868TvL1pTh/AQwBhXbPg/xvNFlxgms= -----END CERTIFICATE-----Generated at Fri Mar 14 10:30:24 2025 by rpki-client