$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/4bf97504-9d2e-3da0-86f2-29f5261e5a88.roa File: 4bf97504-9d2e-3da0-86f2-29f5261e5a88.roa (raw, json) Hash identifier: g1xfkPc9+zSVSnp39IQoLKIjzrmBKBwtb+IZh/qaqnY= Subject key identifier: E1:09:F5:E3:06:8E:E8:10:AA:A7:1E:E2:0C:40:8A:6C:7A:02:20:41 Certificate issuer: /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5 Certificate serial: 010D0C9F432858487A208E26E77F8CE757612D00 Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/4bf97504-9d2e-3da0-86f2-29f5261e5a88.roa Signing time: Wed 08 Jan 2025 14:00:51 +0000 ROA not before: Wed 08 Jan 2025 14:00:51 +0000 ROA not after: Tue 08 Apr 2025 13:00:51 +0000 asID: 399122 IP address blocks: 2602:fcd5:36::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:20:8e:26:e7:7f:8c:e7:57:61:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5 Validity Not Before: Jan 8 14:00:51 2025 GMT Not After : Apr 8 13:00:51 2025 GMT Subject: CN=576ea17a-e230-41f3-b6c4-7d5800a1bd26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0c:d9:2f:28:73:2a:10:f9:68:e1:cb:b1:64: 86:e7:22:7b:e7:55:2c:64:4a:3b:d6:4b:51:93:f6: d3:b9:e5:64:5a:af:1f:4b:50:73:f1:18:d2:19:59: 3a:1b:53:6b:27:25:48:68:7a:97:c4:b2:5e:6d:7c: ee:d0:2a:b4:78:17:c7:d1:09:92:c4:c1:7a:2d:b5: 15:52:03:b0:fa:c5:ba:92:af:5d:76:93:73:bf:a6: 45:c9:06:7a:04:8e:c7:a6:39:41:80:e7:a9:db:b5: 4d:ce:bb:a7:11:d0:a7:a5:f1:5b:23:a0:1e:10:13: aa:f7:99:72:be:40:0c:1c:9f:80:1b:c0:e3:83:7e: 5e:df:ce:ec:54:f2:f9:6a:ce:64:7f:07:2c:98:b6: 4e:8f:5a:39:42:4e:91:09:f7:5a:53:99:bd:7f:a7: a4:94:e5:3a:61:b7:de:47:bb:5f:61:3c:51:91:ea: 03:00:c1:c2:66:3f:33:56:e1:61:37:e2:de:d1:08: af:dd:d6:18:61:19:76:d6:4e:c2:6b:00:72:75:42: ba:3e:ae:02:51:77:8d:d4:37:e0:57:8d:d9:ea:29: ff:d9:57:88:4d:a5:f7:6e:6c:e5:62:dc:b1:08:01: c9:b1:b7:23:a6:2e:88:ea:e5:53:79:92:b1:f2:e1: 7c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:09:F5:E3:06:8E:E8:10:AA:A7:1E:E2:0C:40:8A:6C:7A:02:20:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/4bf97504-9d2e-3da0-86f2-29f5261e5a88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl X509v3 Authority Key Identifier: keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fcd5:36::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:69:a6:7c:c2:0a:f4:43:9f:41:c5:45:cc:d8:3b:5a:84:52: 3c:91:47:bd:85:cb:4c:e2:57:df:34:f5:69:8c:88:e7:6e:50: 99:db:ca:72:23:7f:87:5e:3b:e5:5f:d7:7e:f2:94:82:d6:46: 58:a2:82:5b:ba:38:15:07:99:a6:f5:1a:e5:be:d8:79:aa:77: eb:52:cd:7f:4f:fa:fd:7b:dd:a9:12:f6:e6:70:33:74:13:43: a5:86:e0:cd:07:21:14:6c:b4:26:4f:a9:5d:10:db:54:2e:36: 76:d9:51:0f:dc:86:d4:0e:6a:38:07:73:cc:bf:8a:2a:70:c9: fc:3d:3a:22:ff:07:6b:55:6b:2c:00:44:dd:fe:46:a1:83:71: 9a:38:0d:30:66:48:a2:ec:45:3c:81:44:31:79:c1:4f:70:c6: c4:d8:3a:63:72:00:45:a6:60:06:43:7b:bd:3e:ed:c5:1a:f2: b9:90:bf:d2:79:7a:1a:0a:f5:8c:40:d8:c1:59:c3:7c:b2:0a: 9e:8c:ae:46:b2:2f:7f:90:1f:4d:60:19:60:ae:94:bf:d2:e9: 20:bc:74:7a:af:7a:d4:a4:e1:db:6c:22:5d:67:cf:52:f0:40: 07:57:5f:76:0c:ab:26:85:d6:5d:04:99:71:59:77:02:55:4c: b8:b2:f8:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEh6II4m53+M51dhLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYyNjE4NzgtNWVmNC00Zjk5LThkMDktYjZkMjQ5MzQ0 NGM1MB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk NTc2ZWExN2EtZTIzMC00MWYzLWI2YzQtN2Q1ODAwYTFiZDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggzZLyhzKhD5aOHLsWSG5yJ751UsZEo71ktR k/bTueVkWq8fS1Bz8RjSGVk6G1NrJyVIaHqXxLJebXzu0Cq0eBfH0QmSxMF6LbUV UgOw+sW6kq9ddpNzv6ZFyQZ6BI7HpjlBgOep27VNzrunEdCnpfFbI6AeEBOq95ly vkAMHJ+AG8Djg35e387sVPL5as5kfwcsmLZOj1o5Qk6RCfdaU5m9f6eklOU6Ybfe R7tfYTxRkeoDAMHCZj8zVuFhN+Le0Qiv3dYYYRl21k7CawBydUK6Pq4CUXeN1Dfg V43Z6in/2VeITaX3bmzlYtyxCAHJsbcjpi6I6uVTeZKx8uF8TQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOEJ9eMGjugQqqce4gxAimx6AiBBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNjI2 MTg3OC01ZWY0LTRmOTktOGQwOS1iNmQyNDkzNDQ0YzUvNGJmOTc1MDQtOWQyZS0z ZGEwLTg2ZjItMjlmNTI2MWU1YTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTYyNjE4NzgtNWVmNC00Zjk5LThk MDktYjZkMjQ5MzQ0NGM1L2E2MjYxODc4LTVlZjQtNGY5OS04ZDA5LWI2ZDI0OTM0 NDRjNS5jcmwwHwYDVR0jBBgwFoAU5DgAsivRHURmtzlG/z1FUty+3BowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNjI2MTg3OC01ZWY0LTRmOTktOGQwOS1iNmQy NDkzNDQ0YzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgL81QA2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIZppnzCCvRDn0HFRczYO1qEUjyRR72Fy0ziV9809WmMiOduUJnb ynIjf4deO+Vf137ylILWRliiglu6OBUHmab1GuW+2Hmqd+tSzX9P+v173akS9uZw M3QTQ6WG4M0HIRRstCZPqV0Q21QuNnbZUQ/chtQOajgHc8y/iipwyfw9OiL/B2tV aywARN3+RqGDcZo4DTBmSKLsRTyBRDF5wU9wxsTYOmNyAEWmYAZDe70+7cUa8rmQ v9J5ehoK9YxA2MFZw3yyCp6MrkayL3+QH01gGWCulL/S6SC8dHqvetSk4dtsIl1n z1LwQAdXX3YMqyaF1l0EmXFZdwJVTLiy+NM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:52 2025 by rpki-client