$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/ce9c78fd-fbbb-3bdd-b97d-ef6a2e85f3dc.roa File: ce9c78fd-fbbb-3bdd-b97d-ef6a2e85f3dc.roa (raw, json) Hash identifier: MmrnIrPGpGvGjx63v9Cxi65PEa7sWxGtLfRGNoITAgA= Subject key identifier: 6A:23:4A:68:94:F5:66:B2:8A:93:53:5B:A0:EA:E8:7D:36:3A:A0:44 Certificate issuer: /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5 Certificate serial: 010D0C9F432858487A208E43A7D89A93A1100580 Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/ce9c78fd-fbbb-3bdd-b97d-ef6a2e85f3dc.roa Signing time: Wed 08 Jan 2025 14:00:51 +0000 ROA not before: Wed 08 Jan 2025 14:00:51 +0000 ROA not after: Tue 08 Apr 2025 13:00:51 +0000 asID: 399122 IP address blocks: 2602:fcd5:38::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:20:8e:43:a7:d8:9a:93:a1:10:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5 Validity Not Before: Jan 8 14:00:51 2025 GMT Not After : Apr 8 13:00:51 2025 GMT Subject: CN=89aebb7a-5934-4469-87e4-e1a9227d5200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:44:6e:c1:78:f5:36:9d:9b:f0:ab:bf:cb:63: 25:bf:64:b5:62:46:f6:4c:f3:04:68:c4:30:c5:fd: f0:57:2f:d1:6b:3a:36:e3:f9:63:77:86:28:35:40: 1a:82:18:42:8a:8f:36:0a:00:50:eb:38:a7:fb:e9: bb:6f:da:4a:8b:9b:e4:28:18:2c:99:cc:bc:4f:19: ad:0e:b3:40:24:34:ea:17:b7:10:9c:56:34:3c:26: ed:78:e7:88:0c:ec:39:10:46:88:13:21:4f:4a:fb: d4:f9:de:06:cb:22:6b:f6:ec:7a:f5:d3:47:db:28: 22:77:c6:f5:9d:27:b8:32:86:d3:00:2e:9a:ca:d4: b1:19:39:67:03:f0:7d:4d:b6:cc:0a:5b:9d:f7:a1: 84:a2:d7:1a:be:c8:31:9a:b5:e5:6d:0b:b2:61:3e: 0d:6b:32:f2:5b:4d:00:51:b1:75:48:a1:2a:4d:55: 2a:0e:ae:81:de:29:76:d0:35:f6:9c:ae:ef:00:ec: c9:fd:07:77:06:db:38:23:8b:11:75:f1:ec:98:b7: 43:1e:c2:94:00:c2:00:bd:f7:53:a8:f7:f4:0f:ee: ae:7e:dc:66:38:9c:87:ac:48:90:02:4d:cb:08:cc: 87:14:be:2f:0e:b3:bd:9f:e7:77:67:87:40:56:58: ff:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:23:4A:68:94:F5:66:B2:8A:93:53:5B:A0:EA:E8:7D:36:3A:A0:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/ce9c78fd-fbbb-3bdd-b97d-ef6a2e85f3dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl X509v3 Authority Key Identifier: keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fcd5:38::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:bb:ea:1e:87:db:e4:4a:2e:e3:cf:ee:ec:c7:4d:89:e9:58: 19:c5:44:ef:9a:d1:a2:38:9c:db:9e:15:70:45:b2:87:a3:04: 95:e6:02:c3:0f:76:3b:af:69:24:5f:86:ef:67:cb:9b:c3:5e: 81:b8:a2:5a:5b:36:fb:44:ac:58:a7:38:10:81:29:32:92:49: fd:6c:40:a2:c5:06:e6:a2:8f:2e:b1:dd:ed:97:a1:43:89:aa: e0:6b:c4:54:5d:56:fc:c0:ed:20:9d:fa:4f:18:61:5a:a0:c5: 33:5d:40:80:f7:e0:58:e4:5c:0f:a6:5c:4f:5c:ff:18:56:b0: 0d:2b:28:52:74:ae:07:fc:02:54:74:a1:83:a4:a9:c7:2c:f5: 27:5b:64:ad:78:19:8b:3f:b0:cd:df:6d:a4:a4:d6:fd:c5:2a: ba:65:2d:e7:ee:b5:b8:ea:fc:69:7c:fb:50:44:c9:12:cd:4e: 80:db:e9:95:37:84:e1:6c:85:1b:5d:74:fa:cf:6d:27:7c:9a: 7e:ec:cc:66:79:28:3c:90:85:b0:07:75:eb:58:af:71:b7:ae: f0:0c:78:52:2d:a1:1d:16:4f:d8:af:ec:08:dc:2e:4d:c4:2e: 75:ec:f5:36:41:96:9d:12:eb:25:40:9f:23:5e:3d:7c:f5:94: 42:a9:7a:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEh6II5Dp9iak6EQBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYyNjE4NzgtNWVmNC00Zjk5LThkMDktYjZkMjQ5MzQ0 NGM1MB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk ODlhZWJiN2EtNTkzNC00NDY5LTg3ZTQtZTFhOTIyN2Q1MjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkRuwXj1Np2b8Ku/y2Mlv2S1Ykb2TPMEaMQw xf3wVy/Razo24/ljd4YoNUAaghhCio82CgBQ6zin++m7b9pKi5vkKBgsmcy8Txmt DrNAJDTqF7cQnFY0PCbteOeIDOw5EEaIEyFPSvvU+d4GyyJr9ux69dNH2ygid8b1 nSe4MobTAC6aytSxGTlnA/B9TbbMClud96GEotcavsgxmrXlbQuyYT4NazLyW00A UbF1SKEqTVUqDq6B3il20DX2nK7vAOzJ/Qd3Bts4I4sRdfHsmLdDHsKUAMIAvfdT qPf0D+6uftxmOJyHrEiQAk3LCMyHFL4vDrO9n+d3Z4dAVlj/2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGojSmiU9WayipNTW6Dq6H02OqBEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNjI2 MTg3OC01ZWY0LTRmOTktOGQwOS1iNmQyNDkzNDQ0YzUvY2U5Yzc4ZmQtZmJiYi0z YmRkLWI5N2QtZWY2YTJlODVmM2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTYyNjE4NzgtNWVmNC00Zjk5LThk MDktYjZkMjQ5MzQ0NGM1L2E2MjYxODc4LTVlZjQtNGY5OS04ZDA5LWI2ZDI0OTM0 NDRjNS5jcmwwHwYDVR0jBBgwFoAU5DgAsivRHURmtzlG/z1FUty+3BowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNjI2MTg3OC01ZWY0LTRmOTktOGQwOS1iNmQy NDkzNDQ0YzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgL81QA4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFy76h6H2+RKLuPP7uzHTYnpWBnFRO+a0aI4nNueFXBFsoejBJXm AsMPdjuvaSRfhu9ny5vDXoG4olpbNvtErFinOBCBKTKSSf1sQKLFBuaijy6x3e2X oUOJquBrxFRdVvzA7SCd+k8YYVqgxTNdQID34FjkXA+mXE9c/xhWsA0rKFJ0rgf8 AlR0oYOkqccs9SdbZK14GYs/sM3fbaSk1v3FKrplLefutbjq/Gl8+1BEyRLNToDb 6ZU3hOFshRtddPrPbSd8mn7szGZ5KDyQhbAHdetYr3G3rvAMeFItoR0WT9iv7Ajc Lk3ELnXs9TZBlp0S6yVAnyNePXz1lEKpems= -----END CERTIFICATE-----Generated at Fri Mar 14 09:28:30 2025 by rpki-client