$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/fee69ddf-b29a-31d6-a5c0-0067ca4a2534.roa File: fee69ddf-b29a-31d6-a5c0-0067ca4a2534.roa (raw, json) Hash identifier: jDL3AqcD6TzHhbjODjDdx7pt+jaP4O5HeeNUyEpQUvM= Subject key identifier: AC:DE:80:22:E5:43:CE:10:80:19:90:51:D4:91:2A:CE:C0:B3:BC:DD Certificate issuer: /CN=df5adac7-ed86-4b24-911d-716f2c94711d Certificate serial: 010D0C9F432858480A751F31A2FEA46309FF5940 Authority key identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/fee69ddf-b29a-31d6-a5c0-0067ca4a2534.roa Signing time: Fri 29 Nov 2024 14:00:51 +0000 ROA not before: Fri 29 Nov 2024 14:00:51 +0000 ROA not after: Thu 27 Feb 2025 14:00:51 +0000 asID: 53808 IP address blocks: 2602:f92a::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0a:75:1f:31:a2:fe:a4:63:09:ff:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df5adac7-ed86-4b24-911d-716f2c94711d Validity Not Before: Nov 29 14:00:51 2024 GMT Not After : Feb 27 14:00:51 2025 GMT Subject: CN=0da34f4e-501e-4c42-8dab-1eaf90788b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:aa:6b:b8:e0:b5:f0:ff:48:45:89:5d:c0:8a: 68:a5:cc:f7:a3:3e:01:e4:bf:52:8a:8b:1f:9b:d5: bc:39:e9:96:56:e5:e3:b6:84:0c:79:e6:c3:cc:41: 85:ac:48:a1:aa:9b:50:92:d1:07:02:91:dd:81:68: 92:b6:64:66:ed:7c:e3:eb:b8:c6:d7:fd:aa:e6:c7: be:bc:a0:c1:5d:e8:50:65:f2:3b:4b:c6:94:5f:7f: 9d:80:18:03:cf:51:69:01:90:45:20:28:78:4d:aa: dd:48:80:1c:43:9d:06:78:09:b0:e0:73:67:18:29: f8:8e:2d:d9:bf:78:2a:28:82:ed:c5:18:49:ac:9f: 54:74:66:43:11:7d:3a:bc:57:8c:fe:44:e8:1c:2e: 85:57:1f:89:54:96:61:f4:c9:70:75:f7:54:57:3b: 4a:a0:6e:fe:76:74:6e:b7:65:f4:4c:ea:02:ec:39: ff:c1:26:34:12:17:9e:eb:bc:2b:9e:42:ab:d2:cd: ce:17:54:0f:b8:fb:9f:e7:f2:b4:9b:3e:ca:2a:43: bf:0a:c1:77:84:7b:49:31:f7:36:6b:e6:af:11:11: 4f:eb:83:d1:b7:c9:f9:8c:36:d7:c6:c2:2f:b0:e1: 3e:0e:40:7a:70:df:8e:49:96:04:d1:50:ab:0d:0f: 09:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:DE:80:22:E5:43:CE:10:80:19:90:51:D4:91:2A:CE:C0:B3:BC:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/fee69ddf-b29a-31d6-a5c0-0067ca4a2534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl X509v3 Authority Key Identifier: keyid:65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f92a::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:8d:11:ca:64:1d:49:9c:ed:5d:dd:d8:b1:2a:82:7a:d6:aa: e3:cb:59:9f:57:18:4c:68:98:48:2d:9c:10:7e:96:30:dc:b4: a2:ea:a9:5f:e1:e5:49:20:e4:88:b6:f7:2a:92:54:de:90:d7: a3:ba:af:e5:53:a1:7e:d4:67:c9:8f:c7:5f:60:48:ad:73:57: 50:72:26:66:57:4d:ef:1e:d5:23:5c:48:87:e6:51:ac:7a:1e: 75:d2:e2:dd:be:ad:c8:50:55:e2:de:00:77:2c:0e:ad:1c:9c: dc:1a:97:cf:d4:11:75:1a:2e:cc:a0:b0:13:e2:4b:57:f6:2c: ab:97:86:9d:82:42:a8:bd:10:bd:3b:44:52:b9:cf:f7:dd:e6: e6:30:65:01:cf:ce:e4:4c:96:df:85:6b:cf:f6:02:7f:c6:8e: 7d:52:4b:dc:6f:56:ec:17:b9:3e:5b:cb:c1:e5:e9:da:e5:13: 00:eb:af:0c:c2:2a:0d:e0:6c:cd:03:16:96:6b:80:29:81:34: 24:c7:a8:b0:2b:7c:d8:e8:8e:19:08:70:b3:db:6a:46:cb:29: 17:a5:a0:91:b6:6d:a7:99:55:aa:02:c3:e1:c6:86:15:1a:83: 98:b6:eb:3f:8a:0e:29:79:1a:8f:7f:24:ce:e4:8a:b1:f5:68: 5f:61:60:38 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEgKdR8xov6kYwn/WUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY1YWRhYzctZWQ4Ni00YjI0LTkxMWQtNzE2ZjJjOTQ3 MTFkMB4XDTI0MTEyOTE0MDA1MVoXDTI1MDIyNzE0MDA1MVowLzEtMCsGA1UEAxMk MGRhMzRmNGUtNTAxZS00YzQyLThkYWItMWVhZjkwNzg4YjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6pruOC18P9IRYldwIpopcz3oz4B5L9Siosf m9W8OemWVuXjtoQMeebDzEGFrEihqptQktEHApHdgWiStmRm7Xzj67jG1/2q5se+ vKDBXehQZfI7S8aUX3+dgBgDz1FpAZBFICh4TardSIAcQ50GeAmw4HNnGCn4ji3Z v3gqKILtxRhJrJ9UdGZDEX06vFeM/kToHC6FVx+JVJZh9MlwdfdUVztKoG7+dnRu t2X0TOoC7Dn/wSY0Ehee67wrnkKr0s3OF1QPuPuf5/K0mz7KKkO/CsF3hHtJMfc2 a+avERFP64PRt8n5jDbXxsIvsOE+DkB6cN+OSZYE0VCrDQ8JRwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKzegCLlQ84QgBmQUdSRKs7As7zdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVh ZGFjNy1lZDg2LTRiMjQtOTExZC03MTZmMmM5NDcxMWQvZmVlNjlkZGYtYjI5YS0z MWQ2LWE1YzAtMDA2N2NhNGEyNTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGY1YWRhYzctZWQ4Ni00YjI0LTkx MWQtNzE2ZjJjOTQ3MTFkL2RmNWFkYWM3LWVkODYtNGIyNC05MTFkLTcxNmYyYzk0 NzExZC5jcmwwHwYDVR0jBBgwFoAUZYTA+4uOlUw5iwUkbJv3KvYU7kIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVhZGFjNy1lZDg2LTRiMjQtOTExZC03MTZm MmM5NDcxMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL5KgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANo0RymQdSZztXd3YsSqCetaq48tZn1cYTGiYSC2cEH6WMNy0ouqp X+HlSSDkiLb3KpJU3pDXo7qv5VOhftRnyY/HX2BIrXNXUHImZldN7x7VI1xIh+ZR rHoeddLi3b6tyFBV4t4AdywOrRyc3BqXz9QRdRouzKCwE+JLV/Ysq5eGnYJCqL0Q vTtEUrnP993m5jBlAc/O5EyW34Vrz/YCf8aOfVJL3G9W7Be5PlvLweXp2uUTAOuv DMIqDeBszQMWlmuAKYE0JMeosCt82OiOGQhws9tqRsspF6WgkbZtp5lVqgLD4caG FRqDmLbrP4oOKXkaj38kzuSKsfVoX2FgOA== -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:55 2025 by rpki-client