$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/49e5a9ea-82a8-3eff-91d9-8effc8dc17c4.roa File: 49e5a9ea-82a8-3eff-91d9-8effc8dc17c4.roa (raw, json) Hash identifier: ZXFCRq8bNturnol+J3ka8AYBWQsyZqivSTIkdLBcGww= Subject key identifier: 6D:59:45:1F:E3:49:E9:01:1B:24:FF:F7:49:D2:EB:1D:74:F0:16:DE Certificate issuer: /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Certificate serial: 010D0C9F432858488AE08CBDA499B9CCC6F14100 Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/49e5a9ea-82a8-3eff-91d9-8effc8dc17c4.roa Signing time: Tue 14 Jan 2025 14:00:51 +0000 ROA not before: Tue 14 Jan 2025 14:00:51 +0000 ROA not after: Mon 14 Apr 2025 13:00:51 +0000 asID: 27385 IP address blocks: 2602:fdaa:71::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8a:e0:8c:bd:a4:99:b9:cc:c6:f1:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Validity Not Before: Jan 14 14:00:51 2025 GMT Not After : Apr 14 13:00:51 2025 GMT Subject: CN=cd5809a2-8be4-4126-9e26-52252dd93350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:20:b6:a6:56:1d:94:35:13:ac:7e:85:e0:75: 34:99:a9:a2:0b:35:9e:86:1a:47:ba:61:7c:2f:e9: fe:be:1d:41:78:81:d1:f3:c8:10:c5:a9:fa:f8:b5: 48:6d:a4:d3:78:f6:79:99:4b:ab:28:4a:66:da:64: 7b:99:b1:e3:4d:a0:d3:f0:63:91:78:0e:fe:4f:fa: 64:8d:85:e0:9e:c7:27:f2:a6:10:8b:10:af:66:e4: c4:24:7c:11:60:10:5f:12:7a:ba:b4:32:58:10:3b: 06:2e:31:2b:71:17:12:59:71:73:af:64:b6:db:e6: 43:09:e0:2a:9c:bf:b0:a9:6f:b6:83:e8:68:70:66: b1:eb:3b:15:ff:b7:cb:d9:39:1d:34:01:6c:c7:5b: 73:66:5d:87:7f:09:0e:26:15:20:be:33:80:0d:04: 68:6d:9f:3a:de:fb:f3:c7:38:71:d7:cb:a5:dc:f2: 61:35:f1:20:72:97:38:ad:8e:fe:de:99:94:04:6c: e6:da:69:cd:8f:46:27:b2:99:c6:05:b6:29:eb:cb: 36:8e:03:70:c6:66:99:5e:5b:cd:de:29:31:18:ae: 5c:05:ec:65:f2:bf:ef:69:7f:06:5a:ad:67:13:90: e7:e5:fc:97:fb:c7:cd:43:86:7b:14:8f:28:f0:36: 5f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:59:45:1F:E3:49:E9:01:1B:24:FF:F7:49:D2:EB:1D:74:F0:16:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/49e5a9ea-82a8-3eff-91d9-8effc8dc17c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl X509v3 Authority Key Identifier: keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer sbgp-ipAddrBlock: critical IPv6: 2602:fdaa:71::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:29:2c:83:75:72:f4:eb:1a:a0:f0:be:b8:b9:5e:0a:e6:5e: 66:c4:51:f7:67:58:02:1d:e4:65:88:e4:93:3e:ee:09:53:4b: 2e:f0:11:bc:69:1d:d2:82:d1:8a:a1:21:bf:02:1c:6e:02:98: 27:8d:26:7d:09:97:31:50:a8:27:2a:4c:08:8b:91:9a:de:57: 4f:39:72:8a:7d:88:20:1d:b6:35:0c:06:7f:bb:7a:95:ac:f4: f6:47:7e:ae:4c:aa:49:1f:6a:66:c3:8b:d9:0e:43:40:b2:0a: 33:c4:12:01:ee:c0:2f:7b:a2:cc:62:65:35:47:ad:33:72:dc: 2c:03:ca:fe:30:5e:67:98:bd:71:93:00:d7:92:a8:76:3e:8b: 8f:68:cb:ad:3f:fc:d0:e1:59:cf:60:09:25:53:58:3f:55:b2: 45:a8:1f:05:f4:d0:ca:38:9f:a1:93:6d:5f:16:b3:27:83:c8: a7:fa:b8:e5:cb:34:d7:a9:eb:fa:d8:5f:78:d9:79:0c:cd:7a: 72:53:61:de:9b:33:c3:63:69:0f:91:45:ba:07:59:f1:77:24: c3:8e:72:dd:ce:54:c4:50:d4:36:ef:cf:99:dc:8c:b3:a6:a6: 87:aa:20:11:24:e9:ad:ae:18:b2:9e:3f:39:97:aa:0a:e7:7f: 75:60:10:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiK4Iy9pJm5zMbxQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMx ZDQxMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk Y2Q1ODA5YTItOGJlNC00MTI2LTllMjYtNTIyNTJkZDkzMzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCC2plYdlDUTrH6F4HU0mamiCzWehhpHumF8 L+n+vh1BeIHR88gQxan6+LVIbaTTePZ5mUurKEpm2mR7mbHjTaDT8GOReA7+T/pk jYXgnscn8qYQixCvZuTEJHwRYBBfEnq6tDJYEDsGLjErcRcSWXFzr2S22+ZDCeAq nL+wqW+2g+hocGax6zsV/7fL2TkdNAFsx1tzZl2HfwkOJhUgvjOADQRobZ863vvz xzhx18ul3PJhNfEgcpc4rY7+3pmUBGzm2mnNj0YnspnGBbYp68s2jgNwxmaZXlvN 3ikxGK5cBexl8r/vaX8GWq1nE5Dn5fyX+8fNQ4Z7FI8o8DZftwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG1ZRR/jSekBGyT/90nS6x108BbeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2 ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvNDllNWE5ZWEtODJhOC0z ZWZmLTkxZDktOGVmZmM4ZGMxN2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWQwNmVkNjYtOWZkZC00MDQ4LTg2 NDUtZTMzZThjZWMxZDQxLzlkMDZlZDY2LTlmZGQtNDA0OC04NjQ1LWUzM2U4Y2Vj MWQ0MS5jcmwwHwYDVR0jBBgwFoAUAkRNXm0Knu393PU01zFjuct6wgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNl OGNlYzFkNDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9qgBx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJgpLIN1cvTrGqDwvri5XgrmXmbEUfdnWAId5GWI5JM+7glTSy7w EbxpHdKC0YqhIb8CHG4CmCeNJn0JlzFQqCcqTAiLkZreV085cop9iCAdtjUMBn+7 epWs9PZHfq5MqkkfambDi9kOQ0CyCjPEEgHuwC97osxiZTVHrTNy3CwDyv4wXmeY vXGTANeSqHY+i49oy60//NDhWc9gCSVTWD9VskWoHwX00Mo4n6GTbV8WsyeDyKf6 uOXLNNep6/rYX3jZeQzNenJTYd6bM8NjaQ+RRboHWfF3JMOOct3OVMRQ1Dbvz5nc jLOmpoeqIBEk6a2uGLKePzmXqgrnf3VgEBM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:44 2025 by rpki-client