$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/a18857b3-bcc7-3703-9486-773d81f811bd.roa File: a18857b3-bcc7-3703-9486-773d81f811bd.roa (raw, json) Hash identifier: kmr6LRMOaR7tZxjQMQtNXriMaYpj6gp7wIPTdtTNrpA= Subject key identifier: 9E:BF:AC:70:12:8D:0A:0E:B6:F7:EC:2C:E0:8A:A8:6C:1E:EF:13:FE Certificate issuer: /CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932 Certificate serial: 010D0C9F43285848AF2B80508CE6119558968780 Authority key identifier: 1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/a18857b3-bcc7-3703-9486-773d81f811bd.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 2602:fa36::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:80:50:8c:e6:11:95:58:96:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=54d0a287-edfe-4e9c-968d-a451c19f5ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d6:94:08:92:3c:01:60:11:6f:9d:fe:39:cd: a7:45:c8:86:e2:fe:3f:bb:1c:28:1b:87:8d:a8:c0: 1d:ce:33:ad:86:35:27:4e:d5:b2:f8:1f:40:6d:27: d3:a8:18:44:05:96:f8:bb:bb:e0:5e:d5:27:ed:d9: a7:a0:fd:8a:d5:a1:0a:43:c3:f5:d3:9c:8d:b2:8b: c1:72:6e:ba:3e:ac:e9:8b:21:5b:12:31:5c:d9:57: 52:d5:a7:bc:17:c3:c6:c7:55:5b:32:41:40:cc:40: 12:af:bb:17:72:d8:35:d8:af:ab:cd:1d:c4:43:6e: 76:25:6b:be:d8:df:70:de:70:41:d0:05:1a:67:6e: 43:91:3c:7d:1c:16:76:fd:0e:64:2d:99:5b:8e:0d: ac:08:36:9d:81:ac:f4:91:f6:27:4e:83:8d:20:a9: c4:11:5e:d9:98:d5:43:bd:d2:f9:a9:fa:9d:7d:f2: fe:8f:fc:a1:22:84:25:78:1f:aa:f1:b2:3e:72:b0: 6c:74:be:47:c9:f1:53:1f:15:b5:b6:4e:54:83:b5: 6c:09:46:61:3d:11:7e:66:41:70:b1:bb:15:a3:a7: a8:04:a9:8d:e2:1f:b1:d1:d7:06:7a:e0:78:53:b0: df:59:a7:8c:a8:ea:ff:b7:5c:de:ac:ab:40:53:cc: 47:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BF:AC:70:12:8D:0A:0E:B6:F7:EC:2C:E0:8A:A8:6C:1E:EF:13:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/a18857b3-bcc7-3703-9486-773d81f811bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl X509v3 Authority Key Identifier: keyid:1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa36::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:41:1c:1c:23:53:ea:3a:82:ab:09:ba:66:92:b1:ce:d5:db: d5:0e:d0:2d:8c:5f:13:7b:92:bc:a4:4c:7e:e3:16:6b:d7:e9: 9d:a8:0e:44:dc:c0:28:c9:2e:f7:c0:70:ac:bd:ce:b1:31:a9: 06:a8:56:a1:98:d6:1f:21:6f:e3:f0:ff:1e:26:ce:2a:ed:31: 32:68:8c:71:9e:0e:2a:41:ef:1b:3d:61:ad:30:45:38:36:ad: 50:12:a7:ec:dd:d5:46:5f:3c:4e:e8:20:f9:43:dc:ee:82:cc: 0d:70:ba:14:d7:f9:2b:10:f6:57:69:3e:bd:5d:5e:94:ed:48: 0e:be:29:f8:44:1f:73:0c:a2:1b:eb:e8:3a:41:e7:b3:44:09: a3:99:88:1a:36:cd:73:ec:cf:48:f0:07:1b:77:98:9a:fe:b5: f7:4d:8c:a2:fb:07:7f:d3:30:a9:89:dc:c3:13:b3:90:3d:cd: 02:6e:ef:29:3d:b8:4d:13:4e:c8:e2:2a:b2:43:ed:ad:03:bd: 0d:0e:7b:20:0c:58:dd:e7:5f:63:e7:a4:5b:79:f8:9b:b1:05: 38:25:65:80:63:70:4a:dd:87:34:b7:19:b4:8e:7e:93:e1:e9: 29:97:dc:a8:00:33:a7:2e:ed:4a:73:c8:46:1c:5d:9b:2e:fa: ce:d5:90:c9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEivK4BQjOYRlViWh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZmNTVmYmUtMzljMi00NWI0LTlhYTItNjAxNjJkNGUy OTMyMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk NTRkMGEyODctZWRmZS00ZTljLTk2OGQtYTQ1MWMxOWY1ZWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztaUCJI8AWARb53+Oc2nRciG4v4/uxwoG4eN qMAdzjOthjUnTtWy+B9AbSfTqBhEBZb4u7vgXtUn7dmnoP2K1aEKQ8P105yNsovB cm66PqzpiyFbEjFc2VdS1ae8F8PGx1VbMkFAzEASr7sXctg12K+rzR3EQ252JWu+ 2N9w3nBB0AUaZ25DkTx9HBZ2/Q5kLZlbjg2sCDadgaz0kfYnToONIKnEEV7ZmNVD vdL5qfqdffL+j/yhIoQleB+q8bI+crBsdL5HyfFTHxW1tk5Ug7VsCUZhPRF+ZkFw sbsVo6eoBKmN4h+x0dcGeuB4U7DfWaeMqOr/t1zerKtAU8xHlwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ6/rHASjQoOtvfsLOCKqGwe7xP+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZmY1 NWZiZS0zOWMyLTQ1YjQtOWFhMi02MDE2MmQ0ZTI5MzIvYTE4ODU3YjMtYmNjNy0z NzAzLTk0ODYtNzczZDgxZjgxMWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGZmNTVmYmUtMzljMi00NWI0LTlh YTItNjAxNjJkNGUyOTMyLzRmZjU1ZmJlLTM5YzItNDViNC05YWEyLTYwMTYyZDRl MjkzMi5jcmwwHwYDVR0jBBgwFoAUHP9AdpG2YPFJ/JUDj4ksEk1MAVswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZmY1NWZiZS0zOWMyLTQ1YjQtOWFhMi02MDE2 MmQ0ZTI5MzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL6NgAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAtBHBwjU+o6gqsJumaSsc7V29UO0C2MXxN7krykTH7jFmvX6Z2o DkTcwCjJLvfAcKy9zrExqQaoVqGY1h8hb+Pw/x4mzirtMTJojHGeDipB7xs9Ya0w RTg2rVASp+zd1UZfPE7oIPlD3O6CzA1wuhTX+SsQ9ldpPr1dXpTtSA6+KfhEH3MM ohvr6DpB57NECaOZiBo2zXPsz0jwBxt3mJr+tfdNjKL7B3/TMKmJ3MMTs5A9zQJu 7yk9uE0TTsjiKrJD7a0DvQ0OeyAMWN3nX2PnpFt5+JuxBTglZYBjcErdhzS3GbSO fpPh6SmX3KgAM6cu7UpzyEYcXZsu+s7VkMk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:28 2025 by rpki-client