$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/df166a29-bbe2-313b-80c5-dfb2fdd39687.roa File: df166a29-bbe2-313b-80c5-dfb2fdd39687.roa (raw, json) Hash identifier: wF8OsK1vr5J6KH8WJPqeIOZplngXKu7chZAH+3LttcQ= Subject key identifier: 65:4A:01:99:F0:79:AB:3E:58:47:47:E3:27:7E:E3:57:C9:7E:2D:6C Certificate issuer: /CN=a234649d-ab49-458b-a5e3-7765fe7a066c Certificate serial: 010D0C9F43285848C6E6370DCCDF73D9ED597000 Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/df166a29-bbe2-313b-80c5-dfb2fdd39687.roa Signing time: Wed 05 Feb 2025 02:00:39 +0000 ROA not before: Wed 05 Feb 2025 02:00:39 +0000 ROA not after: Tue 06 May 2025 01:00:39 +0000 asID: 44324 IP address blocks: 2602:f9f6:430::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:e6:37:0d:cc:df:73:d9:ed:59:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c Validity Not Before: Feb 5 02:00:39 2025 GMT Not After : May 6 01:00:39 2025 GMT Subject: CN=9169260f-6453-4916-9591-4f8116a5a878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5b:49:1e:30:73:43:d5:c3:d6:81:27:32:79: eb:44:4b:b6:ea:7e:e0:d1:66:ba:ba:67:06:39:b1: 19:2c:a1:3c:3f:eb:76:30:3e:cb:89:ce:75:88:83: 7a:8d:e0:9a:0a:f2:a8:f6:2f:64:67:8d:02:db:6d: f9:29:41:9a:0c:d4:ef:7e:dd:5f:67:49:3d:a5:df: 4c:b8:9a:55:dc:b9:17:12:82:81:76:e0:d4:67:ff: cf:83:8c:33:96:e5:28:fd:9a:fb:64:81:b4:19:49: 0a:3b:1b:e7:1c:bf:06:ed:75:59:60:e8:a1:0e:3a: 37:ce:0b:60:98:ff:01:94:48:f5:88:71:3c:29:59: 12:9f:3e:e7:ce:c6:84:02:40:a5:07:f3:8b:8c:b4: 72:c0:95:9a:9f:46:f3:6a:e4:35:cb:e6:0f:ec:6c: 00:72:ff:69:c4:26:e4:1c:2a:57:e3:f0:75:d6:ca: b5:1f:39:3e:50:28:de:d2:4d:53:10:69:0c:5d:f1: b0:93:d5:31:99:27:84:bd:08:b6:40:84:b7:31:f4: cc:72:92:8f:4c:1d:32:d0:49:1f:c7:c9:20:2c:46: 4e:c6:60:32:1b:2d:5b:85:fa:c4:0b:cd:b9:01:e5: 40:c1:3a:79:93:96:bb:9b:73:9e:b7:16:f1:6b:cd: 8b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4A:01:99:F0:79:AB:3E:58:47:47:E3:27:7E:E3:57:C9:7E:2D:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/df166a29-bbe2-313b-80c5-dfb2fdd39687.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl X509v3 Authority Key Identifier: keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9f6:430::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:18:d0:9e:45:8a:b9:3e:f5:1a:e3:a6:c5:09:7a:e9:c6:50: 69:6e:cb:09:1e:5e:aa:07:40:73:21:96:48:2d:15:a9:82:95: 79:e7:a9:87:59:d9:4c:32:74:09:db:33:05:d2:8c:39:1c:09: 3f:98:a6:7a:81:70:5c:1d:e4:65:a6:3e:0d:0f:69:65:9f:5e: 33:0a:52:ff:0a:76:f1:08:1a:51:89:aa:76:e4:69:80:57:01: 37:7f:6f:9a:de:00:a7:51:8b:40:61:d2:44:85:03:4e:63:c5: 79:2c:5e:af:63:c7:f3:23:4e:52:3d:1f:5b:7c:63:44:fe:ec: b0:ca:8c:e1:74:ca:57:24:a0:88:e7:31:44:7d:dd:e8:41:07: 28:aa:dd:6a:35:ff:0f:25:ae:eb:12:62:80:da:25:9b:f0:c6: 47:5c:76:a9:fa:23:06:99:2d:79:6d:e8:a3:64:f0:7a:ad:01: 47:52:98:fa:05:75:55:2a:45:0e:7a:3e:e0:8c:4a:e2:36:60: 52:86:fe:35:59:37:51:6d:53:57:17:39:1a:08:64:53:bd:90: 12:bd:04:65:0c:f4:e8:fe:b0:0f:48:34:5b:b7:8a:36:4b:a1: 5f:e3:65:a2:d7:6f:44:3e:13:7a:c7:66:88:c1:10:3e:ba:4c: cc:5e:9e:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjG5jcNzN9z2e1ZcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIzNDY0OWQtYWI0OS00NThiLWE1ZTMtNzc2NWZlN2Ew NjZjMB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk OTE2OTI2MGYtNjQ1My00OTE2LTk1OTEtNGY4MTE2YTVhODc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVtJHjBzQ9XD1oEnMnnrREu26n7g0Wa6umcG ObEZLKE8P+t2MD7Lic51iIN6jeCaCvKo9i9kZ40C2235KUGaDNTvft1fZ0k9pd9M uJpV3LkXEoKBduDUZ//Pg4wzluUo/Zr7ZIG0GUkKOxvnHL8G7XVZYOihDjo3zgtg mP8BlEj1iHE8KVkSnz7nzsaEAkClB/OLjLRywJWan0bzauQ1y+YP7GwAcv9pxCbk HCpX4/B11sq1Hzk+UCje0k1TEGkMXfGwk9UxmSeEvQi2QIS3MfTMcpKPTB0y0Ekf x8kgLEZOxmAyGy1bhfrEC825AeVAwTp5k5a7m3Oetxbxa82L5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGVKAZnweas+WEdH4yd+41fJfi1sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0 NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1ZmU3YTA2NmMvZGYxNjZhMjktYmJlMi0z MTNiLTgwYzUtZGZiMmZkZDM5Njg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTIzNDY0OWQtYWI0OS00NThiLWE1 ZTMtNzc2NWZlN2EwNjZjL2EyMzQ2NDlkLWFiNDktNDU4Yi1hNWUzLTc3NjVmZTdh MDY2Yy5jcmwwHwYDVR0jBBgwFoAUnwPnGl9Cgsne7AuhH5BI9Fd9oZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1 ZmU3YTA2NmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL59gQw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABgY0J5Firk+9RrjpsUJeunGUGluywkeXqoHQHMhlkgtFamClXnn qYdZ2UwydAnbMwXSjDkcCT+YpnqBcFwd5GWmPg0PaWWfXjMKUv8KdvEIGlGJqnbk aYBXATd/b5reAKdRi0Bh0kSFA05jxXksXq9jx/MjTlI9H1t8Y0T+7LDKjOF0ylck oIjnMUR93ehBByiq3Wo1/w8lrusSYoDaJZvwxkdcdqn6IwaZLXlt6KNk8HqtAUdS mPoFdVUqRQ56PuCMSuI2YFKG/jVZN1FtU1cXORoIZFO9kBK9BGUM9Oj+sA9INFu3 ijZLoV/jZaLXb0Q+E3rHZojBED66TMxenrE= -----END CERTIFICATE-----Generated at Fri Apr 4 16:08:02 2025 by rpki-client