$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/d9f9acc9-c324-373e-a2c4-e4604f56d42e.roa File: d9f9acc9-c324-373e-a2c4-e4604f56d42e.roa (raw, json) Hash identifier: B8d5kZJlralC9j1KlfFYzfCUtbv0UqvMkRXodK30BQk= Subject key identifier: DF:CD:E7:72:E3:25:45:12:EB:79:F5:B0:AC:4A:CF:3F:64:CF:01:20 Certificate issuer: /CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0 Certificate serial: 010D0C9F43285848C2B64CCFD267C9A27AA8A400 Authority key identifier: FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/d9f9acc9-c324-373e-a2c4-e4604f56d42e.roa Signing time: Mon 03 Feb 2025 14:00:52 +0000 ROA not before: Mon 03 Feb 2025 14:00:52 +0000 ROA not after: Sun 04 May 2025 13:00:52 +0000 asID: 11913 IP address blocks: 2602:816:3000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:b6:4c:cf:d2:67:c9:a2:7a:a8:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0 Validity Not Before: Feb 3 14:00:52 2025 GMT Not After : May 4 13:00:52 2025 GMT Subject: CN=f8d78e06-fe6e-4303-b5d2-35d915e7fa9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f4:38:ab:56:9f:7a:af:f7:b0:6a:90:7c:2c: 1b:87:09:79:1e:18:65:61:63:1f:de:5f:2f:47:b9: b9:89:1b:20:8e:2f:fb:22:d8:f0:cb:79:9a:1e:cf: 26:a0:c3:bc:35:ca:75:c9:08:0b:4c:25:85:6e:b8: dc:2a:18:a2:b6:a9:de:ff:76:0f:af:36:10:ee:87: 1c:30:50:31:89:0e:c7:c9:80:48:91:e8:03:a5:de: d6:10:85:ae:72:d1:2f:c0:31:11:6c:7f:0f:74:f4: af:f0:b2:7f:67:1d:8b:85:3e:ee:21:df:27:40:c2: e4:9e:bb:fd:07:bd:fe:c3:cc:52:d2:96:50:c8:8d: 0a:cf:b4:c3:49:55:da:47:e5:c8:34:31:cc:e6:42: c3:1b:4f:20:5b:0b:25:8b:cd:b8:79:f3:0d:01:f4: b8:aa:61:a2:06:cc:73:d3:b8:59:b5:d8:d3:80:d0: cb:e7:65:71:fa:5f:7b:64:56:66:1f:a6:3e:3c:6b: 1c:91:0b:70:aa:31:00:e2:1e:5a:34:6f:9b:92:05: e7:0a:22:b9:56:d4:b3:21:d6:a2:b0:38:83:ab:39: 60:a5:bb:65:64:58:b0:d3:b5:38:35:9d:61:b0:50: cb:74:f5:9e:b9:08:07:e0:61:47:18:ea:c8:f7:77: d5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:CD:E7:72:E3:25:45:12:EB:79:F5:B0:AC:4A:CF:3F:64:CF:01:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/d9f9acc9-c324-373e-a2c4-e4604f56d42e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.crl X509v3 Authority Key Identifier: keyid:FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer sbgp-ipAddrBlock: critical IPv6: 2602:816:3000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:af:d2:d5:1b:b4:42:d9:cc:fe:89:09:d4:a1:66:04:c3:3e: fe:06:0f:ff:ee:92:0e:19:80:a7:16:0e:86:39:c7:82:18:43: 5c:b0:d5:59:fb:ea:b9:54:bf:6c:90:98:4f:48:5a:da:3c:56: 34:f1:48:85:c3:da:a3:72:4b:76:08:24:07:6c:dc:d0:6c:e1: 12:d3:f3:b6:fe:77:2c:0b:36:ac:c7:cc:fe:e7:d0:74:67:ae: 9b:68:2c:96:04:be:9f:df:17:84:86:bb:01:37:c6:96:e8:8a: 2d:02:d0:1c:57:33:a7:f1:b1:2a:6a:49:b6:12:7e:bc:52:95: 0d:17:a8:a2:97:ff:fc:fe:fe:55:c3:d6:13:35:53:96:8e:96: 68:8a:b8:7f:20:67:7d:99:28:24:2a:4c:ba:d9:b9:d9:d1:32: e7:34:cc:f7:b7:4e:72:c4:be:e8:78:41:8e:a3:e9:2c:70:d6: 69:18:73:ea:8c:e0:f7:b1:21:43:75:fc:58:1d:77:ec:a8:d3: 21:32:6c:6a:00:c9:4c:aa:1a:a2:a2:34:c3:29:6b:7e:9d:a8: b0:6e:eb:3f:33:3e:2c:ce:75:e5:5c:b8:e3:ff:5f:c9:4a:23: c7:a2:df:0b:9f:69:d6:12:ec:f2:6f:ad:db:3c:43:d6:21:8c: 90:83:04:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjCtkzP0mfJonqopAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YzMTI5NmYtOGYyZi00MjY4LTg1OTktNGM0N2QyNWNm Y2YwMB4XDTI1MDIwMzE0MDA1MloXDTI1MDUwNDEzMDA1MlowLzEtMCsGA1UEAxMk ZjhkNzhlMDYtZmU2ZS00MzAzLWI1ZDItMzVkOTE1ZTdmYTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPQ4q1afeq/3sGqQfCwbhwl5HhhlYWMf3l8v R7m5iRsgji/7Itjwy3maHs8moMO8Ncp1yQgLTCWFbrjcKhiitqne/3YPrzYQ7occ MFAxiQ7HyYBIkegDpd7WEIWuctEvwDERbH8PdPSv8LJ/Zx2LhT7uId8nQMLknrv9 B73+w8xS0pZQyI0Kz7TDSVXaR+XINDHM5kLDG08gWwsli824efMNAfS4qmGiBsxz 07hZtdjTgNDL52Vx+l97ZFZmH6Y+PGsckQtwqjEA4h5aNG+bkgXnCiK5VtSzIdai sDiDqzlgpbtlZFiw07U4NZ1hsFDLdPWeuQgH4GFHGOrI93fVKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN/N53LjJUUS63n1sKxKzz9kzwEgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjMx Mjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3ZDI1Y2ZjZjAvZDlmOWFjYzktYzMyNC0z NzNlLWEyYzQtZTQ2MDRmNTZkNDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2YzMTI5NmYtOGYyZi00MjY4LTg1 OTktNGM0N2QyNWNmY2YwL2NmMzEyOTZmLThmMmYtNDI2OC04NTk5LTRjNDdkMjVj ZmNmMC5jcmwwHwYDVR0jBBgwFoAU+roXSGw1zYqLPBZgxG+fWA4vXmQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjMxMjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3 ZDI1Y2ZjZjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIFjAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA6v0tUbtELZzP6JCdShZgTDPv4GD//ukg4ZgKcWDoY5x4IYQ1yw 1Vn76rlUv2yQmE9IWto8VjTxSIXD2qNyS3YIJAds3NBs4RLT87b+dywLNqzHzP7n 0HRnrptoLJYEvp/fF4SGuwE3xpboii0C0BxXM6fxsSpqSbYSfrxSlQ0XqKKX//z+ /lXD1hM1U5aOlmiKuH8gZ32ZKCQqTLrZudnRMuc0zPe3TnLEvuh4QY6j6Sxw1mkY c+qM4PexIUN1/Fgdd+yo0yEybGoAyUyqGqKiNMMpa36dqLBu6z8zPizOdeVcuOP/ X8lKI8ei3wufadYS7PJvrds8Q9YhjJCDBGQ= -----END CERTIFICATE-----Generated at Fri Apr 4 15:58:35 2025 by rpki-client