$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/60eb5078-363b-324d-91a4-7c996050a432.roa File: 60eb5078-363b-324d-91a4-7c996050a432.roa (raw, json) Hash identifier: b4OLD6jWIfQt8t4OMHjEcXmrg1UA9obZ/ignnaAkjxM= Subject key identifier: 42:F4:44:6F:98:64:2C:10:EF:4C:2B:0C:48:E5:C0:7D:0A:33:EC:0C Certificate issuer: /CN=1fb5932e-f862-443b-a719-26a612c2f112 Certificate serial: 010D0C9F43285848A400BEE3040362A87F7CAE40 Authority key identifier: F5:AB:0F:90:6F:99:E6:9A:92:D2:B6:31:82:2C:59:81:14:79:AC:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/60eb5078-363b-324d-91a4-7c996050a432.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 17326 IP address blocks: 2602:fd2a::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:be:e3:04:03:62:a8:7f:7c:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fb5932e-f862-443b-a719-26a612c2f112 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=7ba71bd2-f4f3-4760-9504-03a1f9ec1e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a5:5e:30:fa:1e:7a:b1:86:37:f6:07:cd:12: 4f:ff:56:ba:81:2d:bc:d1:11:d9:e4:a6:47:99:39: 93:a4:b9:27:4b:c1:62:77:4e:d5:c0:c9:85:b4:b0: e4:78:49:b6:9a:71:cd:ed:3a:74:62:77:ba:8d:06: bb:64:61:5e:f2:0c:93:24:8c:53:11:75:00:72:d2: ee:ce:27:99:18:b1:73:bf:1a:96:56:6d:16:70:c9: a2:42:e8:15:65:8c:f3:f4:d1:81:1e:40:61:02:3b: cf:c5:c6:5b:a7:32:47:a0:64:5a:07:19:cc:f0:e6: 3d:ec:a7:88:18:60:0a:c4:18:6d:86:56:3a:6c:d9: f1:b1:d8:08:4c:ad:be:0a:ae:1a:a8:48:76:b3:e1: f5:44:7c:06:27:aa:6e:f2:ed:4f:6e:2e:ad:79:0c: 4f:01:96:5a:6c:8f:a6:89:b7:6c:8b:d5:6b:e6:35: c1:3c:d6:5b:7f:93:97:48:5b:e9:d2:01:f3:67:94: 3b:b5:3e:01:d8:00:38:6a:4d:97:9e:e6:09:3e:f1: ed:1a:25:8e:fd:e8:7d:c2:c4:3f:4e:87:c7:8d:0b: e5:40:12:52:e4:55:8c:86:9b:79:7b:0b:1c:f3:58: ad:27:1d:d4:59:7a:3e:c2:80:ad:be:54:a6:90:6d: b4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F4:44:6F:98:64:2C:10:EF:4C:2B:0C:48:E5:C0:7D:0A:33:EC:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/60eb5078-363b-324d-91a4-7c996050a432.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.crl X509v3 Authority Key Identifier: keyid:F5:AB:0F:90:6F:99:E6:9A:92:D2:B6:31:82:2C:59:81:14:79:AC:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd2a::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:35:32:16:14:f7:bb:e7:44:dd:c5:e3:fb:c4:fc:ca:f3:5a: da:8f:f3:93:ba:1a:7e:d8:fc:6d:f9:a2:0c:e0:f5:44:55:ac: 4e:7d:af:41:f7:1a:93:3d:49:a0:f8:4f:ef:76:19:94:51:34: 6f:9e:2c:11:9d:27:54:30:f5:22:1f:ac:ef:df:57:f8:de:e2: f3:52:14:37:a3:38:f0:49:53:80:50:bc:29:44:0e:85:51:ee: 99:6d:00:1d:3e:8f:54:76:d9:e7:8e:1f:c4:98:b9:d5:e8:34: 74:67:dc:05:08:51:66:47:08:a1:4a:44:4d:01:6d:8b:09:4b: 1f:db:07:07:e8:f3:73:fc:c4:d2:84:4e:89:5b:c8:e4:a5:d9: 30:67:02:2c:0d:07:33:48:8c:7d:cf:e1:c7:a4:70:96:c8:de: 84:81:fd:3e:8b:a2:b9:69:a3:31:c6:eb:0a:96:fc:b6:ae:9f: 08:86:c9:23:85:6a:f8:6e:b2:4b:88:ce:6b:72:01:98:5a:46: b5:d7:1a:ce:37:6d:41:37:c2:9c:e7:e9:b3:20:e4:94:25:47: a3:b5:58:ef:0c:0f:dd:bd:55:d2:0a:95:bb:33:0e:39:1e:8e: c2:f6:14:bc:15:b0:29:55:ed:71:3f:46:bb:64:e0:0f:8a:21: bf:69:1f:0b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEikAL7jBANiqH98rkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZiNTkzMmUtZjg2Mi00NDNiLWE3MTktMjZhNjEyYzJm MTEyMB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk N2JhNzFiZDItZjRmMy00NzYwLTk1MDQtMDNhMWY5ZWMxZTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqVeMPoeerGGN/YHzRJP/1a6gS280RHZ5KZH mTmTpLknS8Fid07VwMmFtLDkeEm2mnHN7Tp0Yne6jQa7ZGFe8gyTJIxTEXUActLu zieZGLFzvxqWVm0WcMmiQugVZYzz9NGBHkBhAjvPxcZbpzJHoGRaBxnM8OY97KeI GGAKxBhthlY6bNnxsdgITK2+Cq4aqEh2s+H1RHwGJ6pu8u1Pbi6teQxPAZZabI+m ibdsi9Vr5jXBPNZbf5OXSFvp0gHzZ5Q7tT4B2AA4ak2XnuYJPvHtGiWO/eh9wsQ/ TofHjQvlQBJS5FWMhpt5ewsc81itJx3UWXo+woCtvlSmkG207wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEL0RG+YZCwQ70wrDEjlwH0KM+wMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xZmI1 OTMyZS1mODYyLTQ0M2ItYTcxOS0yNmE2MTJjMmYxMTIvNjBlYjUwNzgtMzYzYi0z MjRkLTkxYTQtN2M5OTYwNTBhNDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWZiNTkzMmUtZjg2Mi00NDNiLWE3 MTktMjZhNjEyYzJmMTEyLzFmYjU5MzJlLWY4NjItNDQzYi1hNzE5LTI2YTYxMmMy ZjExMi5jcmwwHwYDVR0jBBgwFoAU9asPkG+Z5pqS0rYxgixZgRR5rNYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xZmI1OTMyZS1mODYyLTQ0M2ItYTcxOS0yNmE2 MTJjMmYxMTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL9KgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEACTUyFhT3u+dE3cXj+8T8yvNa2o/zk7oaftj8bfmiDOD1RFWsTn2v Qfcakz1JoPhP73YZlFE0b54sEZ0nVDD1Ih+s799X+N7i81IUN6M48ElTgFC8KUQO hVHumW0AHT6PVHbZ544fxJi51eg0dGfcBQhRZkcIoUpETQFtiwlLH9sHB+jzc/zE 0oROiVvI5KXZMGcCLA0HM0iMfc/hx6RwlsjehIH9PouiuWmjMcbrCpb8tq6fCIbJ I4Vq+G6yS4jOa3IBmFpGtdcazjdtQTfCnOfpsyDklCVHo7VY7wwP3b1V0gqVuzMO OR6OwvYUvBWwKVXtcT9Gu2TgD4ohv2kfCw== -----END CERTIFICATE-----Generated at Sat Apr 12 00:02:56 2025 by rpki-client