$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1/a17e17bd-2e17-3231-bee0-626c5aa412d3.roa File: a17e17bd-2e17-3231-bee0-626c5aa412d3.roa (raw, json) Hash identifier: WhGKtb82S22bRZ+1nlg7qqdG6XTL7jJ50hu2Z4o8RiY= Subject key identifier: 1A:5A:5F:C7:22:8A:5B:87:41:39:70:A7:0E:DD:9C:8C:9A:C5:DA:2C Certificate issuer: /CN=24664a36-96dd-46d7-9d91-bebf99797af1 Certificate serial: 010D0C9F43285848960B4A9E96D5E4BF48869220 Authority key identifier: 1B:72:32:4D:98:F7:CD:39:96:E6:96:F3:69:22:0E:02:99:E0:5D:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1/a17e17bd-2e17-3231-bee0-626c5aa412d3.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 33760 IP address blocks: 2602:2e1::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1/24664a36-96dd-46d7-9d91-bebf99797af1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1/24664a36-96dd-46d7-9d91-bebf99797af1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:4a:9e:96:d5:e4:bf:48:86:92:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24664a36-96dd-46d7-9d91-bebf99797af1 Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=bb23d441-8eb0-43ce-ae44-0ba3cd87e963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c7:5f:50:fc:7f:f0:09:80:4f:bc:bd:d4:69: 3c:eb:e8:6a:65:22:f6:77:00:83:8e:2c:69:07:49: f5:17:9f:a7:88:f8:74:74:9b:b3:c2:77:41:c2:9d: 1b:a8:38:16:7a:1b:4f:33:c5:20:0a:e7:23:f0:fe: c8:75:ca:c6:c5:cc:d3:47:04:f7:64:63:d8:46:0c: 81:43:68:28:17:6a:5d:29:79:0b:e8:0b:1c:89:26: b5:94:6d:e2:68:d1:ce:bc:d0:72:75:9f:27:60:d0: d4:fc:ac:e1:e0:44:3c:00:be:62:b7:8f:73:4d:b0: 5d:c6:5f:54:30:73:99:76:83:84:5b:9e:22:5c:26: a4:61:30:59:3c:f5:22:2f:23:2a:55:f4:e8:7f:47: 60:3f:d6:60:b3:a4:d5:62:e3:7e:a1:4a:42:28:de: ae:eb:32:aa:e5:49:08:a4:e4:61:a2:02:2d:47:da: 7c:03:9a:34:0d:37:18:e9:f1:ff:f6:3f:ac:e4:3d: a0:01:ab:e2:e6:41:eb:ed:cc:d7:f6:c2:44:fb:cf: bb:83:23:a8:52:69:81:be:3e:8d:46:44:21:a1:e7: 3a:62:f1:b1:3e:11:48:3d:33:eb:b5:d7:ae:40:d4: b5:0e:73:fb:ac:40:0f:84:64:ba:0d:09:c8:11:ea: 6b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5A:5F:C7:22:8A:5B:87:41:39:70:A7:0E:DD:9C:8C:9A:C5:DA:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1/a17e17bd-2e17-3231-bee0-626c5aa412d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1/24664a36-96dd-46d7-9d91-bebf99797af1.crl X509v3 Authority Key Identifier: keyid:1B:72:32:4D:98:F7:CD:39:96:E6:96:F3:69:22:0E:02:99:E0:5D:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1.cer sbgp-ipAddrBlock: critical IPv6: 2602:2e1::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:67:fa:76:58:fe:3c:0e:51:09:93:06:15:20:4d:bf:c8:b6: 89:c8:50:f2:cc:da:5f:46:16:0d:52:09:65:4a:7c:d9:04:16: 84:5c:af:96:2a:dc:be:70:17:7f:f3:7e:bc:83:2f:3b:6a:c4: 5c:07:ef:32:f9:57:f8:de:4f:17:a3:86:d6:4e:d4:84:ec:c3: 79:f1:42:7a:3d:ec:83:27:86:1e:db:4b:92:2e:3b:03:8e:7a: fc:2a:df:33:72:8e:ee:a9:ac:f4:a7:c1:13:af:25:8b:54:e9: d5:d2:1f:00:73:4a:27:e3:1b:0e:b0:dc:a9:18:37:b2:82:8b: b7:ce:41:0c:55:8a:53:57:52:6c:aa:cc:7d:23:2e:39:ad:bd: 3f:0c:fa:dc:bc:4a:b4:2c:8d:25:ff:f7:9b:3b:0c:bb:cb:ab: d9:12:05:0b:eb:6a:65:f0:f3:c2:62:ef:79:e1:59:67:2a:31: 00:b1:b9:de:fe:85:82:8b:d3:e0:e0:a4:89:19:22:fe:40:84: d7:1e:77:f3:dd:fc:b2:5d:d5:78:f7:59:8d:23:14:b6:9d:c1: d4:81:6c:75:5b:e5:f7:db:39:0a:a7:df:7a:3c:78:1f:d8:54: 91:49:06:f4:14:b9:0f:76:ad:dd:b2:69:0c:8f:80:af:20:e9: a7:34:12:37 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEiWC0qeltXkv0iGkiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ2NjRhMzYtOTZkZC00NmQ3LTlkOTEtYmViZjk5Nzk3 YWYxMB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk YmIyM2Q0NDEtOGViMC00M2NlLWFlNDQtMGJhM2NkODdlOTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicdfUPx/8AmAT7y91Gk86+hqZSL2dwCDjixp B0n1F5+niPh0dJuzwndBwp0bqDgWehtPM8UgCucj8P7IdcrGxczTRwT3ZGPYRgyB Q2goF2pdKXkL6AsciSa1lG3iaNHOvNBydZ8nYNDU/Kzh4EQ8AL5it49zTbBdxl9U MHOZdoOEW54iXCakYTBZPPUiLyMqVfTof0dgP9Zgs6TVYuN+oUpCKN6u6zKq5UkI pORhogItR9p8A5o0DTcY6fH/9j+s5D2gAavi5kHr7czX9sJE+8+7gyOoUmmBvj6N RkQhoec6YvGxPhFIPTPrtdeuQNS1DnP7rEAPhGS6DQnIEeprnQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBpaX8ciiluHQTlwpw7dnIyaxdosMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNDY2 NGEzNi05NmRkLTQ2ZDctOWQ5MS1iZWJmOTk3OTdhZjEvYTE3ZTE3YmQtMmUxNy0z MjMxLWJlZTAtNjI2YzVhYTQxMmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjQ2NjRhMzYtOTZkZC00NmQ3LTlk OTEtYmViZjk5Nzk3YWYxLzI0NjY0YTM2LTk2ZGQtNDZkNy05ZDkxLWJlYmY5OTc5 N2FmMS5jcmwwHwYDVR0jBBgwFoAUG3IyTZj3zTmW5pbzaSIOApngXa4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yNDY2NGEzNi05NmRkLTQ2ZDctOWQ5MS1iZWJm OTk3OTdhZjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIC4QAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQ2f6dlj+PA5RCZMGFSBNv8i2ichQ8szaX0YWDVIJZUp82QQWhFyv lircvnAXf/N+vIMvO2rEXAfvMvlX+N5PF6OG1k7UhOzDefFCej3sgyeGHttLki47 A456/CrfM3KO7qms9KfBE68li1Tp1dIfAHNKJ+MbDrDcqRg3soKLt85BDFWKU1dS bKrMfSMuOa29Pwz63LxKtCyNJf/3mzsMu8ur2RIFC+tqZfDzwmLveeFZZyoxALG5 3v6FgovT4OCkiRki/kCE1x538938sl3VePdZjSMUtp3B1IFsdVvl99s5Cqffejx4 H9hUkUkG9BS5D3at3bJpDI+AryDppzQSNw== -----END CERTIFICATE-----Generated at Sat Apr 5 16:04:25 2025 by rpki-client