$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2bc1784d-e988-39b5-b5a3-3dad90bdb87c.roa File: 2bc1784d-e988-39b5-b5a3-3dad90bdb87c.roa (raw, json) Hash identifier: 2fBudC3czy6fhgF0wnobQ6839OnHqOYUpTC8gSkpJ0s= Subject key identifier: 4E:D7:89:87:C4:90:10:F5:36:3B:55:38:6F:3B:3A:7D:AB:81:A7:74 Certificate issuer: /CN=2fd7ea67-f633-4dbd-8774-6209ce64a048 Certificate serial: 010D0C9F43285848D21140C7C11D75D6E5F32FC0 Authority key identifier: 1C:74:E6:9F:44:A3:B4:04:7D:A4:57:9C:23:A8:A6:C0:9F:E0:1F:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2bc1784d-e988-39b5-b5a3-3dad90bdb87c.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 14618 IP address blocks: 2602:29e:a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2fd7ea67-f633-4dbd-8774-6209ce64a048.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2fd7ea67-f633-4dbd-8774-6209ce64a048.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:40:c7:c1:1d:75:d6:e5:f3:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd7ea67-f633-4dbd-8774-6209ce64a048 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=c688f1bd-0164-4f82-a01e-d9a097264403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:00:9e:31:ec:cb:c7:1f:c7:21:9f:f4:c3:1c: a3:d5:92:6c:93:2e:c1:5c:09:8b:05:61:1c:f3:e2: d4:d4:42:cd:cb:7e:b1:d3:69:5b:23:da:59:67:35: 0b:2a:7c:2f:aa:3c:fc:43:cd:c8:d9:f4:de:1e:c7: 18:88:80:49:67:57:f2:ae:67:a4:fa:a7:45:b8:a8: 18:72:06:b7:b9:ef:60:7d:95:41:8f:d8:b5:a8:ef: 14:a7:3e:83:41:4f:02:2b:2c:97:2d:24:70:0c:94: 0c:c7:29:96:61:9f:ee:f5:e1:c1:be:0f:59:bf:8a: 70:0a:fd:87:6c:05:8e:4d:6c:08:a0:a0:f3:c5:cc: 9c:23:59:20:6d:17:e5:3c:e0:eb:c3:06:42:25:ac: 29:68:b7:8a:22:63:ed:33:2a:08:85:5c:f3:82:68: 0f:29:f3:83:3a:a2:05:bf:1f:a2:3b:ae:6a:92:00: 45:09:8a:32:0a:e9:32:5d:95:ce:26:2c:b4:54:47: 1c:d2:57:8b:b8:b3:eb:70:3c:eb:f7:bf:5e:56:1b: 0f:56:30:b0:52:37:14:fc:26:cb:bc:01:4c:1f:63: f3:c7:69:9a:ae:2f:16:fa:8b:5e:41:92:4d:36:0a: f6:a3:42:3f:c9:1a:f9:81:12:cc:58:ee:9f:d1:7e: 37:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D7:89:87:C4:90:10:F5:36:3B:55:38:6F:3B:3A:7D:AB:81:A7:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2bc1784d-e988-39b5-b5a3-3dad90bdb87c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2fd7ea67-f633-4dbd-8774-6209ce64a048.crl X509v3 Authority Key Identifier: keyid:1C:74:E6:9F:44:A3:B4:04:7D:A4:57:9C:23:A8:A6:C0:9F:E0:1F:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048.cer sbgp-ipAddrBlock: critical IPv6: 2602:29e:a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:cd:ed:b7:2a:03:78:5e:45:e4:a4:76:59:39:97:ab:5b:dd: 81:d8:8e:ab:61:8f:f7:34:0b:87:24:0c:ea:71:f9:d0:a6:af: 4e:ea:57:2e:21:40:66:ce:31:f8:49:f6:2b:23:06:80:73:1b: 6d:68:aa:9f:4f:5c:18:5a:f9:93:b0:a7:ec:8d:ca:04:0b:fd: 21:2c:ca:be:b5:b8:4e:3c:27:c0:a4:a4:a3:b7:22:a9:f7:97: a9:dd:61:06:e9:cf:25:34:9b:2c:9e:ce:2e:c4:30:a8:69:9b: 99:1b:eb:e1:98:bc:01:49:72:09:e7:35:2c:1c:61:d0:19:ac: 3f:34:24:e7:5d:cf:c7:4f:3f:d8:07:80:aa:33:74:30:b6:43: ad:d8:12:75:00:bb:c6:35:40:03:12:f0:4f:9c:09:f7:5e:24: e6:dd:a5:74:5f:0c:b9:75:16:b8:8c:ba:58:fa:07:28:68:bc: 1a:dc:17:f1:d6:74:2e:7d:7e:8d:16:55:90:64:f3:f3:32:58: 67:c1:dd:2a:1e:d9:c3:48:97:f7:9e:62:5b:24:b9:b3:18:07: ab:39:96:34:6a:7a:cd:b3:2b:c0:7e:63:ca:46:55:51:bb:9b: a6:c2:83:2a:d9:5f:52:d3:f8:99:12:06:ca:32:b6:96:0b:71: 8e:08:4b:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjSEUDHwR111uXzL8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZkN2VhNjctZjYzMy00ZGJkLTg3NzQtNjIwOWNlNjRh MDQ4MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YzY4OGYxYmQtMDE2NC00ZjgyLWEwMWUtZDlhMDk3MjY0NDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjACeMezLxx/HIZ/0wxyj1ZJsky7BXAmLBWEc 8+LU1ELNy36x02lbI9pZZzULKnwvqjz8Q83I2fTeHscYiIBJZ1fyrmek+qdFuKgY cga3ue9gfZVBj9i1qO8Upz6DQU8CKyyXLSRwDJQMxymWYZ/u9eHBvg9Zv4pwCv2H bAWOTWwIoKDzxcycI1kgbRflPODrwwZCJawpaLeKImPtMyoIhVzzgmgPKfODOqIF vx+iO65qkgBFCYoyCukyXZXOJiy0VEcc0leLuLPrcDzr979eVhsPVjCwUjcU/CbL vAFMH2Pzx2mari8W+oteQZJNNgr2o0I/yRr5gRLMWO6f0X43PwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE7XiYfEkBD1NjtVOG87On2rgad0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZmQ3 ZWE2Ny1mNjMzLTRkYmQtODc3NC02MjA5Y2U2NGEwNDgvMmJjMTc4NGQtZTk4OC0z OWI1LWI1YTMtM2RhZDkwYmRiODdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmZkN2VhNjctZjYzMy00ZGJkLTg3 NzQtNjIwOWNlNjRhMDQ4LzJmZDdlYTY3LWY2MzMtNGRiZC04Nzc0LTYyMDljZTY0 YTA0OC5jcmwwHwYDVR0jBBgwFoAUHHTmn0SjtAR9pFecI6imwJ/gH+MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZmQ3ZWE2Ny1mNjMzLTRkYmQtODc3NC02MjA5 Y2U2NGEwNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICngCh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACbN7bcqA3heReSkdlk5l6tb3YHYjqthj/c0C4ckDOpx+dCmr07q Vy4hQGbOMfhJ9isjBoBzG21oqp9PXBha+ZOwp+yNygQL/SEsyr61uE48J8CkpKO3 Iqn3l6ndYQbpzyU0myyezi7EMKhpm5kb6+GYvAFJcgnnNSwcYdAZrD80JOddz8dP P9gHgKozdDC2Q63YEnUAu8Y1QAMS8E+cCfdeJObdpXRfDLl1FriMulj6ByhovBrc F/HWdC59fo0WVZBk8/MyWGfB3Soe2cNIl/eeYlskubMYB6s5ljRqes2zK8B+Y8pG VVG7m6bCgyrZX1LT+JkSBsoytpYLcY4IS5E= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:08 2025 by rpki-client