$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/4c33b29b-7d74-35de-896d-e8663c41392f.roa File: 4c33b29b-7d74-35de-896d-e8663c41392f.roa (raw, json) Hash identifier: ScBegU3rdbP4DoDWBdvvP+k/dBjeWVrsVHv2EL17ky8= Subject key identifier: AB:99:C8:B5:0F:88:98:5C:09:EB:90:5B:76:D7:37:67:60:4C:81:D4 Certificate issuer: /CN=ab1101f4-a527-459b-8c16-d78b261e6de3 Certificate serial: 010D0C9F4328584832F032F74D40ABEFFD4978C0 Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/4c33b29b-7d74-35de-896d-e8663c41392f.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 14618 IP address blocks: 2602:277:d02::/47 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:32:f7:4d:40:ab:ef:fd:49:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3 Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=ef2793a4-08ba-4040-8272-cf6d1040c66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8c:9b:99:ff:9b:ff:a0:81:44:d3:f7:22:25: 2a:8d:b1:3a:92:1a:24:1e:12:ff:5e:5b:f4:76:64: 85:98:19:a1:c8:72:cd:ec:3e:e0:2c:8e:de:af:6f: a2:23:9f:ef:5f:df:f2:2b:b7:7c:2b:1f:1d:28:f8: 0d:4e:85:50:de:e2:28:7a:ba:8f:47:69:61:52:18: 2d:73:b1:91:59:14:b1:96:46:32:d4:1a:76:9f:fe: 4b:82:85:0f:96:81:89:ae:66:5a:01:7d:52:73:3a: fb:30:d0:ea:25:49:44:ae:30:dd:ba:6d:db:76:31: 27:45:46:ba:4e:63:06:e5:95:f2:e1:26:ba:9e:d3: 80:f7:e1:1e:90:f4:9e:fc:1b:11:49:84:74:d3:c5: 4c:69:61:17:3d:8a:ae:28:5b:4c:9a:b8:28:ab:83: 7e:7e:1e:6c:56:b0:46:bf:3b:37:24:eb:45:3d:c5: 3b:fd:c5:d8:76:2a:37:9e:5b:f5:c1:af:d6:d3:03: c5:0b:e1:31:16:67:2a:cb:f6:f4:e8:35:c2:6d:bc: fd:37:cd:66:86:b5:53:05:6f:e0:79:dd:6d:1d:ab: 51:78:b1:d1:2e:ff:aa:25:bb:d5:66:90:da:7c:81: 1a:a8:82:09:c1:f7:b4:d7:b8:aa:a6:1e:a8:a2:d3: c3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:99:C8:B5:0F:88:98:5C:09:EB:90:5B:76:D7:37:67:60:4C:81:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/4c33b29b-7d74-35de-896d-e8663c41392f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl X509v3 Authority Key Identifier: keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer sbgp-ipAddrBlock: critical IPv6: 2602:277:d02::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:c0:22:8a:3d:dc:86:7c:40:31:72:a4:77:ef:11:19:ff:fc: f4:96:a9:73:f2:d6:b1:e9:6b:99:67:75:d1:92:85:48:6c:6f: da:c4:cc:fb:0c:13:e6:00:68:cc:ee:43:51:f5:06:96:aa:af: 4a:79:77:09:2d:66:0f:11:99:1e:6f:02:41:08:df:44:ed:bd: f1:8e:51:8a:69:4d:97:ce:15:41:39:d6:bf:49:e5:ba:39:9f: b3:f3:1e:b5:87:46:01:90:54:46:73:05:8d:06:07:fa:ab:43: 32:92:2c:75:69:70:d4:f3:ac:ff:1b:d4:63:be:72:da:be:6a: a4:60:fe:97:46:43:aa:25:b3:fe:98:b0:3c:c6:bf:65:49:92: f8:ab:7a:3c:47:d6:cf:05:e6:24:47:b8:24:12:cb:bf:b9:2d: e8:6f:8b:eb:d4:75:b8:21:01:01:ac:b1:16:24:64:5f:35:3d: 76:a0:f9:96:15:e8:e7:c3:77:7c:6d:52:d3:36:e4:5e:38:83: a2:6c:49:30:5c:0f:9a:ea:19:ed:09:88:b7:e6:15:d5:9f:1a: 02:6a:3c:08:09:ae:22:d2:30:87:61:45:c4:e4:91:39:ab:40: ec:aa:75:30:51:c6:b8:36:d1:3f:63:0e:43:91:ec:f8:64:c7: 20:bb:c5:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgy8DL3TUCr7/1JeMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxMTAxZjQtYTUyNy00NTliLThjMTYtZDc4YjI2MWU2 ZGUzMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk ZWYyNzkzYTQtMDhiYS00MDQwLTgyNzItY2Y2ZDEwNDBjNjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIybmf+b/6CBRNP3IiUqjbE6khokHhL/Xlv0 dmSFmBmhyHLN7D7gLI7er2+iI5/vX9/yK7d8Kx8dKPgNToVQ3uIoerqPR2lhUhgt c7GRWRSxlkYy1Bp2n/5LgoUPloGJrmZaAX1Sczr7MNDqJUlErjDdum3bdjEnRUa6 TmMG5ZXy4Sa6ntOA9+EekPSe/BsRSYR008VMaWEXPYquKFtMmrgoq4N+fh5sVrBG vzs3JOtFPcU7/cXYdio3nlv1wa/W0wPFC+ExFmcqy/b06DXCbbz9N81mhrVTBW/g ed1tHatReLHRLv+qJbvVZpDafIEaqIIJwfe017iqph6ootPD/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKuZyLUPiJhcCeuQW3bXN2dgTIHUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjEx MDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhiMjYxZTZkZTMvNGMzM2IyOWItN2Q3NC0z NWRlLTg5NmQtZTg2NjNjNDEzOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxMTAxZjQtYTUyNy00NTliLThj MTYtZDc4YjI2MWU2ZGUzL2FiMTEwMWY0LWE1MjctNDU5Yi04YzE2LWQ3OGIyNjFl NmRlMy5jcmwwHwYDVR0jBBgwFoAUmZxX2Q4wTnTaeEpb0pxnHt56bjMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjExMDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhi MjYxZTZkZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgICdw0C MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA3AIoo93IZ8QDFypHfvERn//PSWqXPy1rHpa5lnddGShUhsb9rE zPsME+YAaMzuQ1H1Bpaqr0p5dwktZg8RmR5vAkEI30TtvfGOUYppTZfOFUE51r9J 5bo5n7PzHrWHRgGQVEZzBY0GB/qrQzKSLHVpcNTzrP8b1GO+ctq+aqRg/pdGQ6ol s/6YsDzGv2VJkvirejxH1s8F5iRHuCQSy7+5Lehvi+vUdbghAQGssRYkZF81PXag +ZYV6OfDd3xtUtM25F44g6JsSTBcD5rqGe0JiLfmFdWfGgJqPAgJriLSMIdhRcTk kTmrQOyqdTBRxrg20T9jDkOR7PhkxyC7xcg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:31:21 2025 by rpki-client