$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/85414ec6-b857-3ccd-ab80-dbc7ad5a7560.roa File: 85414ec6-b857-3ccd-ab80-dbc7ad5a7560.roa (raw, json) Hash identifier: n3ApZc6rgyHupsNkrWP30xF1fR7dPi5+WPZ0t8hO50c= Subject key identifier: AD:F8:7A:E3:23:AF:08:02:7E:65:27:AA:27:22:A8:60:0A:C6:EE:03 Certificate issuer: /CN=ab1101f4-a527-459b-8c16-d78b261e6de3 Certificate serial: 010D0C9F43285848A13615E3D6941D3B5C02B0C0 Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/85414ec6-b857-3ccd-ab80-dbc7ad5a7560.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 14618 IP address blocks: 2602:277:f00::/47 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:15:e3:d6:94:1d:3b:5c:02:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=c9b224b7-9a2c-4447-8bf0-9a042527b357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:38:1e:41:d3:30:ae:9f:3d:65:d7:24:60:f0: a4:84:d5:bc:92:77:38:89:6e:87:b2:9a:2d:7d:3a: 77:dd:71:72:b8:50:af:7b:c1:c7:76:b3:17:cc:c0: f9:67:01:c8:40:c3:64:e6:66:06:5f:58:15:51:85: 0f:75:ae:32:4f:05:46:0d:08:a5:a7:e1:71:9d:7e: 9c:18:25:04:90:31:43:77:86:bd:bb:36:ce:d6:77: 22:bf:05:e2:4e:59:78:32:3f:c9:3d:02:ba:2f:38: dd:11:e5:ba:6b:5e:d4:94:b9:d3:23:a4:52:b3:17: d0:02:c3:ca:0b:6c:22:ef:2f:32:c1:05:59:df:4c: bd:9f:3f:dd:46:2a:e2:71:87:89:4b:6c:7e:db:cc: a7:95:8d:20:46:ad:df:1b:84:9a:92:da:10:96:84: 1f:9f:38:38:70:2b:53:cf:0f:da:95:22:49:2a:26: ba:a5:a3:3b:5d:f7:bf:a9:f7:31:ae:03:8f:12:d1: 29:88:47:76:86:2e:56:a1:53:3a:2f:fd:8e:5f:03: 0b:13:75:04:8f:1a:0d:49:ee:e5:fe:f0:52:ee:b8: 6e:cc:df:31:e8:47:94:98:fa:d6:da:5a:25:36:08: ab:b2:a6:3a:73:ef:1d:42:06:4f:1b:42:0f:51:9b: cd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F8:7A:E3:23:AF:08:02:7E:65:27:AA:27:22:A8:60:0A:C6:EE:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/85414ec6-b857-3ccd-ab80-dbc7ad5a7560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl X509v3 Authority Key Identifier: keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer sbgp-ipAddrBlock: critical IPv6: 2602:277:f00::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:40:b3:39:db:33:85:12:99:bd:1b:00:90:69:6e:49:34:6c: 3a:85:09:bc:68:0f:a1:0b:6c:bd:7d:d8:7e:6c:dc:7e:3b:d7: 59:c8:dc:1f:f2:94:16:80:be:0c:57:d5:99:d3:a1:9d:b4:af: 76:0c:9e:0d:37:18:99:c5:a3:fb:1f:2c:d9:a4:78:22:3b:28: d8:84:ff:0b:90:bd:49:02:e4:4f:7e:31:43:de:18:38:bc:2d: 04:41:ed:d6:14:ef:47:e1:19:93:96:c9:c9:11:7e:90:1d:10: 62:2a:f0:c6:3c:dd:67:dd:e6:46:40:d2:b4:d7:0b:c9:c9:a2: 3e:3d:ac:96:83:bf:9d:6d:a4:06:73:22:cd:09:23:c9:21:51: 95:59:de:d0:c1:1e:d4:db:c6:9e:c2:55:d8:a2:ca:f7:76:c6: ef:1b:ff:94:6b:11:5e:ba:d0:62:bc:be:2d:79:ac:5b:16:d9: 15:f6:45:a5:46:af:cf:d0:a7:ed:97:2b:c0:53:ae:6f:2c:1d: 67:d2:f6:b7:87:30:84:ed:35:f9:85:2a:1d:52:28:15:0a:13: 66:a8:01:20:07:0f:de:84:14:78:10:1c:8b:f4:2a:f9:94:87: 10:89:9a:3f:14:21:ab:f2:80:41:46:5b:45:a4:cb:1c:fa:e3: f2:79:67:15 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNhXj1pQdO1wCsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxMTAxZjQtYTUyNy00NTliLThjMTYtZDc4YjI2MWU2 ZGUzMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk YzliMjI0YjctOWEyYy00NDQ3LThiZjAtOWEwNDI1MjdiMzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzgeQdMwrp89ZdckYPCkhNW8knc4iW6Hspot fTp33XFyuFCve8HHdrMXzMD5ZwHIQMNk5mYGX1gVUYUPda4yTwVGDQilp+FxnX6c GCUEkDFDd4a9uzbO1ncivwXiTll4Mj/JPQK6LzjdEeW6a17UlLnTI6RSsxfQAsPK C2wi7y8ywQVZ30y9nz/dRiricYeJS2x+28ynlY0gRq3fG4SaktoQloQfnzg4cCtT zw/alSJJKia6paM7Xfe/qfcxrgOPEtEpiEd2hi5WoVM6L/2OXwMLE3UEjxoNSe7l /vBS7rhuzN8x6EeUmPrW2lolNgirsqY6c+8dQgZPG0IPUZvNPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK34euMjrwgCfmUnqiciqGAKxu4DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjEx MDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhiMjYxZTZkZTMvODU0MTRlYzYtYjg1Ny0z Y2NkLWFiODAtZGJjN2FkNWE3NTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxMTAxZjQtYTUyNy00NTliLThj MTYtZDc4YjI2MWU2ZGUzL2FiMTEwMWY0LWE1MjctNDU5Yi04YzE2LWQ3OGIyNjFl NmRlMy5jcmwwHwYDVR0jBBgwFoAUmZxX2Q4wTnTaeEpb0pxnHt56bjMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjExMDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhi MjYxZTZkZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgICdw8A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAABAsznbM4USmb0bAJBpbkk0bDqFCbxoD6ELbL192H5s3H4711nI 3B/ylBaAvgxX1ZnToZ20r3YMng03GJnFo/sfLNmkeCI7KNiE/wuQvUkC5E9+MUPe GDi8LQRB7dYU70fhGZOWyckRfpAdEGIq8MY83Wfd5kZA0rTXC8nJoj49rJaDv51t pAZzIs0JI8khUZVZ3tDBHtTbxp7CVdiiyvd2xu8b/5RrEV660GK8vi15rFsW2RX2 RaVGr8/Qp+2XK8BTrm8sHWfS9reHMITtNfmFKh1SKBUKE2aoASAHD96EFHgQHIv0 KvmUhxCJmj8UIavygEFGW0Wkyxz64/J5ZxU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:07 2025 by rpki-client