$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/f393c755-1aa5-3164-81e7-6f8c412d59a2.roa File: f393c755-1aa5-3164-81e7-6f8c412d59a2.roa (raw, json) Hash identifier: CPF5Nh7qWWoLM8vPrpuZOyR6N28CR0QWBwYr1nIKkbg= Subject key identifier: 88:95:A1:99:C4:59:58:5B:C2:9F:EC:F3:B0:4A:E2:0B:56:61:61:F7 Certificate issuer: /CN=5cf06829-25a9-43c5-8a21-38599a1fb23f Certificate serial: 010D0C9F432858487DE19F76FD18557C017BD700 Authority key identifier: 1F:D9:E9:E3:A1:33:F1:2A:E1:D0:E5:46:B8:F3:20:DB:A1:1B:6D:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/f393c755-1aa5-3164-81e7-6f8c412d59a2.roa Signing time: Thu 09 Jan 2025 22:17:32 +0000 ROA not before: Thu 09 Jan 2025 22:17:32 +0000 ROA not after: Wed 09 Apr 2025 21:17:32 +0000 asID: 397376 IP address blocks: 2602:fdff::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7d:e1:9f:76:fd:18:55:7c:01:7b:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf06829-25a9-43c5-8a21-38599a1fb23f Validity Not Before: Jan 9 22:17:32 2025 GMT Not After : Apr 9 21:17:32 2025 GMT Subject: CN=f780351c-bdd5-4f52-88b2-d6ea7acc7196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:96:b6:94:cf:3c:7f:81:4f:d7:8e:83:cf:99: 08:fd:3e:69:35:21:d0:d1:0b:4c:b9:85:f9:7d:60: 3c:c1:fb:e4:4e:cb:62:55:8e:e7:fc:7b:bd:08:29: 08:6e:7a:23:06:fa:f8:ae:bb:5c:d7:8e:43:10:80: d9:e7:9f:7c:ad:32:27:63:df:45:ca:95:d2:dd:a5: f9:b5:cd:78:3d:57:39:a6:7b:37:60:c4:22:18:97: 42:14:1b:89:f0:d1:0a:ee:2a:51:c0:e0:dc:40:86: 2b:de:ef:47:af:39:1c:0f:db:7d:59:0a:ea:29:23: e1:83:af:6e:6e:7c:27:3a:7c:b1:af:9d:02:12:2e: ae:45:7b:33:d1:d6:74:cc:8f:4e:ff:78:a5:0a:e5: 38:08:7c:30:a9:b9:e1:d1:bc:6d:41:bd:13:a9:cf: db:25:a6:ab:22:00:42:1d:60:f3:bf:c4:3c:48:52: cc:38:b7:95:bf:c5:f3:fa:1e:59:ec:10:cd:b7:2d: 20:d1:79:75:84:cc:aa:15:c9:2e:64:79:1f:1d:a9: 1a:8f:b0:61:4a:99:a7:3c:5d:01:91:a7:25:52:06: 4b:18:ea:cc:f8:b4:a2:ac:c3:31:0b:33:b7:9c:fd: d8:29:ee:3c:e2:95:0e:57:59:55:f5:6b:e6:3c:44: 87:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:95:A1:99:C4:59:58:5B:C2:9F:EC:F3:B0:4A:E2:0B:56:61:61:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/f393c755-1aa5-3164-81e7-6f8c412d59a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.crl X509v3 Authority Key Identifier: keyid:1F:D9:E9:E3:A1:33:F1:2A:E1:D0:E5:46:B8:F3:20:DB:A1:1B:6D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer sbgp-ipAddrBlock: critical IPv6: 2602:fdff::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:e2:46:c5:98:6c:0f:ee:b4:82:d5:c6:5c:44:2d:69:b5:0f: 70:1f:b1:10:fe:ee:09:91:e2:d2:d1:94:eb:6a:d2:7b:7c:47: 8e:21:65:c4:07:f6:91:10:85:57:14:f0:76:4b:dc:fe:c9:2a: 5c:48:31:c7:05:5a:c9:34:1b:d6:5d:86:be:77:79:7f:d6:90: 70:6e:bd:cf:aa:2a:af:0e:76:f9:da:50:ed:1f:e1:d1:96:b2: d2:8f:d5:ea:ca:b8:d6:0e:70:87:66:e8:a9:3d:87:1d:e5:9c: 96:df:b0:e9:84:3f:21:a3:95:77:e5:4e:1a:e1:b2:07:c7:93: 40:49:4b:c2:37:80:b0:51:e4:db:34:95:8d:00:e0:f3:80:85: 32:22:7a:12:04:6c:ea:53:11:be:25:95:db:96:b3:78:63:32: 86:49:30:c8:23:49:01:74:1b:d4:5c:69:07:64:fd:b0:4c:fa: 40:9b:a5:32:b1:b7:31:87:66:97:0a:ca:b4:eb:3d:0d:fc:18: c8:3d:19:2f:f5:4d:de:20:11:90:07:89:ed:cc:93:73:30:ab: 2b:ec:3f:5b:22:fd:51:82:7e:c1:d1:70:83:f7:e8:6d:fa:79: f4:d3:39:a3:ee:e5:13:ef:d4:ea:48:5b:60:35:b4:de:e0:0d: 38:84:9a:ee -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEh94Z92/RhVfAF71wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNmMDY4MjktMjVhOS00M2M1LThhMjEtMzg1OTlhMWZi MjNmMB4XDTI1MDEwOTIyMTczMloXDTI1MDQwOTIxMTczMlowLzEtMCsGA1UEAxMk Zjc4MDM1MWMtYmRkNS00ZjUyLTg4YjItZDZlYTdhY2M3MTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5a2lM88f4FP146Dz5kI/T5pNSHQ0QtMuYX5 fWA8wfvkTstiVY7n/Hu9CCkIbnojBvr4rrtc145DEIDZ5598rTInY99FypXS3aX5 tc14PVc5pns3YMQiGJdCFBuJ8NEK7ipRwODcQIYr3u9HrzkcD9t9WQrqKSPhg69u bnwnOnyxr50CEi6uRXsz0dZ0zI9O/3ilCuU4CHwwqbnh0bxtQb0Tqc/bJaarIgBC HWDzv8Q8SFLMOLeVv8Xz+h5Z7BDNty0g0Xl1hMyqFckuZHkfHakaj7BhSpmnPF0B kaclUgZLGOrM+LSirMMxCzO3nP3YKe484pUOV1lV9WvmPESHvQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIiVoZnEWVhbwp/s87BK4gtWYWH3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81Y2Yw NjgyOS0yNWE5LTQzYzUtOGEyMS0zODU5OWExZmIyM2YvZjM5M2M3NTUtMWFhNS0z MTY0LTgxZTctNmY4YzQxMmQ1OWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWNmMDY4MjktMjVhOS00M2M1LThh MjEtMzg1OTlhMWZiMjNmLzVjZjA2ODI5LTI1YTktNDNjNS04YTIxLTM4NTk5YTFm YjIzZi5jcmwwHwYDVR0jBBgwFoAUH9np46Ez8Srh0OVGuPMg26EbbcAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81Y2YwNjgyOS0yNWE5LTQzYzUtOGEyMS0zODU5 OWExZmIyM2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL9/zBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZ4kbFmGwP7rSC1cZcRC1ptQ9wH7EQ/u4JkeLS0ZTratJ7fEeOIWXE B/aREIVXFPB2S9z+ySpcSDHHBVrJNBvWXYa+d3l/1pBwbr3PqiqvDnb52lDtH+HR lrLSj9XqyrjWDnCHZuipPYcd5ZyW37DphD8ho5V35U4a4bIHx5NASUvCN4CwUeTb NJWNAODzgIUyInoSBGzqUxG+JZXblrN4YzKGSTDII0kBdBvUXGkHZP2wTPpAm6Uy sbcxh2aXCsq06z0N/BjIPRkv9U3eIBGQB4ntzJNzMKsr7D9bIv1Rgn7B0XCD9+ht +nn00zmj7uUT79TqSFtgNbTe4A04hJru -----END CERTIFICATE-----Generated at Wed Feb 5 10:48:22 2025 by rpki-client