$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/5c377274-4b58-36cb-8980-14e63b7411d8.roa File: 5c377274-4b58-36cb-8980-14e63b7411d8.roa (raw, json) Hash identifier: i2bjRqFbt7UsPB6wWF7i7O1sKoF7A4pW9jxLInvDws4= Subject key identifier: 83:C3:13:7B:52:33:FA:48:E5:F9:67:2B:A1:CE:87:D8:FE:26:13:A3 Certificate issuer: /CN=f9e87468-3770-44b8-9cdc-c0b0e117f2db Certificate serial: 010D0C9F4328584899A3A4F71D228EF5741B5580 Authority key identifier: 5E:1A:94:DA:91:56:B9:AD:6A:2F:83:4C:8B:E8:E2:0F:E1:44:8E:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/5c377274-4b58-36cb-8980-14e63b7411d8.roa Signing time: Sun 19 Jan 2025 20:55:17 +0000 ROA not before: Sun 19 Jan 2025 20:55:17 +0000 ROA not after: Sat 19 Apr 2025 19:55:17 +0000 asID: 36832 IP address blocks: 2602:f72b::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9e87468-3770-44b8-9cdc-c0b0e117f2db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9e87468-3770-44b8-9cdc-c0b0e117f2db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:99:a3:a4:f7:1d:22:8e:f5:74:1b:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9e87468-3770-44b8-9cdc-c0b0e117f2db Validity Not Before: Jan 19 20:55:17 2025 GMT Not After : Apr 19 19:55:17 2025 GMT Subject: CN=73837f62-e5f0-4d4b-8454-c2397444e3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:11:49:14:55:95:72:f4:d2:cb:d2:d1:43:86: 92:28:05:5e:41:9a:07:74:e0:22:a9:a1:22:1a:55: 13:2e:40:ba:9c:50:9c:6c:f7:e0:f2:37:36:1b:3b: 70:db:b1:56:9c:e3:d6:d5:17:27:c2:fc:66:07:78: e1:b7:5a:7e:6b:94:1c:1f:77:ea:a5:60:c6:03:b4: 3b:ce:04:8a:17:91:07:bd:29:ee:68:2d:94:14:65: 0b:3c:09:0c:06:6e:a2:d0:bd:4b:e9:e7:13:33:de: 4b:6e:aa:94:f3:b3:a1:c8:1b:ad:52:65:3a:00:cb: 11:c2:f2:e1:c9:8e:23:87:9b:85:65:7a:63:ad:03: 1c:88:9e:a7:a1:0c:c6:fe:04:30:cb:41:81:c7:93: 77:a9:64:94:91:09:01:0e:26:5d:02:6c:00:99:1f: a1:00:d6:0b:5b:5e:58:c0:ea:98:41:5f:80:45:57: ea:57:aa:ef:aa:34:0b:d8:0e:e2:ee:db:fd:e5:cf: ac:ad:c3:e1:3f:7b:5a:22:1a:d1:4e:31:6d:a1:74: 7e:95:15:b1:38:f4:26:e5:c0:96:59:72:0e:e0:65: 71:d1:48:3b:56:4f:c0:7f:16:71:ee:8a:b3:28:7b: cd:0e:92:d2:64:8e:a8:72:bd:31:34:c5:19:1c:aa: 84:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C3:13:7B:52:33:FA:48:E5:F9:67:2B:A1:CE:87:D8:FE:26:13:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/5c377274-4b58-36cb-8980-14e63b7411d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9e87468-3770-44b8-9cdc-c0b0e117f2db.crl X509v3 Authority Key Identifier: keyid:5E:1A:94:DA:91:56:B9:AD:6A:2F:83:4C:8B:E8:E2:0F:E1:44:8E:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db.cer sbgp-ipAddrBlock: critical IPv6: 2602:f72b::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:18:36:53:24:91:0c:0d:25:56:c8:43:5c:a2:e8:a9:84:45: c4:da:61:73:8d:2a:ea:66:f7:e0:f3:39:27:aa:7f:7a:a1:28: db:9e:8d:f5:10:e1:6f:d0:fa:ee:8c:ea:6f:e1:b5:00:9e:ab: f5:8a:bb:90:59:7b:a3:7c:94:2a:66:21:c1:3e:22:c4:de:4f: 55:83:70:83:1a:02:5a:7e:2f:4f:f2:ce:c6:02:1d:82:b2:44: 93:96:20:c2:27:27:10:6b:11:7a:24:7f:a5:2b:28:24:64:55: 21:06:09:5a:62:59:37:ef:e6:e2:9a:8b:d3:ae:ed:42:37:82: 03:e1:b1:ad:3b:51:c9:ec:be:1e:b1:ac:d5:29:dd:79:7c:2a: 78:65:36:af:a2:83:3a:fd:79:5d:03:7e:18:9f:b9:e5:a4:4f: 86:ed:d1:3d:16:35:fa:f1:a2:86:4b:fb:f4:09:d7:b0:f8:ab: d3:80:0b:d0:ce:43:fa:6b:c2:75:af:3c:df:50:f8:e6:67:ef: be:7c:b0:fd:9c:27:bd:23:e2:be:d2:ce:31:d9:cd:24:36:b8: 25:7a:5a:a6:3a:cb:c7:d7:d7:c7:8c:41:ee:d3:fe:90:96:63: ea:bd:d7:ad:b7:92:03:27:2a:68:3c:ac:5f:20:78:1a:53:ae: c2:5a:b5:33 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEiZo6T3HSKO9XQbVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjllODc0NjgtMzc3MC00NGI4LTljZGMtYzBiMGUxMTdm MmRiMB4XDTI1MDExOTIwNTUxN1oXDTI1MDQxOTE5NTUxN1owLzEtMCsGA1UEAxMk NzM4MzdmNjItZTVmMC00ZDRiLTg0NTQtYzIzOTc0NDRlM2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRFJFFWVcvTSy9LRQ4aSKAVeQZoHdOAiqaEi GlUTLkC6nFCcbPfg8jc2Gztw27FWnOPW1RcnwvxmB3jht1p+a5QcH3fqpWDGA7Q7 zgSKF5EHvSnuaC2UFGULPAkMBm6i0L1L6ecTM95LbqqU87OhyButUmU6AMsRwvLh yY4jh5uFZXpjrQMciJ6noQzG/gQwy0GBx5N3qWSUkQkBDiZdAmwAmR+hANYLW15Y wOqYQV+ARVfqV6rvqjQL2A7i7tv95c+srcPhP3taIhrRTjFtoXR+lRWxOPQm5cCW WXIO4GVx0Ug7Vk/AfxZx7oqzKHvNDpLSZI6ocr0xNMUZHKqEBQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIPDE3tSM/pI5flnK6HOh9j+JhOjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mOWU4 NzQ2OC0zNzcwLTQ0YjgtOWNkYy1jMGIwZTExN2YyZGIvNWMzNzcyNzQtNGI1OC0z NmNiLTg5ODAtMTRlNjNiNzQxMWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjllODc0NjgtMzc3MC00NGI4LTlj ZGMtYzBiMGUxMTdmMmRiL2Y5ZTg3NDY4LTM3NzAtNDRiOC05Y2RjLWMwYjBlMTE3 ZjJkYi5jcmwwHwYDVR0jBBgwFoAUXhqU2pFWua1qL4NMi+jiD+FEjrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mOWU4NzQ2OC0zNzcwLTQ0YjgtOWNkYy1jMGIw ZTExN2YyZGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3KwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAUhg2UySRDA0lVshDXKLoqYRFxNphc40q6mb34PM5J6p/eqEo256N 9RDhb9D67ozqb+G1AJ6r9Yq7kFl7o3yUKmYhwT4ixN5PVYNwgxoCWn4vT/LOxgId grJEk5YgwicnEGsReiR/pSsoJGRVIQYJWmJZN+/m4pqL067tQjeCA+GxrTtRyey+ HrGs1SndeXwqeGU2r6KDOv15XQN+GJ+55aRPhu3RPRY1+vGihkv79AnXsPir04AL 0M5D+mvCda8831D45mfvvnyw/ZwnvSPivtLOMdnNJDa4JXpapjrLx9fXx4xB7tP+ kJZj6r3XrbeSAycqaDysXyB4GlOuwlq1Mw== -----END CERTIFICATE-----Generated at Wed Feb 19 20:36:08 2025 by rpki-client