$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/dc0da51e-bddf-385a-bee9-51758d38ce9e.roa File: dc0da51e-bddf-385a-bee9-51758d38ce9e.roa (raw, json) Hash identifier: EV2pzzJNpAkM0ms/NMPNLA2IoeD580h7h03et0hu6oo= Subject key identifier: 04:76:37:8B:D9:55:6D:8E:3E:2F:37:1F:F6:E1:1B:9F:65:78:EE:65 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584875F05CF320D89CBBFFF88B80 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/dc0da51e-bddf-385a-bee9-51758d38ce9e.roa Signing time: Tue 07 Jan 2025 02:00:39 +0000 ROA not before: Tue 07 Jan 2025 02:00:39 +0000 ROA not after: Mon 07 Apr 2025 01:00:39 +0000 asID: 40627 IP address blocks: 2620:77::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:75:f0:5c:f3:20:d8:9c:bb:ff:f8:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Jan 7 02:00:39 2025 GMT Not After : Apr 7 01:00:39 2025 GMT Subject: CN=1ff7c302-4568-4a6a-8681-cf9b84ae5c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:58:ed:bb:65:16:a7:53:a8:09:95:c9:54:65: 6a:e5:8d:c9:d6:6e:93:02:19:20:17:f6:81:f9:47: b5:d3:16:2a:59:01:2a:07:57:bf:4e:8a:31:e5:ec: de:66:bc:74:f1:71:12:fd:fa:53:ec:6f:79:55:2e: 31:96:c4:a5:53:2d:08:9c:ea:e5:cc:08:19:a4:6f: 31:9d:b3:02:0e:df:ef:10:94:c2:61:6c:89:9c:d5: 6c:2d:0c:13:08:b3:b0:f2:0b:25:a5:ab:8a:2b:77: 4c:d2:d9:4a:dd:a9:24:f7:57:99:1d:08:f4:50:2a: ef:e2:b6:42:75:c7:40:a2:ec:a5:59:19:16:fa:9e: 89:6f:c4:b9:f3:99:01:de:58:0a:cd:77:6b:e7:36: ba:65:44:eb:52:00:01:44:a7:7f:2f:7f:8e:bf:d1: 56:5b:33:a6:24:50:56:4d:eb:d2:d7:90:13:4a:84: 8c:e0:fc:47:b9:2c:4a:d9:9a:6c:47:91:b0:a9:3d: e0:e3:48:9d:1c:2d:56:e6:60:90:1e:71:65:75:f4: df:e9:97:73:78:86:fb:46:e7:5f:39:9a:c2:2d:c9: 98:bc:93:74:56:17:d1:e8:79:20:36:8d:da:05:06: 17:4f:46:13:d4:43:1b:1c:61:0a:71:b2:9b:16:9c: a3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:76:37:8B:D9:55:6D:8E:3E:2F:37:1F:F6:E1:1B:9F:65:78:EE:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/dc0da51e-bddf-385a-bee9-51758d38ce9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv6: 2620:77::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:2e:2a:64:a0:b3:e6:62:d0:46:83:22:db:01:0e:a4:9c:fc: a6:88:57:0c:bd:4d:ea:f4:c3:c5:53:3e:bc:5b:7b:ff:27:35: 96:ba:47:5c:f1:c2:4d:50:e7:5a:a0:0c:80:b0:d8:a5:45:a0: d8:0b:f4:b1:8b:c6:a4:9b:40:f3:f7:45:0e:a7:e0:b1:97:80: ff:8d:2e:9e:f5:0c:39:f3:19:e0:de:f6:be:be:b5:43:9d:97: 22:42:88:d3:a6:ad:1c:3b:05:c3:18:ce:60:1d:cb:02:9b:19: c0:02:62:c4:67:02:42:d7:eb:98:de:a0:72:d6:40:12:ba:5f: d9:15:52:95:81:f9:4c:28:7d:fc:0d:e4:45:8d:55:a1:98:fa: 9d:81:6e:4e:b2:42:cc:98:15:f9:41:65:a4:a4:f3:49:c0:0d: d0:da:fa:19:30:42:ae:cf:72:0b:b9:2c:c8:db:ac:05:2d:b0: 9f:3a:e0:85:ff:61:dd:4b:c2:bc:f6:29:e9:93:09:1a:6d:e3: c1:8e:53:2d:05:39:4a:05:e4:48:3b:a0:ee:1b:3e:5b:29:52: da:0b:3f:bc:af:91:a7:2f:88:1f:f1:9d:59:c9:7b:19:58:38: 18:49:6b:8f:fb:bc:0f:a7:b3:e4:c3:df:6f:d0:2e:3f:be:a7: f6:5a:50:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEh18FzzINicu//4i4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MDEwNzAyMDAzOVoXDTI1MDQwNzAxMDAzOVowLzEtMCsGA1UEAxMk MWZmN2MzMDItNDU2OC00YTZhLTg2ODEtY2Y5Yjg0YWU1Yzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsljtu2UWp1OoCZXJVGVq5Y3J1m6TAhkgF/aB +Ue10xYqWQEqB1e/Toox5ezeZrx08XES/fpT7G95VS4xlsSlUy0InOrlzAgZpG8x nbMCDt/vEJTCYWyJnNVsLQwTCLOw8gslpauKK3dM0tlK3akk91eZHQj0UCrv4rZC dcdAouylWRkW+p6Jb8S585kB3lgKzXdr5za6ZUTrUgABRKd/L3+Ov9FWWzOmJFBW TevS15ATSoSM4PxHuSxK2ZpsR5GwqT3g40idHC1W5mCQHnFldfTf6ZdzeIb7Rudf OZrCLcmYvJN0VhfR6HkgNo3aBQYXT0YT1EMbHGEKcbKbFpyjnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAR2N4vZVW2OPi83H/bhG59leO5lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvZGMwZGE1MWUtYmRkZi0z ODVhLWJlZTktNTE3NThkMzhjZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdwAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB8uKmSgs+Zi0EaDItsBDqSc/KaIVwy9Ter0w8VTPrxbe/8nNZa6 R1zxwk1Q51qgDICw2KVFoNgL9LGLxqSbQPP3RQ6n4LGXgP+NLp71DDnzGeDe9r6+ tUOdlyJCiNOmrRw7BcMYzmAdywKbGcACYsRnAkLX65jeoHLWQBK6X9kVUpWB+Uwo ffwN5EWNVaGY+p2Bbk6yQsyYFflBZaSk80nADdDa+hkwQq7Pcgu5LMjbrAUtsJ86 4IX/Yd1Lwrz2KemTCRpt48GOUy0FOUoF5Eg7oO4bPlspUtoLP7yvkacviB/xnVnJ exlYOBhJa4/7vA+ns+TD32/QLj++p/ZaUOM= -----END CERTIFICATE-----Generated at Fri Mar 14 10:02:21 2025 by rpki-client