$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/897074be-6233-32df-a4ab-14bb263538b9.roa File: 897074be-6233-32df-a4ab-14bb263538b9.roa (raw, json) Hash identifier: dIftdgwaELwqCJcu6y0cmffwQpS7CfLuFB0dlXu5lxg= Subject key identifier: 05:BB:2E:C2:32:67:02:9C:EF:4A:7E:4A:53:42:0C:83:51:F6:38:27 Certificate issuer: /CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3 Certificate serial: 010D0C9F4328584898D605558AA9F4F506D8DCC0 Authority key identifier: B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/897074be-6233-32df-a4ab-14bb263538b9.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 1011 IP address blocks: 2602:fac8::/36 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:05:55:8a:a9:f4:f5:06:d8:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=526556f5-0885-44bf-8b4e-e373bc72addf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:88:af:9e:68:8e:95:ae:3f:7d:14:44:7c:ee: 9b:ba:5c:b2:1b:ff:b3:12:c0:69:d8:28:ed:dc:2b: 11:c9:1a:ed:2a:a4:fa:bd:6a:cd:41:53:5f:7e:d6: 07:4f:25:0e:6f:a1:fe:03:e9:29:54:f6:66:50:d3: ad:8c:ee:a6:10:1b:ee:70:4c:26:34:4f:c2:8e:7a: 73:78:5c:2e:cb:e4:b3:91:19:fd:e1:9a:c2:48:e9: 2b:ff:2b:f6:b2:4f:ca:2e:ac:4c:82:01:6d:5d:e4: c5:f7:60:25:b9:c5:f6:14:8b:4c:19:74:c5:61:05: d0:29:c9:03:98:b4:89:77:84:7f:0c:44:89:e7:cc: dc:c6:52:53:5a:6d:22:b5:78:05:79:4e:7a:05:ab: 3b:a5:0e:04:10:fe:75:18:8e:95:c0:7c:19:5d:02: f3:d3:06:70:48:b2:12:4b:aa:0e:dc:7b:56:85:c8: 3e:71:a5:6d:aa:58:9e:a4:14:d0:c5:47:ed:5e:c6: 0b:50:d2:5a:61:bc:2e:48:70:87:31:47:c1:f1:f0: 86:bc:9e:69:10:da:a1:ba:64:ce:3c:3b:14:14:4f: b0:2d:15:ec:b1:fd:8d:88:0e:11:90:8e:4f:a2:1d: eb:5c:a7:7e:d7:76:fb:6f:42:a8:30:bd:47:e7:2d: df:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:BB:2E:C2:32:67:02:9C:EF:4A:7E:4A:53:42:0C:83:51:F6:38:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/897074be-6233-32df-a4ab-14bb263538b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl X509v3 Authority Key Identifier: keyid:B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer sbgp-ipAddrBlock: critical IPv6: 2602:fac8::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:c0:8e:1a:04:bd:10:a7:8d:8e:96:cd:2d:4e:ef:6e:f3:44: 46:72:d1:a9:e9:9e:d4:2d:aa:85:73:e8:e3:cb:89:b3:20:ef: 4c:c3:bf:75:63:12:f4:63:a0:91:43:56:11:c9:ed:c6:9a:f3: 0b:cd:ff:ec:fe:07:48:c6:f6:3d:76:21:3f:d2:e8:c2:5e:0b: e3:01:2c:a1:7b:9c:40:ba:62:57:8e:7a:72:49:e8:c8:f7:2f: 25:03:86:2d:f6:ec:42:d4:06:78:54:87:3e:65:f0:a9:56:f9: c9:6d:c9:e9:b6:69:4b:46:62:a6:45:f3:8e:59:fb:1b:00:56: 40:5e:36:be:98:29:54:2d:5b:7d:4a:b5:15:8f:d2:37:10:58: aa:53:5d:7a:cd:2b:7d:87:a0:9b:91:58:4a:4e:f3:a2:fc:a8: f7:50:43:bc:68:65:28:43:05:e5:7d:7e:cb:b9:5d:35:04:e4: 9f:e4:1d:1b:e0:a7:41:93:af:9c:4e:5e:70:6f:61:a2:1b:d4: 8e:87:e2:2f:d9:1d:40:7f:54:90:45:2c:7c:7d:4d:db:24:b4: 48:63:fc:d7:24:7b:10:6a:72:8f:1f:a6:dd:6b:01:81:84:a1: 5b:7a:2c:37:16:5f:1a:c5:2c:8d:14:f1:23:fa:47:fb:d3:62: a7:f4:b9:70 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEiY1gVViqn09QbY3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY0YmM1YzMtOWVmNC00ZGEzLTlmY2YtNGVjNmRhYmJm YmMzMB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk NTI2NTU2ZjUtMDg4NS00NGJmLThiNGUtZTM3M2JjNzJhZGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4ivnmiOla4/fRREfO6bulyyG/+zEsBp2Cjt 3CsRyRrtKqT6vWrNQVNfftYHTyUOb6H+A+kpVPZmUNOtjO6mEBvucEwmNE/Cjnpz eFwuy+SzkRn94ZrCSOkr/yv2sk/KLqxMggFtXeTF92AlucX2FItMGXTFYQXQKckD mLSJd4R/DESJ58zcxlJTWm0itXgFeU56Bas7pQ4EEP51GI6VwHwZXQLz0wZwSLIS S6oO3HtWhcg+caVtqliepBTQxUftXsYLUNJaYbwuSHCHMUfB8fCGvJ5pENqhumTO PDsUFE+wLRXssf2NiA4RkI5Poh3rXKd+13b7b0KoML1H5y3fKwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAW7LsIyZwKc70p+SlNCDINR9jgnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZjRi YzVjMy05ZWY0LTRkYTMtOWZjZi00ZWM2ZGFiYmZiYzMvODk3MDc0YmUtNjIzMy0z MmRmLWE0YWItMTRiYjI2MzUzOGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWY0YmM1YzMtOWVmNC00ZGEzLTlm Y2YtNGVjNmRhYmJmYmMzL2FmNGJjNWMzLTllZjQtNGRhMy05ZmNmLTRlYzZkYWJi ZmJjMy5jcmwwHwYDVR0jBBgwFoAUsrvXRQKNNtbCM39NSIxDRyFgB78wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZjRiYzVjMy05ZWY0LTRkYTMtOWZjZi00ZWM2 ZGFiYmZiYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL6yAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAi8COGgS9EKeNjpbNLU7vbvNERnLRqeme1C2qhXPo48uJsyDvTMO/ dWMS9GOgkUNWEcntxprzC83/7P4HSMb2PXYhP9Lowl4L4wEsoXucQLpiV456ckno yPcvJQOGLfbsQtQGeFSHPmXwqVb5yW3J6bZpS0ZipkXzjln7GwBWQF42vpgpVC1b fUq1FY/SNxBYqlNdes0rfYegm5FYSk7zovyo91BDvGhlKEMF5X1+y7ldNQTkn+Qd G+CnQZOvnE5ecG9hohvUjofiL9kdQH9UkEUsfH1N2yS0SGP81yR7EGpyjx+m3WsB gYShW3osNxZfGsUsjRTxI/pH+9Nip/S5cA== -----END CERTIFICATE-----Generated at Fri Mar 14 10:07:23 2025 by rpki-client