$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/e79010f1-e45f-3297-b37c-c24e052529e1.roa File: e79010f1-e45f-3297-b37c-c24e052529e1.roa (raw, json) Hash identifier: l7SBowO0SELQMzN4PXQ5CAyFVSRH0ujIJe4eVbUkPGo= Subject key identifier: F4:D6:28:6B:A5:2C:46:F0:B1:5E:85:3D:A4:4E:0A:01:12:E1:59:91 Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F432858487325B1A1C3F816C3A0837980 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/e79010f1-e45f-3297-b37c-c24e052529e1.roa Signing time: Mon 06 Jan 2025 02:00:40 +0000 ROA not before: Mon 06 Jan 2025 02:00:40 +0000 ROA not after: Sun 06 Apr 2025 01:00:40 +0000 asID: 23428 IP address blocks: 2602:fb68:c0::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:73:25:b1:a1:c3:f8:16:c3:a0:83:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: Jan 6 02:00:40 2025 GMT Not After : Apr 6 01:00:40 2025 GMT Subject: CN=ed4257e3-90a1-49bf-a83d-9307744f2706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0e:a0:42:47:c9:36:e6:d7:30:3c:5b:8d:66: a5:fb:8b:77:f6:23:30:2d:6e:e4:c7:9e:de:0b:33: 39:6b:25:f2:85:e0:88:88:68:fa:96:f8:e7:f9:e2: f4:98:20:30:0a:e2:e6:b5:db:4d:06:b6:09:60:ab: 01:d8:39:5f:06:c2:3d:d4:c6:15:fe:78:3e:fd:f6: 27:15:95:48:b9:93:4e:e7:94:0d:32:4b:06:05:d8: 65:8d:38:b0:e8:95:55:dc:1d:e4:0b:43:89:a6:ab: 89:cc:4b:6c:a3:f7:f4:35:e1:fa:26:92:c5:96:94: 05:fc:13:df:34:76:fd:36:73:02:82:e5:0a:a9:b0: 70:b9:b8:56:42:27:ad:37:26:ff:96:53:0d:39:ff: 9c:fe:d0:2a:c9:1d:74:3a:d2:38:8c:b6:36:56:ec: 58:da:62:15:38:55:f5:56:68:45:0e:9f:9b:0e:c4: d3:f1:e9:1f:d5:a1:ee:65:41:b5:fa:2d:4b:91:6b: 9b:2e:9d:38:b6:d0:25:34:f0:f6:27:f5:68:09:8d: a5:5e:03:ba:47:82:9e:0c:c6:6f:d3:70:92:c3:91: db:b7:4a:ed:c9:df:06:77:cd:bc:95:01:59:34:e3: 46:18:91:d7:a5:51:1f:d8:b2:0c:6e:c6:23:e6:16: 69:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D6:28:6B:A5:2C:46:F0:B1:5E:85:3D:A4:4E:0A:01:12:E1:59:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/e79010f1-e45f-3297-b37c-c24e052529e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb68:c0::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:90:dd:4d:55:43:ef:36:1f:59:c9:1c:db:0b:27:3e:ba:8a: 9c:7f:e9:16:88:09:de:26:cd:03:6c:f5:04:48:e3:ab:62:4c: 71:71:25:3d:ea:7b:4f:48:f5:59:d2:ee:83:d2:78:a5:a8:1f: 23:7d:1f:50:d2:73:7c:3f:a9:9e:0c:bd:80:cb:4c:b3:d3:06: d8:9c:6b:69:2d:f8:b9:de:3b:04:b2:85:d4:fe:1b:54:0a:ef: 76:7f:60:2a:36:ba:c9:15:e7:e3:75:4b:02:95:95:5d:ba:5c: 69:a1:c3:88:93:ea:03:1f:10:81:5d:f9:a7:6f:c1:6e:94:22: 7d:85:02:eb:5f:e6:43:3b:c1:22:59:01:c2:f8:21:48:d8:ea: e9:b5:e4:52:a9:56:ad:f8:5d:f9:a5:87:af:ba:b9:bd:25:3d: 4c:2d:82:ad:91:65:c3:38:f7:bd:de:85:b6:8e:fd:cc:d2:84: 7b:b8:f3:d5:89:cf:8a:e8:6e:60:2f:5c:33:1e:40:b6:72:35: 3c:24:f3:79:3d:55:4f:cc:a8:3f:7b:5a:c5:4e:24:dd:82:5d: cf:48:46:9f:83:41:cd:be:80:52:57:78:9d:4c:5c:53:6e:c9: a3:87:a0:c2:fa:34:7b:f3:58:71:13:ea:8c:f8:04:34:3d:44: dc:12:d7:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhzJbGhw/gWw6CDeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk ZWQ0MjU3ZTMtOTBhMS00OWJmLWE4M2QtOTMwNzc0NGYyNzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ6gQkfJNubXMDxbjWal+4t39iMwLW7kx57e CzM5ayXyheCIiGj6lvjn+eL0mCAwCuLmtdtNBrYJYKsB2DlfBsI91MYV/ng+/fYn FZVIuZNO55QNMksGBdhljTiw6JVV3B3kC0OJpquJzEtso/f0NeH6JpLFlpQF/BPf NHb9NnMCguUKqbBwubhWQietNyb/llMNOf+c/tAqyR10OtI4jLY2VuxY2mIVOFX1 VmhFDp+bDsTT8ekf1aHuZUG1+i1LkWubLp04ttAlNPD2J/VoCY2lXgO6R4KeDMZv 03CSw5Hbt0rtyd8Gd828lQFZNONGGJHXpVEf2LIMbsYj5hZp2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPTWKGulLEbwsV6FPaROCgES4VmRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvZTc5MDEwZjEtZTQ1Zi0z Mjk3LWIzN2MtYzI0ZTA1MjUyOWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL7aADA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG2Q3U1VQ+82H1nJHNsLJz66ipx/6RaICd4mzQNs9QRI46tiTHFx JT3qe09I9VnS7oPSeKWoHyN9H1DSc3w/qZ4MvYDLTLPTBtica2kt+LneOwSyhdT+ G1QK73Z/YCo2uskV5+N1SwKVlV26XGmhw4iT6gMfEIFd+advwW6UIn2FAutf5kM7 wSJZAcL4IUjY6um15FKpVq34Xfmlh6+6ub0lPUwtgq2RZcM4973ehbaO/czShHu4 89WJz4robmAvXDMeQLZyNTwk83k9VU/MqD97WsVOJN2CXc9IRp+DQc2+gFJXeJ1M XFNuyaOHoML6NHvzWHET6oz4BDQ9RNwS15k= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:36 2025 by rpki-client