$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb30680d-be2d-4b84-93f9-e8999234172e/57841ffc-7b85-3795-8174-1c0512029396.roa File: 57841ffc-7b85-3795-8174-1c0512029396.roa (raw, json) Hash identifier: piwngAXyJRU1vggfQGrx01zYFEx0e8+ddaRcIaghsbA= Subject key identifier: 5E:31:52:E4:90:B7:A9:4B:72:FD:11:CC:53:33:0B:C3:44:6F:E3:D2 Certificate issuer: /CN=fb30680d-be2d-4b84-93f9-e8999234172e Certificate serial: 010D0C9F43285848E59BC5ED7F029288DE194980 Authority key identifier: CE:C4:6D:5C:E2:31:0B:5C:D0:8E:87:86:68:88:F0:5A:73:EC:B2:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb30680d-be2d-4b84-93f9-e8999234172e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb30680d-be2d-4b84-93f9-e8999234172e/57841ffc-7b85-3795-8174-1c0512029396.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 6327 IP address blocks: 2620:8::/41 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb30680d-be2d-4b84-93f9-e8999234172e/fb30680d-be2d-4b84-93f9-e8999234172e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb30680d-be2d-4b84-93f9-e8999234172e/fb30680d-be2d-4b84-93f9-e8999234172e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb30680d-be2d-4b84-93f9-e8999234172e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:c5:ed:7f:02:92:88:de:19:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb30680d-be2d-4b84-93f9-e8999234172e Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=40454bdd-2022-4281-974f-80c9e8aee24a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d1:e0:50:b4:4d:fc:2c:ce:f9:96:0f:e1:03: 78:e6:e0:1f:c0:f9:73:5b:a0:65:0e:4d:30:09:dc: 9a:ef:dd:61:4a:ba:e3:4d:43:f8:88:e7:2d:70:d8: e6:64:fa:67:96:47:94:18:52:c2:de:86:69:18:4f: a7:84:de:3a:3c:90:b1:42:c3:8c:76:c7:ef:9b:48: 6c:33:26:13:5e:4e:88:f5:55:55:c3:31:05:e4:80: b5:a0:88:31:ac:06:fc:73:ec:60:9b:3d:45:72:20: 1d:70:6e:05:33:fe:ff:a9:a9:09:f1:b3:55:bc:ed: bf:bd:f3:57:97:a9:51:41:41:53:3f:b9:43:df:3e: e4:42:d7:90:a6:2b:b0:d5:1c:d3:b7:e2:72:f4:af: 65:7b:ba:4c:a8:3d:d1:3f:5d:ef:44:8c:07:67:a8: 99:7d:83:fd:9a:e4:02:ef:d7:89:fc:8d:91:f0:5a: 5a:84:d9:ef:70:f4:a3:10:c1:94:28:8e:bd:73:21: a3:c4:59:0a:ca:96:e1:07:91:42:73:a5:65:8e:e8: 43:7f:e3:c6:4d:2c:c3:31:08:df:70:52:2a:71:0c: 64:6f:bc:89:5e:60:4e:f4:92:5c:9c:2e:a9:65:a0: 7b:db:c0:80:b7:aa:bb:22:35:38:e0:52:84:db:f3: 77:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:31:52:E4:90:B7:A9:4B:72:FD:11:CC:53:33:0B:C3:44:6F:E3:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb30680d-be2d-4b84-93f9-e8999234172e/57841ffc-7b85-3795-8174-1c0512029396.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb30680d-be2d-4b84-93f9-e8999234172e/fb30680d-be2d-4b84-93f9-e8999234172e.crl X509v3 Authority Key Identifier: keyid:CE:C4:6D:5C:E2:31:0B:5C:D0:8E:87:86:68:88:F0:5A:73:EC:B2:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb30680d-be2d-4b84-93f9-e8999234172e.cer sbgp-ipAddrBlock: critical IPv6: 2620:8::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:d2:4f:81:3e:6f:d3:6e:63:ee:53:14:33:4c:71:29:1f:72: b1:68:59:d6:5a:96:34:60:ba:84:c9:e2:35:dc:de:0c:a8:da: ff:ea:f4:56:9d:fe:f6:95:1f:13:33:3c:26:e0:40:86:db:48: c5:bd:97:ba:5b:32:b7:f0:56:da:e4:63:ab:2c:1b:50:16:72: e5:42:cb:b7:62:f9:44:4e:68:68:3c:5a:e1:0a:01:3a:e6:49: 91:95:10:29:44:6e:6e:4d:7d:86:9c:f2:2f:6a:34:14:be:27: ce:12:be:cd:7b:03:fb:f7:0c:61:31:02:2d:46:75:58:fa:2b: 84:f3:41:6a:1d:34:f5:ff:e5:a3:9f:69:81:c3:1e:e6:ce:08: da:74:f7:9a:7d:e2:ab:18:40:d8:36:19:56:fe:df:07:29:e4: 7e:66:03:a0:cd:45:3d:a3:c2:98:e1:ed:58:db:ed:dd:a6:80: 77:b3:8a:e3:cc:2a:df:b5:4d:02:ca:3f:34:2d:45:90:bc:a4: 05:a4:59:59:82:ca:e2:a5:47:60:0b:84:67:c8:2c:01:5c:be: ca:c4:92:fe:25:34:eb:f2:c2:68:41:53:7d:af:8c:5c:aa:3a: 4a:07:4e:24:fa:37:6e:9c:dc:56:5e:12:4c:d1:dc:ac:b6:21: 08:d5:c0:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjlm8XtfwKSiN4ZSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmIzMDY4MGQtYmUyZC00Yjg0LTkzZjktZTg5OTkyMzQx NzJlMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk NDA0NTRiZGQtMjAyMi00MjgxLTk3NGYtODBjOWU4YWVlMjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNHgULRN/CzO+ZYP4QN45uAfwPlzW6BlDk0w Cdya791hSrrjTUP4iOctcNjmZPpnlkeUGFLC3oZpGE+nhN46PJCxQsOMdsfvm0hs MyYTXk6I9VVVwzEF5IC1oIgxrAb8c+xgmz1FciAdcG4FM/7/qakJ8bNVvO2/vfNX l6lRQUFTP7lD3z7kQteQpiuw1RzTt+Jy9K9le7pMqD3RP13vRIwHZ6iZfYP9muQC 79eJ/I2R8FpahNnvcPSjEMGUKI69cyGjxFkKypbhB5FCc6VljuhDf+PGTSzDMQjf cFIqcQxkb7yJXmBO9JJcnC6pZaB728CAt6q7IjU44FKE2/N3GQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF4xUuSQt6lLcv0RzFMzC8NEb+PSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mYjMw NjgwZC1iZTJkLTRiODQtOTNmOS1lODk5OTIzNDE3MmUvNTc4NDFmZmMtN2I4NS0z Nzk1LTgxNzQtMWMwNTEyMDI5Mzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmIzMDY4MGQtYmUyZC00Yjg0LTkz ZjktZTg5OTkyMzQxNzJlL2ZiMzA2ODBkLWJlMmQtNGI4NC05M2Y5LWU4OTk5MjM0 MTcyZS5jcmwwHwYDVR0jBBgwFoAUzsRtXOIxC1zQjoeGaIjwWnPssl0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mYjMwNjgwZC1iZTJkLTRiODQtOTNmOS1lODk5 OTIzNDE3MmUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJiAACAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEfST4E+b9NuY+5TFDNMcSkfcrFoWdZaljRguoTJ4jXc3gyo2v/q 9Fad/vaVHxMzPCbgQIbbSMW9l7pbMrfwVtrkY6ssG1AWcuVCy7di+UROaGg8WuEK ATrmSZGVEClEbm5NfYac8i9qNBS+J84Svs17A/v3DGExAi1GdVj6K4TzQWodNPX/ 5aOfaYHDHubOCNp095p94qsYQNg2GVb+3wcp5H5mA6DNRT2jwpjh7Vjb7d2mgHez iuPMKt+1TQLKPzQtRZC8pAWkWVmCyuKlR2ALhGfILAFcvsrEkv4lNOvywmhBU32v jFyqOkoHTiT6N26c3FZeEkzR3Ky2IQjVwNA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:38 2025 by rpki-client