$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/a3098e02-dc6d-3360-a4a6-69143dbb4b74.roa File: a3098e02-dc6d-3360-a4a6-69143dbb4b74.roa (raw, json) Hash identifier: YijaEdQknP8BNtAKZR5ZFFGl44GwY8FMnFrkYVZp1Io= Subject key identifier: 12:FE:5B:50:49:FD:20:D7:A4:B4:C8:19:FA:E5:E9:57:00:92:A7:6C Certificate issuer: /CN=97e6dc25-3cc3-4f4e-ad93-6bcf11c844da Certificate serial: 010D0C9F43285849648443D5D9AFFE9FD21B9800 Authority key identifier: 74:F3:80:33:A5:3E:5F:68:0E:7F:C5:24:F2:B4:7B:2A:8B:76:52:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/a3098e02-dc6d-3360-a4a6-69143dbb4b74.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 395915 IP address blocks: 2602:811:4000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:43:d5:d9:af:fe:9f:d2:1b:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97e6dc25-3cc3-4f4e-ad93-6bcf11c844da Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=24170fa2-12bb-4cac-9572-6c3dc79455df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e9:ea:33:de:b1:a5:4f:24:52:11:20:8a:fb: 74:40:d9:86:9c:72:44:8d:57:a7:1e:d1:92:a2:d0: 99:33:46:07:6f:e8:45:de:b5:6b:0b:7f:38:8f:e5: a2:3e:68:6f:4f:51:00:d3:75:3d:09:38:96:5e:d4: 84:c1:06:32:7d:48:33:c6:ce:85:43:07:24:8f:da: dc:f3:82:4e:46:4b:35:86:6c:28:a5:98:85:02:58: 6a:c5:6e:ed:b9:e3:1b:f1:3e:4e:a3:7d:90:b3:c6: 64:4c:6c:b2:18:1d:6b:63:4f:52:65:86:47:d4:4e: 92:02:7e:50:46:91:60:d1:96:0a:49:56:bd:c4:c9: 76:d5:72:fb:a0:76:c5:a9:c6:cb:bc:14:ad:3a:fb: 41:47:7b:2a:a7:fd:e6:1f:70:9d:9e:cd:c1:ed:97: 5c:c8:d2:ef:05:7c:06:07:b5:08:03:f6:98:72:4d: 62:8b:d5:ef:52:f9:39:02:b3:62:0e:60:25:4f:ac: 14:15:88:ab:59:d5:30:57:5e:77:a2:ac:03:9e:b9: 7a:cf:6e:2e:c6:68:e2:fc:9e:78:72:dc:4d:2d:b8: d6:dc:90:da:9c:7a:aa:5b:21:ae:13:90:ac:9f:50: 56:38:86:12:f7:bf:7d:94:d6:a1:68:98:f4:d1:53: 4a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FE:5B:50:49:FD:20:D7:A4:B4:C8:19:FA:E5:E9:57:00:92:A7:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/a3098e02-dc6d-3360-a4a6-69143dbb4b74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.crl X509v3 Authority Key Identifier: keyid:74:F3:80:33:A5:3E:5F:68:0E:7F:C5:24:F2:B4:7B:2A:8B:76:52:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.cer sbgp-ipAddrBlock: critical IPv6: 2602:811:4000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:01:ec:4f:27:23:dd:6a:8e:90:f4:2a:70:d3:e6:c6:2b:8d: 89:ff:ee:f2:79:38:c5:93:c1:68:ed:8e:5b:87:08:03:0d:b5: ae:e9:fa:1f:c1:a2:c2:b9:ce:8d:c2:65:43:e3:c2:31:3f:2d: 51:80:55:5a:f2:38:c3:03:da:27:c2:44:2d:58:f4:11:9a:d3: 7d:9c:e1:b7:d7:d9:04:bc:2f:b9:26:6d:82:cb:66:cd:2b:5f: d2:3b:84:14:a2:8b:b4:13:36:7e:cf:a2:e2:54:94:bd:c5:67: fc:4b:9c:ab:09:03:5c:4f:16:b3:ce:4d:51:4e:97:4d:2d:c2: db:0d:77:94:ff:0f:50:eb:12:43:c7:46:fe:7b:4b:56:57:9d: eb:c1:ff:e2:a1:67:a0:12:91:97:75:43:23:28:a4:fa:a2:f6: 18:de:5b:e4:55:a0:5d:f6:f8:e3:9a:a3:5d:30:ba:4e:2a:26: 66:0e:fb:c6:48:c2:f6:ba:f0:06:eb:68:73:5f:68:f4:a8:3b: ab:54:25:31:f6:1e:58:ef:de:d2:67:c8:0a:ce:1d:b8:da:93: 16:81:b5:47:cb:66:84:b4:e4:65:09:a2:1c:74:73:19:71:4e: 66:87:5b:b0:3a:d8:2e:02:7d:b2:08:92:d4:b3:9e:f9:10:16: 9d:0a:03:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElkhEPV2a/+n9IbmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTdlNmRjMjUtM2NjMy00ZjRlLWFkOTMtNmJjZjExYzg0 NGRhMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk MjQxNzBmYTItMTJiYi00Y2FjLTk1NzItNmMzZGM3OTQ1NWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+nqM96xpU8kUhEgivt0QNmGnHJEjVenHtGS otCZM0YHb+hF3rVrC384j+WiPmhvT1EA03U9CTiWXtSEwQYyfUgzxs6FQwckj9rc 84JORks1hmwopZiFAlhqxW7tueMb8T5Oo32Qs8ZkTGyyGB1rY09SZYZH1E6SAn5Q RpFg0ZYKSVa9xMl21XL7oHbFqcbLvBStOvtBR3sqp/3mH3Cdns3B7ZdcyNLvBXwG B7UIA/aYck1ii9XvUvk5ArNiDmAlT6wUFYirWdUwV153oqwDnrl6z24uxmji/J54 ctxNLbjW3JDanHqqWyGuE5Csn1BWOIYS9799lNahaJj00VNKTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBL+W1BJ/SDXpLTIGfrl6VcAkqdsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85N2U2 ZGMyNS0zY2MzLTRmNGUtYWQ5My02YmNmMTFjODQ0ZGEvYTMwOThlMDItZGM2ZC0z MzYwLWE0YTYtNjkxNDNkYmI0Yjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTdlNmRjMjUtM2NjMy00ZjRlLWFk OTMtNmJjZjExYzg0NGRhLzk3ZTZkYzI1LTNjYzMtNGY0ZS1hZDkzLTZiY2YxMWM4 NDRkYS5jcmwwHwYDVR0jBBgwFoAUdPOAM6U+X2gOf8Uk8rR7Kot2UrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85N2U2ZGMyNS0zY2MzLTRmNGUtYWQ5My02YmNm MTFjODQ0ZGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIEUAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAwB7E8nI91qjpD0KnDT5sYrjYn/7vJ5OMWTwWjtjluHCAMNta7p +h/BosK5zo3CZUPjwjE/LVGAVVryOMMD2ifCRC1Y9BGa032c4bfX2QS8L7kmbYLL Zs0rX9I7hBSii7QTNn7PouJUlL3FZ/xLnKsJA1xPFrPOTVFOl00twtsNd5T/D1Dr EkPHRv57S1ZXnevB/+KhZ6ASkZd1QyMopPqi9hjeW+RVoF32+OOao10wuk4qJmYO +8ZIwva68AbraHNfaPSoO6tUJTH2Hljv3tJnyArOHbjakxaBtUfLZoS05GUJohx0 cxlxTmaHW7A62C4CfbIIktSznvkQFp0KA2A= -----END CERTIFICATE-----Generated at Tue Apr 29 11:12:23 2025 by rpki-client