$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/cf00814b-3880-32eb-88c4-c73e3f030f73.roa File: cf00814b-3880-32eb-88c4-c73e3f030f73.roa (raw, json) Hash identifier: B5O1PaTCOurQYONOAbL3V5XZfQGcBd+fR34xL4xrhys= Subject key identifier: F3:AA:84:97:72:25:FE:15:C0:D8:FE:E4:AD:85:74:4C:44:F5:03:C7 Certificate issuer: /CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee Certificate serial: 010D0C9F432858493ED3D272E5D1AE2901E65CC6 Authority key identifier: 71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/cf00814b-3880-32eb-88c4-c73e3f030f73.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 14618 IP address blocks: 2602:80f:9002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:d2:72:e5:d1:ae:29:01:e6:5c:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=8a10dbb3-f4ef-4f3a-b2ff-960c18128cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9b:38:cb:f0:c6:8f:7a:9e:a7:63:b5:2b:73: 32:f8:3c:a0:e5:12:ba:a5:18:ad:5f:4d:a8:53:e3: 25:03:84:0b:c7:60:30:24:94:a2:80:80:a5:85:02: 73:04:81:56:04:9c:06:0a:1a:2a:99:ff:c1:73:f6: 0e:63:f8:7c:42:52:a9:29:d2:c8:c3:1e:2f:0a:b1: cd:7f:08:98:7e:b6:20:e8:75:3f:b9:7e:f4:59:57: cd:45:3e:dc:93:fb:f7:9e:95:75:fb:ed:2e:c2:3a: dd:b9:f5:c1:34:1c:f6:40:ec:41:55:1a:02:9c:5d: b9:4d:b4:aa:70:e4:ea:a8:5d:6d:e4:df:ec:b8:59: b1:3b:a6:de:6d:29:9e:1a:94:47:ef:2e:0a:eb:50: ca:d0:14:ca:76:73:5e:84:c5:3a:40:ec:5a:79:84: 6a:52:bb:17:c0:90:01:e5:2c:62:8e:ab:97:51:6d: 8e:41:83:5e:0b:c0:6d:41:e2:87:0c:69:8c:88:b9: ab:36:13:2b:70:d1:36:cc:db:a3:f9:5c:05:1f:99: 08:27:34:8f:b5:bf:65:d2:3e:87:d1:8d:4a:ce:74: 29:e5:c3:6e:0b:98:7a:60:aa:10:ad:f2:12:6e:c2: ce:c1:eb:e2:9e:12:06:04:46:12:01:ed:ae:a6:b9: 37:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AA:84:97:72:25:FE:15:C0:D8:FE:E4:AD:85:74:4C:44:F5:03:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/cf00814b-3880-32eb-88c4-c73e3f030f73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl X509v3 Authority Key Identifier: keyid:71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer sbgp-ipAddrBlock: critical IPv6: 2602:80f:9002::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:1f:d0:35:e1:13:1d:96:44:a6:6a:a6:79:bf:bf:94:94:6a: 30:b4:78:6c:02:a3:3a:63:68:e6:d3:2e:7c:55:4c:e2:7c:15: ff:67:cd:5d:57:a1:82:6c:d5:20:b8:c1:c9:08:c7:07:cd:1f: d4:51:98:fa:8e:c7:af:e6:71:95:a5:9b:fa:6b:a8:53:7e:96: 9f:1e:e6:53:0b:18:6e:92:02:42:17:06:d7:29:fb:7c:b3:88: 6c:c5:d0:c4:a9:c8:ac:45:84:69:0f:f4:36:27:6c:8c:41:87: 39:6a:08:67:e2:c2:18:db:f4:30:fd:ec:7d:56:23:12:3a:bc: 2d:95:d4:25:cf:9e:4c:6c:cd:4d:d8:67:39:d1:2e:03:00:eb: 9b:a1:fc:0f:ac:1f:7e:92:92:6a:e6:c5:ce:59:6c:6a:b6:3d: e1:8e:4d:af:ce:d4:b8:68:cc:35:9f:f3:22:a4:c7:88:8c:a9: b3:27:f0:ec:3e:41:c7:99:e2:28:92:ca:39:97:6c:46:63:51: 40:0a:38:9f:2b:b5:ef:1b:07:26:54:e7:fb:89:e3:ce:42:c6: c5:d8:53:aa:17:66:8c:be:34:52:b4:40:c6:ee:53:c3:6d:89: f0:a9:40:b9:5b:60:20:cd:01:cf:cd:e3:f5:12:25:37:ca:dc: d4:6e:ac:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk+09Jy5dGuKQHmXMYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM0NzY4N2MtZDgwZC00NmUyLWIzMGUtMTBhZTY4ZDhl MWVlMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk OGExMGRiYjMtZjRlZi00ZjNhLWIyZmYtOTYwYzE4MTI4Y2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZs4y/DGj3qep2O1K3My+Dyg5RK6pRitX02o U+MlA4QLx2AwJJSigIClhQJzBIFWBJwGChoqmf/Bc/YOY/h8QlKpKdLIwx4vCrHN fwiYfrYg6HU/uX70WVfNRT7ck/v3npV1++0uwjrdufXBNBz2QOxBVRoCnF25TbSq cOTqqF1t5N/suFmxO6bebSmeGpRH7y4K61DK0BTKdnNehMU6QOxaeYRqUrsXwJAB 5SxijquXUW2OQYNeC8BtQeKHDGmMiLmrNhMrcNE2zNuj+VwFH5kIJzSPtb9l0j6H 0Y1KznQp5cNuC5h6YKoQrfISbsLOwevinhIGBEYSAe2uprk3/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPOqhJdyJf4VwNj+5K2FdExE9QPHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMzQ3 Njg3Yy1kODBkLTQ2ZTItYjMwZS0xMGFlNjhkOGUxZWUvY2YwMDgxNGItMzg4MC0z MmViLTg4YzQtYzczZTNmMDMwZjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTM0NzY4N2MtZDgwZC00NmUyLWIz MGUtMTBhZTY4ZDhlMWVlL2UzNDc2ODdjLWQ4MGQtNDZlMi1iMzBlLTEwYWU2OGQ4 ZTFlZS5jcmwwHwYDVR0jBBgwFoAUcaIz1Ch+MfU34SL6UnnC6wYl1ZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMzQ3Njg3Yy1kODBkLTQ2ZTItYjMwZS0xMGFl NjhkOGUxZWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIID5AC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEAf0DXhEx2WRKZqpnm/v5SUajC0eGwCozpjaObTLnxVTOJ8Ff9n zV1XoYJs1SC4wckIxwfNH9RRmPqOx6/mcZWlm/prqFN+lp8e5lMLGG6SAkIXBtcp +3yziGzF0MSpyKxFhGkP9DYnbIxBhzlqCGfiwhjb9DD97H1WIxI6vC2V1CXPnkxs zU3YZznRLgMA65uh/A+sH36Skmrmxc5ZbGq2PeGOTa/O1LhozDWf8yKkx4iMqbMn 8Ow+QceZ4iiSyjmXbEZjUUAKOJ8rte8bByZU5/uJ485CxsXYU6oXZoy+NFK0QMbu U8NtifCpQLlbYCDNAc/N4/USJTfK3NRurEY= -----END CERTIFICATE-----Generated at Sat Apr 26 13:26:20 2025 by rpki-client