$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/0ebc0ba8-d251-3f18-a70e-1b6a0d6df8ec.roa File: 0ebc0ba8-d251-3f18-a70e-1b6a0d6df8ec.roa (raw, json) Hash identifier: xMrhss0xsaWwfgP9EYDvx0p3Mmy7zBxYmIAu6cfFNE8= Subject key identifier: 9D:42:E9:A2:01:57:2D:CB:AB:DC:B9:1D:39:98:4F:46:80:E6:A0:F3 Certificate issuer: /CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188 Certificate serial: 010D0C9F43285849754456B817867D37F9343A00 Authority key identifier: 62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/0ebc0ba8-d251-3f18-a70e-1b6a0d6df8ec.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 32604 IP address blocks: 2602:fa9c:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:56:b8:17:86:7d:37:f9:34:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=047f1099-d7a9-466d-9cfe-c7ddac316378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3d:89:26:13:2f:5d:e7:c0:3b:52:2e:23:50: 9c:9f:34:92:b8:3a:88:14:83:11:bb:89:40:6a:5e: 34:e8:03:f8:3c:99:58:d5:b1:aa:97:a4:a6:c2:bd: 28:4b:96:42:48:c1:58:64:c7:da:75:d7:17:96:ce: da:d6:d4:93:5c:7b:2e:d9:10:80:29:52:b4:7c:08: 33:97:70:6d:7c:cf:2d:02:65:35:38:af:4b:30:cf: 8b:bb:72:1b:1e:4e:70:a6:9e:69:ad:f4:8c:41:9e: ac:ef:cf:82:2f:69:17:6d:43:07:64:76:9b:82:3d: 9b:e5:7c:31:5a:8f:f5:a2:b9:d3:5c:38:20:da:62: 53:33:6a:71:d5:51:e4:11:d7:28:d7:f1:39:10:7f: c6:fb:3b:ed:85:2f:a8:3e:f9:86:c2:50:2c:9d:f4: 77:30:f1:02:88:99:41:89:62:0d:be:73:73:25:a0: 68:1a:fa:c9:0b:7b:9d:a1:fe:53:f2:80:ca:e2:ce: 2b:d5:76:55:1b:f2:c6:26:e1:7b:52:4a:66:bc:b2: 1f:7a:03:b3:a6:24:d4:5e:64:e3:42:a4:67:88:c0: 85:06:89:00:68:10:50:c8:38:5c:51:56:e5:13:45: 65:96:fa:8e:a3:f3:f4:27:8d:ea:0a:fe:a0:e1:8a: 8a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:42:E9:A2:01:57:2D:CB:AB:DC:B9:1D:39:98:4F:46:80:E6:A0:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/0ebc0ba8-d251-3f18-a70e-1b6a0d6df8ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl X509v3 Authority Key Identifier: keyid:62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa9c:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:5d:85:79:8b:6d:40:ef:0f:83:3e:32:ab:b4:63:aa:0b:17: b8:68:49:a4:75:3b:1d:6a:90:59:81:33:3b:9a:e9:84:fb:65: 93:cd:7c:05:41:2b:75:61:40:25:90:12:85:69:f8:36:cb:8f: 1f:7b:70:a5:0c:0c:b4:eb:85:7e:86:10:84:5b:39:09:fb:24: 3a:bd:d5:76:57:0f:27:89:89:ee:da:f4:34:c4:ea:83:a0:9c: 6e:1d:58:cd:e4:ef:77:6e:0f:97:e0:56:bf:22:0f:65:bc:8c: d5:c8:f1:43:f5:a6:3b:50:fc:ea:7a:fc:c8:3d:aa:ca:28:b6: 60:ab:29:fb:84:39:b5:94:d3:70:81:81:3a:7d:27:0f:32:6e: 49:62:1c:e6:bb:b1:bc:9a:8f:9b:e0:7a:68:7d:e7:22:5e:cb: b5:19:1a:4a:fe:26:2f:b6:4f:01:ac:09:26:80:49:cd:71:ac: f9:1c:48:96:49:fa:51:33:10:31:e5:fd:a3:74:9b:e9:b6:df: 05:d6:0f:e3:70:f0:19:09:d2:69:08:44:f6:74:3f:7b:33:4d: fd:93:9b:6f:0d:40:23:77:df:3f:07:45:5c:09:d8:12:f8:47: 4d:13:8e:91:55:da:bd:ca:40:e7:16:53:05:a6:d1:50:e6:4a: 87:23:3e:75 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl1RFa4F4Z9N/k0OgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTQ5MzgxYTMtOWM2Zi00N2Q2LTljNTItOWZhMDdkMmJm MTg4MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk MDQ3ZjEwOTktZDdhOS00NjZkLTljZmUtYzdkZGFjMzE2Mzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD2JJhMvXefAO1IuI1CcnzSSuDqIFIMRu4lA al406AP4PJlY1bGql6Smwr0oS5ZCSMFYZMfaddcXls7a1tSTXHsu2RCAKVK0fAgz l3BtfM8tAmU1OK9LMM+Lu3IbHk5wpp5prfSMQZ6s78+CL2kXbUMHZHabgj2b5Xwx Wo/1ornTXDgg2mJTM2px1VHkEdco1/E5EH/G+zvthS+oPvmGwlAsnfR3MPECiJlB iWINvnNzJaBoGvrJC3udof5T8oDK4s4r1XZVG/LGJuF7UkpmvLIfegOzpiTUXmTj QqRniMCFBokAaBBQyDhcUVblE0VllvqOo/P0J43qCv6g4YqKAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ1C6aIBVy3Lq9y5HTmYT0aA5qDzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNDkz ODFhMy05YzZmLTQ3ZDYtOWM1Mi05ZmEwN2QyYmYxODgvMGViYzBiYTgtZDI1MS0z ZjE4LWE3MGUtMWI2YTBkNmRmOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTQ5MzgxYTMtOWM2Zi00N2Q2LTlj NTItOWZhMDdkMmJmMTg4L2E0OTM4MWEzLTljNmYtNDdkNi05YzUyLTlmYTA3ZDJi ZjE4OC5jcmwwHwYDVR0jBBgwFoAUYlJh53P6ANsVeqjVvHpystSAfMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNDkzODFhMy05YzZmLTQ3ZDYtOWM1Mi05ZmEw N2QyYmYxODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6nAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACtdhXmLbUDvD4M+Mqu0Y6oLF7hoSaR1Ox1qkFmBMzua6YT7ZZPN fAVBK3VhQCWQEoVp+DbLjx97cKUMDLTrhX6GEIRbOQn7JDq91XZXDyeJie7a9DTE 6oOgnG4dWM3k73duD5fgVr8iD2W8jNXI8UP1pjtQ/Op6/Mg9qsootmCrKfuEObWU 03CBgTp9Jw8ybkliHOa7sbyaj5vgemh95yJey7UZGkr+Ji+2TwGsCSaASc1xrPkc SJZJ+lEzEDHl/aN0m+m23wXWD+Nw8BkJ0mkIRPZ0P3szTf2Tm28NQCN33z8HRVwJ 2BL4R00TjpFV2r3KQOcWUwWm0VDmSocjPnU= -----END CERTIFICATE-----Generated at Mon Apr 28 09:08:22 2025 by rpki-client