$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa File: cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa (raw, json) Hash identifier: +MxpL9JlhbbQPVnxT583YugY/M1mb+8ufLs+81HroBM= Subject key identifier: CB:65:22:BC:30:45:25:B6:45:A4:47:BD:23:04:E9:DD:8B:1C:76:58 Certificate issuer: /CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188 Certificate serial: 010D0C9F43285849754456A2E76914278CDD0020 Authority key identifier: 62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 32604 IP address blocks: 2602:fa9c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:56:a2:e7:69:14:27:8c:dd:00:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=73e17860-6a4e-4acc-96a5-c74d60af916b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:67:ca:80:58:96:43:44:5e:25:cf:45:3b:c1: 91:02:3b:92:c1:00:c4:3b:a5:10:35:de:31:a9:5d: 66:bb:e9:0f:b1:35:f6:c3:82:dc:f7:28:e9:59:af: a7:e0:05:ef:0c:21:8d:a2:3a:e3:be:c0:c4:b9:f4: c6:26:a9:32:9b:e2:a9:66:98:bd:fc:b8:cb:c5:d5: 20:c7:15:13:ad:8a:42:18:13:93:c9:e5:04:20:06: 20:50:c5:bd:a0:fa:89:ad:c3:21:c8:7f:8b:a8:0c: a1:3a:9d:11:5f:f1:63:f2:a9:ec:5d:9c:e6:d8:ff: 0b:f0:11:05:1e:66:9d:4a:ef:f6:fa:4c:30:77:fb: fe:97:07:bc:96:63:61:42:83:c3:48:ad:64:08:e9: f4:df:19:28:6b:60:0c:04:3a:05:42:4d:4b:38:a0: d7:43:da:d5:9d:f1:86:04:eb:b9:06:de:d9:65:0b: 92:b0:7b:79:32:86:c7:81:bb:c7:09:9f:b1:a5:03: cf:f9:30:bc:8c:2e:ea:08:b9:31:5b:2c:8a:be:c6: 85:fa:ba:b7:7a:9f:22:b8:32:9e:9a:22:3d:28:99: a4:99:80:2b:97:47:d2:fb:60:34:1e:75:23:2a:d2: d6:ca:46:ab:cc:2c:be:48:49:43:50:8d:8f:5e:41: 89:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:65:22:BC:30:45:25:B6:45:A4:47:BD:23:04:E9:DD:8B:1C:76:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl X509v3 Authority Key Identifier: keyid:62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa9c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:a6:b8:ff:8a:53:35:6c:8e:a5:a9:e3:76:c1:a0:71:61:d1: 29:1a:ba:4c:6a:73:fc:22:da:0d:17:84:07:62:d4:d3:f3:e0: 91:f9:b5:03:66:57:ab:ec:b5:bc:37:6a:2e:53:9a:ba:8f:1d: dc:6f:b4:ac:9b:c3:2b:9e:2b:9e:e2:a5:00:1f:3c:78:41:cd: 3b:1b:6f:c3:fb:95:7f:0a:82:c9:2c:71:27:e2:dc:4a:eb:55: f0:34:89:20:ec:d8:aa:f3:f9:80:26:9b:20:9a:01:21:a4:30: e3:d0:be:1d:7c:9f:a0:99:12:ef:98:7c:65:21:2c:de:2a:07: ca:59:e9:24:bc:d2:8f:e6:f7:5e:e6:39:f1:f4:7c:e0:18:f7: 7d:1d:19:c4:a1:9b:a8:a6:ca:60:a4:8c:32:d8:40:98:9b:6b: e6:f8:43:10:7a:19:0d:c0:5a:19:09:c6:cc:70:b9:da:88:66: 07:cc:2c:dc:00:58:d1:ab:54:a9:5a:3a:b9:d7:df:08:3b:7f: d9:f6:6a:26:86:c0:7a:42:be:7a:21:e8:90:5c:f6:a2:46:34: 15:04:54:30:81:d0:df:59:11:20:82:5f:90:f6:6f:ad:12:25: 7d:0b:b1:9f:ff:55:ad:4d:89:0a:1d:73:99:33:fa:35:9e:35: 86:9a:9e:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl1RFai52kUJ4zdACAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTQ5MzgxYTMtOWM2Zi00N2Q2LTljNTItOWZhMDdkMmJm MTg4MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk NzNlMTc4NjAtNmE0ZS00YWNjLTk2YTUtYzc0ZDYwYWY5MTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2fKgFiWQ0ReJc9FO8GRAjuSwQDEO6UQNd4x qV1mu+kPsTX2w4Lc9yjpWa+n4AXvDCGNojrjvsDEufTGJqkym+KpZpi9/LjLxdUg xxUTrYpCGBOTyeUEIAYgUMW9oPqJrcMhyH+LqAyhOp0RX/Fj8qnsXZzm2P8L8BEF HmadSu/2+kwwd/v+lwe8lmNhQoPDSK1kCOn03xkoa2AMBDoFQk1LOKDXQ9rVnfGG BOu5Bt7ZZQuSsHt5MobHgbvHCZ+xpQPP+TC8jC7qCLkxWyyKvsaF+rq3ep8iuDKe miI9KJmkmYArl0fS+2A0HnUjKtLWykarzCy+SElDUI2PXkGJ3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMtlIrwwRSW2RaRHvSME6d2LHHZYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNDkz ODFhMy05YzZmLTQ3ZDYtOWM1Mi05ZmEwN2QyYmYxODgvY2IyYWJmNjktMWRlNC0z NGYwLTliZGEtNGY2NjIzNTBkYzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTQ5MzgxYTMtOWM2Zi00N2Q2LTlj NTItOWZhMDdkMmJmMTg4L2E0OTM4MWEzLTljNmYtNDdkNi05YzUyLTlmYTA3ZDJi ZjE4OC5jcmwwHwYDVR0jBBgwFoAUYlJh53P6ANsVeqjVvHpystSAfMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNDkzODFhMy05YzZmLTQ3ZDYtOWM1Mi05ZmEw N2QyYmYxODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6nAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF2muP+KUzVsjqWp43bBoHFh0Skaukxqc/wi2g0XhAdi1NPz4JH5 tQNmV6vstbw3ai5TmrqPHdxvtKybwyueK57ipQAfPHhBzTsbb8P7lX8KgskscSfi 3ErrVfA0iSDs2Krz+YAmmyCaASGkMOPQvh18n6CZEu+YfGUhLN4qB8pZ6SS80o/m 917mOfH0fOAY930dGcShm6imymCkjDLYQJiba+b4QxB6GQ3AWhkJxsxwudqIZgfM LNwAWNGrVKlaOrnX3wg7f9n2aiaGwHpCvnoh6JBc9qJGNBUEVDCB0N9ZESCCX5D2 b60SJX0LsZ//Va1NiQodc5kz+jWeNYaantQ= -----END CERTIFICATE-----Generated at Mon Apr 28 01:00:31 2025 by rpki-client