$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0e57893c-23f0-42fb-8b16-9b33b844849b/301d0ddd-b598-3a34-bb36-de7a9c96ee68.roa File: 301d0ddd-b598-3a34-bb36-de7a9c96ee68.roa (raw, json) Hash identifier: RPZZjyvYxZJrSqd5C8fkNBKRSOK5Yrub3ZHESdp7WjU= Subject key identifier: BC:C6:F7:75:70:6F:93:6F:2E:C6:68:8D:5F:86:E8:51:6A:80:8F:E9 Certificate issuer: /CN=0e57893c-23f0-42fb-8b16-9b33b844849b Certificate serial: 010D0C9F43285849AD1A0FF22F35770919A98780 Authority key identifier: 63:A8:3E:52:7D:F3:82:0D:3C:FF:6B:BB:10:BD:E6:4A:36:3A:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0e57893c-23f0-42fb-8b16-9b33b844849b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0e57893c-23f0-42fb-8b16-9b33b844849b/301d0ddd-b598-3a34-bb36-de7a9c96ee68.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 398858 IP address blocks: 2602:f98f::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0e57893c-23f0-42fb-8b16-9b33b844849b/0e57893c-23f0-42fb-8b16-9b33b844849b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0e57893c-23f0-42fb-8b16-9b33b844849b/0e57893c-23f0-42fb-8b16-9b33b844849b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0e57893c-23f0-42fb-8b16-9b33b844849b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:0f:f2:2f:35:77:09:19:a9:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e57893c-23f0-42fb-8b16-9b33b844849b Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=d4b373bd-ee9f-4a47-9628-4f0b713c0106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e9:d6:ed:13:e2:38:49:f8:dd:2f:3d:4c:72: 56:77:90:f6:83:75:f1:66:57:e4:78:1b:05:c9:36: f3:08:10:11:4e:c1:5e:64:ff:89:aa:f1:fd:bd:33: 94:fd:97:8d:2f:37:5e:6f:ec:b9:76:9a:d5:b4:fe: 70:5b:bb:90:40:d1:ad:90:31:14:ae:3f:39:a4:86: 47:5a:8b:33:bb:5d:30:8a:e9:cb:f2:0a:5c:44:1a: 40:7b:2e:e8:43:54:4a:37:03:9c:2a:92:e1:55:f9: 2b:20:00:11:53:2a:bd:c0:ac:c1:b8:bc:63:84:05: c3:54:2d:48:4f:78:ef:7e:b0:65:c6:d1:77:c9:27: c1:11:72:83:8b:cc:bc:fd:c3:06:9c:5e:56:44:01: 6c:b0:43:62:a6:26:4b:91:f3:20:16:3e:83:c9:91: a3:94:75:f1:fe:f2:52:b6:b3:4f:34:d7:b3:da:2d: 70:54:e2:e6:07:c8:3c:b7:12:03:2c:7c:90:dd:04: 1e:d9:89:c0:7a:1b:6f:56:f9:99:94:ed:f5:14:78: 3b:13:0f:1d:b5:72:f2:77:37:c3:36:ae:7c:51:67: 7a:e5:49:5c:7d:1e:d0:e2:99:a6:7a:23:a6:67:81: 58:4f:1a:06:01:ff:11:16:35:a2:c2:57:26:e3:79: e2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C6:F7:75:70:6F:93:6F:2E:C6:68:8D:5F:86:E8:51:6A:80:8F:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0e57893c-23f0-42fb-8b16-9b33b844849b/301d0ddd-b598-3a34-bb36-de7a9c96ee68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0e57893c-23f0-42fb-8b16-9b33b844849b/0e57893c-23f0-42fb-8b16-9b33b844849b.crl X509v3 Authority Key Identifier: keyid:63:A8:3E:52:7D:F3:82:0D:3C:FF:6B:BB:10:BD:E6:4A:36:3A:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0e57893c-23f0-42fb-8b16-9b33b844849b.cer sbgp-ipAddrBlock: critical IPv6: 2602:f98f::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:88:ae:1c:87:79:60:da:9a:ba:f5:f9:2f:64:9e:c0:1d:ed: 8f:36:8c:9b:4b:b9:11:e8:e0:8e:ec:40:d8:57:90:75:35:66: a4:1b:21:7a:48:9c:9a:c6:26:18:b8:d0:15:6f:1c:35:58:9c: 68:3a:f7:ae:58:ae:f0:85:b4:8d:7b:fc:fc:17:63:f7:fc:d0: 97:7b:38:55:46:e8:2d:0f:1c:c1:24:49:87:f9:1d:f0:7e:af: 8a:3b:65:03:72:0e:64:a7:b5:e8:35:eb:b8:9c:df:7a:2a:d2: 64:b3:41:aa:3c:bd:1d:08:70:ec:ff:63:6f:49:1c:60:81:15: 87:c2:a8:5f:71:45:74:17:da:93:c6:ab:7b:67:58:94:ee:a3: 1d:e0:4b:70:94:c0:18:87:29:8b:43:de:d0:b9:01:27:68:48: 8f:26:87:8c:e5:3d:f0:24:31:db:73:d0:15:93:ac:71:79:d3: 61:5e:39:d3:b5:a8:28:0a:aa:72:7f:23:e8:82:47:ba:fa:74: 57:f3:c2:f1:8f:d2:7e:ec:8d:26:33:e2:7d:25:d9:b6:49:6a: e4:a2:ca:eb:97:a5:82:d1:1b:48:1c:40:08:26:51:dc:57:2a: c8:23:1a:56:06:d7:c4:d5:8b:4c:ea:82:18:aa:68:03:fa:9a: 94:70:66:67 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmtGg/yLzV3CRmph4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGU1Nzg5M2MtMjNmMC00MmZiLThiMTYtOWIzM2I4NDQ4 NDliMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk ZDRiMzczYmQtZWU5Zi00YTQ3LTk2MjgtNGYwYjcxM2MwMTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOnW7RPiOEn43S89THJWd5D2g3XxZlfkeBsF yTbzCBARTsFeZP+JqvH9vTOU/ZeNLzdeb+y5dprVtP5wW7uQQNGtkDEUrj85pIZH Woszu10wiunL8gpcRBpAey7oQ1RKNwOcKpLhVfkrIAARUyq9wKzBuLxjhAXDVC1I T3jvfrBlxtF3ySfBEXKDi8y8/cMGnF5WRAFssENipiZLkfMgFj6DyZGjlHXx/vJS trNPNNez2i1wVOLmB8g8txIDLHyQ3QQe2YnAehtvVvmZlO31FHg7Ew8dtXLydzfD Nq58UWd65UlcfR7Q4pmmeiOmZ4FYTxoGAf8RFjWiwlcm43ni8wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLzG93Vwb5NvLsZojV+G6FFqgI/pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wZTU3 ODkzYy0yM2YwLTQyZmItOGIxNi05YjMzYjg0NDg0OWIvMzAxZDBkZGQtYjU5OC0z YTM0LWJiMzYtZGU3YTljOTZlZTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMGU1Nzg5M2MtMjNmMC00MmZiLThi MTYtOWIzM2I4NDQ4NDliLzBlNTc4OTNjLTIzZjAtNDJmYi04YjE2LTliMzNiODQ0 ODQ5Yi5jcmwwHwYDVR0jBBgwFoAUY6g+Un3zgg08/2u7EL3mSjY6ID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wZTU3ODkzYy0yM2YwLTQyZmItOGIxNi05YjMz Yjg0NDg0OWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5jwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAW4iuHId5YNqauvX5L2SewB3tjzaMm0u5EejgjuxA2FeQdTVmpBsh ekicmsYmGLjQFW8cNVicaDr3rliu8IW0jXv8/Bdj9/zQl3s4VUboLQ8cwSRJh/kd 8H6vijtlA3IOZKe16DXruJzfeirSZLNBqjy9HQhw7P9jb0kcYIEVh8KoX3FFdBfa k8are2dYlO6jHeBLcJTAGIcpi0Pe0LkBJ2hIjyaHjOU98CQx23PQFZOscXnTYV45 07WoKAqqcn8j6IJHuvp0V/PC8Y/SfuyNJjPifSXZtklq5KLK65elgtEbSBxACCZR 3FcqyCMaVgbXxNWLTOqCGKpoA/qalHBmZw== -----END CERTIFICATE-----Generated at Tue Apr 29 09:20:39 2025 by rpki-client