$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1b83cec9-d72a-399f-8798-eca9e3a6ba3b.roa File: 1b83cec9-d72a-399f-8798-eca9e3a6ba3b.roa (raw, json) Hash identifier: MPLQS1XOxaLxry0h0HTro2ok2wdCrtkQImEWUIWa8ME= Subject key identifier: 23:2A:E2:2F:93:E4:93:48:1C:E6:14:E9:9A:39:8D:37:8F:4A:66:7C Certificate issuer: /CN=1a767fb3-0911-435a-a3a4-189b82622157 Certificate serial: 010D0C9F43285849D85FA375D879F165B417A3C0 Authority key identifier: 31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1b83cec9-d72a-399f-8798-eca9e3a6ba3b.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 400919 IP address blocks: 2602:817:2000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:a3:75:d8:79:f1:65:b4:17:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a767fb3-0911-435a-a3a4-189b82622157 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=0fbccc71-6827-4a66-a591-268faa3a53e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3a:d8:10:35:1d:85:39:f2:d6:3e:f4:85:bd: d9:e1:ea:57:ab:1d:d6:70:f2:cb:91:6d:00:20:db: 26:df:b9:be:45:61:ad:2e:2d:3e:79:05:f3:fb:52: b7:ba:6f:18:9e:11:f2:02:ee:53:1f:ba:9c:a3:e6: ee:94:48:3b:53:b5:30:fe:e2:c1:90:a3:b3:52:f7: 86:62:3b:af:ca:d9:14:16:e2:e6:f0:b3:ee:18:45: 3b:76:40:cf:db:f5:f9:90:07:de:de:08:5f:24:ea: ad:46:d6:44:e1:14:b8:4b:bd:36:f9:40:cf:6b:d4: b3:44:89:c4:d9:ab:f1:fd:6d:cf:35:f2:ac:c0:b8: 4d:34:ce:82:b8:78:5e:35:c0:fc:2f:4e:01:8c:3a: a2:a0:45:b7:b0:26:43:a9:6e:40:06:ad:ee:26:6b: 92:07:a7:3d:61:b7:d9:c2:e4:e0:6a:7d:e7:d4:5e: 6e:02:f6:fb:8d:ea:37:52:84:52:ae:06:fa:57:32: 35:59:65:ab:c6:a3:b6:5e:b3:56:99:b8:3e:69:99: 3c:c4:da:cd:50:ab:85:a7:0a:49:d5:aa:14:2c:0c: 3f:9a:9a:0d:71:b4:f3:05:c5:09:f9:84:8b:f3:23: 5b:25:95:14:06:26:e9:30:e2:1c:99:81:67:71:90: 16:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2A:E2:2F:93:E4:93:48:1C:E6:14:E9:9A:39:8D:37:8F:4A:66:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1b83cec9-d72a-399f-8798-eca9e3a6ba3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl X509v3 Authority Key Identifier: keyid:31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer sbgp-ipAddrBlock: critical IPv6: 2602:817:2000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:49:f9:86:75:63:c6:4e:22:92:c9:65:16:ff:81:03:12:96: 45:6d:7d:18:7d:f8:a1:43:ae:f2:e8:97:f0:71:92:49:12:94: dd:00:cc:c6:05:7e:db:4c:82:d1:27:76:90:2a:b8:2f:63:b3: 41:f0:9d:06:07:98:59:97:1d:0f:82:68:47:3a:ac:e1:83:59: 8f:60:ec:a1:fb:ae:ea:90:2b:fc:d7:33:5d:5d:12:be:75:6f: 2b:86:26:63:34:bf:5d:2c:40:01:24:61:87:c3:dd:67:10:b4: 67:67:c1:50:71:71:9f:31:4b:77:38:e6:f9:44:7b:7b:8e:57: ea:0b:4d:c6:3f:67:3e:43:c5:ca:b4:ff:49:ac:91:0f:f3:a4: 16:d4:5e:b1:af:37:6f:8e:71:ea:47:20:05:b9:74:dd:df:82: ad:20:dd:7e:99:a2:4e:78:f6:86:a7:70:7c:5f:0d:a4:6f:a8: 81:8e:ed:6a:77:2d:5f:ce:b2:6d:1b:1b:71:76:fd:4e:00:d0: 76:83:41:40:8f:dd:23:cb:8f:49:00:23:f5:a1:d5:bb:a4:f2: 60:3a:4a:35:bf:88:59:ed:94:98:88:8f:fe:29:ba:fb:6a:2e: 14:2d:2e:92:b1:3c:27:a3:28:c8:35:05:09:4f:70:18:d7:51: b6:21:49:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX6N12HnxZbQXo8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3NjdmYjMtMDkxMS00MzVhLWEzYTQtMTg5YjgyNjIy MTU3MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MGZiY2NjNzEtNjgyNy00YTY2LWE1OTEtMjY4ZmFhM2E1M2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDrYEDUdhTny1j70hb3Z4epXqx3WcPLLkW0A INsm37m+RWGtLi0+eQXz+1K3um8YnhHyAu5TH7qco+bulEg7U7Uw/uLBkKOzUveG YjuvytkUFuLm8LPuGEU7dkDP2/X5kAfe3ghfJOqtRtZE4RS4S702+UDPa9SzRInE 2avx/W3PNfKswLhNNM6CuHheNcD8L04BjDqioEW3sCZDqW5ABq3uJmuSB6c9YbfZ wuTgan3n1F5uAvb7jeo3UoRSrgb6VzI1WWWrxqO2XrNWmbg+aZk8xNrNUKuFpwpJ 1aoULAw/mpoNcbTzBcUJ+YSL8yNbJZUUBibpMOIcmYFncZAW9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCMq4i+T5JNIHOYU6Zo5jTePSmZ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xYTc2 N2ZiMy0wOTExLTQzNWEtYTNhNC0xODliODI2MjIxNTcvMWI4M2NlYzktZDcyYS0z OTlmLTg3OTgtZWNhOWUzYTZiYTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWE3NjdmYjMtMDkxMS00MzVhLWEz YTQtMTg5YjgyNjIyMTU3LzFhNzY3ZmIzLTA5MTEtNDM1YS1hM2E0LTE4OWI4MjYy MjE1Ny5jcmwwHwYDVR0jBBgwFoAUMZd8fKTs1HliGSxrDAQkrzTVdKEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xYTc2N2ZiMy0wOTExLTQzNWEtYTNhNC0xODli ODI2MjIxNTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIFyAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFpJ+YZ1Y8ZOIpLJZRb/gQMSlkVtfRh9+KFDrvLol/BxkkkSlN0A zMYFfttMgtEndpAquC9js0HwnQYHmFmXHQ+CaEc6rOGDWY9g7KH7ruqQK/zXM11d Er51byuGJmM0v10sQAEkYYfD3WcQtGdnwVBxcZ8xS3c45vlEe3uOV+oLTcY/Zz5D xcq0/0mskQ/zpBbUXrGvN2+OcepHIAW5dN3fgq0g3X6Zok549oancHxfDaRvqIGO 7Wp3LV/Osm0bG3F2/U4A0HaDQUCP3SPLj0kAI/Wh1buk8mA6SjW/iFntlJiIj/4p uvtqLhQtLpKxPCejKMg1BQlPcBjXUbYhSRk= -----END CERTIFICATE-----Generated at Mon Jun 16 15:54:29 2025 by rpki-client