$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/bce8f85b-086e-35bb-8b91-c3436eb6d2cd.roa File: bce8f85b-086e-35bb-8b91-c3436eb6d2cd.roa (raw, json) Hash identifier: 71f2Ax+93PwYI9UuAiil74F0NPIsc+HEZQbb3U03jKE= Subject key identifier: EE:4B:85:70:50:9F:1C:2E:B8:7C:2F:5A:B8:11:44:9A:58:0B:56:A3 Certificate issuer: /CN=37e69330-3024-406b-b60a-0d95e25f2334 Certificate serial: 010D0C9F4328584976A997754C7AA36769DC2400 Authority key identifier: 97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/bce8f85b-086e-35bb-8b91-c3436eb6d2cd.roa Signing time: Wed 09 Apr 2025 01:00:47 +0000 ROA not before: Wed 09 Apr 2025 01:00:47 +0000 ROA not after: Tue 08 Jul 2025 01:00:47 +0000 asID: 401390 IP address blocks: 2602:f7da:3f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:76:a9:97:75:4c:7a:a3:67:69:dc:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37e69330-3024-406b-b60a-0d95e25f2334 Validity Not Before: Apr 9 01:00:47 2025 GMT Not After : Jul 8 01:00:47 2025 GMT Subject: CN=79e9ce41-d030-405a-97b5-3784017d6a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c1:44:b3:35:03:56:7a:6c:df:4e:5c:dd:47: 46:f8:7a:4e:9e:1b:1f:df:fd:a4:d3:0d:9f:2d:f5: 1c:bb:00:20:bd:f0:a2:13:53:7f:1a:c5:78:63:bc: dd:c2:81:09:1c:73:c0:62:75:27:c0:ba:bb:8a:d5: 66:56:bc:5f:54:eb:92:3f:14:7e:cf:77:2e:a5:53: bc:e5:d1:e2:e2:02:81:60:2d:50:1e:6e:a6:c1:99: e5:49:d9:f9:19:4a:b6:68:6c:aa:ba:95:7a:d9:1f: 70:96:d3:56:33:20:40:45:2e:56:f0:a5:49:5a:b3: 10:a5:b8:b2:76:80:e0:d6:7c:c0:d4:e1:b2:22:d6: ae:8f:e6:1d:f1:fb:c5:1f:98:1c:a8:71:9b:e1:64: 34:40:b9:05:7d:6c:24:b2:16:97:a7:ca:ae:60:6b: 7c:b5:4a:68:ed:5c:5c:a7:47:dc:b1:7a:d6:ee:5c: df:7d:96:77:6c:fd:5a:d0:59:f9:ae:7a:06:26:f1: 14:18:0e:90:7e:6f:15:ca:41:a2:4d:e5:07:c3:20: 62:33:06:d4:5d:41:7f:40:f5:90:48:8c:56:94:9b: 0d:51:83:28:c8:d7:10:00:d0:bd:bd:5a:5a:0e:c8: db:80:8a:0f:56:85:77:af:ce:19:4b:c2:77:46:c2: 28:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4B:85:70:50:9F:1C:2E:B8:7C:2F:5A:B8:11:44:9A:58:0B:56:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/bce8f85b-086e-35bb-8b91-c3436eb6d2cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl X509v3 Authority Key Identifier: keyid:97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7da:3f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ed:e7:80:52:6c:9e:d6:27:3f:14:dd:00:ba:b2:1c:96:d1: 7a:1b:f3:3a:8b:69:bf:9d:d8:91:ab:5b:5d:c5:db:cc:49:77: 9e:95:b3:af:9c:84:db:c0:96:46:27:bc:67:09:80:63:69:8c: d1:5f:86:07:e4:78:0f:1d:0d:eb:72:1c:53:95:bf:8a:d9:4e: aa:ca:02:03:01:5f:9b:f8:bd:d1:b9:28:8a:26:dd:f2:08:d0: e6:88:0f:6e:a7:77:35:9d:ca:3e:e9:05:9e:88:1d:f4:78:3f: f1:aa:67:b1:5f:36:08:3e:fc:0a:3f:6e:41:14:13:c8:d1:5a: 34:7e:7c:9f:a4:e2:01:14:1c:66:04:7c:4f:7b:73:0a:57:89: b3:cd:71:9e:a4:38:52:0a:35:65:42:b1:c9:61:11:57:0d:46: 0e:55:1e:21:53:80:c7:ca:53:36:0e:8d:0b:8a:4d:96:d5:ef: ed:be:f8:dc:14:3f:0a:7b:e1:aa:4f:bf:ff:aa:f7:71:ac:b4: 38:86:d0:f7:c9:6d:37:b0:c8:f1:10:83:3a:6d:0f:39:49:c5: b1:62:47:ab:b3:e7:5a:ee:fa:fe:cb:ce:95:65:7e:f3:9a:ec: 99:d0:3b:79:dc:ef:7c:fa:d1:28:21:b1:f5:6b:21:c4:6b:78: 06:e0:d4:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl2qZd1THqjZ2ncJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzdlNjkzMzAtMzAyNC00MDZiLWI2MGEtMGQ5NWUyNWYy MzM0MB4XDTI1MDQwOTAxMDA0N1oXDTI1MDcwODAxMDA0N1owLzEtMCsGA1UEAxMk NzllOWNlNDEtZDAzMC00MDVhLTk3YjUtMzc4NDAxN2Q2YTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksFEszUDVnps305c3UdG+HpOnhsf3/2k0w2f LfUcuwAgvfCiE1N/GsV4Y7zdwoEJHHPAYnUnwLq7itVmVrxfVOuSPxR+z3cupVO8 5dHi4gKBYC1QHm6mwZnlSdn5GUq2aGyqupV62R9wltNWMyBARS5W8KVJWrMQpbiy doDg1nzA1OGyItauj+Yd8fvFH5gcqHGb4WQ0QLkFfWwkshaXp8quYGt8tUpo7Vxc p0fcsXrW7lzffZZ3bP1a0Fn5rnoGJvEUGA6Qfm8VykGiTeUHwyBiMwbUXUF/QPWQ SIxWlJsNUYMoyNcQANC9vVpaDsjbgIoPVoV3r84ZS8J3RsIoDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO5LhXBQnxwuuHwvWrgRRJpYC1ajMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zN2U2 OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1ZTI1ZjIzMzQvYmNlOGY4NWItMDg2ZS0z NWJiLThiOTEtYzM0MzZlYjZkMmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzdlNjkzMzAtMzAyNC00MDZiLWI2 MGEtMGQ5NWUyNWYyMzM0LzM3ZTY5MzMwLTMwMjQtNDA2Yi1iNjBhLTBkOTVlMjVm MjMzNC5jcmwwHwYDVR0jBBgwFoAUlxapq2aVPz8sQPwdM2OFp0XUZTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zN2U2OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1 ZTI1ZjIzMzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL32gA/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABPt54BSbJ7WJz8U3QC6shyW0Xob8zqLab+d2JGrW13F28xJd56V s6+chNvAlkYnvGcJgGNpjNFfhgfkeA8dDetyHFOVv4rZTqrKAgMBX5v4vdG5KIom 3fII0OaID26ndzWdyj7pBZ6IHfR4P/GqZ7FfNgg+/Ao/bkEUE8jRWjR+fJ+k4gEU HGYEfE97cwpXibPNcZ6kOFIKNWVCsclhEVcNRg5VHiFTgMfKUzYOjQuKTZbV7+2+ +NwUPwp74apPv/+q93GstDiG0PfJbTewyPEQgzptDzlJxbFiR6uz51ru+v7LzpVl fvOa7JnQO3nc73z60SghsfVrIcRreAbg1JE= -----END CERTIFICATE-----Generated at Mon Apr 28 19:59:34 2025 by rpki-client