$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/c82d7afd-fc6b-3f4d-b7de-b373b5f81778.roa File: c82d7afd-fc6b-3f4d-b7de-b373b5f81778.roa (raw, json) Hash identifier: 3upylJ5MAg/HLJZ6SEhEN+hqaMxh4biA5tWD6RGOWO0= Subject key identifier: 10:AC:58:3C:CD:70:61:A1:FC:AD:CB:A1:0B:48:63:8D:8B:ED:AE:AD Certificate issuer: /CN=37e69330-3024-406b-b60a-0d95e25f2334 Certificate serial: 010D0C9F4328584976A99728568E988AFDE6BE40 Authority key identifier: 97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/c82d7afd-fc6b-3f4d-b7de-b373b5f81778.roa Signing time: Wed 09 Apr 2025 01:00:47 +0000 ROA not before: Wed 09 Apr 2025 01:00:47 +0000 ROA not after: Tue 08 Jul 2025 01:00:47 +0000 asID: 401390 IP address blocks: 2602:f7da:3a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:76:a9:97:28:56:8e:98:8a:fd:e6:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37e69330-3024-406b-b60a-0d95e25f2334 Validity Not Before: Apr 9 01:00:47 2025 GMT Not After : Jul 8 01:00:47 2025 GMT Subject: CN=81d5342f-e22e-44c2-8279-5b22195ed1cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:26:b0:be:47:2c:1a:0a:7f:22:03:71:4d:44: 69:2e:31:b9:f6:4c:df:8f:83:fd:3e:a3:7b:fb:a4: 1d:36:f1:e1:08:63:a0:a3:6d:41:fb:41:36:68:f4: b6:ac:a7:ed:1d:68:3d:9b:81:bd:07:89:b8:14:ce: 37:af:fd:6a:d4:2a:89:3b:57:c3:4c:76:8a:5d:58: ce:e9:bb:a8:7a:0a:37:c3:a7:8b:f1:da:c3:03:05: df:a7:1b:78:f5:63:1e:44:e0:e0:69:91:d9:a8:43: 17:22:78:59:34:5a:dc:ef:34:f9:ee:30:f6:bc:28: da:d2:59:3d:2d:db:f6:f0:00:ed:c8:ab:d8:69:86: 25:d5:35:a2:13:36:0d:b6:1d:3f:78:c1:46:65:58: 16:9a:55:22:10:f9:aa:1b:10:ce:21:b1:75:84:71: d9:05:28:66:43:db:da:09:ad:f4:31:a0:0f:75:66: f1:8c:d4:80:af:88:0a:05:6d:ac:67:d3:f8:d3:02: 5a:35:4e:49:97:6c:d8:5f:95:9b:a9:56:49:48:16: 0b:39:46:44:27:f4:3c:09:00:c8:6d:5b:18:cd:a6: 85:37:ce:ad:d0:a7:f0:0f:66:e8:bd:98:d2:b7:d1: bb:e7:50:2e:a0:02:4f:13:4c:e7:d9:b8:80:06:65: 99:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AC:58:3C:CD:70:61:A1:FC:AD:CB:A1:0B:48:63:8D:8B:ED:AE:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/c82d7afd-fc6b-3f4d-b7de-b373b5f81778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl X509v3 Authority Key Identifier: keyid:97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7da:3a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:87:1c:76:02:3f:f5:7f:4c:4e:06:b4:f9:77:f4:12:50:1d: 3f:39:5a:fc:0d:ae:b6:52:df:91:a5:cf:21:c1:ed:90:54:e3: 0f:db:69:c9:c5:c1:ea:3f:86:03:55:af:c7:b0:bb:90:7e:a9: ec:cb:7d:c9:c1:ea:77:3e:da:ed:2d:15:38:f4:d6:d3:b7:f1: 43:60:89:5b:f6:d1:4a:d1:4b:bb:67:c8:a2:9f:16:c0:fd:a6: a3:a0:96:09:3c:ee:31:24:12:5c:ae:3c:c8:da:99:28:3a:97: 42:da:a5:af:eb:f0:ac:bb:01:77:ac:ab:d9:45:2b:ae:1f:fb: 1b:cc:b7:e6:6d:eb:52:a3:43:8a:c2:36:e7:3d:ac:5d:d2:8c: ab:e6:2d:78:b8:4c:60:05:4c:43:c1:c6:d0:f2:14:1a:6b:32: 38:40:e7:bb:30:33:d5:a9:9d:74:82:d6:72:b7:ff:ad:7d:d0: 4a:73:fc:e6:73:04:c9:76:ea:8d:eb:68:c4:48:82:bd:70:8f: 91:9e:8a:14:85:84:02:46:81:67:cd:76:83:17:8d:ce:1a:52: 33:20:2e:45:62:b7:df:e1:ce:67:6e:9c:2b:50:b5:76:a4:11: ec:84:06:40:35:33:bf:8e:34:0c:dc:23:8a:4a:e5:68:3d:dc: c2:1b:92:f3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl2qZcoVo6Yiv3mvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzdlNjkzMzAtMzAyNC00MDZiLWI2MGEtMGQ5NWUyNWYy MzM0MB4XDTI1MDQwOTAxMDA0N1oXDTI1MDcwODAxMDA0N1owLzEtMCsGA1UEAxMk ODFkNTM0MmYtZTIyZS00NGMyLTgyNzktNWIyMjE5NWVkMWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliawvkcsGgp/IgNxTURpLjG59kzfj4P9PqN7 +6QdNvHhCGOgo21B+0E2aPS2rKftHWg9m4G9B4m4FM43r/1q1CqJO1fDTHaKXVjO 6buoego3w6eL8drDAwXfpxt49WMeRODgaZHZqEMXInhZNFrc7zT57jD2vCja0lk9 Ldv28ADtyKvYaYYl1TWiEzYNth0/eMFGZVgWmlUiEPmqGxDOIbF1hHHZBShmQ9va Ca30MaAPdWbxjNSAr4gKBW2sZ9P40wJaNU5Jl2zYX5WbqVZJSBYLOUZEJ/Q8CQDI bVsYzaaFN86t0KfwD2bovZjSt9G751AuoAJPE0zn2biABmWZdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBCsWDzNcGGh/K3LoQtIY42L7a6tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zN2U2 OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1ZTI1ZjIzMzQvYzgyZDdhZmQtZmM2Yi0z ZjRkLWI3ZGUtYjM3M2I1ZjgxNzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzdlNjkzMzAtMzAyNC00MDZiLWI2 MGEtMGQ5NWUyNWYyMzM0LzM3ZTY5MzMwLTMwMjQtNDA2Yi1iNjBhLTBkOTVlMjVm MjMzNC5jcmwwHwYDVR0jBBgwFoAUlxapq2aVPz8sQPwdM2OFp0XUZTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zN2U2OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1 ZTI1ZjIzMzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL32gA6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACGHHHYCP/V/TE4GtPl39BJQHT85WvwNrrZS35GlzyHB7ZBU4w/b acnFweo/hgNVr8ewu5B+qezLfcnB6nc+2u0tFTj01tO38UNgiVv20UrRS7tnyKKf FsD9pqOglgk87jEkElyuPMjamSg6l0Lapa/r8Ky7AXesq9lFK64f+xvMt+Zt61Kj Q4rCNuc9rF3SjKvmLXi4TGAFTEPBxtDyFBprMjhA57swM9WpnXSC1nK3/6190Epz /OZzBMl26o3raMRIgr1wj5GeihSFhAJGgWfNdoMXjc4aUjMgLkVit9/hzmdunCtQ tXakEeyEBkA1M7+ONAzcI4pK5Wg93MIbkvM= -----END CERTIFICATE-----Generated at Sun Apr 27 22:09:08 2025 by rpki-client