$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/d33aeeb6-baad-3355-9b05-6facf6fac70d.roa File: d33aeeb6-baad-3355-9b05-6facf6fac70d.roa (raw, json) Hash identifier: YsX2GfkIXziVJteJsJ1/wlYtf/4ZQ7Ck0Ck+nEL3fp8= Subject key identifier: 64:D3:E8:9A:B5:37:01:4A:00:70:53:59:53:AC:A9:CA:5A:37:55:2B Certificate issuer: /CN=37e69330-3024-406b-b60a-0d95e25f2334 Certificate serial: 010D0C9F4328584976A996F55C676BEAA5A9A2E0 Authority key identifier: 97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/d33aeeb6-baad-3355-9b05-6facf6fac70d.roa Signing time: Wed 09 Apr 2025 01:00:47 +0000 ROA not before: Wed 09 Apr 2025 01:00:47 +0000 ROA not after: Tue 08 Jul 2025 01:00:47 +0000 asID: 401390 IP address blocks: 2602:f7da:37::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:76:a9:96:f5:5c:67:6b:ea:a5:a9:a2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37e69330-3024-406b-b60a-0d95e25f2334 Validity Not Before: Apr 9 01:00:47 2025 GMT Not After : Jul 8 01:00:47 2025 GMT Subject: CN=5e5b1f53-6a1b-4a89-9237-96760c8272d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:46:59:bb:80:7c:8b:fe:17:cd:7d:f5:7e:7b: ce:42:29:11:fc:3d:50:5b:48:b9:41:59:38:ca:c7: 44:57:bd:61:ff:ca:06:5e:2d:55:0a:a2:37:db:7a: a2:16:9d:a9:44:79:1b:5f:00:79:d2:97:be:87:21: 21:0f:10:1c:50:82:04:f6:a6:9a:20:31:76:c3:5d: dc:a9:8a:fb:49:94:d2:00:cc:f3:58:7f:d8:10:44: 80:ee:fd:00:82:ef:b7:59:81:c7:0d:1c:26:51:58: 24:fa:54:10:20:ed:dd:05:bc:7d:68:5a:17:12:67: 3f:92:f4:53:d8:b6:92:7d:4d:33:20:45:69:de:1f: 10:2d:7f:f9:0c:5c:94:13:9d:69:99:8e:2a:3b:0f: c0:31:50:8d:53:85:ac:8b:86:c6:76:be:c3:0a:49: 31:b1:6f:36:4a:16:1a:49:5c:75:2b:c4:2e:f6:7f: 1e:b1:ab:bf:dd:73:7f:50:fe:cd:cd:9c:aa:f9:d8: 04:42:c5:6e:ac:a9:76:32:9e:86:19:12:67:1a:b4: ba:5c:53:6b:58:0e:43:c7:77:74:d0:d3:4c:11:6f: 88:d8:c4:ee:3b:dd:f3:e0:d2:a2:fe:8c:fd:cf:59: 85:ba:7d:bb:fe:ba:c9:f2:9b:df:e6:9a:fa:52:6f: e0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D3:E8:9A:B5:37:01:4A:00:70:53:59:53:AC:A9:CA:5A:37:55:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/d33aeeb6-baad-3355-9b05-6facf6fac70d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl X509v3 Authority Key Identifier: keyid:97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7da:37::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:c9:84:8a:d8:d8:b5:a5:66:a5:92:4b:c5:1b:4e:15:47:a1: d4:f1:0a:1b:f6:0a:22:76:02:1c:ad:a5:4f:b9:26:88:26:3d: ec:cf:92:1c:88:0a:b5:e1:6f:7e:0f:e2:69:4a:76:bf:cf:28: 32:3b:b6:9a:b9:6a:6c:f6:e8:8b:81:5c:db:35:77:ac:6a:b1: f3:9d:97:0b:fd:4c:42:e5:a1:eb:b0:7a:52:f4:7e:f3:3f:ef: f9:0d:ad:f2:b7:be:bd:d9:4f:3c:b3:be:77:27:f4:63:4d:95: 61:e8:ff:af:56:2f:06:59:55:a7:48:98:c4:c0:03:5e:44:95: d9:31:ec:11:a4:73:f0:1a:c0:d2:d3:9e:fd:21:a8:60:cd:a6: db:32:67:86:22:28:42:a4:da:38:e2:74:b9:ea:72:7d:7f:94: f3:6b:0d:70:bb:df:98:17:2e:4f:ba:04:02:c8:9d:1d:24:e3: f3:a2:89:7c:e5:7b:fc:9d:12:ce:57:d2:73:21:fd:6a:7e:f7: f4:fb:6e:c1:d8:ae:b4:99:fb:8d:88:12:58:3a:9d:12:e0:ca: e5:be:d3:6f:9e:87:af:01:06:50:c2:d5:ab:f0:42:a9:bc:57: 78:b1:fa:82:7b:2b:5b:9c:b8:f1:70:5a:71:62:ba:5e:93:fd: a6:51:cb:cc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl2qZb1XGdr6qWpouAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzdlNjkzMzAtMzAyNC00MDZiLWI2MGEtMGQ5NWUyNWYy MzM0MB4XDTI1MDQwOTAxMDA0N1oXDTI1MDcwODAxMDA0N1owLzEtMCsGA1UEAxMk NWU1YjFmNTMtNmExYi00YTg5LTkyMzctOTY3NjBjODI3MmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEZZu4B8i/4XzX31fnvOQikR/D1QW0i5QVk4 ysdEV71h/8oGXi1VCqI323qiFp2pRHkbXwB50pe+hyEhDxAcUIIE9qaaIDF2w13c qYr7SZTSAMzzWH/YEESA7v0Agu+3WYHHDRwmUVgk+lQQIO3dBbx9aFoXEmc/kvRT 2LaSfU0zIEVp3h8QLX/5DFyUE51pmY4qOw/AMVCNU4Wsi4bGdr7DCkkxsW82ShYa SVx1K8Qu9n8esau/3XN/UP7NzZyq+dgEQsVurKl2Mp6GGRJnGrS6XFNrWA5Dx3d0 0NNMEW+I2MTuO93z4NKi/oz9z1mFun27/rrJ8pvf5pr6Um/gawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGTT6Jq1NwFKAHBTWVOsqcpaN1UrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zN2U2 OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1ZTI1ZjIzMzQvZDMzYWVlYjYtYmFhZC0z MzU1LTliMDUtNmZhY2Y2ZmFjNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzdlNjkzMzAtMzAyNC00MDZiLWI2 MGEtMGQ5NWUyNWYyMzM0LzM3ZTY5MzMwLTMwMjQtNDA2Yi1iNjBhLTBkOTVlMjVm MjMzNC5jcmwwHwYDVR0jBBgwFoAUlxapq2aVPz8sQPwdM2OFp0XUZTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zN2U2OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1 ZTI1ZjIzMzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL32gA3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACPJhIrY2LWlZqWSS8UbThVHodTxChv2CiJ2AhytpU+5JogmPezP khyICrXhb34P4mlKdr/PKDI7tpq5amz26IuBXNs1d6xqsfOdlwv9TELloeuwelL0 fvM/7/kNrfK3vr3ZTzyzvncn9GNNlWHo/69WLwZZVadImMTAA15Eldkx7BGkc/Aa wNLTnv0hqGDNptsyZ4YiKEKk2jjidLnqcn1/lPNrDXC735gXLk+6BALInR0k4/Oi iXzle/ydEs5X0nMh/Wp+9/T7bsHYrrSZ+42IElg6nRLgyuW+02+eh68BBlDC1avw Qqm8V3ix+oJ7K1ucuPFwWnFiul6T/aZRy8w= -----END CERTIFICATE-----Generated at Sun Apr 27 20:20:43 2025 by rpki-client