$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/6c1c0587-f233-3a11-b157-ddc3c62d241f.roa File: 6c1c0587-f233-3a11-b157-ddc3c62d241f.roa (raw, json) Hash identifier: l8tvUH4vvbG021U4KsiZPkd9JGvqTP1JqNYqgnyUC40= Subject key identifier: 93:ED:CA:F8:F5:87:09:86:46:66:25:FD:71:40:1A:15:3B:0D:C7:56 Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F43285849203C13AFF3F688E685BA3700 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/6c1c0587-f233-3a11-b157-ddc3c62d241f.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 32764 IP address blocks: 2602:f98b:30::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:13:af:f3:f6:88:e6:85:ba:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=99c701a7-3a33-4195-b93c-806eb14098ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2e:a4:78:f6:2d:52:e2:62:40:7d:bf:51:81: 4f:bf:b3:50:00:ad:f8:9b:45:9f:19:a0:cf:91:a6: 32:4c:d0:6a:87:e3:8e:25:bf:8b:8b:23:fb:63:ed: 08:96:ab:0f:ba:a0:fb:c6:bc:d5:bc:e4:45:0d:8e: 0c:60:62:1d:e0:23:d9:a8:71:ed:9e:55:8e:c8:c6: ad:0b:38:dd:be:56:6d:77:72:12:fc:ef:14:25:59: 2d:f5:4b:c0:5a:a6:5a:c4:79:e5:24:db:84:f4:5c: 32:85:a8:08:13:48:22:30:a3:d8:da:09:18:3b:92: f1:f1:ba:4c:79:58:73:51:10:16:48:65:a5:fd:de: 9f:dd:48:49:bd:8d:8f:32:0e:d2:62:00:eb:ad:90: b5:42:4b:b9:00:09:87:3d:e9:46:64:fc:52:f2:7b: 35:62:ea:27:66:f4:0a:86:5b:16:b4:a6:2f:bb:45: 4c:2f:f0:ce:61:6f:ec:bf:75:a5:62:dd:a9:af:22: a0:c9:bf:b3:f0:70:3a:49:65:d3:db:4c:d0:8c:c8: 8b:56:5c:1c:e8:79:6e:e3:32:33:f5:34:14:6b:26: 9b:74:ca:67:40:ee:9c:32:90:33:79:99:6d:87:86: 02:b6:12:a0:33:fd:88:dc:25:46:f9:da:13:72:b8: 77:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:ED:CA:F8:F5:87:09:86:46:66:25:FD:71:40:1A:15:3B:0D:C7:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/6c1c0587-f233-3a11-b157-ddc3c62d241f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv6: 2602:f98b:30::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:54:d4:61:b8:c9:5b:19:a8:b1:7e:56:b9:06:07:5c:b8:13: 09:23:66:27:74:e9:a3:7c:c9:97:04:91:6c:b8:b7:fe:56:fd: 83:a4:56:89:ab:8a:2b:a0:1f:9d:6e:5a:fb:ca:8f:0a:80:d4: e6:bc:89:23:a5:77:38:21:dd:93:36:72:2b:7e:c1:34:d9:b3: 1c:51:c8:0c:e1:c8:70:ba:65:d7:8d:c2:dc:35:66:a4:18:0f: 4c:38:b6:74:02:13:68:48:55:57:32:5a:d4:ac:e8:52:dd:66: 7f:77:71:0e:12:fe:26:7a:cb:8f:26:b8:dd:d0:73:de:3a:ea: 41:1e:21:e0:17:db:5b:90:35:25:fa:b5:37:d1:99:0e:c9:71: 45:11:20:06:63:4d:aa:eb:f0:b1:22:b5:7a:fb:8e:da:67:53: 55:62:da:16:86:ad:8f:6d:64:c6:18:87:e9:21:d1:b2:8d:f5: c3:4f:3e:02:36:89:d0:36:a8:99:5c:4e:38:9c:72:fc:07:42: b2:c4:14:9a:00:22:b5:09:ac:e9:92:3d:de:6e:2c:04:61:ab: bb:18:4f:e6:31:ab:d7:12:b4:98:f2:4c:e5:98:27:e3:dd:71: 72:9e:49:02:d3:21:04:3f:1c:10:60:3a:9d:6e:2e:c1:95:9d: a8:c9:cb:fa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkgPBOv8/aI5oW6NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk OTljNzAxYTctM2EzMy00MTk1LWI5M2MtODA2ZWIxNDA5OGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy6kePYtUuJiQH2/UYFPv7NQAK34m0WfGaDP kaYyTNBqh+OOJb+LiyP7Y+0IlqsPuqD7xrzVvORFDY4MYGId4CPZqHHtnlWOyMat CzjdvlZtd3IS/O8UJVkt9UvAWqZaxHnlJNuE9FwyhagIE0giMKPY2gkYO5Lx8bpM eVhzURAWSGWl/d6f3UhJvY2PMg7SYgDrrZC1Qku5AAmHPelGZPxS8ns1YuonZvQK hlsWtKYvu0VML/DOYW/sv3WlYt2pryKgyb+z8HA6SWXT20zQjMiLVlwc6Hlu4zIz 9TQUayabdMpnQO6cMpAzeZlth4YCthKgM/2I3CVG+doTcrh3JQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJPtyvj1hwmGRmYl/XFAGhU7DcdWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvNmMxYzA1ODctZjIzMy0z YTExLWIxNTctZGRjM2M2MmQyNDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL5iwAw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB9U1GG4yVsZqLF+VrkGB1y4EwkjZid06aN8yZcEkWy4t/5W/YOk VomriiugH51uWvvKjwqA1Oa8iSOldzgh3ZM2cit+wTTZsxxRyAzhyHC6ZdeNwtw1 ZqQYD0w4tnQCE2hIVVcyWtSs6FLdZn93cQ4S/iZ6y48muN3Qc9466kEeIeAX21uQ NSX6tTfRmQ7JcUURIAZjTarr8LEitXr7jtpnU1Vi2haGrY9tZMYYh+kh0bKN9cNP PgI2idA2qJlcTjiccvwHQrLEFJoAIrUJrOmSPd5uLARhq7sYT+Yxq9cStJjyTOWY J+PdcXKeSQLTIQQ/HBBgOp1uLsGVnajJy/o= -----END CERTIFICATE-----Generated at Sun Apr 27 13:12:12 2025 by rpki-client