$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/ba123b0a-7cc6-337d-9697-a1535b947efe.roa File: ba123b0a-7cc6-337d-9697-a1535b947efe.roa (raw, json) Hash identifier: cvG18Nit++6o9HCnX4S3sdT0wUS3gPsgwCr3C23zLas= Subject key identifier: BF:C4:0A:DF:77:8C:FA:81:21:6D:38:AE:A6:81:DB:21:4B:FF:A9:09 Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F432858494469458B64048709AA016480 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/ba123b0a-7cc6-337d-9697-a1535b947efe.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 14618 IP address blocks: 2602:f98b:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:45:8b:64:04:87:09:aa:01:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=1e3d3a72-ff9c-4a79-bb7b-53d92cd6d9d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:00:4e:bc:54:6d:bd:15:94:5d:e6:76:06:b4: 0f:45:b6:21:77:7a:4d:47:c2:e1:54:bf:a1:6c:a7: d9:cf:db:f4:06:8e:b3:f7:3c:c7:79:0a:00:a5:71: a4:f3:04:fa:49:35:ca:85:2f:0f:e6:1c:13:8d:ab: c4:e7:f7:f4:82:55:76:dc:a3:9e:f3:62:41:16:e3: 82:fa:52:70:89:d7:7a:33:25:db:de:2e:21:04:28: 36:21:36:57:a8:39:a8:bb:8a:88:ad:67:07:12:91: 25:b7:a5:b2:ab:9c:a4:69:3c:86:0c:f8:b4:62:68: c2:a9:0c:92:ba:f4:52:7c:a3:e0:02:fc:1e:60:70: 92:b3:e7:43:53:9e:65:39:07:6c:df:bd:65:4b:77: 13:5b:47:02:e4:59:04:81:bf:8c:06:fe:a6:5e:be: 00:d0:e8:4f:88:2a:b9:27:fc:64:32:67:0f:05:26: 57:71:7a:a9:0f:33:98:d9:03:58:e1:7f:97:8c:1d: cd:f8:dd:47:b9:cb:59:5b:fb:0c:85:3f:1b:1f:e5: 3f:ea:04:e9:76:6a:64:a7:76:30:01:b1:8b:2c:0b: 1a:ae:e4:a4:a9:e2:98:7a:d3:a2:22:b7:c8:f6:38: e5:29:c0:ac:e7:09:2e:b1:ed:dc:ff:64:30:c6:f3: e9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C4:0A:DF:77:8C:FA:81:21:6D:38:AE:A6:81:DB:21:4B:FF:A9:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/ba123b0a-7cc6-337d-9697-a1535b947efe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv6: 2602:f98b:10::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:03:6b:05:2e:1b:71:2c:7b:a0:11:a4:a8:d7:57:a0:71:ab: 02:02:62:bc:f8:ff:cf:81:1c:ee:2e:36:de:a7:bb:5d:70:7c: 76:bb:c9:9a:5f:b9:38:01:97:69:0a:8e:ef:bd:97:d9:53:56: 8b:28:6e:d0:b3:ec:00:e3:3f:1d:be:0b:39:2c:06:62:bd:76: 4f:fa:6b:00:d5:82:e5:aa:6e:66:fa:e6:5a:32:44:f7:9c:b9: 1d:34:9b:fa:b7:1e:18:b5:30:88:4d:e6:1d:1e:8f:52:41:44: 9d:85:50:e5:d8:38:5b:04:fa:1d:30:8b:a6:ad:3c:9b:7e:6b: 55:ad:d7:ce:7f:1c:a8:67:50:08:9f:34:65:ef:8e:56:c7:14: bd:56:dc:1d:61:e3:55:16:34:a8:d7:1d:24:e8:bf:c6:ee:46: 6b:2f:fa:13:cd:40:d6:5d:3d:d4:d9:71:03:bd:fd:82:21:cc: 51:08:af:38:06:c7:4d:e7:6d:d8:ac:06:02:d4:64:3d:54:7f: 85:6c:53:0b:42:dc:1c:a7:d8:b6:45:b8:b8:f1:f3:b5:31:31: a5:a3:b8:ab:10:d8:99:64:f7:5e:e4:fd:7d:79:99:16:c8:aa: b8:1f:30:1e:ce:01:96:60:9e:f6:bc:8b:94:16:31:33:14:45: 50:11:64:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElEaUWLZASHCaoBZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk MWUzZDNhNzItZmY5Yy00YTc5LWJiN2ItNTNkOTJjZDZkOWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgBOvFRtvRWUXeZ2BrQPRbYhd3pNR8LhVL+h bKfZz9v0Bo6z9zzHeQoApXGk8wT6STXKhS8P5hwTjavE5/f0glV23KOe82JBFuOC +lJwidd6MyXb3i4hBCg2ITZXqDmou4qIrWcHEpElt6Wyq5ykaTyGDPi0YmjCqQyS uvRSfKPgAvweYHCSs+dDU55lOQds371lS3cTW0cC5FkEgb+MBv6mXr4A0OhPiCq5 J/xkMmcPBSZXcXqpDzOY2QNY4X+XjB3N+N1HuctZW/sMhT8bH+U/6gTpdmpkp3Yw AbGLLAsaruSkqeKYetOiIrfI9jjlKcCs5wkuse3c/2QwxvPp0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL/ECt93jPqBIW04rqaB2yFL/6kJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvYmExMjNiMGEtN2NjNi0z MzdkLTk2OTctYTE1MzViOTQ3ZWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5iwAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA4DawUuG3Ese6ARpKjXV6BxqwICYrz4/8+BHO4uNt6nu11wfHa7 yZpfuTgBl2kKju+9l9lTVosobtCz7ADjPx2+CzksBmK9dk/6awDVguWqbmb65loy RPecuR00m/q3Hhi1MIhN5h0ej1JBRJ2FUOXYOFsE+h0wi6atPJt+a1Wt185/HKhn UAifNGXvjlbHFL1W3B1h41UWNKjXHSTov8buRmsv+hPNQNZdPdTZcQO9/YIhzFEI rzgGx03nbdisBgLUZD1Uf4VsUwtC3Byn2LZFuLjx87UxMaWjuKsQ2Jlk917k/X15 mRbIqrgfMB7OAZZgnva8i5QWMTMURVARZP8= -----END CERTIFICATE-----Generated at Sat Apr 26 13:26:47 2025 by rpki-client