$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/1e11158d-d12e-3742-bcfd-5fbe33e79773.roa File: 1e11158d-d12e-3742-bcfd-5fbe33e79773.roa (raw, json) Hash identifier: XHihqWu611bo3deCtTMjlA05wfHVBjto6syxqh+thnU= Subject key identifier: C6:B5:F5:90:3D:D1:83:1C:A5:2F:49:3D:DB:8B:96:37:41:98:F9:81 Certificate issuer: /CN=8cfc4370-50a0-4da6-9b19-eea3a1988688 Certificate serial: 010D0C9F43285849955F25B7414228D8D0456B00 Authority key identifier: D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/1e11158d-d12e-3742-bcfd-5fbe33e79773.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 29802 IP address blocks: 2602:f972:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:25:b7:41:42:28:d8:d0:45:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cfc4370-50a0-4da6-9b19-eea3a1988688 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=b9f04fa9-0e1b-490c-8bb4-d446e3a190d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d8:5b:7e:85:57:63:b0:c4:c8:01:9d:f0:54: 6f:18:2b:d4:05:cb:ec:23:20:5f:b6:99:ba:fa:55: ee:37:8d:c0:da:5e:8e:83:ae:6b:4b:a9:86:80:8a: 03:fd:be:94:dc:fa:40:4e:70:2a:4e:13:19:44:fe: 3d:4c:1c:40:bc:bf:cc:77:3c:14:28:0d:66:49:b6: 75:b6:51:09:9a:3f:25:41:c9:7e:0f:62:62:32:79: d6:ae:00:96:f5:33:b4:52:6d:d6:aa:0d:ff:f9:cf: 14:09:b6:fd:fd:c5:0f:23:03:56:d9:ee:46:c0:ef: 3a:f9:5f:93:e5:24:82:1e:88:ce:90:3b:91:78:77: 17:6e:e9:53:36:7b:86:f2:2c:82:a8:55:92:ad:40: f5:64:60:08:f7:ce:40:5e:22:79:63:37:12:93:5b: 6e:9f:1f:cd:11:0d:58:3b:4a:c6:27:75:fd:d8:96: 69:ca:54:08:8a:24:63:8d:30:f3:98:c8:fe:d9:df: 2e:56:17:60:61:36:12:77:46:e0:d8:11:29:59:f5: 78:ec:bd:31:ca:e9:be:7b:d1:9e:72:74:c1:a7:32: 63:98:10:1c:a1:ec:59:57:3a:1e:2c:67:7b:08:d8: e6:12:49:61:79:ee:b3:66:e2:15:eb:fc:42:74:4a: 2c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B5:F5:90:3D:D1:83:1C:A5:2F:49:3D:DB:8B:96:37:41:98:F9:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/1e11158d-d12e-3742-bcfd-5fbe33e79773.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl X509v3 Authority Key Identifier: keyid:D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer sbgp-ipAddrBlock: critical IPv6: 2602:f972:c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:37:40:76:61:f0:91:dc:8b:9c:4c:c7:93:fa:92:bb:4c:7c: 6c:5c:ec:45:0b:98:55:e1:9a:ae:7c:83:5f:17:98:16:24:2b: 65:50:aa:50:df:5e:53:6b:37:a7:9f:7e:2f:ff:7e:2a:f2:0c: d4:e9:24:ba:de:30:d7:5a:a4:5c:8f:82:6d:46:fa:2c:14:d9: 64:f9:d1:9a:40:f2:5d:fb:34:56:e0:6c:68:32:a7:32:1a:77: af:cb:00:e6:f1:a8:4b:31:d4:e3:3c:52:75:b5:47:15:b8:34: 79:7a:24:4a:5a:ae:6b:2d:59:1c:33:82:33:27:de:6c:3f:be: 2f:4c:80:3e:42:b3:28:25:0c:84:1a:f6:57:7b:24:5a:66:10: 94:62:ef:90:2f:5f:6c:32:0a:99:a3:25:a7:78:25:15:ff:5a: f3:01:09:77:26:e3:46:5a:fc:65:eb:87:ca:0b:c0:6a:e8:b8: 8c:53:e4:3d:da:d7:3c:1a:b1:8f:99:13:f4:db:48:9a:08:72: 18:d6:bd:0a:82:e3:a9:6a:5d:ef:ee:3f:ee:e2:34:4f:76:46: e5:ad:da:3d:a6:b7:d0:01:87:f2:f0:11:97:c6:d4:6d:b8:b3: 42:06:5d:70:38:f5:23:6d:03:22:a6:f4:2c:89:e7:50:95:ee: f4:d2:f6:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmVXyW3QUIo2NBFawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNmYzQzNzAtNTBhMC00ZGE2LTliMTktZWVhM2ExOTg4 Njg4MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk YjlmMDRmYTktMGUxYi00OTBjLThiYjQtZDQ0NmUzYTE5MGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9hbfoVXY7DEyAGd8FRvGCvUBcvsIyBftpm6 +lXuN43A2l6Og65rS6mGgIoD/b6U3PpATnAqThMZRP49TBxAvL/MdzwUKA1mSbZ1 tlEJmj8lQcl+D2JiMnnWrgCW9TO0Um3Wqg3/+c8UCbb9/cUPIwNW2e5GwO86+V+T 5SSCHojOkDuReHcXbulTNnuG8iyCqFWSrUD1ZGAI985AXiJ5YzcSk1tunx/NEQ1Y O0rGJ3X92JZpylQIiiRjjTDzmMj+2d8uVhdgYTYSd0bg2BEpWfV47L0xyum+e9Ge cnTBpzJjmBAcoexZVzoeLGd7CNjmEklhee6zZuIV6/xCdEosKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMa19ZA90YMcpS9JPduLljdBmPmBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84Y2Zj NDM3MC01MGEwLTRkYTYtOWIxOS1lZWEzYTE5ODg2ODgvMWUxMTE1OGQtZDEyZS0z NzQyLWJjZmQtNWZiZTMzZTc5NzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGNmYzQzNzAtNTBhMC00ZGE2LTli MTktZWVhM2ExOTg4Njg4LzhjZmM0MzcwLTUwYTAtNGRhNi05YjE5LWVlYTNhMTk4 ODY4OC5jcmwwHwYDVR0jBBgwFoAU0wDD/F4XeXXk80J9t9Naj5SRmzwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84Y2ZjNDM3MC01MGEwLTRkYTYtOWIxOS1lZWEz YTE5ODg2ODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5cgAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKI3QHZh8JHci5xMx5P6krtMfGxc7EULmFXhmq58g18XmBYkK2VQ qlDfXlNrN6effi//firyDNTpJLreMNdapFyPgm1G+iwU2WT50ZpA8l37NFbgbGgy pzIad6/LAObxqEsx1OM8UnW1RxW4NHl6JEparmstWRwzgjMn3mw/vi9MgD5Csygl DIQa9ld7JFpmEJRi75AvX2wyCpmjJad4JRX/WvMBCXcm40Za/GXrh8oLwGrouIxT 5D3a1zwasY+ZE/TbSJoIchjWvQqC46lqXe/uP+7iNE92RuWt2j2mt9ABh/LwEZfG 1G24s0IGXXA49SNtAyKm9CyJ51CV7vTS9lU= -----END CERTIFICATE-----Generated at Sat Apr 26 16:19:33 2025 by rpki-client