$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/cbdf02d7-28d9-318e-8a96-bbb515b722de.roa File: cbdf02d7-28d9-318e-8a96-bbb515b722de.roa (raw, json) Hash identifier: OguTDd15gGo9gsBk9/ZDrx9hiAIpnpPg7iHVIHiqLvc= Subject key identifier: 8F:20:D6:F4:58:9C:CE:CC:97:51:59:BD:C7:C3:2D:3B:1C:A7:D8:77 Certificate issuer: /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3 Certificate serial: 010D0C9F432858494F93EC49EE1EAA39D105D640 Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/cbdf02d7-28d9-318e-8a96-bbb515b722de.roa Signing time: Wed 26 Mar 2025 01:00:40 +0000 ROA not before: Wed 26 Mar 2025 01:00:40 +0000 ROA not after: Tue 24 Jun 2025 01:00:40 +0000 asID: 53727 IP address blocks: 2602:f982::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4f:93:ec:49:ee:1e:aa:39:d1:05:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3 Validity Not Before: Mar 26 01:00:40 2025 GMT Not After : Jun 24 01:00:40 2025 GMT Subject: CN=be77ab5a-39b2-4884-8fc3-0400eeb79737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cc:59:0f:94:f4:4c:8d:32:85:9c:53:9c:37: 28:9a:b7:9b:73:65:08:7c:ac:f5:01:8f:95:76:92: 34:11:be:2c:0e:27:e9:31:02:67:9f:84:a0:ec:28: cb:ea:8c:2e:21:ae:ec:f4:ca:aa:5c:99:35:0b:01: dd:6b:8b:03:11:ac:b5:6b:05:d5:52:66:31:ac:4c: 60:63:90:60:53:e4:b5:37:10:37:06:6c:bc:c8:d3: 9b:91:6d:52:ec:8b:c5:2e:b9:d2:1e:ba:ba:8f:28: a7:c7:ef:9e:4e:a4:de:68:bf:6d:d8:61:af:1b:a2: 1a:c8:ba:f1:40:db:41:69:d1:59:c6:5b:5f:d0:32: 74:d6:b7:cf:ce:e8:ed:f4:5b:50:8f:47:e4:d2:24: a7:91:0c:e6:1c:6b:4b:f6:82:ca:82:fd:dd:a3:3a: 0d:37:e6:9d:f0:5b:fd:83:89:b2:6f:86:c3:5c:74: 37:a0:92:ed:cb:04:0a:2a:6d:9c:aa:e5:d4:8f:dc: 33:b6:c4:a6:2b:c0:60:8c:2c:9a:a2:b7:4b:e8:29: 05:9b:c7:a7:99:8d:4c:61:89:8b:af:23:07:23:ac: 83:57:aa:d3:c9:45:80:15:2f:6a:d1:a1:ed:c3:64: ce:14:1d:da:9e:f4:a1:8b:31:2a:c6:70:16:5d:1d: 4a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:20:D6:F4:58:9C:CE:CC:97:51:59:BD:C7:C3:2D:3B:1C:A7:D8:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/cbdf02d7-28d9-318e-8a96-bbb515b722de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl X509v3 Authority Key Identifier: keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f982::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:13:84:20:2d:ba:8a:67:36:3d:a1:7b:5f:ea:70:49:fd:b1: 37:40:7b:34:5a:01:a6:57:6c:e0:ff:9c:8a:b9:be:b8:a3:96: 2e:b5:67:54:37:bc:b0:b6:7a:c3:e9:8a:be:17:15:af:41:b3: a6:c6:77:dd:b8:69:97:18:5d:74:9c:f5:b6:79:94:ba:c8:81: 03:71:3e:b8:2c:18:d7:15:e1:3d:48:f6:b4:dc:48:1e:9a:14: 4f:76:74:f5:ef:60:9f:97:33:52:db:92:1d:af:50:9b:31:b4: f6:de:b8:98:ec:f3:5a:15:78:ea:0b:fc:3c:7f:e9:9b:d5:04: a9:3d:5a:8e:c5:f1:ce:ff:dd:06:4d:ea:3e:f2:16:47:85:47: 3a:db:38:f6:22:5e:52:5b:e7:ed:6f:51:21:c0:07:c4:ba:56: 78:0f:c9:ee:ce:d5:c4:9e:8b:45:4e:fa:bb:0b:f8:c0:e0:62: 56:33:1a:ae:17:c5:de:5d:85:fe:09:94:98:32:dc:6d:72:a6: 30:e6:be:4a:66:2b:ac:32:38:12:15:ad:be:4e:7e:c5:17:dc: fe:80:d9:86:90:72:0f:44:6e:d4:3f:87:a2:98:6c:11:9e:4e: 11:8a:ef:ed:b9:9b:2d:02:e7:f3:fc:c2:9a:2c:0b:9b:3f:10: ab:d8:ed:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElPk+xJ7h6qOdEF1kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQyY2Q3OGQtYzNmMS00NzFhLTkzMWEtMjZlYWY1YTg3 MmYzMB4XDTI1MDMyNjAxMDA0MFoXDTI1MDYyNDAxMDA0MFowLzEtMCsGA1UEAxMk YmU3N2FiNWEtMzliMi00ODg0LThmYzMtMDQwMGVlYjc5NzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sxZD5T0TI0yhZxTnDcomrebc2UIfKz1AY+V dpI0Eb4sDifpMQJnn4Sg7CjL6owuIa7s9MqqXJk1CwHda4sDEay1awXVUmYxrExg Y5BgU+S1NxA3Bmy8yNObkW1S7IvFLrnSHrq6jyinx++eTqTeaL9t2GGvG6IayLrx QNtBadFZxltf0DJ01rfPzujt9FtQj0fk0iSnkQzmHGtL9oLKgv3dozoNN+ad8Fv9 g4myb4bDXHQ3oJLtywQKKm2cquXUj9wztsSmK8BgjCyaordL6CkFm8enmY1MYYmL ryMHI6yDV6rTyUWAFS9q0aHtw2TOFB3anvShizEqxnAWXR1KiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI8g1vRYnM7Ml1FZvcfDLTscp9h3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNDJj ZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVhZjVhODcyZjMvY2JkZjAyZDctMjhkOS0z MThlLThhOTYtYmJiNTE1YjcyMmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjQyY2Q3OGQtYzNmMS00NzFhLTkz MWEtMjZlYWY1YTg3MmYzL2I0MmNkNzhkLWMzZjEtNDcxYS05MzFhLTI2ZWFmNWE4 NzJmMy5jcmwwHwYDVR0jBBgwFoAUCvMe9nHLW/UmAy037mbdyIttVN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNDJjZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVh ZjVhODcyZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL5ggAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABEThCAtuopnNj2he1/qcEn9sTdAezRaAaZXbOD/nIq5vrijli61 Z1Q3vLC2esPpir4XFa9Bs6bGd924aZcYXXSc9bZ5lLrIgQNxPrgsGNcV4T1I9rTc SB6aFE92dPXvYJ+XM1Lbkh2vUJsxtPbeuJjs81oVeOoL/Dx/6ZvVBKk9Wo7F8c7/ 3QZN6j7yFkeFRzrbOPYiXlJb5+1vUSHAB8S6VngPye7O1cSei0VO+rsL+MDgYlYz Gq4Xxd5dhf4JlJgy3G1ypjDmvkpmK6wyOBIVrb5OfsUX3P6A2YaQcg9EbtQ/h6KY bBGeThGK7+25my0C5/P8wposC5s/EKvY7e4= -----END CERTIFICATE-----Generated at Sun Apr 27 22:57:04 2025 by rpki-client