$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/ddb14b73-0add-39a9-a873-adb4dbd277e4.roa File: ddb14b73-0add-39a9-a873-adb4dbd277e4.roa (raw, json) Hash identifier: RdFRXrri0fFLG3GKFUlOZdziIR3lUiAt5+LfHkXDywc= Subject key identifier: 1F:F4:D3:DD:6A:9C:A5:F0:6B:3A:DC:E8:41:25:5C:1D:B7:96:7D:6A Certificate issuer: /CN=bce2ace0-971c-48f1-8361-962ad02d9618 Certificate serial: 010D0C9F432858499294A21B622913123AEF5CC0 Authority key identifier: E0:97:0C:68:49:45:08:A9:16:69:01:83:CE:76:11:9E:83:A9:6F:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/ddb14b73-0add-39a9-a873-adb4dbd277e4.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 32943 IP address blocks: 2602:f937:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/bce2ace0-971c-48f1-8361-962ad02d9618.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/bce2ace0-971c-48f1-8361-962ad02d9618.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a2:1b:62:29:13:12:3a:ef:5c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bce2ace0-971c-48f1-8361-962ad02d9618 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=11e2402a-4554-4d55-ad0a-c350c45179e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:72:ac:b1:8a:3d:d5:cd:a0:26:87:2a:7e:a7: ee:0d:12:9d:68:ed:31:b2:06:69:00:87:95:78:6a: 62:ec:cb:1d:04:26:a5:e7:9a:c4:e4:e2:ac:ee:95: a7:35:a7:cd:20:32:bb:26:0a:ff:ad:99:a9:7f:58: 72:c9:85:68:1d:12:42:30:a3:b4:7d:c7:72:b2:19: 8d:3d:76:40:6a:59:25:6f:c3:16:39:50:e3:55:71: 62:bf:65:f2:8b:5f:20:39:37:0d:e6:79:89:0b:cc: 91:8e:55:c6:6f:3c:ef:04:a4:e7:d2:cd:bb:2e:c6: 58:da:d2:c9:4a:e1:69:ca:63:b2:92:a8:80:03:f5: 64:62:9a:a0:a6:b1:39:ee:5f:eb:f5:bd:2a:ff:5f: a6:6b:70:01:2b:34:eb:9a:9b:34:14:fa:26:ae:b1: 27:27:50:22:0a:19:d2:07:87:ca:f4:4c:ef:d3:5b: 04:dd:52:97:f8:09:95:2c:b4:12:cf:10:4e:dd:60: 51:75:6b:50:29:4a:e9:89:af:70:9f:f1:f8:65:ec: cd:89:d2:28:87:a0:4c:d9:02:ba:f0:dc:49:83:95: bb:f7:34:ef:07:b4:91:ed:47:48:99:3c:f2:be:ba: 1a:0e:fc:22:a9:9b:c3:78:20:74:dd:0d:14:7f:7d: 5b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F4:D3:DD:6A:9C:A5:F0:6B:3A:DC:E8:41:25:5C:1D:B7:96:7D:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/ddb14b73-0add-39a9-a873-adb4dbd277e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/bce2ace0-971c-48f1-8361-962ad02d9618.crl X509v3 Authority Key Identifier: keyid:E0:97:0C:68:49:45:08:A9:16:69:01:83:CE:76:11:9E:83:A9:6F:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618.cer sbgp-ipAddrBlock: critical IPv6: 2602:f937:200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:38:2f:a3:51:2c:a4:82:06:e1:b2:e8:84:6d:df:f2:59:df: f0:9e:9c:0a:ab:ff:58:c6:1c:25:a8:3e:f2:75:d7:d0:b0:05: 69:78:9d:65:03:95:3f:5e:1c:26:9d:ad:f4:db:71:04:00:a1: 79:80:72:f1:83:96:8f:68:84:e3:cc:f2:96:fd:30:02:e9:11: 0b:9b:cd:1a:cb:3e:ce:78:fc:5a:b0:8e:97:35:34:6b:f4:e7: 85:ec:64:10:4d:98:ec:29:79:de:c3:89:7e:cc:65:78:8a:84: a7:3f:d1:2f:f7:95:ff:35:f3:9f:33:0b:58:f6:5d:d6:a8:fb: cd:2b:ac:80:ce:69:af:55:8e:d4:32:9d:c1:9c:e3:18:9d:fb: bb:3b:0a:34:05:56:63:90:36:9d:88:07:fe:6c:ca:d7:c2:80: 74:ad:cc:6f:bb:7f:e9:53:07:e9:6f:73:0f:51:ca:51:f8:56: ab:6e:fc:8a:dc:56:e0:70:ee:5b:85:f8:21:46:13:c8:4a:9a: f4:09:38:f6:88:67:31:7d:ea:8b:ce:50:4e:34:a5:c8:f3:e5: 37:ab:88:95:96:1b:6b:70:87:e4:14:66:77:b9:4f:a2:33:6a: 0c:d4:15:72:47:09:3e:3a:8e:0d:a4:36:3c:b8:ae:68:e0:a5: 9f:51:ee:f1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmSlKIbYikTEjrvXMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNlMmFjZTAtOTcxYy00OGYxLTgzNjEtOTYyYWQwMmQ5 NjE4MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk MTFlMjQwMmEtNDU1NC00ZDU1LWFkMGEtYzM1MGM0NTE3OWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXKssYo91c2gJocqfqfuDRKdaO0xsgZpAIeV eGpi7MsdBCal55rE5OKs7pWnNafNIDK7Jgr/rZmpf1hyyYVoHRJCMKO0fcdyshmN PXZAalklb8MWOVDjVXFiv2Xyi18gOTcN5nmJC8yRjlXGbzzvBKTn0s27LsZY2tLJ SuFpymOykqiAA/VkYpqgprE57l/r9b0q/1+ma3ABKzTrmps0FPomrrEnJ1AiChnS B4fK9Ezv01sE3VKX+AmVLLQSzxBO3WBRdWtQKUrpia9wn/H4ZezNidIoh6BM2QK6 8NxJg5W79zTvB7SR7UdImTzyvroaDvwiqZvDeCB03Q0Uf31bPwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFB/0091qnKXwazrc6EElXB23ln1qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iY2Uy YWNlMC05NzFjLTQ4ZjEtODM2MS05NjJhZDAyZDk2MTgvZGRiMTRiNzMtMGFkZC0z OWE5LWE4NzMtYWRiNGRiZDI3N2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmNlMmFjZTAtOTcxYy00OGYxLTgz NjEtOTYyYWQwMmQ5NjE4L2JjZTJhY2UwLTk3MWMtNDhmMS04MzYxLTk2MmFkMDJk OTYxOC5jcmwwHwYDVR0jBBgwFoAU4JcMaElFCKkWaQGDznYRnoOpb0QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iY2UyYWNlMC05NzFjLTQ4ZjEtODM2MS05NjJh ZDAyZDk2MTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5NwIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAajgvo1EspIIG4bLohG3f8lnf8J6cCqv/WMYcJag+8nXX0LAFaXid ZQOVP14cJp2t9NtxBACheYBy8YOWj2iE48zylv0wAukRC5vNGss+znj8WrCOlzU0 a/TnhexkEE2Y7Cl53sOJfsxleIqEpz/RL/eV/zXznzMLWPZd1qj7zSusgM5pr1WO 1DKdwZzjGJ37uzsKNAVWY5A2nYgH/mzK18KAdK3Mb7t/6VMH6W9zD1HKUfhWq278 itxW4HDuW4X4IUYTyEqa9Ak49ohnMX3qi85QTjSlyPPlN6uIlZYba3CH5BRmd7lP ojNqDNQVckcJPjqODaQ2PLiuaOCln1Hu8Q== -----END CERTIFICATE-----Generated at Tue Apr 29 09:21:50 2025 by rpki-client