$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/9682d34a-d558-35ce-b94a-c06ff912b18e.roa File: 9682d34a-d558-35ce-b94a-c06ff912b18e.roa (raw, json) Hash identifier: UUOokKT8Vx0CflMvf9qWRZDHWOz/u9CtUjz3HdkNIHI= Subject key identifier: 73:B6:0D:47:15:8A:A5:7A:E6:72:7C:0C:D5:40:5D:6D:00:77:60:FB Certificate issuer: /CN=cde39d3e-3837-4341-a8bd-86c74c06a6e4 Certificate serial: 010D0C9F432858498FC9C026CCE41F21D652CC80 Authority key identifier: BE:E1:A9:58:D6:8A:ED:2B:7E:F2:AE:35:4D:3B:EC:EC:C2:2F:5B:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/9682d34a-d558-35ce-b94a-c06ff912b18e.roa Signing time: Fri 18 Apr 2025 01:00:47 +0000 ROA not before: Fri 18 Apr 2025 01:00:47 +0000 ROA not after: Thu 17 Jul 2025 01:00:47 +0000 asID: 46149 IP address blocks: 2602:fc25::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c9:c0:26:cc:e4:1f:21:d6:52:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cde39d3e-3837-4341-a8bd-86c74c06a6e4 Validity Not Before: Apr 18 01:00:47 2025 GMT Not After : Jul 17 01:00:47 2025 GMT Subject: CN=57735626-ce29-4eca-a6b4-01b5d5aca250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e2:f6:72:75:87:1c:e3:e9:8e:f5:19:a7:8c: 04:2b:50:d2:ea:00:2c:94:d1:ab:51:bb:be:d0:6a: 1e:f6:2f:a5:55:24:32:b9:ff:f6:94:76:49:92:0a: f4:31:76:98:53:07:7f:76:da:fb:74:30:b7:59:6c: 17:0e:31:ed:da:f0:3d:2b:5d:7a:ad:dd:69:65:dd: 9e:4e:96:ed:c0:e8:84:f5:5b:13:9b:f4:02:91:63: fb:f7:70:7c:87:dc:40:91:0a:f3:8e:31:d9:d7:f1: 13:f2:9b:71:9d:19:c0:9c:d9:34:4e:41:51:05:86: 8c:84:6b:91:84:c4:3c:e6:6a:1d:e7:91:d1:70:8e: 25:f9:16:79:36:89:41:58:8b:ea:ed:ff:58:dd:69: 50:f4:cb:64:61:62:ba:0a:23:7c:52:db:6e:97:70: ed:b1:42:7e:ae:d6:14:c5:b2:db:78:f6:8a:36:71: b9:04:f0:11:e3:6b:48:b2:84:aa:9b:09:4f:9d:7f: 46:6f:69:43:86:91:f6:cb:07:e8:9d:87:3a:29:28: 66:1f:b5:f4:df:06:7b:ca:18:4b:a4:77:bd:9c:39: 3b:b8:e2:ed:dc:17:7d:0c:1d:17:84:8b:7a:5e:c5: 4f:f1:c0:4f:d7:77:d3:bc:d1:c7:7f:93:58:8e:c1: 73:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B6:0D:47:15:8A:A5:7A:E6:72:7C:0C:D5:40:5D:6D:00:77:60:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/9682d34a-d558-35ce-b94a-c06ff912b18e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.crl X509v3 Authority Key Identifier: keyid:BE:E1:A9:58:D6:8A:ED:2B:7E:F2:AE:35:4D:3B:EC:EC:C2:2F:5B:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc25::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:4f:0e:0d:c7:02:3c:23:46:94:49:17:83:51:21:ed:97:0e: b0:2e:5b:ef:df:82:56:99:42:04:a3:93:8f:81:7a:79:45:98: 4d:be:47:cf:a2:2a:8b:e6:9f:b7:f2:cc:20:5d:73:a5:37:76: a5:9f:45:fc:0a:18:09:9e:b3:5b:64:a4:e4:d6:b7:69:21:9f: 9d:b2:c3:04:c0:01:0f:be:06:96:96:00:07:e1:ca:aa:64:d9: a4:10:1f:f4:a2:30:5c:fb:e3:a0:be:68:f0:11:7d:04:ee:44: 29:a5:a2:1f:d0:11:37:2d:1e:4b:c7:ef:36:68:b3:95:4d:80: af:a9:be:34:8a:00:1d:0d:43:01:c5:d2:28:fe:f7:aa:e4:8c: 10:87:76:af:32:39:81:04:bc:f8:73:3a:32:31:53:70:39:f9: bd:58:a2:7b:ce:e3:1c:a3:a7:7f:4a:36:34:39:cb:bb:e3:4d: 04:55:1f:e2:97:b2:54:2d:a6:e5:67:d4:3e:3d:33:e9:46:c6: f0:45:5f:67:12:bc:be:3a:4c:68:44:e9:36:8c:12:45:8e:43: 6e:c3:e1:a8:e2:c5:f9:b0:4b:5c:70:0d:16:d2:fd:42:9a:a3: 20:8f:2b:cf:3e:c6:74:ac:e6:2a:6e:18:43:7f:a4:6c:c0:af: 0d:98:eb:28 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmPycAmzOQfIdZSzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RlMzlkM2UtMzgzNy00MzQxLWE4YmQtODZjNzRjMDZh NmU0MB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk NTc3MzU2MjYtY2UyOS00ZWNhLWE2YjQtMDFiNWQ1YWNhMjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+L2cnWHHOPpjvUZp4wEK1DS6gAslNGrUbu+ 0Goe9i+lVSQyuf/2lHZJkgr0MXaYUwd/dtr7dDC3WWwXDjHt2vA9K116rd1pZd2e TpbtwOiE9VsTm/QCkWP793B8h9xAkQrzjjHZ1/ET8ptxnRnAnNk0TkFRBYaMhGuR hMQ85mod55HRcI4l+RZ5NolBWIvq7f9Y3WlQ9MtkYWK6CiN8Uttul3DtsUJ+rtYU xbLbePaKNnG5BPAR42tIsoSqmwlPnX9Gb2lDhpH2ywfonYc6KShmH7X03wZ7yhhL pHe9nDk7uOLt3Bd9DB0XhIt6XsVP8cBP13fTvNHHf5NYjsFzaQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHO2DUcViqV65nJ8DNVAXW0Ad2D7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZGUz OWQzZS0zODM3LTQzNDEtYThiZC04NmM3NGMwNmE2ZTQvOTY4MmQzNGEtZDU1OC0z NWNlLWI5NGEtYzA2ZmY5MTJiMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2RlMzlkM2UtMzgzNy00MzQxLWE4 YmQtODZjNzRjMDZhNmU0L2NkZTM5ZDNlLTM4MzctNDM0MS1hOGJkLTg2Yzc0YzA2 YTZlNC5jcmwwHwYDVR0jBBgwFoAUvuGpWNaK7St+8q41TTvs7MIvWykwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZGUzOWQzZS0zODM3LTQzNDEtYThiZC04NmM3 NGMwNmE2ZTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8JQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKk8ODccCPCNGlEkXg1Eh7ZcOsC5b79+CVplCBKOTj4F6eUWYTb5H z6Iqi+aft/LMIF1zpTd2pZ9F/AoYCZ6zW2Sk5Na3aSGfnbLDBMABD74GlpYAB+HK qmTZpBAf9KIwXPvjoL5o8BF9BO5EKaWiH9ARNy0eS8fvNmizlU2Ar6m+NIoAHQ1D AcXSKP73quSMEId2rzI5gQS8+HM6MjFTcDn5vViie87jHKOnf0o2NDnLu+NNBFUf 4peyVC2m5WfUPj0z6UbG8EVfZxK8vjpMaETpNowSRY5DbsPhqOLF+bBLXHANFtL9 QpqjII8rzz7GdKzmKm4YQ3+kbMCvDZjrKA== -----END CERTIFICATE-----Generated at Tue Apr 29 19:51:46 2025 by rpki-client