$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/43aa77de-9b48-39e6-802d-8a9a94c7551e.roa File: 43aa77de-9b48-39e6-802d-8a9a94c7551e.roa (raw, json) Hash identifier: zpB4W61IWBIieH5khu9vvodmbqYFMd8W78ra62vjFwI= Subject key identifier: EC:89:E1:8E:C0:AF:74:0C:A7:79:74:69:A7:DB:7A:B0:A1:04:BC:F6 Certificate issuer: /CN=1a319486-03d5-4fb1-997e-228350330847 Certificate serial: 010D0C9F4328584975446003E4A706F31C100CC0 Authority key identifier: A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/43aa77de-9b48-39e6-802d-8a9a94c7551e.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 14618 IP address blocks: 2602:815:3003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:60:03:e4:a7:06:f3:1c:10:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a319486-03d5-4fb1-997e-228350330847 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=1b1dbf02-fc22-4610-a0dc-201be2e99843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:26:3a:62:1d:0d:bb:c7:4d:12:9b:93:59:4e: a0:8b:13:05:cd:59:b4:0f:c2:f4:f5:97:fd:af:df: f9:d3:a8:a7:ea:83:5b:21:d6:77:5f:3a:01:52:7e: d9:d7:54:9f:6c:40:24:1a:d3:4b:d0:e6:91:e7:4c: 6c:7d:6e:31:b6:4d:eb:24:5c:3b:36:9e:e8:44:65: 6b:8d:e5:21:68:4e:0c:9d:05:13:ec:58:b1:07:de: 23:4a:f3:b6:2d:9d:79:3c:a1:f8:88:1a:34:44:26: 19:02:19:4f:30:2b:07:d4:b6:36:ad:c8:fb:46:44: 99:36:1f:fd:4e:7d:fb:34:73:a8:e5:da:29:08:3f: b1:72:5d:41:6e:63:9b:16:10:5b:e5:fa:03:75:cb: 03:a1:60:c1:55:4c:04:32:ab:79:f2:c2:7e:43:89: ff:38:a1:37:64:38:4f:09:76:9e:cf:c8:73:6a:aa: 33:71:02:7d:70:61:69:b5:88:ec:ad:f0:f5:74:7b: bb:cf:95:7a:e5:7d:31:3f:02:2e:95:43:d5:6a:bc: 46:e4:53:5e:62:61:19:63:56:00:73:d9:50:73:06: 67:de:df:b9:c0:d1:92:9c:f8:c7:11:10:c8:08:44: fa:81:ad:1f:00:94:ef:15:27:9a:50:38:d3:bb:99: 1a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:89:E1:8E:C0:AF:74:0C:A7:79:74:69:A7:DB:7A:B0:A1:04:BC:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/43aa77de-9b48-39e6-802d-8a9a94c7551e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl X509v3 Authority Key Identifier: keyid:A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer sbgp-ipAddrBlock: critical IPv6: 2602:815:3003::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:00:2a:94:a8:3f:34:20:d6:80:4f:f8:69:bb:7d:6b:43:8c: ff:10:86:52:e1:1e:57:b5:bf:fe:8b:d8:b0:aa:b6:60:d4:9a: 93:65:58:4f:f5:51:b0:28:1d:36:72:7f:0a:59:94:31:99:62: a7:69:8a:70:f9:26:2a:0d:98:71:7b:e7:fb:bc:f5:57:09:c3: da:7c:d4:6f:74:6b:0b:eb:4c:2b:d7:57:60:b0:34:29:23:59: 8e:ca:27:fa:fd:48:8c:4d:e2:0e:65:79:5f:2f:f9:25:ab:13: 9e:ed:c3:ba:c3:48:39:c8:da:ba:85:46:00:04:5b:47:9d:3e: 2d:5f:83:e7:55:15:a7:82:d1:d7:45:ac:f3:45:1d:3d:82:12: 78:b6:2d:92:98:35:0d:81:1b:45:cd:ce:c0:2d:dd:ab:70:22: a7:29:e8:bc:d7:a6:1d:58:66:54:8a:f4:1d:1f:20:76:03:4f: ff:82:bc:a6:7c:db:67:08:51:1c:14:d9:c8:5e:e2:ce:c7:a8: 49:83:3c:40:12:f4:43:47:86:d1:47:e3:67:bf:5b:a5:64:bb: da:c8:aa:4a:7d:6b:68:bd:33:23:74:d3:a2:47:49:0a:5e:22: d4:9b:cf:a6:9f:5c:b6:38:c3:42:67:d0:e3:5b:64:37:80:17: 66:12:3f:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl1RGAD5KcG8xwQDMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWEzMTk0ODYtMDNkNS00ZmIxLTk5N2UtMjI4MzUwMzMw ODQ3MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk MWIxZGJmMDItZmMyMi00NjEwLWEwZGMtMjAxYmUyZTk5ODQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iY6Yh0Nu8dNEpuTWU6gixMFzVm0D8L09Zf9 r9/506in6oNbIdZ3XzoBUn7Z11SfbEAkGtNL0OaR50xsfW4xtk3rJFw7Np7oRGVr jeUhaE4MnQUT7FixB94jSvO2LZ15PKH4iBo0RCYZAhlPMCsH1LY2rcj7RkSZNh/9 Tn37NHOo5dopCD+xcl1BbmObFhBb5foDdcsDoWDBVUwEMqt58sJ+Q4n/OKE3ZDhP CXaez8hzaqozcQJ9cGFptYjsrfD1dHu7z5V65X0xPwIulUPVarxG5FNeYmEZY1YA c9lQcwZn3t+5wNGSnPjHERDICET6ga0fAJTvFSeaUDjTu5kacwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOyJ4Y7Ar3QMp3l0aafberChBLz2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xYTMx OTQ4Ni0wM2Q1LTRmYjEtOTk3ZS0yMjgzNTAzMzA4NDcvNDNhYTc3ZGUtOWI0OC0z OWU2LTgwMmQtOGE5YTk0Yzc1NTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWEzMTk0ODYtMDNkNS00ZmIxLTk5 N2UtMjI4MzUwMzMwODQ3LzFhMzE5NDg2LTAzZDUtNGZiMS05OTdlLTIyODM1MDMz MDg0Ny5jcmwwHwYDVR0jBBgwFoAUojoUY2Szy8/8gGpP64Xxl3Adxp0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xYTMxOTQ4Ni0wM2Q1LTRmYjEtOTk3ZS0yMjgz NTAzMzA4NDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFTAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD4AKpSoPzQg1oBP+Gm7fWtDjP8QhlLhHle1v/6L2LCqtmDUmpNl WE/1UbAoHTZyfwpZlDGZYqdpinD5JioNmHF75/u89VcJw9p81G90awvrTCvXV2Cw NCkjWY7KJ/r9SIxN4g5leV8v+SWrE57tw7rDSDnI2rqFRgAEW0edPi1fg+dVFaeC 0ddFrPNFHT2CEni2LZKYNQ2BG0XNzsAt3atwIqcp6LzXph1YZlSK9B0fIHYDT/+C vKZ822cIURwU2che4s7HqEmDPEAS9ENHhtFH42e/W6Vku9rIqkp9a2i9MyN006JH SQpeItSbz6afXLY4w0Jn0ONbZDeAF2YSP80= -----END CERTIFICATE-----Generated at Sat Apr 26 13:20:58 2025 by rpki-client