$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/6efa98ee-db36-34b0-94ad-e629f25e1218.roa File: 6efa98ee-db36-34b0-94ad-e629f25e1218.roa (raw, json) Hash identifier: 8+JxYZft9LyICWxDkBNMlBLm6l/yZ1Ba3zwk+T+YX/E= Subject key identifier: A4:80:54:86:34:11:AB:37:93:1F:B0:5E:29:8B:7B:C4:5F:86:D8:1C Certificate issuer: /CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Certificate serial: 010D0C9F432858499AF481B89FE5E7844FE68440 Authority key identifier: 2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/6efa98ee-db36-34b0-94ad-e629f25e1218.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 16509 IP address blocks: 2602:814:b00a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:81:b8:9f:e5:e7:84:4f:e6:84:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=18fe8238-35f4-45cf-b6cf-cd15a3d42001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:72:15:25:70:c6:d6:b5:50:2d:ef:1d:d8:69: d0:0a:2e:ad:87:80:80:fb:25:d7:bd:eb:08:bc:44: 3a:06:99:1a:b1:62:46:25:f9:d5:2c:13:fb:fc:cb: 40:bd:bf:63:2b:ba:21:5a:0d:93:67:ba:07:0d:a7: 7a:3d:3d:da:5b:04:d4:9f:df:e0:9e:42:04:76:70: 23:1f:bb:bc:0c:ec:10:86:96:b8:ad:cd:2b:13:ee: c8:a7:57:85:4b:7e:a5:b9:71:e5:6f:0c:dd:4b:9c: b1:f6:3e:1b:8d:22:8c:e9:95:2b:a5:48:d7:b2:60: b1:d0:9e:4a:20:37:4c:c1:41:00:a1:0f:a3:03:cc: 19:93:35:d9:4f:cf:93:a5:b0:7a:b7:aa:6b:ef:10: 1f:8b:c8:c1:34:31:61:6d:8c:16:2c:fd:57:be:27: 3d:5c:1e:8d:44:0a:6b:d7:73:ae:d5:d3:54:e0:23: 9e:bf:b6:12:9c:8a:16:55:13:8d:1f:5b:ba:f6:76: 52:74:7b:f0:8b:cd:39:f7:e8:f9:6a:f8:15:4b:ba: 4c:59:6d:a6:1d:08:c2:a4:f3:35:09:35:35:5d:b3: 6c:ea:a7:29:6e:5c:3a:45:13:dc:23:f8:14:5a:42: 3e:73:2a:46:68:07:8b:fc:7b:00:d7:1a:1c:7f:7c: bb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:80:54:86:34:11:AB:37:93:1F:B0:5E:29:8B:7B:C4:5F:86:D8:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/6efa98ee-db36-34b0-94ad-e629f25e1218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl X509v3 Authority Key Identifier: keyid:2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer sbgp-ipAddrBlock: critical IPv6: 2602:814:b00a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:15:f9:53:59:39:7b:73:4d:72:e9:bb:3c:9a:79:2d:ce:de: bb:99:a0:fa:d0:8f:e1:9b:4f:f1:35:87:50:9d:0b:2b:30:eb: d9:1f:2f:9c:2f:66:21:da:d4:6e:0c:14:68:9d:4b:63:87:9b: a8:0d:7f:96:16:47:a8:49:f0:32:ce:13:af:35:e5:57:ba:34: 86:95:76:cd:fb:6e:f9:2e:52:e7:54:b7:20:20:a3:9b:de:fe: 58:dc:20:f9:88:fc:b7:67:dc:ed:78:67:87:3b:5a:e2:f3:27: 9e:cc:e8:f0:19:0f:1e:f0:83:4b:da:a9:c3:d4:23:9b:c2:4d: 4b:cc:fe:c3:ca:5a:9f:4d:d0:16:8b:32:41:5d:f2:aa:b6:74: fb:f5:31:e8:a3:6b:86:8a:58:92:31:5d:19:29:c7:81:ba:30: 18:6e:b4:3d:c6:63:22:19:35:48:10:34:c0:9d:e6:0b:43:3f: d4:44:42:87:77:38:a4:be:58:ab:42:87:69:96:57:a3:dd:7c: 80:e7:fe:3b:22:e0:28:da:f7:3f:d7:b6:e2:f8:39:52:67:01: e8:87:25:0e:f5:83:cd:06:58:d8:c0:09:29:28:50:92:15:8d: 4d:3e:1d:9e:c0:55:ad:44:cc:3f:79:ed:66:38:86:0a:27:c4: f4:b9:18:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEma9IG4n+XnhE/mhEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBmYThlM2YtNjdlOS00ZThmLTlkMTgtNjIxMWRkNjEz MDczMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MThmZTgyMzgtMzVmNC00NWNmLWI2Y2YtY2QxNWEzZDQyMDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHIVJXDG1rVQLe8d2GnQCi6th4CA+yXXvesI vEQ6BpkasWJGJfnVLBP7/MtAvb9jK7ohWg2TZ7oHDad6PT3aWwTUn9/gnkIEdnAj H7u8DOwQhpa4rc0rE+7Ip1eFS36luXHlbwzdS5yx9j4bjSKM6ZUrpUjXsmCx0J5K IDdMwUEAoQ+jA8wZkzXZT8+TpbB6t6pr7xAfi8jBNDFhbYwWLP1Xvic9XB6NRApr 13Ou1dNU4COev7YSnIoWVRONH1u69nZSdHvwi8059+j5avgVS7pMWW2mHQjCpPM1 CTU1XbNs6qcpblw6RRPcI/gUWkI+cypGaAeL/HsA1xocf3y7WQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKSAVIY0Eas3kx+wXimLe8RfhtgcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZh OGUzZi02N2U5LTRlOGYtOWQxOC02MjExZGQ2MTMwNzMvNmVmYTk4ZWUtZGIzNi0z NGIwLTk0YWQtZTYyOWYyNWUxMjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBmYThlM2YtNjdlOS00ZThmLTlk MTgtNjIxMWRkNjEzMDczL2QwZmE4ZTNmLTY3ZTktNGU4Zi05ZDE4LTYyMTFkZDYx MzA3My5jcmwwHwYDVR0jBBgwFoAUK7RjzmcAGdo63rw75WI23btNwp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZhOGUzZi02N2U5LTRlOGYtOWQxOC02MjEx ZGQ2MTMwNzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFLAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGQV+VNZOXtzTXLpuzyaeS3O3ruZoPrQj+GbT/E1h1CdCysw69kf L5wvZiHa1G4MFGidS2OHm6gNf5YWR6hJ8DLOE6815Ve6NIaVds37bvkuUudUtyAg o5ve/ljcIPmI/Ldn3O14Z4c7WuLzJ57M6PAZDx7wg0vaqcPUI5vCTUvM/sPKWp9N 0BaLMkFd8qq2dPv1Meija4aKWJIxXRkpx4G6MBhutD3GYyIZNUgQNMCd5gtDP9RE Qod3OKS+WKtCh2mWV6PdfIDn/jsi4Cja9z/XtuL4OVJnAeiHJQ71g80GWNjACSko UJIVjU0+HZ7AVa1EzD957WY4hgonxPS5GKI= -----END CERTIFICATE-----Generated at Sat Apr 26 17:44:14 2025 by rpki-client