$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/3386d2ee-a850-3aa9-ae42-3b7548b453f9.roa File: 3386d2ee-a850-3aa9-ae42-3b7548b453f9.roa (raw, json) Hash identifier: iAFBvkZ3PRj6F6Jw43y0jwBg4DT+OsHhJi5hoFy2MjM= Subject key identifier: 2A:B4:9B:C5:B1:C8:A2:07:37:59:A8:97:D1:97:89:F9:E3:11:B8:B0 Certificate issuer: /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Certificate serial: 010D0C9F432858498339DDF52468ECC160386040 Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/3386d2ee-a850-3aa9-ae42-3b7548b453f9.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 62553 IP address blocks: 2602:f71e::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:dd:f5:24:68:ec:c1:60:38:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=d4e83205-9650-48f5-960a-f8a979e52822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8b:5c:6e:c1:73:18:b5:bb:63:a7:9d:68:e1: 11:6d:4c:f3:bc:06:0b:98:d9:3c:8b:6a:af:4a:3a: 96:8b:5f:00:9c:bb:bb:8a:71:3a:cb:f9:1d:e0:fd: d6:ac:13:54:cf:b2:a7:21:a8:68:53:1c:16:47:eb: 88:82:cf:0e:83:1c:76:0e:5c:ff:36:14:c6:f1:4a: 15:a6:80:99:a1:e8:b4:7d:45:65:29:b3:a7:95:57: 3c:3c:89:e1:c5:27:eb:8a:aa:33:96:d2:4f:36:c4: 0a:26:75:03:b0:8b:34:ad:fb:10:6e:49:5d:9c:69: 53:9a:c9:86:b5:dc:61:e3:5e:69:bf:53:77:c8:77: 5f:bb:df:28:a7:d0:c6:10:d5:4b:db:63:f6:5d:9b: c8:e7:44:66:e3:64:b4:4c:bd:19:1e:04:b6:93:83: 9e:a1:bd:1e:a7:5a:70:94:40:d8:c9:4c:3c:31:1c: 80:d0:18:7b:9c:1b:d7:9a:a8:88:62:34:2f:8d:ac: 95:38:4a:df:d3:ce:34:5e:51:7c:51:fe:d5:91:52: e6:32:48:f8:e3:a5:67:db:51:fc:e6:63:2b:2c:91: 4c:5e:99:04:89:d2:b8:ba:e3:23:c1:33:6e:52:01: 49:60:3a:a7:4c:93:8b:9b:58:42:f6:51:44:93:e0: 61:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B4:9B:C5:B1:C8:A2:07:37:59:A8:97:D1:97:89:F9:E3:11:B8:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/3386d2ee-a850-3aa9-ae42-3b7548b453f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl X509v3 Authority Key Identifier: keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer sbgp-ipAddrBlock: critical IPv6: 2602:f71e::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:0c:97:69:8d:9f:14:ee:61:54:60:b1:e4:5b:6f:35:94:08: cb:0d:d8:dc:4a:09:e4:fe:e0:c1:04:77:ca:5a:40:39:6a:82: 55:cb:a5:6b:e0:46:73:94:88:05:d7:fc:63:9b:72:72:12:ea: 6a:3d:6f:97:1f:8c:4a:cb:eb:e1:71:e1:3b:6f:4b:77:52:6a: 0c:5d:c0:7e:a0:87:f2:43:24:2d:df:4a:54:e0:8e:1c:fe:7e: c7:da:63:f1:ed:9b:6c:bd:2a:ab:7f:a1:99:13:22:1d:0b:d8: 36:87:da:c6:4d:76:1b:67:23:eb:29:08:22:8e:53:d1:16:13: 74:fa:52:4d:30:39:b1:51:1d:9d:69:96:a9:ae:e8:d2:96:73: 81:7c:28:0a:90:da:0d:62:f6:12:7f:e2:be:60:e1:a2:af:a6: 33:b4:9b:e6:08:c9:3f:93:cb:31:61:db:59:d9:62:8e:5f:39: b4:cf:b0:50:11:f3:a3:dd:fe:b1:f2:c9:51:ae:61:ef:8d:f0: ce:48:96:3a:c0:51:83:1a:03:4f:9a:98:dd:a5:4f:31:4d:6c: d8:8c:ed:78:19:bc:6c:45:e5:af:34:5f:7f:43:29:6c:ad:8a: 10:39:23:28:f0:82:10:dc:02:4f:a6:18:84:1e:7f:92:11:c9: 39:7e:3d:98 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmDOd31JGjswWA4YEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjN2YyM2YtYjBhMC00ZDJjLWE4YTItMzYwNWM2ZjA4 ZTljMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk ZDRlODMyMDUtOTY1MC00OGY1LTk2MGEtZjhhOTc5ZTUyODIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuotcbsFzGLW7Y6edaOERbUzzvAYLmNk8i2qv SjqWi18AnLu7inE6y/kd4P3WrBNUz7KnIahoUxwWR+uIgs8Ogxx2Dlz/NhTG8UoV poCZoei0fUVlKbOnlVc8PInhxSfriqozltJPNsQKJnUDsIs0rfsQbkldnGlTmsmG tdxh415pv1N3yHdfu98op9DGENVL22P2XZvI50Rm42S0TL0ZHgS2k4Oeob0ep1pw lEDYyUw8MRyA0Bh7nBvXmqiIYjQvjayVOErf0840XlF8Uf7VkVLmMkj446Vn21H8 5mMrLJFMXpkEidK4uuMjwTNuUgFJYDqnTJOLm1hC9lFEk+BhfwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCq0m8WxyKIHN1mol9GXifnjEbiwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3 ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1YzZmMDhlOWMvMzM4NmQyZWUtYTg1MC0z YWE5LWFlNDItM2I3NTQ4YjQ1M2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWZjN2YyM2YtYjBhMC00ZDJjLWE4 YTItMzYwNWM2ZjA4ZTljLzFmYzdmMjNmLWIwYTAtNGQyYy1hOGEyLTM2MDVjNmYw OGU5Yy5jcmwwHwYDVR0jBBgwFoAUGy7JMmnAka14g/B1ftT7/uA8pgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1 YzZmMDhlOWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3HgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAjwyXaY2fFO5hVGCx5FtvNZQIyw3Y3EoJ5P7gwQR3ylpAOWqCVcul a+BGc5SIBdf8Y5tychLqaj1vlx+MSsvr4XHhO29Ld1JqDF3AfqCH8kMkLd9KVOCO HP5+x9pj8e2bbL0qq3+hmRMiHQvYNofaxk12G2cj6ykIIo5T0RYTdPpSTTA5sVEd nWmWqa7o0pZzgXwoCpDaDWL2En/ivmDhoq+mM7Sb5gjJP5PLMWHbWdlijl85tM+w UBHzo93+sfLJUa5h743wzkiWOsBRgxoDT5qY3aVPMU1s2IzteBm8bEXlrzRff0Mp bK2KEDkjKPCCENwCT6YYhB5/khHJOX49mA== -----END CERTIFICATE-----Generated at Mon Apr 28 05:32:02 2025 by rpki-client