$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/a477901f-5a7c-3596-8981-3046fca64b4e.roa File: a477901f-5a7c-3596-8981-3046fca64b4e.roa (raw, json) Hash identifier: 4cm1Iel1ccwrtwAKSherNf0mwwYylb2SaRb5TaA5Qvc= Subject key identifier: B1:33:97:57:D6:75:BB:93:13:B8:E6:9A:11:F6:26:34:96:B1:B9:11 Certificate issuer: /CN=17c52074-58cb-4941-b609-0f5d1e4bca32 Certificate serial: 010D0C9F4328584902EC2C0428EA9E7F4A072C80 Authority key identifier: 81:63:71:9C:94:98:34:07:0F:1F:64:E2:0E:C9:FF:79:D1:AB:DF:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/a477901f-5a7c-3596-8981-3046fca64b4e.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 399772 IP address blocks: 2602:fc5f::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/17c52074-58cb-4941-b609-0f5d1e4bca32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/17c52074-58cb-4941-b609-0f5d1e4bca32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:2c:04:28:ea:9e:7f:4a:07:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17c52074-58cb-4941-b609-0f5d1e4bca32 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=325b0e8d-7bd1-4bd4-a62d-7e5e44059df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:38:02:40:e0:16:9c:b7:ab:76:5f:18:02:b1: 7d:67:7a:b9:ab:76:b6:0a:f1:a6:4b:d5:63:3e:b9: d6:12:8f:14:32:95:1a:2b:dd:23:45:12:65:72:64: 3b:47:f7:b8:37:6a:fe:86:58:90:c8:04:b1:cd:60: 74:1a:36:e3:96:50:13:22:78:1e:89:0c:83:50:23: df:d8:3a:b1:07:b5:41:02:e3:f3:85:03:b6:10:4c: 0d:73:de:7e:3d:9b:67:d8:e0:2b:1e:ec:04:a0:81: 0f:2f:a6:2e:f2:b2:7f:ba:96:d7:9e:9d:2f:a7:8a: 78:da:f6:2f:da:99:1a:4d:f0:5b:31:61:05:f7:e2: 00:24:1a:ee:d0:7a:4d:58:cb:a3:c2:a6:bb:97:52: 73:7f:40:17:da:bd:74:1f:5a:0b:f1:e8:d5:33:b1: 43:53:68:4b:7a:e4:ac:de:b5:92:72:2c:89:3f:e3: af:c4:60:0e:70:6e:14:99:3a:cf:85:76:64:d2:3a: f8:2f:32:65:20:d8:9f:e2:83:a2:62:f1:4c:13:5d: a2:88:19:4b:c4:1d:10:72:a5:ba:b2:ef:22:c5:d0: 82:d6:5f:01:d0:44:f7:1b:bb:ea:33:b8:bf:85:0a: 92:93:21:04:f8:4b:f7:80:f0:a4:3c:91:4c:07:d6: 95:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:33:97:57:D6:75:BB:93:13:B8:E6:9A:11:F6:26:34:96:B1:B9:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/a477901f-5a7c-3596-8981-3046fca64b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/17c52074-58cb-4941-b609-0f5d1e4bca32.crl X509v3 Authority Key Identifier: keyid:81:63:71:9C:94:98:34:07:0F:1F:64:E2:0E:C9:FF:79:D1:AB:DF:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc5f::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:c0:fb:b0:2c:41:bc:b4:e4:1f:ad:71:7d:44:28:ad:d6:d1: 31:47:19:69:94:d3:4c:bb:fd:48:1d:9a:4a:52:18:22:a2:d4: a5:13:11:1c:5b:bd:38:33:2c:10:03:d7:fd:b0:10:51:4c:79: 60:eb:d0:9c:20:52:6f:d4:55:d7:a1:9d:91:28:5c:ff:11:52: aa:a4:24:c0:a5:29:20:a8:2c:77:89:1c:bd:2b:fe:fa:11:01: c1:9e:9e:2f:b0:e3:2d:0b:b3:59:4e:5b:0b:45:d3:b9:c1:ac: da:0c:e8:18:9b:44:b1:52:95:c7:35:69:61:05:4e:bb:e7:06: e2:6b:99:1b:cd:c4:35:35:cb:9e:6b:52:ab:df:36:0c:3c:e5: e4:21:72:d1:77:1b:67:be:bf:8c:02:51:df:bd:50:5d:11:ed: cf:51:2c:c1:5e:eb:a4:f4:2d:8a:cf:3f:b7:8a:85:d9:8c:0b: 9c:2b:99:d1:94:13:76:35:20:95:7c:af:b9:f7:b5:62:ff:88: 64:27:01:e6:a2:28:30:02:35:82:fb:72:63:4a:d6:66:32:27: a3:2a:1a:01:70:fd:29:00:71:27:64:39:02:65:c6:b4:37:dd: 7e:90:63:0b:16:a5:e6:f4:f4:52:26:48:97:6e:6d:cf:f1:a9: 44:11:89:cc -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkC7CwEKOqef0oHLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdjNTIwNzQtNThjYi00OTQxLWI2MDktMGY1ZDFlNGJj YTMyMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk MzI1YjBlOGQtN2JkMS00YmQ0LWE2MmQtN2U1ZTQ0MDU5ZGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDgCQOAWnLerdl8YArF9Z3q5q3a2CvGmS9Vj PrnWEo8UMpUaK90jRRJlcmQ7R/e4N2r+hliQyASxzWB0GjbjllATIngeiQyDUCPf 2DqxB7VBAuPzhQO2EEwNc95+PZtn2OArHuwEoIEPL6Yu8rJ/upbXnp0vp4p42vYv 2pkaTfBbMWEF9+IAJBru0HpNWMujwqa7l1Jzf0AX2r10H1oL8ejVM7FDU2hLeuSs 3rWSciyJP+OvxGAOcG4UmTrPhXZk0jr4LzJlINif4oOiYvFME12iiBlLxB0QcqW6 su8ixdCC1l8B0ET3G7vqM7i/hQqSkyEE+Ev3gPCkPJFMB9aVJwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLEzl1fWdbuTE7jmmhH2JjSWsbkRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xN2M1 MjA3NC01OGNiLTQ5NDEtYjYwOS0wZjVkMWU0YmNhMzIvYTQ3NzkwMWYtNWE3Yy0z NTk2LTg5ODEtMzA0NmZjYTY0YjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTdjNTIwNzQtNThjYi00OTQxLWI2 MDktMGY1ZDFlNGJjYTMyLzE3YzUyMDc0LTU4Y2ItNDk0MS1iNjA5LTBmNWQxZTRi Y2EzMi5jcmwwHwYDVR0jBBgwFoAUgWNxnJSYNAcPH2TiDsn/edGr36QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xN2M1MjA3NC01OGNiLTQ5NDEtYjYwOS0wZjVk MWU0YmNhMzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8XwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGsD7sCxBvLTkH61xfUQordbRMUcZaZTTTLv9SB2aSlIYIqLUpRMR HFu9ODMsEAPX/bAQUUx5YOvQnCBSb9RV16GdkShc/xFSqqQkwKUpIKgsd4kcvSv+ +hEBwZ6eL7DjLQuzWU5bC0XTucGs2gzoGJtEsVKVxzVpYQVOu+cG4muZG83ENTXL nmtSq982DDzl5CFy0XcbZ76/jAJR371QXRHtz1EswV7rpPQtis8/t4qF2YwLnCuZ 0ZQTdjUglXyvufe1Yv+IZCcB5qIoMAI1gvtyY0rWZjInoyoaAXD9KQBxJ2Q5AmXG tDfdfpBjCxal5vT0UiZIl25tz/GpRBGJzA== -----END CERTIFICATE-----Generated at Mon Apr 28 21:39:18 2025 by rpki-client