$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/72dcbffd-aa50-3b47-a2bc-0a5442f9a835.roa File: 72dcbffd-aa50-3b47-a2bc-0a5442f9a835.roa (raw, json) Hash identifier: w/ceDxIaiVV/2fkQhSvsu1dXVEI0HyLMUH6QmTggDvU= Subject key identifier: 67:DB:97:A3:47:6B:7B:6B:97:D1:3C:AD:36:C5:1B:A1:AA:CF:96:1D Certificate issuer: /CN=007561fe-4b04-417a-b423-349b8b4b047d Certificate serial: 010D0C9F432858498E648BB7B488674A3FC99F00 Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/72dcbffd-aa50-3b47-a2bc-0a5442f9a835.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 19651 IP address blocks: 2602:f9ec::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:8b:b7:b4:88:67:4a:3f:c9:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=b2fcbc30-58e5-4f10-b076-94af67d05893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:da:7d:4d:2a:02:be:77:be:bf:09:c6:c9:f3: ab:c3:9c:fe:d9:a9:40:aa:47:0b:55:f8:44:e5:03: 4c:5f:29:89:7d:21:86:3a:b1:bc:49:b1:6f:02:d5: 58:a1:9d:b7:e4:33:41:31:d4:55:51:17:75:dc:13: 95:1f:9f:96:8d:d3:ad:56:82:2c:71:4b:71:41:2c: 17:e7:08:cb:d2:d5:bc:f9:13:bf:fe:fc:e7:04:e7: e2:9d:b9:6d:03:52:1d:9c:85:64:a7:93:82:34:37: 01:c8:8c:99:46:e3:18:7e:01:03:5b:7f:41:54:bd: fc:7d:3b:9e:7f:33:0d:fc:7b:10:55:ac:7b:e2:b4: 12:91:75:60:c7:60:e3:03:f4:7c:73:17:81:c0:e8: f3:c8:d0:a2:19:3f:70:da:0f:01:fe:69:1e:b2:30: 7d:c0:8d:27:fc:bd:e2:f6:8d:28:19:8a:9c:3d:ec: c6:da:1e:12:8d:34:42:b1:0c:f7:5f:3e:1d:ad:17: 20:1f:4a:be:3c:f3:76:b0:a4:74:5b:64:99:7f:35: 56:c8:b8:87:a2:9a:9a:44:e4:85:53:4c:5c:55:e7: 53:6e:4d:1d:5a:1c:33:37:d4:9a:dc:1c:96:ff:79: a8:dd:ff:f4:a1:fb:8b:2b:e6:db:48:b6:b7:e3:e2: 21:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DB:97:A3:47:6B:7B:6B:97:D1:3C:AD:36:C5:1B:A1:AA:CF:96:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/72dcbffd-aa50-3b47-a2bc-0a5442f9a835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl X509v3 Authority Key Identifier: keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9ec::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d5:e1:33:fc:ee:6c:6d:c3:e0:6a:06:47:90:41:56:1e:a4: 3e:8c:95:e2:f8:5e:7e:bd:1c:70:4c:a6:dc:da:50:88:18:10: 29:33:48:8d:1b:72:9c:36:b2:6f:03:7d:dc:09:10:f1:37:e0: 64:99:ec:fa:f2:40:4c:90:48:81:e1:8f:27:3c:0b:fd:d2:dc: f0:94:d9:11:9e:03:c6:10:ed:ef:93:71:79:8e:e0:5f:0c:35: 42:b2:43:00:dc:84:2e:3c:c3:b5:b3:d2:9e:ac:aa:85:f4:a0: d4:94:5d:b1:bf:c1:7e:11:69:df:37:5a:b3:22:c3:5d:c0:e5: 8d:eb:78:25:31:fd:24:23:41:e2:61:d4:81:28:c0:52:c0:de: 7e:36:78:45:2a:1e:71:ab:95:34:a6:80:62:b8:f3:a5:c4:40: 84:91:8c:c5:95:30:e5:49:25:5f:3e:d0:a0:d7:b4:35:f9:bc: da:70:d6:88:7e:50:30:30:63:22:a0:00:2a:2d:a5:d6:88:ce: 69:f4:56:e7:c5:9f:4f:32:18:21:c8:cf:13:3c:e5:6b:2b:d5: 8f:e3:71:e8:5f:8a:50:77:fb:02:e4:6d:02:99:20:a9:e8:2c: 58:aa:b6:81:95:75:ae:c6:92:be:b6:6a:5e:9c:1c:02:eb:bb: 93:3d:24:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmOZIu3tIhnSj/JnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA3NTYxZmUtNGIwNC00MTdhLWI0MjMtMzQ5YjhiNGIw NDdkMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk YjJmY2JjMzAtNThlNS00ZjEwLWIwNzYtOTRhZjY3ZDA1ODkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdp9TSoCvne+vwnGyfOrw5z+2alAqkcLVfhE 5QNMXymJfSGGOrG8SbFvAtVYoZ235DNBMdRVURd13BOVH5+WjdOtVoIscUtxQSwX 5wjL0tW8+RO//vznBOfinbltA1IdnIVkp5OCNDcByIyZRuMYfgEDW39BVL38fTue fzMN/HsQVax74rQSkXVgx2DjA/R8cxeBwOjzyNCiGT9w2g8B/mkesjB9wI0n/L3i 9o0oGYqcPezG2h4SjTRCsQz3Xz4drRcgH0q+PPN2sKR0W2SZfzVWyLiHopqaROSF U0xcVedTbk0dWhwzN9Sa3ByW/3mo3f/0ofuLK+bbSLa34+IhnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGfbl6NHa3trl9E8rTbFG6Gqz5YdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDc1 NjFmZS00YjA0LTQxN2EtYjQyMy0zNDliOGI0YjA0N2QvNzJkY2JmZmQtYWE1MC0z YjQ3LWEyYmMtMGE1NDQyZjlhODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDA3NTYxZmUtNGIwNC00MTdhLWI0 MjMtMzQ5YjhiNGIwNDdkLzAwNzU2MWZlLTRiMDQtNDE3YS1iNDIzLTM0OWI4YjRi MDQ3ZC5jcmwwHwYDVR0jBBgwFoAUam3UldcOa/DEVubcc/Wc40Ocg3UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDc1NjFmZS00YjA0LTQxN2EtYjQyMy0zNDli OGI0YjA0N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL57AAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFnV4TP87mxtw+BqBkeQQVYepD6MleL4Xn69HHBMptzaUIgYECkz SI0bcpw2sm8DfdwJEPE34GSZ7PryQEyQSIHhjyc8C/3S3PCU2RGeA8YQ7e+TcXmO 4F8MNUKyQwDchC48w7Wz0p6sqoX0oNSUXbG/wX4Rad83WrMiw13A5Y3reCUx/SQj QeJh1IEowFLA3n42eEUqHnGrlTSmgGK486XEQISRjMWVMOVJJV8+0KDXtDX5vNpw 1oh+UDAwYyKgACotpdaIzmn0VufFn08yGCHIzxM85Wsr1Y/jcehfilB3+wLkbQKZ IKnoLFiqtoGVda7Gkr62al6cHALru5M9JEc= -----END CERTIFICATE-----Generated at Tue Apr 29 19:04:20 2025 by rpki-client