$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/b5734a28-8ddf-300c-ab81-e6cb67b870cd.roa File: b5734a28-8ddf-300c-ab81-e6cb67b870cd.roa (raw, json) Hash identifier: SdfTSSNeX59IHTeKhi9R64YbrTEShPXIT1g1RQOVLpc= Subject key identifier: C3:7E:83:DA:80:77:7E:77:50:36:F6:07:AB:BD:32:5A:4D:80:ED:19 Certificate issuer: /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Certificate serial: 010D0C9F43285849350EB1D0DAFD74A4C6425940 Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/b5734a28-8ddf-300c-ab81-e6cb67b870cd.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 46733 IP address blocks: 2602:f9f4::/48 maxlen: 48 2602:f9f4:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:b1:d0:da:fd:74:a4:c6:42:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=b4a6e3fd-cfca-4464-9a75-2d7cef9beafd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:33:06:25:db:8f:9b:6e:b9:f9:dd:66:26:a5: 74:a9:52:2e:ab:95:7b:95:81:dc:9e:93:9e:1a:df: b4:55:4d:1f:eb:22:6e:49:b8:23:ee:e6:06:8e:76: 69:b6:79:a8:14:02:69:b8:8d:0e:e0:11:7c:4e:90: f6:c6:51:78:54:4b:9c:6c:dc:ee:ed:ff:fa:c9:68: a6:5a:1e:b8:4b:db:50:c9:ba:48:36:ae:25:9e:89: af:56:0c:ab:fc:76:a4:38:18:3e:13:c0:bb:eb:f0: 3f:b5:da:46:5c:bb:0d:7d:3a:55:ba:a8:da:02:7f: b1:00:94:b4:0a:6a:88:77:d6:30:27:ef:11:eb:fe: 67:79:b0:44:ee:b4:bf:f6:f7:f6:4c:0b:13:b8:9f: 27:5a:00:49:09:7d:d8:c2:fb:76:7e:d3:1b:75:92: d9:7a:bb:fe:27:88:7f:fa:a2:4a:9d:81:10:05:ad: 36:22:cd:97:09:bf:12:d7:2a:03:2b:7b:c5:e4:bd: de:57:b7:9e:49:89:90:84:8b:6b:4d:c7:fb:4f:d9: ec:87:a5:0b:4f:59:33:e7:bd:67:ca:91:d9:92:42: 7f:6e:e9:25:c1:d5:92:27:8d:1d:3c:69:8f:cd:63: bb:3e:de:86:dd:65:4c:16:28:74:fb:6a:72:8a:b0: dc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7E:83:DA:80:77:7E:77:50:36:F6:07:AB:BD:32:5A:4D:80:ED:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/b5734a28-8ddf-300c-ab81-e6cb67b870cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl X509v3 Authority Key Identifier: keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9f4::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:bd:21:d6:35:0e:74:e6:93:c4:9d:d0:85:d9:ae:4f:c3:2d: 7c:d5:76:20:61:98:e8:15:9f:2a:8a:81:ad:a2:35:88:46:eb: 7d:e7:f8:00:ea:24:bf:8b:d3:45:2e:4c:7b:95:92:19:49:92: a0:e7:b0:12:0f:ff:dd:2c:00:e4:fa:a5:32:0e:67:cd:5f:9f: 36:22:84:33:12:20:f8:0e:5d:07:1b:47:fa:53:2d:19:df:99: a5:5f:be:61:87:c7:b9:5b:bc:83:4c:83:b1:3b:a0:1b:34:2a: 35:06:c4:93:32:48:8f:70:f9:5b:51:a2:46:4d:22:25:f9:eb: 00:e3:37:72:ee:76:51:3a:91:5c:e3:77:44:05:ac:c7:0d:cf: e3:bc:cc:ee:0f:a6:4a:b6:99:bf:c0:13:73:b4:df:a9:82:6e: a2:8c:d5:44:24:17:9c:84:58:60:1f:d2:4b:d6:7a:96:4c:92: 7b:68:8b:58:77:d4:cc:26:cc:70:19:56:02:bd:b0:12:3c:16: de:f4:6a:65:07:bf:17:89:8b:d5:82:03:f7:e3:f7:6c:51:95: a2:fc:29:67:c7:fc:e3:55:3b:6b:df:97:87:06:76:ed:75:78: f3:39:04:25:f5:ad:64:dc:6f:6c:e3:67:5c:a8:03:19:e3:f1: 18:38:f2:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk1DrHQ2v10pMZCWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMyYThkOTUtMDI5MC00MjE4LTliMDgtZDE1N2U1ZjEy N2Y5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YjRhNmUzZmQtY2ZjYS00NDY0LTlhNzUtMmQ3Y2VmOWJlYWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDMGJduPm265+d1mJqV0qVIuq5V7lYHcnpOe Gt+0VU0f6yJuSbgj7uYGjnZptnmoFAJpuI0O4BF8TpD2xlF4VEucbNzu7f/6yWim Wh64S9tQybpINq4lnomvVgyr/HakOBg+E8C76/A/tdpGXLsNfTpVuqjaAn+xAJS0 CmqId9YwJ+8R6/5nebBE7rS/9vf2TAsTuJ8nWgBJCX3Ywvt2ftMbdZLZerv+J4h/ +qJKnYEQBa02Is2XCb8S1yoDK3vF5L3eV7eeSYmQhItrTcf7T9nsh6ULT1kz571n ypHZkkJ/buklwdWSJ40dPGmPzWO7Pt6G3WVMFih0+2pyirDcNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMN+g9qAd353UDb2B6u9MlpNgO0ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJh OGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3ZTVmMTI3ZjkvYjU3MzRhMjgtOGRkZi0z MDBjLWFiODEtZTZjYjY3Yjg3MGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGMyYThkOTUtMDI5MC00MjE4LTli MDgtZDE1N2U1ZjEyN2Y5LzhjMmE4ZDk1LTAyOTAtNDIxOC05YjA4LWQxNTdlNWYx MjdmOS5jcmwwHwYDVR0jBBgwFoAU2RRqJQvMvb5Gl37hbpq11jKC6Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJhOGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3 ZTVmMTI3ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgL59AAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFa9IdY1DnTmk8Sd0IXZrk/DLXzVdiBhmOgVnyqKga2iNYhG633n +ADqJL+L00UuTHuVkhlJkqDnsBIP/90sAOT6pTIOZ81fnzYihDMSIPgOXQcbR/pT LRnfmaVfvmGHx7lbvINMg7E7oBs0KjUGxJMySI9w+VtRokZNIiX56wDjN3LudlE6 kVzjd0QFrMcNz+O8zO4Ppkq2mb/AE3O036mCbqKM1UQkF5yEWGAf0kvWepZMknto i1h31MwmzHAZVgK9sBI8Ft70amUHvxeJi9WCA/fj92xRlaL8KWfH/ONVO2vfl4cG du11ePM5BCX1rWTcb2zjZ1yoAxnj8Rg48tg= -----END CERTIFICATE-----Generated at Mon Apr 28 17:19:54 2025 by rpki-client