$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/8cd0ffac-ec2d-3e06-a98e-4aee50ee9992.roa File: 8cd0ffac-ec2d-3e06-a98e-4aee50ee9992.roa (raw, json) Hash identifier: Jb+Z6oBLsyZxUnl4TpFuHIIc7JB/lpraNZ/yWHRhp+E= Subject key identifier: 32:CD:30:20:94:F1:B6:CD:AF:1F:C2:9F:36:00:65:19:09:99:E6:AB Certificate issuer: /CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0 Certificate serial: 010D0C9F432858490F83E29F51BAE7DFCC0F2DF0 Authority key identifier: 8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/8cd0ffac-ec2d-3e06-a98e-4aee50ee9992.roa Signing time: Mon 03 Mar 2025 02:16:41 +0000 ROA not before: Mon 03 Mar 2025 02:16:41 +0000 ROA not after: Sun 01 Jun 2025 01:16:41 +0000 asID: 40124 IP address blocks: 2602:299:50::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:83:e2:9f:51:ba:e7:df:cc:0f:2d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0 Validity Not Before: Mar 3 02:16:41 2025 GMT Not After : Jun 1 01:16:41 2025 GMT Subject: CN=07485399-de1e-4c9f-ac01-53fc774db670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ed:12:09:3a:cc:22:ca:e9:2b:0e:d6:ab:55: 32:20:c0:e2:33:9b:81:f2:75:a2:ef:67:1f:f2:e6: e8:e2:f5:cf:34:e6:12:bc:ed:47:da:5a:95:e0:de: f7:5c:f7:f2:a0:17:bc:70:bc:13:18:87:39:24:f2: 0e:6a:db:cf:0c:0c:95:26:c1:fa:c2:85:c1:c1:39: 9a:68:7c:aa:db:47:4b:25:bc:21:97:5a:d5:12:ab: b1:ad:96:48:41:85:f7:22:b1:31:6c:a2:10:8f:d5: 68:ce:d2:ac:7b:2c:a3:7a:cf:25:ce:e7:19:b3:21: cb:62:da:70:d1:ee:17:01:14:74:98:14:b1:99:cb: e9:04:51:12:a6:50:3f:63:c5:6a:fc:0d:30:8c:d3: 44:8d:2e:66:bb:1d:01:5a:0a:52:59:16:c5:c3:18: 72:47:25:8b:0a:c1:c7:26:43:47:ca:1c:1d:17:8f: aa:95:c8:9b:f7:26:20:bb:eb:a4:96:9f:f4:d8:fc: 99:86:44:98:61:62:bb:06:16:0b:a4:7a:c2:ea:d3: 35:3c:25:2e:58:7b:d1:98:0e:f5:67:14:68:ee:0a: dc:c4:e1:3d:7e:df:37:bd:c5:66:bd:6f:9d:ea:53: 1f:e7:13:46:30:ce:fc:dd:d2:f1:a6:ec:08:04:43: a9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CD:30:20:94:F1:B6:CD:AF:1F:C2:9F:36:00:65:19:09:99:E6:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/8cd0ffac-ec2d-3e06-a98e-4aee50ee9992.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl X509v3 Authority Key Identifier: keyid:8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer sbgp-ipAddrBlock: critical IPv6: 2602:299:50::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:56:33:be:60:07:45:f5:c2:56:4c:00:55:71:e5:78:51:ac: e3:a9:e8:c6:70:d3:ee:e3:e8:73:ed:65:fe:20:c0:8d:1e:75: b1:f2:bc:00:32:fb:48:6b:9e:de:4e:ba:b2:95:a9:65:5f:3a: 43:81:65:10:d8:bb:21:8b:bd:15:1d:e2:98:b9:d0:28:2f:d2: 6d:19:13:7f:01:c8:3c:52:72:55:e9:da:fb:bf:8c:f7:6a:c8: 95:a3:90:a8:2e:1f:67:63:17:dd:8d:d7:08:4d:90:b8:c1:4e: 06:96:c8:d1:90:7c:5b:cc:5d:09:a3:d4:75:b2:0f:fd:76:7c: d6:05:3b:2f:b9:da:c9:7a:47:6b:ee:93:f9:a5:16:86:6a:29: 72:82:6d:89:9b:58:bd:b9:75:e8:b5:56:a5:81:7a:88:87:3f: 77:0e:9b:79:42:63:aa:fb:37:61:7d:38:22:b3:cf:8e:b3:41: 86:9c:b1:f2:08:78:64:bd:2d:75:4a:f6:81:7c:87:b9:dc:a0: 5e:85:3b:f1:2a:d1:91:55:95:62:09:d1:f3:8f:36:d4:49:89: 84:b6:64:a6:a2:ab:55:23:a6:96:1a:c7:7c:13:91:3d:fb:76: b5:8e:89:75:4e:6c:db:cc:fc:7d:76:8f:8e:c1:49:67:b7:dc: bd:dc:e9:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkPg+KfUbrn38wPLfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ4YzkxNjctZTgxNi00ODM0LThmY2MtZjhiMGY5M2Zl NmEwMB4XDTI1MDMwMzAyMTY0MVoXDTI1MDYwMTAxMTY0MVowLzEtMCsGA1UEAxMk MDc0ODUzOTktZGUxZS00YzlmLWFjMDEtNTNmYzc3NGRiNjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO0SCTrMIsrpKw7Wq1UyIMDiM5uB8nWi72cf 8ubo4vXPNOYSvO1H2lqV4N73XPfyoBe8cLwTGIc5JPIOatvPDAyVJsH6woXBwTma aHyq20dLJbwhl1rVEquxrZZIQYX3IrExbKIQj9VoztKseyyjes8lzucZsyHLYtpw 0e4XARR0mBSxmcvpBFESplA/Y8Vq/A0wjNNEjS5mux0BWgpSWRbFwxhyRyWLCsHH JkNHyhwdF4+qlcib9yYgu+uklp/02PyZhkSYYWK7BhYLpHrC6tM1PCUuWHvRmA71 ZxRo7grcxOE9ft83vcVmvW+d6lMf5xNGMM783dLxpuwIBEOpcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDLNMCCU8bbNrx/CnzYAZRkJmearMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xZDhj OTE2Ny1lODE2LTQ4MzQtOGZjYy1mOGIwZjkzZmU2YTAvOGNkMGZmYWMtZWMyZC0z ZTA2LWE5OGUtNGFlZTUwZWU5OTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWQ4YzkxNjctZTgxNi00ODM0LThm Y2MtZjhiMGY5M2ZlNmEwLzFkOGM5MTY3LWU4MTYtNDgzNC04ZmNjLWY4YjBmOTNm ZTZhMC5jcmwwHwYDVR0jBBgwFoAUimZZZr5AkQJF+JSyyEvT4ZHHDMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xZDhjOTE2Ny1lODE2LTQ4MzQtOGZjYy1mOGIw ZjkzZmU2YTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgICmQBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH9WM75gB0X1wlZMAFVx5XhRrOOp6MZw0+7j6HPtZf4gwI0edbHy vAAy+0hrnt5OurKVqWVfOkOBZRDYuyGLvRUd4pi50Cgv0m0ZE38ByDxSclXp2vu/ jPdqyJWjkKguH2djF92N1whNkLjBTgaWyNGQfFvMXQmj1HWyD/12fNYFOy+52sl6 R2vuk/mlFoZqKXKCbYmbWL25dei1VqWBeoiHP3cOm3lCY6r7N2F9OCKzz46zQYac sfIIeGS9LXVK9oF8h7ncoF6FO/Eq0ZFVlWIJ0fOPNtRJiYS2ZKaiq1UjppYax3wT kT37drWOiXVObNvM/H12j47BSWe33L3c6WI= -----END CERTIFICATE-----Generated at Mon Apr 28 06:11:59 2025 by rpki-client