$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/03daf42c-4aab-3744-bbc7-04370b66cdf3.roa File: 03daf42c-4aab-3744-bbc7-04370b66cdf3.roa (raw, json) Hash identifier: 3kEyu5oVr/hl3mfTHVHQF39agf28N87CpmNDFVyxgqM= Subject key identifier: A5:17:51:6B:6F:7A:E6:1A:78:A2:FE:03:07:E9:27:79:9E:45:2A:9C Certificate issuer: /CN=4272c123-bab5-43cb-a3b9-ac162a3b30af Certificate serial: 010D0C9F43285848E9CBE211012A5FFEB951CD80 Authority key identifier: F9:CE:7E:1C:E8:1E:7F:65:34:69:CD:9A:A5:DC:BC:87:38:0B:67:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/03daf42c-4aab-3744-bbc7-04370b66cdf3.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 400013 IP address blocks: 2602:80c:1002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:e2:11:01:2a:5f:fe:b9:51:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4272c123-bab5-43cb-a3b9-ac162a3b30af Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=8e20ea48-882b-4a74-81b1-ce28b34025ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c4:29:16:a9:80:a8:ca:31:4f:6b:14:4a:42: b9:e0:e6:f9:ca:d7:da:aa:70:24:43:09:dc:9d:62: 99:f5:f1:09:d6:97:50:06:31:47:91:fd:b6:d9:2b: 1b:63:15:d4:12:db:01:e3:78:64:52:9e:c5:e6:8e: 59:01:1e:45:d6:2c:6a:0c:ee:de:f9:a1:3b:38:c8: 04:28:17:21:e1:ea:98:7f:04:d8:69:09:67:8f:80: 41:5e:50:03:b7:c2:7f:3d:cb:d9:c8:0c:76:61:96: c4:08:4e:92:88:76:88:1e:72:61:21:dc:99:dd:87: 0c:26:24:91:7d:ca:12:f0:b4:95:48:2c:a7:76:18: 32:8e:0d:6d:15:c3:1d:11:67:35:e8:79:ff:30:e4: f3:f0:d5:ab:b7:9f:50:72:45:7e:74:1b:a6:a5:bb: 75:57:37:f8:f8:2d:dc:7b:e5:04:68:0b:f1:ef:72: b2:fd:d1:42:cb:64:46:02:f6:d3:2b:58:78:b9:c7: 89:d5:0c:d0:c1:82:71:88:06:07:20:ea:32:d3:e6: 62:41:96:b3:7f:d0:cf:a2:df:6e:2b:be:60:64:ca: 54:79:da:2f:c5:6d:9d:fd:43:8f:6c:19:b1:ee:cb: 86:12:54:04:35:4e:6c:bc:08:98:49:19:3b:61:d6: e3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:17:51:6B:6F:7A:E6:1A:78:A2:FE:03:07:E9:27:79:9E:45:2A:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/03daf42c-4aab-3744-bbc7-04370b66cdf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.crl X509v3 Authority Key Identifier: keyid:F9:CE:7E:1C:E8:1E:7F:65:34:69:CD:9A:A5:DC:BC:87:38:0B:67:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer sbgp-ipAddrBlock: critical IPv6: 2602:80c:1002::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:c9:c6:0e:51:63:64:ad:7c:b3:e3:0b:d9:44:e7:55:f3:e8: ea:26:72:cf:05:41:66:58:41:27:25:80:d1:08:9a:37:da:d3: 58:92:e9:89:b6:dc:af:23:eb:7b:95:e6:f4:5b:a2:c4:03:e9: b9:39:67:e5:83:2b:82:ca:50:46:a4:1a:d3:6c:2d:b5:e9:8b: a7:aa:ac:fd:e7:66:9c:eb:68:02:56:46:5a:0a:04:86:fa:60: c3:dc:a7:fd:b5:b9:35:bc:20:9e:2d:35:5d:7d:68:7b:5d:60: 5e:6c:92:13:4f:a0:a0:9b:dd:88:7d:52:d6:94:53:8b:7f:8f: 9d:f0:a5:2c:cf:1a:64:23:51:bc:54:d8:25:c3:ad:d4:a9:32: b9:bb:c6:c6:5a:57:3f:6f:ce:27:8a:0b:57:7f:c7:a8:5f:e7: b6:d7:91:c6:8c:51:9e:09:ff:85:cd:2a:b4:94:8a:45:f6:79: 10:24:c5:85:bc:54:76:da:c2:ec:d2:a5:80:dd:36:4e:0b:3d: a5:e8:04:da:e4:4b:3c:f4:87:43:39:8b:11:59:25:ef:e5:64: 83:19:4f:58:20:4a:b2:7a:d7:71:e9:50:a6:d0:07:1a:aa:56: 12:f3:11:22:61:9f:1b:87:03:71:e8:ca:1b:34:3b:5e:31:b9: 6a:79:eb:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjpy+IRASpf/rlRzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI3MmMxMjMtYmFiNS00M2NiLWEzYjktYWMxNjJhM2Iz MGFmMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk OGUyMGVhNDgtODgyYi00YTc0LTgxYjEtY2UyOGIzNDAyNWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMQpFqmAqMoxT2sUSkK54Ob5ytfaqnAkQwnc nWKZ9fEJ1pdQBjFHkf222SsbYxXUEtsB43hkUp7F5o5ZAR5F1ixqDO7e+aE7OMgE KBch4eqYfwTYaQlnj4BBXlADt8J/PcvZyAx2YZbECE6SiHaIHnJhIdyZ3YcMJiSR fcoS8LSVSCyndhgyjg1tFcMdEWc16Hn/MOTz8NWrt59QckV+dBumpbt1Vzf4+C3c e+UEaAvx73Ky/dFCy2RGAvbTK1h4uceJ1QzQwYJxiAYHIOoy0+ZiQZazf9DPot9u K75gZMpUedovxW2d/UOPbBmx7suGElQENU5svAiYSRk7YdbjhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKUXUWtveuYaeKL+AwfpJ3meRSqcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80Mjcy YzEyMy1iYWI1LTQzY2ItYTNiOS1hYzE2MmEzYjMwYWYvMDNkYWY0MmMtNGFhYi0z NzQ0LWJiYzctMDQzNzBiNjZjZGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDI3MmMxMjMtYmFiNS00M2NiLWEz YjktYWMxNjJhM2IzMGFmLzQyNzJjMTIzLWJhYjUtNDNjYi1hM2I5LWFjMTYyYTNi MzBhZi5jcmwwHwYDVR0jBBgwFoAU+c5+HOgef2U0ac2apdy8hzgLZ1IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MjcyYzEyMy1iYWI1LTQzY2ItYTNiOS1hYzE2 MmEzYjMwYWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDBAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANjJxg5RY2StfLPjC9lE51Xz6Oomcs8FQWZYQSclgNEImjfa01iS 6Ym23K8j63uV5vRbosQD6bk5Z+WDK4LKUEakGtNsLbXpi6eqrP3nZpzraAJWRloK BIb6YMPcp/21uTW8IJ4tNV19aHtdYF5skhNPoKCb3Yh9UtaUU4t/j53wpSzPGmQj UbxU2CXDrdSpMrm7xsZaVz9vzieKC1d/x6hf57bXkcaMUZ4J/4XNKrSUikX2eRAk xYW8VHbawuzSpYDdNk4LPaXoBNrkSzz0h0M5ixFZJe/lZIMZT1ggSrJ613HpUKbQ BxqqVhLzESJhnxuHA3Hoyhs0O14xuWp569Y= -----END CERTIFICATE-----Generated at Sun Apr 27 17:56:08 2025 by rpki-client