$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6/b702a54f-cb84-3f3d-8844-5043f149c734.roa File: b702a54f-cb84-3f3d-8844-5043f149c734.roa (raw, json) Hash identifier: GjRBTeHQhch6Bt24QTYKWZRC1e4sI9/rQOF6BYrF5rg= Subject key identifier: 16:AB:04:DC:05:2A:89:9C:B3:D8:02:E0:4A:9B:87:A8:59:9E:17:8F Certificate issuer: /CN=5225c725-faab-43c9-8d24-f49817b762c6 Certificate serial: 010D0C9F43285848D7A64AD07A3C0813C8767800 Authority key identifier: D3:58:CF:0E:07:D3:BA:0E:95:94:CE:DC:C6:66:F8:1B:6A:EC:35:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6/b702a54f-cb84-3f3d-8844-5043f149c734.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 207722 IP address blocks: 2602:fb09:fff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6/5225c725-faab-43c9-8d24-f49817b762c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6/5225c725-faab-43c9-8d24-f49817b762c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:4a:d0:7a:3c:08:13:c8:76:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5225c725-faab-43c9-8d24-f49817b762c6 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=afc88e72-8899-484c-9dd4-011582f4e0b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:44:85:47:95:8c:05:f5:d6:18:5d:45:b0:8e: 45:0a:50:3f:e6:ad:03:3c:c1:06:09:05:d6:b7:83: 8c:c9:a4:b9:9e:d0:a9:3f:fe:5f:2a:6a:81:2b:a2: 74:da:d9:3b:a4:71:62:68:8d:da:9e:79:65:f5:65: c6:1a:b7:30:a5:a0:ee:4f:86:57:2a:11:b9:83:ac: 0f:02:b3:3d:44:57:d5:d1:19:9c:a1:c4:96:5f:35: bc:e1:ee:f8:be:46:74:12:07:f6:2f:db:8f:14:7f: 1e:45:3c:ee:b0:40:ec:2d:c2:0b:c5:8f:a4:11:6a: fa:ae:b8:c2:3f:f5:53:86:11:cf:88:af:3a:aa:d2: af:70:54:2e:6f:4f:55:12:3d:78:2b:1d:4d:e5:20: fd:db:fe:a6:5a:2b:a6:9e:e7:39:5a:1b:2d:38:22: 14:3c:41:5a:ef:26:17:53:42:67:fc:cc:01:4f:d4: fd:50:ce:c9:ae:27:f3:bc:67:38:02:5b:78:b7:06: ef:92:1b:93:6f:a2:8d:3f:a0:95:f6:ad:5b:b0:7a: 07:25:fe:55:5e:ec:bf:da:78:bd:11:da:ef:14:57: b1:f2:93:d8:c4:a8:9a:82:67:5b:69:2c:96:24:97: 24:1e:d6:88:8b:56:15:c0:65:82:7d:fa:ef:78:5c: e2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AB:04:DC:05:2A:89:9C:B3:D8:02:E0:4A:9B:87:A8:59:9E:17:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6/b702a54f-cb84-3f3d-8844-5043f149c734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6/5225c725-faab-43c9-8d24-f49817b762c6.crl X509v3 Authority Key Identifier: keyid:D3:58:CF:0E:07:D3:BA:0E:95:94:CE:DC:C6:66:F8:1B:6A:EC:35:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb09:fff::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:78:cc:85:44:83:f8:61:05:3e:b9:ec:00:20:c1:fd:9b:de: 6d:52:dc:d6:5a:5d:bc:80:70:da:dc:d5:ef:d8:7e:80:9f:57: 7f:c7:c6:f5:b3:a7:ca:7d:f4:47:fe:90:c6:a9:f2:8d:eb:c7: d8:c2:2c:6d:68:48:75:19:0e:b1:05:f3:1e:8f:1a:bc:44:7c: 12:63:22:42:a2:d9:68:26:31:6b:c8:1e:f8:de:56:23:1a:a3: 1b:ac:1a:da:53:f4:95:c5:33:4e:ac:f1:2a:5a:4b:31:75:6c: 8a:f2:a4:3d:9b:75:4e:ea:81:74:5a:da:4e:c2:e2:a7:c0:ed: 08:74:98:38:7b:d9:cf:00:a8:2f:52:ac:1e:2e:0d:8f:c2:a1: 00:68:06:d0:4c:5b:ae:6c:8d:fe:ac:c8:b1:1f:b8:12:d1:df: 1b:f9:a9:6f:b3:f3:f8:d1:e2:da:d7:2d:86:2c:37:41:50:1a: ad:9c:16:64:b1:6a:7a:ef:8b:5d:74:48:64:4f:d2:20:15:7e: da:50:27:c0:24:ab:a3:90:42:d7:f7:d9:9e:38:1a:ec:de:89: 9f:fb:57:f4:92:fb:30:a0:e0:c6:62:93:ad:f4:92:25:54:b5: cb:7d:a1:26:fc:67:74:9c:72:9e:73:31:74:16:68:b1:81:3a: 5d:f9:1b:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjXpkrQejwIE8h2eAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIyNWM3MjUtZmFhYi00M2M5LThkMjQtZjQ5ODE3Yjc2 MmM2MB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk YWZjODhlNzItODg5OS00ODRjLTlkZDQtMDExNTgyZjRlMGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0SFR5WMBfXWGF1FsI5FClA/5q0DPMEGCQXW t4OMyaS5ntCpP/5fKmqBK6J02tk7pHFiaI3annll9WXGGrcwpaDuT4ZXKhG5g6wP ArM9RFfV0RmcocSWXzW84e74vkZ0Egf2L9uPFH8eRTzusEDsLcILxY+kEWr6rrjC P/VThhHPiK86qtKvcFQub09VEj14Kx1N5SD92/6mWiumnuc5WhstOCIUPEFa7yYX U0Jn/MwBT9T9UM7JrifzvGc4Alt4twbvkhuTb6KNP6CV9q1bsHoHJf5VXuy/2ni9 EdrvFFex8pPYxKiagmdbaSyWJJckHtaIi1YVwGWCffrveFziNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBarBNwFKomcs9gC4Eqbh6hZnhePMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MjI1 YzcyNS1mYWFiLTQzYzktOGQyNC1mNDk4MTdiNzYyYzYvYjcwMmE1NGYtY2I4NC0z ZjNkLTg4NDQtNTA0M2YxNDljNzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTIyNWM3MjUtZmFhYi00M2M5LThk MjQtZjQ5ODE3Yjc2MmM2LzUyMjVjNzI1LWZhYWItNDNjOS04ZDI0LWY0OTgxN2I3 NjJjNi5jcmwwHwYDVR0jBBgwFoAU01jPDgfTug6VlM7cxmb4G2rsNQQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MjI1YzcyNS1mYWFiLTQzYzktOGQyNC1mNDk4 MTdiNzYyYzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7CQ// MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKh4zIVEg/hhBT657AAgwf2b3m1S3NZaXbyAcNrc1e/YfoCfV3/H xvWzp8p99Ef+kMap8o3rx9jCLG1oSHUZDrEF8x6PGrxEfBJjIkKi2WgmMWvIHvje ViMaoxusGtpT9JXFM06s8SpaSzF1bIrypD2bdU7qgXRa2k7C4qfA7Qh0mDh72c8A qC9SrB4uDY/CoQBoBtBMW65sjf6syLEfuBLR3xv5qW+z8/jR4trXLYYsN0FQGq2c FmSxanrvi110SGRP0iAVftpQJ8Akq6OQQtf32Z44GuzeiZ/7V/SS+zCg4MZik630 kiVUtct9oSb8Z3Sccp5zMXQWaLGBOl35Gyk= -----END CERTIFICATE-----Generated at Tue Apr 29 12:08:24 2025 by rpki-client