$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/03a9102b-694f-32ad-bc78-71bc344094a5.roa File: 03a9102b-694f-32ad-bc78-71bc344094a5.roa (raw, json) Hash identifier: YT1TbmVRo5sYmsrVPe+xZJhQiEtQhSaNIQ8srvDeFS8= Subject key identifier: 12:EB:CB:20:FD:28:C8:65:46:8F:BD:84:82:3D:26:3D:92:07:A3:CC Certificate issuer: /CN=91a20fbd-d241-4454-b2ba-4938f807efb0 Certificate serial: 010D0C9F4328584973DEE68F8993D690045DF7E0 Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/03a9102b-694f-32ad-bc78-71bc344094a5.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 138990 IP address blocks: 2602:2a4:ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:e6:8f:89:93:d6:90:04:5d:f7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0 Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=dd456f08-62ce-4d46-b23d-86aebcda54bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:79:2e:d7:75:71:0f:a2:c8:4e:d6:3b:2d:92: 3b:1a:53:8d:c8:66:89:19:52:27:4f:b4:a8:e1:a2: 5e:cf:df:f2:6a:25:64:73:1c:9f:7e:f5:63:5b:77: 04:cc:ef:b4:5c:30:0e:6c:7b:c2:75:85:75:d4:37: f1:7c:90:32:66:38:a8:54:50:c4:db:f2:f4:6a:a6: e2:32:ed:ac:0b:87:09:3a:25:3d:38:73:4a:56:d1: 19:15:b4:8d:69:80:1b:7d:1f:f4:1d:be:57:87:10: bc:ee:d1:f5:cf:c0:37:c4:1b:24:1c:31:5f:62:c9: af:c9:d6:6d:e3:ca:0a:f1:9f:81:46:73:5c:9f:3a: 44:b2:05:7a:c2:73:0e:26:3c:89:81:0d:84:a2:b8: 54:72:bb:ae:f8:e4:79:01:fb:0b:a2:ac:3f:f9:ec: f6:84:65:98:90:95:95:44:7c:31:a0:82:1a:e7:2c: 68:4b:a8:d6:b5:f4:15:aa:d3:cf:5e:d3:cd:e2:17: 55:4c:17:06:70:ee:d0:84:29:02:7c:6c:18:f1:fd: 9d:e3:7f:7d:6a:99:c3:d1:cd:30:83:db:89:66:06: 46:19:d0:06:52:50:e6:1a:73:09:53:3e:4d:66:c1: cc:35:ee:42:21:a4:09:68:f1:a2:90:5c:33:d5:26: b9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:EB:CB:20:FD:28:C8:65:46:8F:BD:84:82:3D:26:3D:92:07:A3:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/03a9102b-694f-32ad-bc78-71bc344094a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl X509v3 Authority Key Identifier: keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer sbgp-ipAddrBlock: critical IPv6: 2602:2a4:ff::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:27:01:fe:dd:99:34:5f:c2:0d:75:66:b6:a7:d2:8b:b9:50: 6a:4d:2b:99:7a:01:48:4b:f9:9d:7d:13:34:7d:d4:f2:59:af: 30:26:6d:16:7a:14:40:a3:ef:1b:98:e7:0e:5d:b3:8f:33:d6: 29:56:d7:97:6d:df:fe:9f:17:93:5d:31:9a:df:a7:26:29:8c: 1e:db:90:91:61:90:1e:86:70:57:98:73:ac:b9:5e:1d:c7:a6: c0:12:54:14:fc:5c:3c:a4:a7:49:5e:19:a6:07:b8:ff:e8:35: 55:a4:01:bc:47:50:98:fe:14:ad:5d:4e:95:d6:cb:54:fd:81: 63:41:03:da:d1:9e:d3:6b:62:69:b3:9c:8f:34:54:37:bd:6a: e1:6f:f4:99:17:39:3f:7e:18:91:f8:db:80:a0:a3:06:39:54: 9e:15:ed:24:11:ac:34:e7:5e:66:79:52:31:2f:1b:0e:80:6c: ea:ec:79:17:77:d3:cc:7b:63:6f:46:f4:5a:f3:97:da:07:46: 45:1c:c7:bd:e5:b7:85:39:fc:b9:36:1b:72:da:16:bf:45:05: 49:ff:9d:62:97:3c:59:97:c4:cf:d9:1e:1f:15:75:53:f5:23: da:5f:71:77:7a:dc:4e:3d:a5:49:74:66:25:aa:c8:97:0d:b7: 05:7b:eb:f2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElz3uaPiZPWkARd9+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFhMjBmYmQtZDI0MS00NDU0LWIyYmEtNDkzOGY4MDdl ZmIwMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk ZGQ0NTZmMDgtNjJjZS00ZDQ2LWIyM2QtODZhZWJjZGE1NGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXku13VxD6LITtY7LZI7GlONyGaJGVInT7So 4aJez9/yaiVkcxyffvVjW3cEzO+0XDAObHvCdYV11DfxfJAyZjioVFDE2/L0aqbi Mu2sC4cJOiU9OHNKVtEZFbSNaYAbfR/0Hb5XhxC87tH1z8A3xBskHDFfYsmvydZt 48oK8Z+BRnNcnzpEsgV6wnMOJjyJgQ2EorhUcruu+OR5AfsLoqw/+ez2hGWYkJWV RHwxoIIa5yxoS6jWtfQVqtPPXtPN4hdVTBcGcO7QhCkCfGwY8f2d4399apnD0c0w g9uJZgZGGdAGUlDmGnMJUz5NZsHMNe5CIaQJaPGikFwz1Sa5swIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBLryyD9KMhlRo+9hII9Jj2SB6PMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MWEy MGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4ZjgwN2VmYjAvMDNhOTEwMmItNjk0Zi0z MmFkLWJjNzgtNzFiYzM0NDA5NGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTFhMjBmYmQtZDI0MS00NDU0LWIy YmEtNDkzOGY4MDdlZmIwLzkxYTIwZmJkLWQyNDEtNDQ1NC1iMmJhLTQ5MzhmODA3 ZWZiMC5jcmwwHwYDVR0jBBgwFoAUtn7s2ynC3v5dSgA3ROxJkNFVVs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MWEyMGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4 ZjgwN2VmYjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICpAD/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGMnAf7dmTRfwg11Zran0ou5UGpNK5l6AUhL+Z19EzR91PJZrzAm bRZ6FECj7xuY5w5ds48z1ilW15dt3/6fF5NdMZrfpyYpjB7bkJFhkB6GcFeYc6y5 Xh3HpsASVBT8XDykp0leGaYHuP/oNVWkAbxHUJj+FK1dTpXWy1T9gWNBA9rRntNr YmmznI80VDe9auFv9JkXOT9+GJH424CgowY5VJ4V7SQRrDTnXmZ5UjEvGw6AbOrs eRd308x7Y29G9Frzl9oHRkUcx73lt4U5/Lk2G3LaFr9FBUn/nWKXPFmXxM/ZHh8V dVP1I9pfcXd63E49pUl0ZiWqyJcNtwV76/I= -----END CERTIFICATE-----Generated at Sat Apr 26 18:07:51 2025 by rpki-client