$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/4e0ffa67-e7db-3331-95d2-44e9847c6668.roa File: 4e0ffa67-e7db-3331-95d2-44e9847c6668.roa (raw, json) Hash identifier: Yv4Jw7vmoKaCwESVcX3zNZbqwd5ThFSG6p9ycC2fpOo= Subject key identifier: 83:19:73:82:6C:17:96:F8:26:89:25:9D:11:66:D2:45:AA:91:AE:13 Certificate issuer: /CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78 Certificate serial: 010D0C9F432858499DBF2A9267006068DD3A1780 Authority key identifier: 1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/4e0ffa67-e7db-3331-95d2-44e9847c6668.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 11721 IP address blocks: 2602:fa8a:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:2a:92:67:00:60:68:dd:3a:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=aa4231ef-615f-4e96-8bc4-90c4ddff9ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:31:d8:bc:b4:95:94:a4:e8:71:10:d9:aa:42: 82:af:de:14:88:6a:f0:a8:cd:7f:8b:ae:9b:0b:72: 29:96:50:e4:60:c5:44:73:33:ad:ab:54:59:09:3b: 22:5b:f5:33:d7:e3:48:3a:a2:93:3f:fe:08:b6:a3: 85:ca:1a:f6:77:16:53:75:fd:bd:86:80:d6:a3:ba: 84:83:e8:61:71:a1:8b:69:3a:71:23:8c:bd:7d:0f: 14:d7:76:57:d6:c3:2f:67:18:98:eb:97:2c:e4:bb: 3c:34:f3:f6:38:01:7f:07:b5:86:d4:40:58:e3:5f: 89:92:bb:b5:2a:d5:52:83:59:44:0f:31:e3:a0:c6: 96:e0:22:27:e3:4e:98:1a:cb:ae:2c:2e:98:b7:1d: 25:d6:bd:86:3c:f5:da:26:68:80:4b:c5:86:70:02: 2e:9c:af:be:02:fb:b3:09:49:04:c8:af:0d:ab:1a: 49:fe:7a:de:1e:97:6f:1b:b8:d3:67:50:d8:04:88: 26:bb:2e:e7:0c:ae:c0:47:07:df:f0:1b:e6:5c:d9: 3f:01:8f:22:61:b4:f7:84:a0:cb:13:b7:7c:0b:fd: 3e:9c:bc:13:a8:c3:68:06:bf:12:6f:31:53:67:a5: d8:83:72:ac:ba:fd:e6:e4:7c:96:07:a4:d5:30:50: f9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:19:73:82:6C:17:96:F8:26:89:25:9D:11:66:D2:45:AA:91:AE:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/4e0ffa67-e7db-3331-95d2-44e9847c6668.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl X509v3 Authority Key Identifier: keyid:1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa8a:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:d8:06:81:d0:76:37:77:85:72:44:97:2a:e1:af:92:51:74: b3:9c:a0:5c:17:57:aa:c6:aa:63:1f:0b:e9:24:ea:f4:03:b1: c9:af:24:ac:1f:af:de:8f:93:72:29:f4:a4:08:84:c4:0d:31: d8:42:0a:4f:63:69:55:d0:70:07:1d:4d:12:ae:37:36:6e:82: e0:47:65:97:6f:31:26:ab:66:b7:c1:29:61:26:34:c4:60:db: 81:03:8c:e7:e4:36:5e:03:62:fc:c6:30:50:e7:6b:d6:41:5a: 9a:bb:f0:f2:d7:d0:57:38:ff:64:c6:a4:8f:2a:6a:bb:cb:68: 2c:7b:e2:58:91:34:2e:5e:af:68:98:70:e3:1c:82:c8:b5:d9: 88:38:9e:68:6b:63:bf:fc:f4:ca:05:a2:79:b0:54:7d:00:62: 8d:2f:85:0e:06:62:9e:01:1e:69:4d:3d:b4:05:06:26:25:e0: 91:f2:54:77:e7:ad:e1:3a:42:60:51:f3:0a:b0:9e:f9:72:e6: 83:2e:8b:b5:39:6b:20:85:b8:56:29:86:1b:22:71:90:a7:fb: b5:3a:c2:e8:64:8f:c4:c7:e0:75:95:ab:6f:ef:af:ca:98:7e: 1f:7e:bc:d3:dd:20:48:d6:02:1b:46:92:57:cc:8f:e8:f8:67: 62:c8:29:af -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmdvyqSZwBgaN06F4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZmUzNjItODllNC00YWU4LWI5YTItNjFiMGU1NTIz Yzc4MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk YWE0MjMxZWYtNjE1Zi00ZTk2LThiYzQtOTBjNGRkZmY5Y2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDHYvLSVlKTocRDZqkKCr94UiGrwqM1/i66b C3IpllDkYMVEczOtq1RZCTsiW/Uz1+NIOqKTP/4ItqOFyhr2dxZTdf29hoDWo7qE g+hhcaGLaTpxI4y9fQ8U13ZX1sMvZxiY65cs5Ls8NPP2OAF/B7WG1EBY41+Jkru1 KtVSg1lEDzHjoMaW4CIn406YGsuuLC6Ytx0l1r2GPPXaJmiAS8WGcAIunK++Avuz CUkEyK8NqxpJ/nreHpdvG7jTZ1DYBIgmuy7nDK7ARwff8BvmXNk/AY8iYbT3hKDL E7d8C/0+nLwTqMNoBr8SbzFTZ6XYg3Ksuv3m5HyWB6TVMFD5NQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIMZc4JsF5b4JoklnRFm0kWqka4TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85Mjdm ZTM2Mi04OWU0LTRhZTgtYjlhMi02MWIwZTU1MjNjNzgvNGUwZmZhNjctZTdkYi0z MzMxLTk1ZDItNDRlOTg0N2M2NjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTI3ZmUzNjItODllNC00YWU4LWI5 YTItNjFiMGU1NTIzYzc4LzkyN2ZlMzYyLTg5ZTQtNGFlOC1iOWEyLTYxYjBlNTUy M2M3OC5jcmwwHwYDVR0jBBgwFoAUGtcHAlWwKq479wLsfcQu5WW9QqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MjdmZTM2Mi04OWU0LTRhZTgtYjlhMi02MWIw ZTU1MjNjNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6igAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFrYBoHQdjd3hXJElyrhr5JRdLOcoFwXV6rGqmMfC+kk6vQDscmv JKwfr96Pk3Ip9KQIhMQNMdhCCk9jaVXQcAcdTRKuNzZuguBHZZdvMSarZrfBKWEm NMRg24EDjOfkNl4DYvzGMFDna9ZBWpq78PLX0Fc4/2TGpI8qarvLaCx74liRNC5e r2iYcOMcgsi12Yg4nmhrY7/89MoFonmwVH0AYo0vhQ4GYp4BHmlNPbQFBiYl4JHy VHfnreE6QmBR8wqwnvly5oMui7U5ayCFuFYphhsicZCn+7U6wuhkj8TH4HWVq2/v r8qYfh9+vNPdIEjWAhtGklfMj+j4Z2LIKa8= -----END CERTIFICATE-----Generated at Mon Apr 28 12:30:34 2025 by rpki-client