$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/82c5b7ac-ff8d-3193-91d8-9a0d9a8d7252.roa File: 82c5b7ac-ff8d-3193-91d8-9a0d9a8d7252.roa (raw, json) Hash identifier: Haw0qdLhAKhCxJSubtiiIhgIcAC4SpCjiwk4guvu/9U= Subject key identifier: 24:C0:58:D2:87:23:E1:E0:69:D5:CE:8B:B7:58:CB:FF:22:A1:EA:8E Certificate issuer: /CN=98161ef7-249b-450b-ba6a-5819e613ed63 Certificate serial: 010D0C9F432858499DBF3A0CA460C164639B8680 Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/82c5b7ac-ff8d-3193-91d8-9a0d9a8d7252.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 215472 IP address blocks: 2602:2b7:c29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:3a:0c:a4:60:c1:64:63:9b:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=1fd40cb1-c442-477e-ae05-bd79aaed64ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5e:f1:21:08:70:61:39:f0:16:ba:1e:55:f7: 56:46:d0:df:8e:dd:aa:6f:ba:da:21:bf:2c:41:22: a6:e4:4f:4d:36:52:ec:ea:a7:f3:d0:7f:1c:c4:fb: 7f:90:0b:3b:08:34:5b:ab:46:f5:ce:f3:e4:df:c4: 2d:54:50:f9:c8:f8:f3:ac:b4:ad:d7:6f:57:3a:a6: 12:6f:70:57:c4:d4:9b:d2:6f:d3:ab:a4:97:55:06: 5c:d1:77:81:6d:02:68:41:74:b0:d7:cc:6f:15:8d: 68:c8:70:9b:c7:57:81:8d:bf:f3:1e:78:e1:39:cc: 05:92:73:89:98:74:c3:a3:44:70:05:1f:b4:15:9e: 65:2c:f3:18:23:6a:7a:45:d1:df:de:f8:7c:e8:9f: 08:c5:a2:cb:2f:82:ca:08:fb:0d:43:00:82:90:8d: 17:79:d3:8e:4b:b0:ab:06:0c:0d:24:20:18:04:17: 10:d4:25:02:30:72:a4:42:dc:98:30:a5:04:dd:f9: 66:79:1b:82:42:d5:1c:40:06:2e:5e:d9:5c:d1:e7: bf:ab:6e:f7:6a:18:b9:a0:93:86:09:60:16:79:ec: de:34:b4:3f:a8:f8:66:50:c5:84:30:dd:35:df:99: bc:85:f9:49:8d:35:10:7c:d0:97:e7:64:35:fd:1f: cd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C0:58:D2:87:23:E1:E0:69:D5:CE:8B:B7:58:CB:FF:22:A1:EA:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/82c5b7ac-ff8d-3193-91d8-9a0d9a8d7252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl X509v3 Authority Key Identifier: keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer sbgp-ipAddrBlock: critical IPv6: 2602:2b7:c29::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:2a:cd:fc:6a:27:d6:0a:2c:90:24:ef:36:d4:d4:2c:82:56: 52:4b:05:bb:19:4f:ab:9f:8c:b0:f9:27:ba:88:1e:b0:e8:01: 1b:9e:6c:d8:d3:98:4a:bb:5d:34:44:e1:e5:ee:5d:8f:8b:8c: 4d:56:bc:0b:21:ae:40:43:0a:92:67:ea:32:43:b1:03:55:e2: ec:04:1b:92:e0:cc:7b:52:d7:6b:61:f0:7e:09:6e:a4:ce:b6: b9:83:79:50:35:c8:83:12:a0:6e:50:09:cf:ec:10:de:a4:ae: 6e:32:3b:43:f4:a1:e8:67:74:15:20:33:83:d4:a0:f6:32:54: 48:e9:c3:91:81:5e:39:a0:90:86:47:27:03:e2:16:9e:f6:ad: 4e:38:3f:b6:e3:52:89:a0:0a:90:ca:a4:c5:6a:f1:c1:9a:25: 5d:70:38:eb:32:8b:1a:a1:91:03:66:fe:7c:29:72:62:56:ac: 57:1a:bc:a1:6d:1f:81:ab:aa:2b:91:dd:6b:18:65:65:b6:6d: c9:2f:c5:39:58:9d:d4:90:42:c6:8d:86:3d:94:73:d2:a5:13: a8:ea:13:64:45:33:3c:f3:e7:12:32:2f:0e:d2:95:76:b6:c2: 6f:66:07:b0:29:de:e3:63:91:57:0d:1a:c7:66:63:43:ba:1d: 56:5c:02:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmdvzoMpGDBZGObhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgxNjFlZjctMjQ5Yi00NTBiLWJhNmEtNTgxOWU2MTNl ZDYzMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MWZkNDBjYjEtYzQ0Mi00NzdlLWFlMDUtYmQ3OWFhZWQ2NGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol7xIQhwYTnwFroeVfdWRtDfjt2qb7raIb8s QSKm5E9NNlLs6qfz0H8cxPt/kAs7CDRbq0b1zvPk38QtVFD5yPjzrLSt129XOqYS b3BXxNSb0m/Tq6SXVQZc0XeBbQJoQXSw18xvFY1oyHCbx1eBjb/zHnjhOcwFknOJ mHTDo0RwBR+0FZ5lLPMYI2p6RdHf3vh86J8IxaLLL4LKCPsNQwCCkI0XedOOS7Cr BgwNJCAYBBcQ1CUCMHKkQtyYMKUE3flmeRuCQtUcQAYuXtlc0ee/q273ahi5oJOG CWAWeezeNLQ/qPhmUMWEMN0135m8hflJjTUQfNCX52Q1/R/NZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCTAWNKHI+HgadXOi7dYy/8ioeqOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODE2 MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5ZTYxM2VkNjMvODJjNWI3YWMtZmY4ZC0z MTkzLTkxZDgtOWEwZDlhOGQ3MjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTgxNjFlZjctMjQ5Yi00NTBiLWJh NmEtNTgxOWU2MTNlZDYzLzk4MTYxZWY3LTI0OWItNDUwYi1iYTZhLTU4MTllNjEz ZWQ2My5jcmwwHwYDVR0jBBgwFoAU1BnUREsRiVyMbWhl/etLT/KsGnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ODE2MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5 ZTYxM2VkNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICtwwp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHkqzfxqJ9YKLJAk7zbU1CyCVlJLBbsZT6ufjLD5J7qIHrDoARue bNjTmEq7XTRE4eXuXY+LjE1WvAshrkBDCpJn6jJDsQNV4uwEG5LgzHtS12th8H4J bqTOtrmDeVA1yIMSoG5QCc/sEN6krm4yO0P0oehndBUgM4PUoPYyVEjpw5GBXjmg kIZHJwPiFp72rU44P7bjUomgCpDKpMVq8cGaJV1wOOsyixqhkQNm/nwpcmJWrFca vKFtH4GrqiuR3WsYZWW2bckvxTlYndSQQsaNhj2Uc9KlE6jqE2RFMzzz5xIyLw7S lXa2wm9mB7Ap3uNjkVcNGsdmY0O6HVZcAsQ= -----END CERTIFICATE-----Generated at Sun Apr 27 04:10:53 2025 by rpki-client