$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/c3a590de-e964-3608-b8eb-bd811473f6cc.roa File: c3a590de-e964-3608-b8eb-bd811473f6cc.roa (raw, json) Hash identifier: kfHxo9/V2fU7fpnGcMU7D1NLA5LS3O9YntutE36xl0Q= Subject key identifier: 70:D9:29:2D:A6:76:DA:6E:57:69:A6:63:CC:64:90:AC:3D:1F:5B:4B Certificate issuer: /CN=98161ef7-249b-450b-ba6a-5819e613ed63 Certificate serial: 010D0C9F43285849797446DC547FAA29CECB7580 Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/c3a590de-e964-3608-b8eb-bd811473f6cc.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 53667 IP address blocks: 2602:2b7:c44::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:46:dc:54:7f:aa:29:ce:cb:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63 Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=7c0bc1ad-a786-4053-a93d-4b0d65f922a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c2:32:ba:0f:2d:ce:47:43:74:74:77:75:f8: e1:20:f3:db:63:a3:8a:81:5f:b8:da:04:70:21:dc: 91:9e:b7:90:ee:b0:ac:3d:95:46:81:cd:2d:56:b9: 2f:50:a0:43:92:ac:2e:3a:38:fe:2f:ee:bc:22:32: 7f:9a:a0:0d:7a:6e:3c:dc:88:02:51:c5:48:dd:01: dd:c9:33:27:0b:c3:ae:57:66:35:b9:d2:c8:db:c8: cf:4c:1a:6e:39:29:35:58:99:89:14:55:e1:27:d7: 27:66:7d:5c:89:d0:fd:9a:99:c5:35:3a:6d:1b:26: 98:e3:92:f4:ef:ce:82:75:43:b9:5b:ff:61:2b:f4: 16:02:7f:68:d0:65:85:6b:8f:46:fe:d6:37:72:f8: 86:77:af:6f:1c:29:d4:fe:9c:57:58:62:f6:ea:e0: ec:92:ad:f1:4c:19:d8:a3:56:1f:40:dc:23:2e:36: f6:38:08:70:8b:6a:0b:2a:86:1d:c3:ba:3c:6a:22: 5f:d7:b1:f9:05:83:7b:61:f3:7a:6b:1b:ec:f8:87: 8f:26:0c:da:eb:20:22:0a:ff:60:5d:98:34:04:28: 06:3c:77:73:0f:f3:27:e9:c0:de:95:63:17:9a:b6: 12:4a:ef:d0:61:80:da:ee:ea:04:be:f7:41:99:42: 2b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D9:29:2D:A6:76:DA:6E:57:69:A6:63:CC:64:90:AC:3D:1F:5B:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/c3a590de-e964-3608-b8eb-bd811473f6cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl X509v3 Authority Key Identifier: keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer sbgp-ipAddrBlock: critical IPv6: 2602:2b7:c44::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:47:41:bf:52:c7:4c:d8:4d:bb:6b:84:fc:29:b9:d4:41:ce: 36:cd:22:80:37:45:c7:3b:de:61:e3:0f:08:e2:d7:de:19:ac: d2:aa:19:cd:f1:64:76:ee:68:7b:56:1a:84:09:7f:56:a1:3d: b0:05:14:a6:f5:48:28:70:dd:58:2c:23:a8:2d:e8:52:9a:00: 92:ea:76:9f:d9:6b:a2:5e:88:51:34:11:f3:5c:26:52:91:29: 57:59:51:b4:c8:d9:b0:15:77:56:fc:f2:0c:42:6f:3e:48:d9: 3b:24:67:15:30:ca:3d:43:03:2b:be:cc:9a:da:15:c8:c7:8b: 1c:43:ed:a1:78:ac:18:48:d0:4a:ae:85:d3:0e:67:e0:5f:d0: cf:86:81:08:ad:d7:c6:7b:c7:83:ad:2e:db:15:1c:94:5c:0e: 15:1a:66:ce:65:c7:32:8c:ad:08:17:00:92:54:eb:55:22:0f: 7a:9a:5a:b2:87:3b:05:36:ac:61:a6:cd:9e:12:bb:c9:8f:41: 58:f9:39:b3:81:23:8d:d4:43:a8:62:7f:b7:41:26:32:5b:90: a2:18:49:93:75:75:48:8c:fb:1f:ce:e1:93:14:e8:f2:d5:f4: 84:45:8b:09:bc:23:39:17:90:84:ef:96:04:46:16:5f:70:79: 92:1b:5c:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl5dEbcVH+qKc7LdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgxNjFlZjctMjQ5Yi00NTBiLWJhNmEtNTgxOWU2MTNl ZDYzMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk N2MwYmMxYWQtYTc4Ni00MDUzLWE5M2QtNGIwZDY1ZjkyMmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8Iyug8tzkdDdHR3dfjhIPPbY6OKgV+42gRw IdyRnreQ7rCsPZVGgc0tVrkvUKBDkqwuOjj+L+68IjJ/mqANem483IgCUcVI3QHd yTMnC8OuV2Y1udLI28jPTBpuOSk1WJmJFFXhJ9cnZn1cidD9mpnFNTptGyaY45L0 786CdUO5W/9hK/QWAn9o0GWFa49G/tY3cviGd69vHCnU/pxXWGL26uDskq3xTBnY o1YfQNwjLjb2OAhwi2oLKoYdw7o8aiJf17H5BYN7YfN6axvs+IePJgza6yAiCv9g XZg0BCgGPHdzD/Mn6cDelWMXmrYSSu/QYYDa7uoEvvdBmUIrHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHDZKS2mdtpuV2mmY8xkkKw9H1tLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODE2 MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5ZTYxM2VkNjMvYzNhNTkwZGUtZTk2NC0z NjA4LWI4ZWItYmQ4MTE0NzNmNmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTgxNjFlZjctMjQ5Yi00NTBiLWJh NmEtNTgxOWU2MTNlZDYzLzk4MTYxZWY3LTI0OWItNDUwYi1iYTZhLTU4MTllNjEz ZWQ2My5jcmwwHwYDVR0jBBgwFoAU1BnUREsRiVyMbWhl/etLT/KsGnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ODE2MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5 ZTYxM2VkNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICtwxE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACdHQb9Sx0zYTbtrhPwpudRBzjbNIoA3Rcc73mHjDwji194ZrNKq Gc3xZHbuaHtWGoQJf1ahPbAFFKb1SChw3VgsI6gt6FKaAJLqdp/Za6JeiFE0EfNc JlKRKVdZUbTI2bAVd1b88gxCbz5I2TskZxUwyj1DAyu+zJraFcjHixxD7aF4rBhI 0EquhdMOZ+Bf0M+GgQit18Z7x4OtLtsVHJRcDhUaZs5lxzKMrQgXAJJU61UiD3qa WrKHOwU2rGGmzZ4Su8mPQVj5ObOBI43UQ6hif7dBJjJbkKIYSZN1dUiM+x/O4ZMU 6PLV9IRFiwm8IzkXkITvlgRGFl9weZIbXMc= -----END CERTIFICATE-----Generated at Sun Apr 27 04:17:13 2025 by rpki-client