$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/2c786359-f480-314d-a967-cf7233cabb0e.roa File: 2c786359-f480-314d-a967-cf7233cabb0e.roa (raw, json) Hash identifier: 3N8PtLoBO83hDLmmSdA8T9n/HuJ6V8c/3PPfBJBPmz0= Subject key identifier: 4F:2D:F0:A5:F3:9A:93:CD:9B:89:D6:E6:63:1B:58:ED:43:A0:B4:A7 Certificate issuer: /CN=ab1101f4-a527-459b-8c16-d78b261e6de3 Certificate serial: 010D0C9F432858496B7ED56D44393C7292D38000 Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/2c786359-f480-314d-a967-cf7233cabb0e.roa Signing time: Sat 05 Apr 2025 01:00:47 +0000 ROA not before: Sat 05 Apr 2025 01:00:47 +0000 ROA not after: Fri 04 Jul 2025 01:00:47 +0000 asID: 16509 IP address blocks: 2602:277:3d2::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6b:7e:d5:6d:44:39:3c:72:92:d3:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3 Validity Not Before: Apr 5 01:00:47 2025 GMT Not After : Jul 4 01:00:47 2025 GMT Subject: CN=0c770662-6b10-4a87-8c38-b137ac475327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6a:6f:42:74:c9:4d:56:5c:4a:d7:92:26:5c: 7e:3e:15:23:00:02:e2:9c:d7:1e:8d:8c:68:28:dd: f7:d4:e9:64:9a:d5:68:c1:a3:28:e7:60:0a:d3:2d: 98:3f:8a:8a:38:41:94:e8:5f:81:af:8a:cc:00:af: 65:57:8c:a1:d4:e9:4e:ed:fb:4c:a3:cf:9f:72:64: 04:26:9c:2b:83:5e:21:d6:f9:8d:a2:51:96:4b:85: 80:31:90:48:a0:f9:9c:bf:44:0e:97:bc:71:b4:f9: 82:05:b6:01:ae:33:db:67:53:12:ae:7d:16:b3:ad: b3:71:69:17:31:b5:16:83:08:b0:e9:76:48:10:31: 9c:0a:6c:eb:f8:e6:01:20:44:88:d7:69:52:e2:e9: 12:ca:8b:c3:03:28:1f:d2:f7:7e:ae:38:ed:9e:ff: 91:3a:12:2b:00:5f:4d:e2:42:84:50:f1:22:aa:e0: 53:f9:8c:84:b9:e0:9a:b8:3d:a3:58:07:20:35:0a: e8:f2:fc:5f:e2:33:a5:57:1f:5b:e3:3d:dc:b1:c8: 11:7c:44:35:8d:25:2b:df:5c:9a:ad:4c:74:68:7d: 44:e5:ab:c3:a9:d9:32:88:a9:74:33:d1:c8:c5:fe: be:de:40:49:df:ec:df:b6:91:9e:59:fb:e6:01:49: 1b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2D:F0:A5:F3:9A:93:CD:9B:89:D6:E6:63:1B:58:ED:43:A0:B4:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/2c786359-f480-314d-a967-cf7233cabb0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl X509v3 Authority Key Identifier: keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer sbgp-ipAddrBlock: critical IPv6: 2602:277:3d2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:d1:e1:8b:06:b7:27:be:d7:cb:2b:09:9f:5b:7d:10:a6:85: 2a:73:17:8c:84:ac:c5:10:25:fc:e7:72:af:45:0f:06:64:87: 14:61:cc:89:fa:0b:ef:40:a9:67:a4:84:d7:5e:99:95:b5:37: 06:57:45:78:df:3e:7a:c8:de:f2:06:86:d3:94:6f:c8:72:41: f6:60:0f:dc:30:5a:fd:24:60:9e:17:25:ab:cb:d0:04:59:fb: c3:0d:1d:10:b5:4f:1c:79:59:0b:1a:96:1b:7f:fd:74:17:11: f6:f8:9c:1d:de:c6:38:26:0f:54:05:35:e2:85:9e:5a:f9:af: 65:87:b0:3c:8b:49:dc:31:12:f9:a6:15:6b:ab:15:f6:b4:92: 67:0a:9c:81:57:5b:ad:f9:33:e3:23:aa:c0:32:21:7c:00:c4: b9:b8:67:61:96:f8:1d:3d:ff:3d:1d:a9:16:73:62:fb:69:5d: 33:05:7b:fa:01:a6:d3:b4:88:62:e0:49:7a:53:5c:4a:e5:0d: f3:09:59:4f:06:81:9f:50:15:e7:ad:b8:3c:e8:e7:9c:cc:8d: 7a:6c:ce:06:6b:58:dc:80:41:57:97:ad:85:ea:d5:2c:c0:93: c5:64:82:00:35:76:1f:d7:17:a7:09:9b:5c:f9:e4:18:87:71: 2b:31:40:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElrftVtRDk8cpLTgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxMTAxZjQtYTUyNy00NTliLThjMTYtZDc4YjI2MWU2 ZGUzMB4XDTI1MDQwNTAxMDA0N1oXDTI1MDcwNDAxMDA0N1owLzEtMCsGA1UEAxMk MGM3NzA2NjItNmIxMC00YTg3LThjMzgtYjEzN2FjNDc1MzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWpvQnTJTVZcSteSJlx+PhUjAALinNcejYxo KN331OlkmtVowaMo52AK0y2YP4qKOEGU6F+Br4rMAK9lV4yh1OlO7ftMo8+fcmQE Jpwrg14h1vmNolGWS4WAMZBIoPmcv0QOl7xxtPmCBbYBrjPbZ1MSrn0Ws62zcWkX MbUWgwiw6XZIEDGcCmzr+OYBIESI12lS4ukSyovDAygf0vd+rjjtnv+ROhIrAF9N 4kKEUPEiquBT+YyEueCauD2jWAcgNQro8vxf4jOlVx9b4z3cscgRfEQ1jSUr31ya rUx0aH1E5avDqdkyiKl0M9HIxf6+3kBJ3+zftpGeWfvmAUkbswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE8t8KXzmpPNm4nW5mMbWO1DoLSnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjEx MDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhiMjYxZTZkZTMvMmM3ODYzNTktZjQ4MC0z MTRkLWE5NjctY2Y3MjMzY2FiYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxMTAxZjQtYTUyNy00NTliLThj MTYtZDc4YjI2MWU2ZGUzL2FiMTEwMWY0LWE1MjctNDU5Yi04YzE2LWQ3OGIyNjFl NmRlMy5jcmwwHwYDVR0jBBgwFoAUmZxX2Q4wTnTaeEpb0pxnHt56bjMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjExMDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhi MjYxZTZkZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICdwPS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIbR4YsGtye+18srCZ9bfRCmhSpzF4yErMUQJfzncq9FDwZkhxRh zIn6C+9AqWekhNdemZW1NwZXRXjfPnrI3vIGhtOUb8hyQfZgD9wwWv0kYJ4XJavL 0ARZ+8MNHRC1Txx5WQsalht//XQXEfb4nB3exjgmD1QFNeKFnlr5r2WHsDyLSdwx EvmmFWurFfa0kmcKnIFXW635M+MjqsAyIXwAxLm4Z2GW+B09/z0dqRZzYvtpXTMF e/oBptO0iGLgSXpTXErlDfMJWU8GgZ9QFeetuDzo55zMjXpszgZrWNyAQVeXrYXq 1SzAk8VkggA1dh/XF6cJm1z55BiHcSsxQO0= -----END CERTIFICATE-----Generated at Sat Apr 26 15:59:39 2025 by rpki-client