$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/a8721daf-d2d4-3712-8748-5f5af775bc52.roa File: a8721daf-d2d4-3712-8748-5f5af775bc52.roa (raw, json) Hash identifier: QLqznko6+EUcQ2xDlycu5B7pZBcJGn+olL7ifk+m5dE= Subject key identifier: 19:CC:AC:6F:83:97:07:D3:74:E5:36:04:A6:51:4F:C0:E5:91:4A:6B Certificate issuer: /CN=ab1101f4-a527-459b-8c16-d78b261e6de3 Certificate serial: 010D0C9F432858498769B5DE33175E5D3BC7B280 Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/a8721daf-d2d4-3712-8748-5f5af775bc52.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 14618 IP address blocks: 2602:277:d0::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:b5:de:33:17:5e:5d:3b:c7:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=4d1d951b-86ba-4a33-a7a8-b804c45d8a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f8:aa:c1:0e:54:bb:15:42:6d:86:f3:a5:aa: 9f:ee:db:84:27:2b:2e:14:ac:b7:50:52:8c:ae:ca: bd:f1:c4:77:c1:9a:e8:ab:74:64:8f:5b:c2:3c:78: ba:66:ab:e9:cf:ab:27:e0:eb:ea:6b:4d:74:b5:63: 01:06:72:f7:f2:bd:10:13:20:9f:d4:e9:47:42:6b: aa:ed:14:2b:4a:17:09:5a:ef:ea:94:52:36:02:63: 63:b7:36:61:68:0b:eb:da:26:af:c3:69:4b:39:f6: 7e:fa:e0:a1:90:5c:93:25:d7:91:53:27:fd:36:44: 45:6d:0f:1b:37:9b:a6:05:d9:6c:98:95:eb:50:86: c4:9d:e3:57:6f:6c:1c:d0:35:81:13:49:19:46:20: 6c:3c:61:2e:18:27:67:18:50:83:d9:c5:00:2c:87: ec:34:20:eb:7f:72:60:48:2d:2d:9d:0a:cb:cd:de: d5:f3:95:28:23:ab:fd:ca:06:74:07:71:5e:15:f8: 5d:1a:2d:d6:b6:1d:1e:e8:d8:b1:51:44:1c:95:26: ce:c0:d7:8d:98:6e:b5:89:02:73:a2:99:e8:02:e8: cc:e3:de:4e:5a:c8:4e:b0:6d:df:9e:12:90:a1:48: 35:1b:2a:c5:d2:fe:a0:a6:4f:00:c8:1e:f5:7d:4a: 2d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:CC:AC:6F:83:97:07:D3:74:E5:36:04:A6:51:4F:C0:E5:91:4A:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/a8721daf-d2d4-3712-8748-5f5af775bc52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl X509v3 Authority Key Identifier: keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer sbgp-ipAddrBlock: critical IPv6: 2602:277:d0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:5d:b8:06:3b:f8:3e:fa:ec:14:66:0f:f1:f3:7a:1d:af:2d: f3:c7:de:e9:d0:d2:5a:bf:2f:a4:44:0d:42:a6:15:cc:9a:32: 04:4d:94:19:e2:63:d2:de:85:18:c1:f8:85:92:4b:32:75:87: 7e:63:1a:c7:94:5b:50:39:36:87:4d:65:16:64:a7:14:7f:ff: 06:05:73:00:0e:24:74:36:7c:df:68:77:c0:91:bc:59:20:58: 2d:52:65:2c:5b:c1:47:91:c4:99:75:74:44:a4:c7:8e:b4:ae: ab:09:bc:bf:67:c0:82:c1:99:e6:bc:90:1f:82:1c:a0:5c:35: 97:01:6b:aa:61:45:0e:c6:44:c2:63:05:3b:77:dc:19:8d:94: 70:05:ef:b6:e2:fb:bd:1c:bb:9f:15:8a:26:f0:bf:2c:58:5d: f0:df:00:38:79:9c:56:e9:d3:97:6b:0b:52:d3:ea:1f:67:e1: 2d:8d:1d:ea:ea:ad:a1:1f:09:59:62:22:41:cf:01:91:d9:04: 83:13:0d:38:54:f5:6d:41:48:08:57:35:17:31:6a:d5:12:83: 9f:3f:6b:78:07:59:6f:30:f6:21:17:58:66:e7:39:fc:22:af: e0:02:92:44:48:65:8f:e3:ad:3d:51:19:5f:fd:32:a0:a1:b0: b5:18:58:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmHabXeMxdeXTvHsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxMTAxZjQtYTUyNy00NTliLThjMTYtZDc4YjI2MWU2 ZGUzMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk NGQxZDk1MWItODZiYS00YTMzLWE3YTgtYjgwNGM0NWQ4YTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyviqwQ5UuxVCbYbzpaqf7tuEJysuFKy3UFKM rsq98cR3wZroq3Rkj1vCPHi6Zqvpz6sn4Ovqa010tWMBBnL38r0QEyCf1OlHQmuq 7RQrShcJWu/qlFI2AmNjtzZhaAvr2iavw2lLOfZ++uChkFyTJdeRUyf9NkRFbQ8b N5umBdlsmJXrUIbEneNXb2wc0DWBE0kZRiBsPGEuGCdnGFCD2cUALIfsNCDrf3Jg SC0tnQrLzd7V85UoI6v9ygZ0B3FeFfhdGi3Wth0e6NixUUQclSbOwNeNmG61iQJz opnoAujM495OWshOsG3fnhKQoUg1GyrF0v6gpk8AyB71fUot7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBnMrG+DlwfTdOU2BKZRT8DlkUprMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjEx MDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhiMjYxZTZkZTMvYTg3MjFkYWYtZDJkNC0z NzEyLTg3NDgtNWY1YWY3NzViYzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxMTAxZjQtYTUyNy00NTliLThj MTYtZDc4YjI2MWU2ZGUzL2FiMTEwMWY0LWE1MjctNDU5Yi04YzE2LWQ3OGIyNjFl NmRlMy5jcmwwHwYDVR0jBBgwFoAUmZxX2Q4wTnTaeEpb0pxnHt56bjMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjExMDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhi MjYxZTZkZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICdwDQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABJduAY7+D767BRmD/Hzeh2vLfPH3unQ0lq/L6REDUKmFcyaMgRN lBniY9LehRjB+IWSSzJ1h35jGseUW1A5NodNZRZkpxR//wYFcwAOJHQ2fN9od8CR vFkgWC1SZSxbwUeRxJl1dESkx460rqsJvL9nwILBmea8kB+CHKBcNZcBa6phRQ7G RMJjBTt33BmNlHAF77bi+70cu58ViibwvyxYXfDfADh5nFbp05drC1LT6h9n4S2N HerqraEfCVliIkHPAZHZBIMTDThU9W1BSAhXNRcxatUSg58/a3gHWW8w9iEXWGbn Ofwir+ACkkRIZY/jrT1RGV/9MqChsLUYWAc= -----END CERTIFICATE-----Generated at Sat Apr 26 13:26:35 2025 by rpki-client