$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/c733dc09-d02d-3a61-84c0-81f6e8142032.roa File: c733dc09-d02d-3a61-84c0-81f6e8142032.roa (raw, json) Hash identifier: YqJkS1MLzoxliVJ/V2ykRH9yIXbKdtxTtOYaUqCieCc= Subject key identifier: CB:08:9C:A0:C8:20:F6:04:7C:AB:4D:E1:0F:88:C3:7C:2E:D0:91:E2 Certificate issuer: /CN=ab1101f4-a527-459b-8c16-d78b261e6de3 Certificate serial: 010D0C9F4328584944693ADF3B68810CB9353100 Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/c733dc09-d02d-3a61-84c0-81f6e8142032.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 16509 IP address blocks: 2602:277:3ee::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:3a:df:3b:68:81:0c:b9:35:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=0ad66461-52dc-4047-8eeb-cd9f84a1b211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a9:a1:1f:78:21:ff:93:8f:fb:8e:e2:04:d3: 7f:05:e1:83:8e:36:32:dc:02:a5:05:8a:7d:41:23: 4c:52:47:42:f7:e0:08:ee:70:74:cd:01:20:4a:aa: 04:ae:da:99:95:1a:91:5a:22:20:d1:44:d3:18:6d: 21:4e:ca:93:4b:01:7b:ac:a0:0b:7f:67:91:09:72: 72:4c:42:be:de:32:0a:fa:cb:8f:d4:6c:91:1b:a9: 46:01:e1:6b:88:6f:c7:80:1e:4b:71:a6:36:11:4a: 15:94:cf:b7:6f:53:e5:1d:c7:32:4d:50:a3:5b:55: 23:f8:f0:f9:e3:2f:a6:e0:95:22:03:db:48:8b:40: b2:9c:88:90:3d:63:e8:52:cb:c6:d1:3d:eb:dd:6b: 5a:69:e3:2d:41:4a:ce:31:6b:53:aa:6f:2a:b6:46: 02:4d:99:a2:3d:88:54:8b:1a:7b:50:45:10:42:8a: f9:e1:d5:34:69:f0:50:9c:6a:1a:32:69:42:f7:55: f7:bb:11:69:06:c2:3e:8f:cb:d7:4e:7c:5f:40:54: 11:25:f8:18:91:2e:a7:c6:f5:eb:71:2e:6c:44:9c: 54:04:1a:86:09:14:69:38:91:3c:96:0e:11:5b:6d: 83:73:b7:40:b5:9a:95:c2:fc:4f:24:d4:37:4a:60: 9a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:08:9C:A0:C8:20:F6:04:7C:AB:4D:E1:0F:88:C3:7C:2E:D0:91:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/c733dc09-d02d-3a61-84c0-81f6e8142032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl X509v3 Authority Key Identifier: keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer sbgp-ipAddrBlock: critical IPv6: 2602:277:3ee::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:b9:30:07:65:8b:42:b8:d1:6e:15:50:c3:9d:39:9e:f0:a6: b3:0d:4b:64:9d:bf:d8:ba:ad:a4:c1:10:2b:87:60:73:92:e4: 54:6f:f3:3b:24:f9:32:f7:50:b3:34:2c:0d:ef:f1:c9:d3:61: 26:35:2e:78:f7:99:d4:8f:e9:fb:d9:82:e6:7b:7b:96:c8:f5: 44:1c:d1:13:b9:54:cd:3b:27:7e:be:0a:f6:7f:66:0f:b3:8f: c8:2f:54:ae:0a:4d:ed:00:03:41:cd:b9:88:f0:54:ab:e1:95: 1c:97:3c:e6:c9:d4:cb:90:bb:d4:b1:32:23:82:95:9e:ad:d0: 58:c6:ad:b0:62:01:88:d6:38:14:82:ce:33:a4:72:26:ae:1e: 82:33:04:39:04:ea:81:cf:42:f2:80:be:12:1a:99:91:11:de: 0d:22:5f:0e:4c:1e:3d:4f:84:b2:12:be:33:28:df:ad:29:d3: e6:2e:99:9e:b4:96:a6:fa:f0:14:89:87:e3:26:d1:17:db:7a: 89:d6:5b:e4:06:1c:bc:7f:2c:dd:65:ae:99:02:85:cf:4d:ae: 86:f5:e7:0b:17:ec:03:a2:f8:ba:2b:8b:ac:1a:75:ed:55:05: da:1b:b7:46:00:c3:1e:6c:38:c8:ac:7b:5d:35:04:a0:8a:5d: 97:89:01:63 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElEaTrfO2iBDLk1MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxMTAxZjQtYTUyNy00NTliLThjMTYtZDc4YjI2MWU2 ZGUzMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk MGFkNjY0NjEtNTJkYy00MDQ3LThlZWItY2Q5Zjg0YTFiMjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6mhH3gh/5OP+47iBNN/BeGDjjYy3AKlBYp9 QSNMUkdC9+AI7nB0zQEgSqoErtqZlRqRWiIg0UTTGG0hTsqTSwF7rKALf2eRCXJy TEK+3jIK+suP1GyRG6lGAeFriG/HgB5LcaY2EUoVlM+3b1PlHccyTVCjW1Uj+PD5 4y+m4JUiA9tIi0CynIiQPWPoUsvG0T3r3WtaaeMtQUrOMWtTqm8qtkYCTZmiPYhU ixp7UEUQQor54dU0afBQnGoaMmlC91X3uxFpBsI+j8vXTnxfQFQRJfgYkS6nxvXr cS5sRJxUBBqGCRRpOJE8lg4RW22Dc7dAtZqVwvxPJNQ3SmCabQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMsInKDIIPYEfKtN4Q+Iw3wu0JHiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjEx MDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhiMjYxZTZkZTMvYzczM2RjMDktZDAyZC0z YTYxLTg0YzAtODFmNmU4MTQyMDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxMTAxZjQtYTUyNy00NTliLThj MTYtZDc4YjI2MWU2ZGUzL2FiMTEwMWY0LWE1MjctNDU5Yi04YzE2LWQ3OGIyNjFl NmRlMy5jcmwwHwYDVR0jBBgwFoAUmZxX2Q4wTnTaeEpb0pxnHt56bjMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjExMDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhi MjYxZTZkZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICdwPu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADW5MAdli0K40W4VUMOdOZ7wprMNS2Sdv9i6raTBECuHYHOS5FRv 8zsk+TL3ULM0LA3v8cnTYSY1Lnj3mdSP6fvZguZ7e5bI9UQc0RO5VM07J36+CvZ/ Zg+zj8gvVK4KTe0AA0HNuYjwVKvhlRyXPObJ1MuQu9SxMiOClZ6t0FjGrbBiAYjW OBSCzjOkciauHoIzBDkE6oHPQvKAvhIamZER3g0iXw5MHj1PhLISvjMo360p0+Yu mZ60lqb68BSJh+Mm0RfbeonWW+QGHLx/LN1lrpkChc9Nrob15wsX7AOi+Lori6wa de1VBdobt0YAwx5sOMise101BKCKXZeJAWM= -----END CERTIFICATE-----Generated at Sat Apr 26 19:05:17 2025 by rpki-client