$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/30ceb0d6-909a-396b-9517-48e7b2b06a13.roa File: 30ceb0d6-909a-396b-9517-48e7b2b06a13.roa (raw, json) Hash identifier: vxtbR/t/3LYIEiKpImq+jEkP1oMN7dIDyWwbGkh2rlI= Subject key identifier: EC:51:91:E5:82:84:FE:5F:3F:59:CA:D0:F2:0A:FF:04:75:90:A7:A1 Certificate issuer: /CN=dd3e6032-a6af-4662-8b07-848eeecc3995 Certificate serial: 010D0C9F432858499829D6AFEFD1C7779F86C91C Authority key identifier: 67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/30ceb0d6-909a-396b-9517-48e7b2b06a13.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 965 IP address blocks: 2602:faa9::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d6:af:ef:d1:c7:77:9f:86:c9:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd3e6032-a6af-4662-8b07-848eeecc3995 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=52bc7a86-66e3-49c9-8edd-7cf577a14cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5f:5e:aa:b7:53:bd:92:3c:c1:7a:50:8b:01: ca:7d:f9:46:4a:c6:e0:d1:33:6a:cd:32:8c:2b:eb: 64:96:0a:e3:d6:e4:81:b6:3b:75:4f:09:f1:2a:8e: d4:1d:e0:c7:68:98:37:54:80:73:a1:de:df:2a:c7: a8:bc:9a:7b:87:8c:07:02:b6:4b:24:9e:e1:a8:50: ca:d7:23:28:eb:68:e3:fc:ef:ff:9d:00:32:ba:e2: df:24:8b:e6:14:cd:be:8c:3e:f9:57:d7:40:b8:c8: 35:3b:9b:de:bb:a8:91:ad:dc:d4:3a:35:03:00:f6: e6:89:29:ba:34:03:72:d1:73:11:7e:0b:27:5d:90: e5:05:d5:44:5a:99:cb:9a:d4:01:4a:de:1d:2b:fc: 3d:e9:d4:d0:ca:67:6c:91:40:7e:00:6b:91:c1:b4: e8:94:a4:93:8a:44:a1:ba:9c:e8:9e:2d:33:fd:87: 23:8b:b1:87:6d:7c:b4:cf:51:f3:4d:3d:9e:6a:25: 93:36:e1:a6:19:20:c7:fc:9a:7f:c9:44:df:24:f0: e9:5e:52:2c:d6:97:cc:b1:db:a7:80:ad:49:b3:48: 59:f9:94:e6:65:e4:0a:28:ab:40:da:4d:9e:fa:24: 65:09:9e:c0:fb:ae:4f:e2:9d:b5:51:39:e1:bc:10: 41:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:51:91:E5:82:84:FE:5F:3F:59:CA:D0:F2:0A:FF:04:75:90:A7:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/30ceb0d6-909a-396b-9517-48e7b2b06a13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl X509v3 Authority Key Identifier: keyid:67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer sbgp-ipAddrBlock: critical IPv6: 2602:faa9::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:28:46:5d:59:78:68:3f:6e:8b:8a:87:52:c3:c0:3d:fe:a0: 90:5d:cb:73:2f:77:71:43:64:88:93:ed:b9:2e:03:6e:af:55: 6b:7c:03:13:cd:9e:ab:31:07:45:29:28:45:45:0f:7b:98:49: 9d:a7:45:79:f0:6b:09:12:da:fa:52:3d:87:ef:09:33:5c:5d: c7:ed:ae:09:69:e8:2b:d4:f0:f2:07:fb:d9:78:f7:cb:ff:c3: c9:91:1f:24:47:a6:a6:57:6d:ac:78:d8:03:7e:18:1a:d7:9a: 83:09:80:c1:35:b8:21:4d:9c:9a:9f:8e:95:c2:40:80:58:26: d8:f5:77:eb:f6:b4:37:75:7c:d3:48:0d:42:01:c3:ee:c4:29: 90:85:3e:56:40:1f:64:a9:dd:5e:ee:3e:98:1f:c3:1f:56:e0: e0:dd:8c:0d:01:ce:5e:49:11:2a:8e:11:cc:cf:8c:01:d9:b3: 4b:22:3d:c5:5f:7d:4a:78:b4:1d:53:25:26:f5:1b:b6:bc:f6: 01:78:a8:1a:db:68:b2:94:37:02:cf:42:69:2e:82:69:d2:84: b8:49:4d:61:93:43:2b:6e:41:08:0a:9e:d0:75:9f:a9:b6:27: 7b:00:57:90:ec:d0:aa:25:2a:a3:98:b0:2a:2e:a8:45:ca:99: 67:0d:e7:fc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmYKdav79HHd5+GyRwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQzZTYwMzItYTZhZi00NjYyLThiMDctODQ4ZWVlY2Mz OTk1MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk NTJiYzdhODYtNjZlMy00OWM5LThlZGQtN2NmNTc3YTE0Y2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl19eqrdTvZI8wXpQiwHKfflGSsbg0TNqzTKM K+tklgrj1uSBtjt1TwnxKo7UHeDHaJg3VIBzod7fKseovJp7h4wHArZLJJ7hqFDK 1yMo62jj/O//nQAyuuLfJIvmFM2+jD75V9dAuMg1O5veu6iRrdzUOjUDAPbmiSm6 NANy0XMRfgsnXZDlBdVEWpnLmtQBSt4dK/w96dTQymdskUB+AGuRwbTolKSTikSh upzoni0z/Ycji7GHbXy0z1HzTT2eaiWTNuGmGSDH/Jp/yUTfJPDpXlIs1pfMsdun gK1Js0hZ+ZTmZeQKKKtA2k2e+iRlCZ7A+65P4p21UTnhvBBBQwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOxRkeWChP5fP1nK0PIK/wR1kKehMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZDNl NjAzMi1hNmFmLTQ2NjItOGIwNy04NDhlZWVjYzM5OTUvMzBjZWIwZDYtOTA5YS0z OTZiLTk1MTctNDhlN2IyYjA2YTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGQzZTYwMzItYTZhZi00NjYyLThi MDctODQ4ZWVlY2MzOTk1L2RkM2U2MDMyLWE2YWYtNDY2Mi04YjA3LTg0OGVlZWNj Mzk5NS5jcmwwHwYDVR0jBBgwFoAUZwW65gzm7LpptisX60L/L29OAi0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZDNlNjAzMi1hNmFmLTQ2NjItOGIwNy04NDhl ZWVjYzM5OTUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL6qTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+KEZdWXhoP26LiodSw8A9/qCQXctzL3dxQ2SIk+25LgNur1VrfAMT zZ6rMQdFKShFRQ97mEmdp0V58GsJEtr6Uj2H7wkzXF3H7a4Jaegr1PDyB/vZePfL /8PJkR8kR6amV22seNgDfhga15qDCYDBNbghTZyan46VwkCAWCbY9Xfr9rQ3dXzT SA1CAcPuxCmQhT5WQB9kqd1e7j6YH8MfVuDg3YwNAc5eSREqjhHMz4wB2bNLIj3F X31KeLQdUyUm9Ru2vPYBeKga22iylDcCz0JpLoJp0oS4SU1hk0MrbkEICp7QdZ+p tid7AFeQ7NCqJSqjmLAqLqhFyplnDef8 -----END CERTIFICATE-----Generated at Sun Apr 27 00:12:14 2025 by rpki-client