$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/35bd10f7-b896-334e-a49e-eaf93d09cd8b.roa File: 35bd10f7-b896-334e-a49e-eaf93d09cd8b.roa (raw, json) Hash identifier: TEcACTmp+a7rRk342jtP/4aZ2D7O7PidPNcbqAA1d7c= Subject key identifier: DC:02:62:4D:2A:58:A0:E8:25:09:83:37:9C:33:80:C6:89:0D:63:EF Certificate issuer: /CN=31cdafa2-3aa9-4253-a242-08ace2acaef2 Certificate serial: 010D0C9F432858496802AE6216BD77B49E2A0F80 Authority key identifier: 61:12:27:D5:7B:B1:66:AC:C6:7D:1D:A8:85:1A:3D:97:FF:5C:F9:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/35bd10f7-b896-334e-a49e-eaf93d09cd8b.roa Signing time: Thu 03 Apr 2025 19:03:18 +0000 ROA not before: Thu 03 Apr 2025 19:03:18 +0000 ROA not after: Wed 02 Jul 2025 19:03:18 +0000 asID: 8987 IP address blocks: 2602:f702:22a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:02:ae:62:16:bd:77:b4:9e:2a:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31cdafa2-3aa9-4253-a242-08ace2acaef2 Validity Not Before: Apr 3 19:03:18 2025 GMT Not After : Jul 2 19:03:18 2025 GMT Subject: CN=d1e1b1fe-41ec-457a-b657-24db3c5bf2a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e3:95:ba:35:03:fd:5e:33:79:1c:b8:72:8d: 23:a3:26:62:a0:28:f1:3c:3e:9a:4e:a6:67:e7:c6: 36:e8:f0:ca:14:74:a0:84:3b:c3:97:c9:5e:05:6e: f1:7f:02:aa:14:39:72:84:3e:c6:a4:2a:e0:f0:2b: 16:b2:a0:ee:d7:c5:98:b8:f8:f3:9a:35:d3:05:3c: 85:b2:9b:73:12:33:2d:2c:80:7e:cf:90:c4:4f:45: f6:14:f9:52:6a:8e:36:62:5b:a8:fc:1c:7a:14:5e: 2f:8b:9d:21:75:3c:4b:4d:cc:52:5c:aa:f6:cc:a9: 96:c0:4b:1b:5b:bc:c1:23:b0:ca:a4:3f:1e:50:41: b0:fe:d4:ba:47:eb:40:3b:7d:26:60:c3:f5:c3:f2: 24:13:20:d0:5e:9b:2c:9e:8e:7d:06:32:07:d5:cf: 5d:ab:71:fc:a5:a8:e6:17:41:bf:c3:1a:fc:17:f0: 35:c8:2f:27:8e:b8:0e:3e:6b:72:3c:63:89:dc:1f: 20:a9:de:d1:84:78:ff:94:b2:f5:f2:17:84:b8:f7: 0c:06:f5:5a:a5:d3:7c:b2:5c:fd:97:e7:df:69:bb: 8f:be:53:3d:5d:09:e2:cb:3f:53:a1:4a:1d:e1:90: 68:fd:0e:44:fd:5f:f2:1e:f0:52:79:14:f5:25:e5: 58:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:02:62:4D:2A:58:A0:E8:25:09:83:37:9C:33:80:C6:89:0D:63:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/35bd10f7-b896-334e-a49e-eaf93d09cd8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.crl X509v3 Authority Key Identifier: keyid:61:12:27:D5:7B:B1:66:AC:C6:7D:1D:A8:85:1A:3D:97:FF:5C:F9:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2.cer sbgp-ipAddrBlock: critical IPv6: 2602:f702:22a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:c5:b3:48:c1:1a:e9:c8:da:11:54:e8:ae:18:39:a5:2b:05: 86:f5:b1:d0:99:00:06:fb:87:cf:12:3f:64:94:3b:3b:a5:cb: 95:50:bf:62:e4:36:a3:f1:b5:5a:88:9e:b7:6d:2b:35:e4:3b: 95:2d:a7:1a:12:86:48:03:98:fa:f2:a3:fc:27:55:0c:86:94: 27:c6:c4:79:40:f1:fe:f7:de:98:a5:66:b0:d3:51:81:9f:f5: 8b:68:f5:58:70:d4:70:4c:21:e6:95:65:db:aa:a3:9e:da:46: d1:db:8e:36:d8:d5:ed:66:e4:73:a7:22:10:9e:34:0c:72:df: b8:e1:83:69:b5:f1:91:d0:5e:8c:ea:87:da:d5:45:ae:3a:2d: 63:fb:e2:90:5f:e5:31:a4:00:28:a1:25:9f:59:ec:1f:e6:11: 3c:b7:ac:06:85:6d:5f:7e:68:de:77:d8:34:02:73:25:85:6b: df:ee:2d:ad:12:fe:ee:86:93:79:0e:99:e7:94:78:c3:90:87: 84:a3:f9:d1:61:97:f4:48:3f:f0:0a:e6:a4:c1:52:1e:2a:43: df:c5:93:f0:fa:4b:d9:01:d2:fb:27:8a:f2:91:57:c7:3e:1d: 71:23:fc:a6:cb:cd:9e:7c:cb:3a:44:82:3e:8a:40:d3:0c:82: a6:20:fe:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEloAq5iFr13tJ4qD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzFjZGFmYTItM2FhOS00MjUzLWEyNDItMDhhY2UyYWNh ZWYyMB4XDTI1MDQwMzE5MDMxOFoXDTI1MDcwMjE5MDMxOFowLzEtMCsGA1UEAxMk ZDFlMWIxZmUtNDFlYy00NTdhLWI2NTctMjRkYjNjNWJmMmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+OVujUD/V4zeRy4co0joyZioCjxPD6aTqZn 58Y26PDKFHSghDvDl8leBW7xfwKqFDlyhD7GpCrg8CsWsqDu18WYuPjzmjXTBTyF sptzEjMtLIB+z5DET0X2FPlSao42Yluo/Bx6FF4vi50hdTxLTcxSXKr2zKmWwEsb W7zBI7DKpD8eUEGw/tS6R+tAO30mYMP1w/IkEyDQXpssno59BjIH1c9dq3H8pajm F0G/wxr8F/A1yC8njrgOPmtyPGOJ3B8gqd7RhHj/lLL18heEuPcMBvVapdN8slz9 l+ffabuPvlM9XQniyz9ToUod4ZBo/Q5E/V/yHvBSeRT1JeVY/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNwCYk0qWKDoJQmDN5wzgMaJDWPvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMWNk YWZhMi0zYWE5LTQyNTMtYTI0Mi0wOGFjZTJhY2FlZjIvMzViZDEwZjctYjg5Ni0z MzRlLWE0OWUtZWFmOTNkMDljZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzFjZGFmYTItM2FhOS00MjUzLWEy NDItMDhhY2UyYWNhZWYyLzMxY2RhZmEyLTNhYTktNDI1My1hMjQyLTA4YWNlMmFj YWVmMi5jcmwwHwYDVR0jBBgwFoAUYRIn1XuxZqzGfR2ohRo9l/9c+TQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMWNkYWZhMi0zYWE5LTQyNTMtYTI0Mi0wOGFj ZTJhY2FlZjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3AgIq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGzFs0jBGunI2hFU6K4YOaUrBYb1sdCZAAb7h88SP2SUOzuly5VQ v2LkNqPxtVqInrdtKzXkO5UtpxoShkgDmPryo/wnVQyGlCfGxHlA8f733pilZrDT UYGf9Yto9Vhw1HBMIeaVZduqo57aRtHbjjbY1e1m5HOnIhCeNAxy37jhg2m18ZHQ Xozqh9rVRa46LWP74pBf5TGkACihJZ9Z7B/mETy3rAaFbV9+aN532DQCcyWFa9/u La0S/u6Gk3kOmeeUeMOQh4Sj+dFhl/RIP/AK5qTBUh4qQ9/Fk/D6S9kB0vsnivKR V8c+HXEj/KbLzZ58yzpEgj6KQNMMgqYg/lE= -----END CERTIFICATE-----Generated at Sat Apr 26 18:01:53 2025 by rpki-client