$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/432bb520-6b1c-359c-8425-18dca6b8785b.roa File: 432bb520-6b1c-359c-8425-18dca6b8785b.roa (raw, json) Hash identifier: 6mCF2aKzpBOaHMwFJFYNzlo/6X6VcIAa00m7MDu6F7o= Subject key identifier: 10:AD:4B:0A:BE:C5:66:0F:39:2D:6B:D0:35:67:57:42:DA:B5:33:09 Certificate issuer: /CN=25cf742f-4f64-4e51-b004-d972a8dd5948 Certificate serial: 010D0C9F43285848E7012037B4364EA655BF7B00 Authority key identifier: 07:A1:5E:98:21:95:76:BD:38:FA:D2:3A:0E:71:8E:7B:19:0C:AF:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/432bb520-6b1c-359c-8425-18dca6b8785b.roa Signing time: Sun 16 Feb 2025 14:00:52 +0000 ROA not before: Sun 16 Feb 2025 14:00:52 +0000 ROA not after: Sat 17 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 2602:f84e::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/25cf742f-4f64-4e51-b004-d972a8dd5948.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/25cf742f-4f64-4e51-b004-d972a8dd5948.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e7:01:20:37:b4:36:4e:a6:55:bf:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25cf742f-4f64-4e51-b004-d972a8dd5948 Validity Not Before: Feb 16 14:00:52 2025 GMT Not After : May 17 13:00:52 2025 GMT Subject: CN=693ac0dd-2ca2-497e-8eb8-f26461b7d09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e6:ad:9f:0c:cd:9c:83:d9:05:28:c8:28:df: 6d:d1:4a:2b:e2:8f:8d:fd:87:6a:6c:ad:25:24:22: d8:37:df:d6:4f:54:8b:0e:41:7d:c4:ff:8e:c0:e5: 2c:ea:02:b2:5a:e8:50:8a:b2:8e:31:f3:4d:5b:7e: 24:6e:7f:4f:4e:ac:a5:57:c7:62:41:1a:ba:64:96: 59:39:80:00:64:5e:a1:e4:9d:95:fe:00:a1:71:26: 64:66:cc:17:e2:d3:79:29:0f:9d:84:24:41:51:37: 3b:84:6b:3d:fe:d4:f4:ef:3c:dd:e8:37:a1:75:78: 01:f1:a5:7d:28:f9:a3:0b:7f:09:5e:50:1d:89:58: ed:a7:ef:07:9e:0d:8f:e4:d3:59:90:88:4a:f1:5e: 2d:4f:5f:fb:8f:04:2c:8d:a2:d7:ed:63:46:ac:5d: 6c:ad:ff:cf:b0:f2:36:fa:5b:59:2c:b7:72:cd:a1: 0c:ca:91:ab:e1:5a:05:f1:d2:af:65:0b:23:11:fc: 48:bb:e4:ae:11:28:d0:30:fc:0b:8a:b1:ba:dc:3e: 30:24:1f:27:ef:a7:b9:7b:56:98:97:d4:be:1f:d6: bf:02:27:08:4b:5c:f3:a7:f4:cb:eb:ea:b9:31:3c: 2b:a8:a9:55:36:f8:6b:73:f6:12:c4:82:66:ca:28: b8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AD:4B:0A:BE:C5:66:0F:39:2D:6B:D0:35:67:57:42:DA:B5:33:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/432bb520-6b1c-359c-8425-18dca6b8785b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/25cf742f-4f64-4e51-b004-d972a8dd5948.crl X509v3 Authority Key Identifier: keyid:07:A1:5E:98:21:95:76:BD:38:FA:D2:3A:0E:71:8E:7B:19:0C:AF:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948.cer sbgp-ipAddrBlock: critical IPv6: 2602:f84e::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:87:40:96:b0:08:c5:4c:e2:b0:f1:9f:64:35:56:8c:15:29: d6:fd:e2:53:cf:a8:f4:ef:1c:cf:49:b3:b9:e4:7e:89:3d:10: 2c:67:73:93:8a:46:31:cc:85:88:bc:2f:bc:bf:9e:fd:fd:ee: 65:7a:f9:7e:e8:06:5b:b7:7a:01:8e:c2:c7:73:1a:b7:21:aa: 67:df:53:87:13:fe:bf:6b:73:5e:20:f0:cd:80:2e:ce:c0:a2: c5:68:4d:1c:0b:f1:b6:2c:e9:aa:af:b4:00:05:1e:fc:66:f3: cd:1a:6c:9f:26:33:5e:08:b9:35:3e:91:b5:8b:df:eb:a2:89: 27:30:af:3f:e2:26:21:08:87:66:91:13:05:7e:3d:95:19:47: 27:4c:df:6d:3b:0a:c5:6d:cd:f6:95:5f:17:4d:50:ed:62:aa: e3:b1:f8:af:73:66:a8:1f:ee:4f:40:3c:05:df:2c:47:9f:c5: d7:7f:65:8a:01:2e:b2:77:a4:ef:0c:d7:e3:f6:ba:68:f3:7c: fa:47:81:7d:27:4f:c3:ed:31:63:9f:9f:05:24:a0:cf:d0:a4: 81:cf:85:3b:95:38:61:75:5a:e7:1f:16:e8:59:e7:f7:5f:2d: c8:ea:2c:b5:76:5a:f3:ee:41:5c:9c:72:39:87:00:de:a4:c8: 30:0b:e1:a1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjnASA3tDZOplW/ewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVjZjc0MmYtNGY2NC00ZTUxLWIwMDQtZDk3MmE4ZGQ1 OTQ4MB4XDTI1MDIxNjE0MDA1MloXDTI1MDUxNzEzMDA1MlowLzEtMCsGA1UEAxMk NjkzYWMwZGQtMmNhMi00OTdlLThlYjgtZjI2NDYxYjdkMDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguatnwzNnIPZBSjIKN9t0Uor4o+N/YdqbK0l JCLYN9/WT1SLDkF9xP+OwOUs6gKyWuhQirKOMfNNW34kbn9PTqylV8diQRq6ZJZZ OYAAZF6h5J2V/gChcSZkZswX4tN5KQ+dhCRBUTc7hGs9/tT07zzd6DehdXgB8aV9 KPmjC38JXlAdiVjtp+8Hng2P5NNZkIhK8V4tT1/7jwQsjaLX7WNGrF1srf/PsPI2 +ltZLLdyzaEMypGr4VoF8dKvZQsjEfxIu+SuESjQMPwLirG63D4wJB8n76e5e1aY l9S+H9a/AicIS1zzp/TL6+q5MTwrqKlVNvhrc/YSxIJmyii42QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBCtSwq+xWYPOS1r0DVnV0LatTMJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNWNm NzQyZi00ZjY0LTRlNTEtYjAwNC1kOTcyYThkZDU5NDgvNDMyYmI1MjAtNmIxYy0z NTljLTg0MjUtMThkY2E2Yjg3ODViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjVjZjc0MmYtNGY2NC00ZTUxLWIw MDQtZDk3MmE4ZGQ1OTQ4LzI1Y2Y3NDJmLTRmNjQtNGU1MS1iMDA0LWQ5NzJhOGRk NTk0OC5jcmwwHwYDVR0jBBgwFoAUB6FemCGVdr04+tI6DnGOexkMr2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNWNmNzQyZi00ZjY0LTRlNTEtYjAwNC1kOTcy YThkZDU5NDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL4TgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAqYdAlrAIxUzisPGfZDVWjBUp1v3iU8+o9O8cz0mzueR+iT0QLGdz k4pGMcyFiLwvvL+e/f3uZXr5fugGW7d6AY7Cx3MatyGqZ99ThxP+v2tzXiDwzYAu zsCixWhNHAvxtizpqq+0AAUe/GbzzRpsnyYzXgi5NT6RtYvf66KJJzCvP+ImIQiH ZpETBX49lRlHJ0zfbTsKxW3N9pVfF01Q7WKq47H4r3NmqB/uT0A8Bd8sR5/F139l igEusnek7wzX4/a6aPN8+keBfSdPw+0xY5+fBSSgz9Ckgc+FO5U4YXVa5x8W6Fnn 918tyOostXZa8+5BXJxyOYcA3qTIMAvhoQ== -----END CERTIFICATE-----Generated at Sat Apr 26 19:24:09 2025 by rpki-client