$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/c80cabcf-920d-3fa2-99ce-e809acf2666d.roa File: c80cabcf-920d-3fa2-99ce-e809acf2666d.roa (raw, json) Hash identifier: l4eSM8NPZxL/xJXzAO5YTNPIuNiahvLRd4ADgwVXxjM= Subject key identifier: 3C:F2:A7:93:A9:AE:26:6B:76:37:4F:C1:35:7F:16:05:85:0E:4C:92 Certificate issuer: /CN=4ee37184-86de-48c9-af35-5d102d140fa6 Certificate serial: 010D0C9F432858499CE0E593CB647A311BCEA180 Authority key identifier: CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/c80cabcf-920d-3fa2-99ce-e809acf2666d.roa Signing time: Tue 22 Apr 2025 17:33:04 +0000 ROA not before: Tue 22 Apr 2025 17:33:04 +0000 ROA not after: Mon 21 Jul 2025 17:33:04 +0000 asID: 401538 IP address blocks: 2602:f766:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:e0:e5:93:cb:64:7a:31:1b:ce:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee37184-86de-48c9-af35-5d102d140fa6 Validity Not Before: Apr 22 17:33:04 2025 GMT Not After : Jul 21 17:33:04 2025 GMT Subject: CN=40c71ba6-12ac-455b-8258-180681e123e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:bf:b0:9e:df:12:fc:32:6b:e2:8a:d4:30:76: 42:5e:09:2a:4e:cf:6e:e2:20:e2:6d:17:50:3f:60: 53:59:8d:a3:db:7c:b9:19:be:cb:64:6b:f1:dd:08: d7:d6:17:f4:88:7e:45:40:f9:e7:56:a1:55:61:fb: 70:c6:ad:c1:c1:d1:69:b8:3f:57:7b:df:36:55:d1: be:dc:74:02:47:26:c2:44:d1:71:5d:22:51:09:68: 7b:28:8a:9f:8f:57:d6:33:d6:c6:08:5d:42:f8:10: 77:59:5c:89:de:1e:a2:3b:5b:20:28:48:a5:71:e2: 0b:f4:ef:d2:5b:4c:de:d8:7a:95:92:7a:0b:43:36: f5:a0:97:df:99:32:1a:f8:32:e5:df:90:ae:47:08: a3:11:75:90:6e:60:2e:e0:2b:5c:ee:a4:7b:14:1c: b9:64:e4:f8:59:bd:17:73:67:f4:7c:a8:3b:35:de: 0a:fe:af:46:85:06:64:6f:aa:56:9e:a1:fd:cb:fe: 35:64:5a:81:08:03:5a:9b:a7:47:58:fd:b5:fc:c1: d8:49:f0:3f:bb:e8:89:ab:41:ce:09:a9:84:8f:d9: d2:60:3a:b6:b1:4f:25:c3:2d:32:36:1d:a9:2a:56: 65:90:25:99:6e:88:5e:6e:32:1c:02:54:bb:67:01: 8d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F2:A7:93:A9:AE:26:6B:76:37:4F:C1:35:7F:16:05:85:0E:4C:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/c80cabcf-920d-3fa2-99ce-e809acf2666d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl X509v3 Authority Key Identifier: keyid:CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer sbgp-ipAddrBlock: critical IPv6: 2602:f766:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:31:62:90:88:4e:d9:bd:ae:cd:39:01:08:3e:59:59:f8:15: 6a:75:b6:03:77:d9:35:7b:eb:2d:8b:4f:7d:67:1c:c4:53:e3: 5a:90:af:6a:5e:da:04:f4:1c:ef:b6:d1:2e:d9:2d:76:cc:1a: 23:0a:2d:35:91:e1:30:b0:01:e4:79:36:c7:97:53:58:2c:f5: 5f:16:71:c8:3a:9f:8f:fb:fc:a3:35:de:50:2c:1b:11:b6:e1: 2e:78:c0:5c:09:25:1d:28:8c:ae:c6:67:99:4c:a7:af:03:0e: 0b:b9:3e:3b:c7:4e:06:8e:07:2d:ee:00:03:e8:7e:df:b0:65: 84:5b:f5:e3:34:46:a8:1d:2e:f8:07:0a:2c:53:43:67:77:28: 26:f7:37:83:82:8e:85:82:73:55:c6:bd:ae:c3:ce:47:d0:f4: 7f:64:7a:38:d7:57:8b:0f:88:89:9b:9c:2c:ef:d2:07:b7:23: a9:f6:c6:01:2a:91:33:b3:19:5d:b3:05:ca:22:c9:f7:fc:9a: 3e:0e:88:3f:aa:af:dd:ce:3e:ad:a8:e9:4d:96:08:63:85:bc: 68:3a:49:b6:72:89:d8:15:90:e7:57:2c:c7:0c:6a:2f:8a:50: 2b:2a:c1:bf:e1:69:7f:68:a8:d6:03:46:2f:d8:90:fe:7f:9b: e8:14:8c:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmc4OWTy2R6MRvOoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVlMzcxODQtODZkZS00OGM5LWFmMzUtNWQxMDJkMTQw ZmE2MB4XDTI1MDQyMjE3MzMwNFoXDTI1MDcyMTE3MzMwNFowLzEtMCsGA1UEAxMk NDBjNzFiYTYtMTJhYy00NTViLTgyNTgtMTgwNjgxZTEyM2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7+wnt8S/DJr4orUMHZCXgkqTs9u4iDibRdQ P2BTWY2j23y5Gb7LZGvx3QjX1hf0iH5FQPnnVqFVYftwxq3BwdFpuD9Xe982VdG+ 3HQCRybCRNFxXSJRCWh7KIqfj1fWM9bGCF1C+BB3WVyJ3h6iO1sgKEilceIL9O/S W0ze2HqVknoLQzb1oJffmTIa+DLl35CuRwijEXWQbmAu4Ctc7qR7FBy5ZOT4Wb0X c2f0fKg7Nd4K/q9GhQZkb6pWnqH9y/41ZFqBCANam6dHWP21/MHYSfA/u+iJq0HO CamEj9nSYDq2sU8lwy0yNh2pKlZlkCWZbohebjIcAlS7ZwGN6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDzyp5OpriZrdjdPwTV/FgWFDkySMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80ZWUz NzE4NC04NmRlLTQ4YzktYWYzNS01ZDEwMmQxNDBmYTYvYzgwY2FiY2YtOTIwZC0z ZmEyLTk5Y2UtZTgwOWFjZjI2NjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNGVlMzcxODQtODZkZS00OGM5LWFm MzUtNWQxMDJkMTQwZmE2LzRlZTM3MTg0LTg2ZGUtNDhjOS1hZjM1LTVkMTAyZDE0 MGZhNi5jcmwwHwYDVR0jBBgwFoAUzO2fuO7Sl7dYq+gKqtPIy9hM0Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80ZWUzNzE4NC04NmRlLTQ4YzktYWYzNS01ZDEw MmQxNDBmYTYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3ZgAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF0xYpCITtm9rs05AQg+WVn4FWp1tgN32TV76y2LT31nHMRT41qQ r2pe2gT0HO+20S7ZLXbMGiMKLTWR4TCwAeR5NseXU1gs9V8Wccg6n4/7/KM13lAs GxG24S54wFwJJR0ojK7GZ5lMp68DDgu5PjvHTgaOBy3uAAPoft+wZYRb9eM0Rqgd LvgHCixTQ2d3KCb3N4OCjoWCc1XGva7DzkfQ9H9kejjXV4sPiImbnCzv0ge3I6n2 xgEqkTOzGV2zBcoiyff8mj4OiD+qr93OPq2o6U2WCGOFvGg6SbZyidgVkOdXLMcM ai+KUCsqwb/haX9oqNYDRi/YkP5/m+gUjNE= -----END CERTIFICATE-----Generated at Tue Apr 29 18:42:00 2025 by rpki-client