$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/4e8fc72f-bbdc-3564-b395-7f0b5c95794e.roa File: 4e8fc72f-bbdc-3564-b395-7f0b5c95794e.roa (raw, json) Hash identifier: cMHgRJLco6h1iJKmhwz/TtBbAQxPzOO13UI8Ih6JA1c= Subject key identifier: 48:62:0D:60:CE:5F:04:50:5A:7A:E8:4D:06:7C:87:57:F3:36:D0:05 Certificate issuer: /CN=0a846bda-a477-4fe0-8f13-997253568b7e Certificate serial: 010D0C9F43285848F22C6B54297BF695D5F2D200 Authority key identifier: DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/4e8fc72f-bbdc-3564-b395-7f0b5c95794e.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 14570 IP address blocks: 2602:fb37::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:6b:54:29:7b:f6:95:d5:f2:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a846bda-a477-4fe0-8f13-997253568b7e Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=8a9d8604-31ea-4318-989c-cdaf3ffefe6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:28:ad:2f:20:7f:31:45:bd:9c:e5:0b:54:08: 7f:2e:24:f3:ae:70:1f:35:12:f4:5a:26:19:a7:cd: 8f:e4:03:2a:a2:da:5e:7f:03:8b:58:f1:f7:2b:06: 12:9b:d7:0b:6b:23:f2:e2:f1:a3:f2:3f:52:e2:d4: a5:e6:74:f1:9c:d3:97:26:9d:46:10:c8:49:d3:0f: 4f:59:74:1a:dc:48:cd:41:d2:84:ec:95:0b:b2:76: a0:42:a3:27:c6:aa:c0:53:ba:ac:a0:a0:5b:8a:58: 3f:a6:99:db:5d:f1:5a:98:0b:d6:cd:2e:17:e4:59: e9:ca:0f:7c:90:e5:41:c2:26:a5:d7:b2:a6:24:c1: 02:be:ab:70:19:15:72:81:0a:13:88:1e:e3:a0:9a: 58:1c:4e:d9:f2:f6:6c:c2:7e:8d:da:50:b9:a7:4f: 20:96:1b:79:3f:47:7e:b9:20:ed:2e:9a:9c:2e:7d: d1:7a:fa:53:f2:d7:b9:3b:44:ed:96:75:39:da:cb: 72:9b:75:08:f8:df:40:86:35:fd:de:9f:fb:a9:43: 86:13:bf:e2:20:be:3c:0c:3c:82:a0:db:94:88:1c: 71:ca:18:35:27:8d:8a:cf:07:b2:c8:69:2c:ec:a7: 80:61:70:54:ab:7d:fa:bf:23:e0:c3:96:d9:d5:86: 6c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:62:0D:60:CE:5F:04:50:5A:7A:E8:4D:06:7C:87:57:F3:36:D0:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/4e8fc72f-bbdc-3564-b395-7f0b5c95794e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.crl X509v3 Authority Key Identifier: keyid:DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb37::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:e9:12:c0:77:ee:94:39:75:2f:20:e9:6f:12:a4:08:72:b8: 78:d5:c7:01:b5:6e:5c:f7:2d:36:46:ca:14:2b:9c:9f:3a:da: 86:ea:0a:8c:db:f8:51:b5:7d:0d:e0:15:ad:23:a3:98:30:53: 91:ea:9c:57:5a:80:38:e8:75:14:f5:41:be:61:90:da:11:75: d5:eb:ca:9f:a1:90:be:ac:23:34:e8:09:1b:84:7b:70:9b:7e: c8:b5:df:1b:e5:d0:67:d6:ce:6d:0a:34:9b:b9:a7:ae:88:6d: 41:4f:17:88:ca:e0:4e:bf:3d:54:2f:6b:ad:01:ef:64:ce:42: 06:e1:bb:85:30:90:49:5e:1c:92:16:c0:bd:eb:ea:77:ac:48: bd:b0:b2:4f:ad:39:97:e7:8c:65:2b:56:da:9b:dd:25:d0:f1: 3c:e6:6c:e5:95:2b:63:79:d4:ce:d4:83:8f:4d:f0:01:cb:93: 03:c7:0d:41:4d:53:b1:f8:4b:5e:51:db:73:a0:73:12:9b:4a: 16:af:2c:46:2b:57:31:70:33:1a:2d:20:3a:17:4f:cb:1b:7d: d6:f8:f6:73:23:78:0d:fa:7f:77:45:cd:d9:00:cd:1f:57:4c: 20:5c:90:74:e3:3c:3e:c4:b4:d1:51:d0:60:3c:cb:b1:ed:f1: ac:8c:68:c0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjyLGtUKXv2ldXy0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE4NDZiZGEtYTQ3Ny00ZmUwLThmMTMtOTk3MjUzNTY4 YjdlMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk OGE5ZDg2MDQtMzFlYS00MzE4LTk4OWMtY2RhZjNmZmVmZTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yitLyB/MUW9nOULVAh/LiTzrnAfNRL0WiYZ p82P5AMqotpefwOLWPH3KwYSm9cLayPy4vGj8j9S4tSl5nTxnNOXJp1GEMhJ0w9P WXQa3EjNQdKE7JULsnagQqMnxqrAU7qsoKBbilg/ppnbXfFamAvWzS4X5Fnpyg98 kOVBwial17KmJMECvqtwGRVygQoTiB7joJpYHE7Z8vZswn6N2lC5p08glht5P0d+ uSDtLpqcLn3RevpT8te5O0TtlnU52stym3UI+N9AhjX93p/7qUOGE7/iIL48DDyC oNuUiBxxyhg1J42KzweyyGks7KeAYXBUq336vyPgw5bZ1YZs+wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEhiDWDOXwRQWnroTQZ8h1fzNtAFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYTg0 NmJkYS1hNDc3LTRmZTAtOGYxMy05OTcyNTM1NjhiN2UvNGU4ZmM3MmYtYmJkYy0z NTY0LWIzOTUtN2YwYjVjOTU3OTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGE4NDZiZGEtYTQ3Ny00ZmUwLThm MTMtOTk3MjUzNTY4YjdlLzBhODQ2YmRhLWE0NzctNGZlMC04ZjEzLTk5NzI1MzU2 OGI3ZS5jcmwwHwYDVR0jBBgwFoAU3LrnlLaBpZJ3YNrck1IDjYXwuGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYTg0NmJkYS1hNDc3LTRmZTAtOGYxMy05OTcy NTM1NjhiN2UuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL7NzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAJ6RLAd+6UOXUvIOlvEqQIcrh41ccBtW5c9y02RsoUK5yfOtqG6gqM 2/hRtX0N4BWtI6OYMFOR6pxXWoA46HUU9UG+YZDaEXXV68qfoZC+rCM06AkbhHtw m37Itd8b5dBn1s5tCjSbuaeuiG1BTxeIyuBOvz1UL2utAe9kzkIG4buFMJBJXhyS FsC96+p3rEi9sLJPrTmX54xlK1bam90l0PE85mzllStjedTO1IOPTfABy5MDxw1B TVOx+EteUdtzoHMSm0oWryxGK1cxcDMaLSA6F0/LG33W+PZzI3gN+n93Rc3ZAM0f V0wgXJB04zw+xLTRUdBgPMux7fGsjGjA -----END CERTIFICATE-----Generated at Fri Apr 11 22:30:08 2025 by rpki-client