$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/dc2eb897-d749-3a0a-b8dc-f7995e37f219.roa File: dc2eb897-d749-3a0a-b8dc-f7995e37f219.roa (raw, json) Hash identifier: YpbS0fZ8XDaisrSPcQsgmmkdfryu89qbyLv2BBZBpzI= Subject key identifier: 5B:D7:64:B4:AB:61:07:A2:A1:7C:89:98:B8:A8:D7:12:94:3F:38:AB Certificate issuer: /CN=5157764b-7b30-4f19-a9ca-30a5dfefa332 Certificate serial: 010D0C9F43285848BA5640D613576D63FD30A770 Authority key identifier: BD:78:DF:BF:1B:39:18:A5:6F:C7:79:A8:1D:F4:E1:99:EA:21:55:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/dc2eb897-d749-3a0a-b8dc-f7995e37f219.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 13737 IP address blocks: 2602:f8c7::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/5157764b-7b30-4f19-a9ca-30a5dfefa332.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/5157764b-7b30-4f19-a9ca-30a5dfefa332.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:40:d6:13:57:6d:63:fd:30:a7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5157764b-7b30-4f19-a9ca-30a5dfefa332 Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=8b9f574b-f77d-4336-93e7-49289ee1222d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f4:d7:76:eb:fa:e9:e9:c8:21:35:3f:38:6c: 18:62:ef:2b:3f:9f:b2:05:39:7e:b0:3c:41:57:ff: 1f:77:9f:0d:80:71:99:6a:33:7d:37:92:9d:1e:03: ce:25:51:72:ca:24:42:08:a3:26:d0:44:af:9f:97: 43:1b:61:a9:79:eb:46:51:f8:27:0e:c4:b9:85:9c: f9:78:96:a8:dc:f3:3d:0f:1c:82:41:bb:4d:ec:97: 67:44:e9:c4:78:77:90:2b:60:9a:23:d3:d2:86:aa: 06:fc:d3:06:c9:a4:1f:47:f3:73:e5:38:cf:e7:ed: a4:3b:19:79:fe:b7:5b:99:e9:09:a2:0f:03:ef:78: f9:4c:fe:9c:72:57:61:ed:3b:a3:6c:8a:f4:14:ec: e4:0c:6c:9e:4b:06:3f:11:6c:4f:ce:73:95:de:a9: bc:cb:0a:6b:4b:a7:dd:19:a5:e5:f0:86:5d:01:24: c3:80:bc:59:0b:45:64:78:a4:ea:9d:24:f4:f8:32: a2:6d:e5:1e:75:7b:78:6b:66:7c:09:47:1c:c8:b6: c1:6c:71:3f:50:dd:dc:7a:08:96:fb:82:12:c5:54: cc:a7:2e:04:e9:07:aa:71:f7:fc:2e:a5:e6:63:6c: 97:47:20:2a:63:b2:8d:57:49:2f:78:fa:78:a4:ea: f5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D7:64:B4:AB:61:07:A2:A1:7C:89:98:B8:A8:D7:12:94:3F:38:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/dc2eb897-d749-3a0a-b8dc-f7995e37f219.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/5157764b-7b30-4f19-a9ca-30a5dfefa332.crl X509v3 Authority Key Identifier: keyid:BD:78:DF:BF:1B:39:18:A5:6F:C7:79:A8:1D:F4:E1:99:EA:21:55:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332.cer sbgp-ipAddrBlock: critical IPv6: 2602:f8c7::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:9d:45:e4:55:78:4f:86:f0:30:6a:67:ce:1e:cc:c7:e5:01: 92:7e:06:de:20:a7:3e:4c:7a:f2:33:12:6e:44:8d:a8:31:91: eb:3a:aa:db:61:4d:80:bb:d2:97:05:5a:c0:e3:6e:86:b1:4f: ea:82:48:5e:e4:6f:18:bc:d1:c8:c3:c4:65:79:fe:56:c2:62: 84:11:3e:cb:e6:3a:87:34:70:f1:33:d4:c6:7f:c6:2e:72:6c: 4f:92:99:d7:c4:ee:f9:b9:e9:28:2f:3f:78:86:fe:2e:e8:e9: 22:43:40:25:a4:5e:f1:6a:09:d6:1f:60:ca:45:7f:ac:af:a6: 4b:d3:f6:e1:d0:fe:f8:c4:8e:9d:50:55:47:c5:8c:49:4e:bd: fe:49:ad:5a:89:e5:fc:83:b0:2f:b6:58:2c:b5:8c:34:4c:6b: a1:8b:37:11:15:1c:4d:06:a9:ba:5f:2f:fc:7b:d6:5d:ed:4e: 1a:84:10:eb:e8:79:d0:27:f0:e1:aa:35:19:b0:52:d5:4f:2d: d5:86:31:75:85:ff:65:f2:ac:be:33:ad:70:52:77:a5:9d:40: 24:cb:91:69:09:da:66:f4:a2:8e:3c:c6:27:ec:40:6d:47:8e: b8:43:4e:83:b2:ca:33:be:dd:22:4f:cf:dd:74:e5:82:ee:18: d9:0d:35:30 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEi6VkDWE1dtY/0wp3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE1Nzc2NGItN2IzMC00ZjE5LWE5Y2EtMzBhNWRmZWZh MzMyMB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk OGI5ZjU3NGItZjc3ZC00MzM2LTkzZTctNDkyODllZTEyMjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvTXduv66enIITU/OGwYYu8rP5+yBTl+sDxB V/8fd58NgHGZajN9N5KdHgPOJVFyyiRCCKMm0ESvn5dDG2GpeetGUfgnDsS5hZz5 eJao3PM9DxyCQbtN7JdnROnEeHeQK2CaI9PShqoG/NMGyaQfR/Nz5TjP5+2kOxl5 /rdbmekJog8D73j5TP6ccldh7TujbIr0FOzkDGyeSwY/EWxPznOV3qm8ywprS6fd GaXl8IZdASTDgLxZC0VkeKTqnST0+DKibeUedXt4a2Z8CUccyLbBbHE/UN3cegiW +4ISxVTMpy4E6Qeqcff8LqXmY2yXRyAqY7KNV0kvePp4pOr1PwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFvXZLSrYQeioXyJmLio1xKUPzirMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MTU3 NzY0Yi03YjMwLTRmMTktYTljYS0zMGE1ZGZlZmEzMzIvZGMyZWI4OTctZDc0OS0z YTBhLWI4ZGMtZjc5OTVlMzdmMjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTE1Nzc2NGItN2IzMC00ZjE5LWE5 Y2EtMzBhNWRmZWZhMzMyLzUxNTc3NjRiLTdiMzAtNGYxOS1hOWNhLTMwYTVkZmVm YTMzMi5jcmwwHwYDVR0jBBgwFoAUvXjfvxs5GKVvx3moHfThmeohVXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MTU3NzY0Yi03YjMwLTRmMTktYTljYS0zMGE1 ZGZlZmEzMzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4xwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAM51F5FV4T4bwMGpnzh7Mx+UBkn4G3iCnPkx68jMSbkSNqDGR6zqq 22FNgLvSlwVawONuhrFP6oJIXuRvGLzRyMPEZXn+VsJihBE+y+Y6hzRw8TPUxn/G LnJsT5KZ18Tu+bnpKC8/eIb+LujpIkNAJaRe8WoJ1h9gykV/rK+mS9P24dD++MSO nVBVR8WMSU69/kmtWonl/IOwL7ZYLLWMNExroYs3ERUcTQapul8v/HvWXe1OGoQQ 6+h50Cfw4ao1GbBS1U8t1YYxdYX/ZfKsvjOtcFJ3pZ1AJMuRaQnaZvSijjzGJ+xA bUeOuENOg7LKM77dIk/P3XTlgu4Y2Q01MA== -----END CERTIFICATE-----Generated at Sat Apr 5 11:15:57 2025 by rpki-client