$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/10a782e9-f224-30ff-9018-36d4298cee3c.roa File: 10a782e9-f224-30ff-9018-36d4298cee3c.roa (raw, json) Hash identifier: CXGFHTtCDMlDhn7Ky13mNjgYc9drYNBNEZtrxr4UpZw= Subject key identifier: AB:E1:15:31:41:F0:70:E5:31:E6:BC:88:F0:C4:26:6F:47:9C:B8:2E Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F43285848A6CB697DA04D6E54B2ADE9B0 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/10a782e9-f224-30ff-9018-36d4298cee3c.roa Signing time: Fri 24 Jan 2025 14:00:52 +0000 ROA not before: Fri 24 Jan 2025 14:00:52 +0000 ROA not after: Thu 24 Apr 2025 13:00:52 +0000 asID: 198949 IP address blocks: 2602:282::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a6:cb:69:7d:a0:4d:6e:54:b2:ad:e9:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Jan 24 14:00:52 2025 GMT Not After : Apr 24 13:00:52 2025 GMT Subject: CN=bcab70ed-e51b-4978-b2ac-11f0593f8047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:93:e4:1b:a6:de:0c:d4:c4:05:26:e9:36:dc: bc:21:ff:62:03:8a:5e:f5:12:28:96:86:57:cc:6e: d8:2e:cc:36:58:28:6d:19:46:be:ec:19:7b:26:45: d4:72:ea:b8:7e:35:70:9e:8e:8c:5b:38:72:c6:9d: d0:13:94:26:af:a0:35:dd:43:00:20:2b:b7:5c:ff: 35:1c:cc:ad:05:e4:b9:2d:90:2e:0d:68:37:a0:6c: 48:cd:9f:5e:e6:e7:63:d2:d9:05:1a:2d:d2:d5:9a: 84:dc:69:e8:8f:24:2c:18:21:61:7b:80:9d:01:b5: 19:83:46:d3:20:4a:c8:4d:6a:b2:6d:72:d0:6c:f8: 6d:0e:05:e8:77:5c:03:22:7e:e4:e1:cf:48:e5:7e: 2c:80:01:0d:eb:bb:8d:62:f5:31:ff:b0:54:ce:28: d5:24:da:1f:09:5b:a5:64:8e:6b:53:cf:0d:c1:52: 79:bc:31:9c:d9:7f:f2:1e:f8:06:6d:59:4f:06:44: fd:6b:b3:d9:6a:86:d4:f1:6b:4d:31:6d:94:8d:62: 7b:30:42:64:c3:8d:db:b8:c1:20:72:12:50:23:c8: c5:41:d2:9a:5e:13:33:c2:0f:dc:9d:d6:28:4c:63: c0:55:0c:6d:84:e0:05:87:99:18:8b:2c:77:67:36: 69:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E1:15:31:41:F0:70:E5:31:E6:BC:88:F0:C4:26:6F:47:9C:B8:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/10a782e9-f224-30ff-9018-36d4298cee3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2602:282::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:b6:75:19:4a:cc:e4:40:a9:c2:8b:6d:2f:aa:96:1f:e9:fe: d6:e9:dd:d4:a5:46:83:40:52:68:dd:55:a3:1d:71:d3:4c:9d: 47:51:e0:63:bb:c3:c8:dd:38:5b:03:b3:2a:24:1c:4e:78:82: df:94:87:8b:7f:9f:cf:c1:b0:10:85:c8:c6:d9:87:74:fa:a5: f1:8d:cd:8e:b4:b2:f7:2f:29:bf:0d:21:cd:6e:35:36:f1:8c: ee:9c:9b:cf:f0:09:92:c1:b8:5e:d6:ec:a7:a6:e5:98:57:64: 5d:b9:eb:15:66:29:4d:54:e8:2c:e7:4a:37:fa:f8:c0:68:ec: 2c:35:34:d6:19:04:c9:c4:45:59:a3:ae:b3:5d:1f:93:ab:81: 8a:ff:d0:d2:af:e8:d1:cc:4e:fe:ed:9e:38:b3:f1:dc:19:23: d3:15:01:c0:56:e1:ba:f9:4e:2d:ac:30:c1:6b:65:6e:35:36: 94:ec:c4:68:69:ac:70:ef:8f:a8:05:58:f0:14:73:c8:ba:ca: 97:19:e4:e3:6a:ae:f3:8a:37:eb:5e:36:fe:26:30:fc:75:24: ba:5a:75:75:f9:1b:a4:10:4c:90:59:97:31:4d:73:52:31:36: c4:c1:c6:7b:bd:4b:a2:70:ab:8a:4c:c5:90:41:12:d9:e0:7f: 56:39:a0:3e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEimy2l9oE1uVLKt6bAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI1MDEyNDE0MDA1MloXDTI1MDQyNDEzMDA1MlowLzEtMCsGA1UEAxMk YmNhYjcwZWQtZTUxYi00OTc4LWIyYWMtMTFmMDU5M2Y4MDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZPkG6beDNTEBSbpNty8If9iA4pe9RIoloZX zG7YLsw2WChtGUa+7Bl7JkXUcuq4fjVwno6MWzhyxp3QE5Qmr6A13UMAICu3XP81 HMytBeS5LZAuDWg3oGxIzZ9e5udj0tkFGi3S1ZqE3GnojyQsGCFhe4CdAbUZg0bT IErITWqybXLQbPhtDgXod1wDIn7k4c9I5X4sgAEN67uNYvUx/7BUzijVJNofCVul ZI5rU88NwVJ5vDGc2X/yHvgGbVlPBkT9a7PZaobU8WtNMW2UjWJ7MEJkw43buMEg chJQI8jFQdKaXhMzwg/cndYoTGPAVQxthOAFh5kYiyx3ZzZphQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKvhFTFB8HDlMea8iPDEJm9HnLguMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvMTBhNzgyZTktZjIyNC0z MGZmLTkwMTgtMzZkNDI5OGNlZTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgICgjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQADtnUZSszkQKnCi20vqpYf6f7W6d3UpUaDQFJo3VWjHXHTTJ1HUeBj u8PI3ThbA7MqJBxOeILflIeLf5/PwbAQhcjG2Yd0+qXxjc2OtLL3Lym/DSHNbjU2 8YzunJvP8AmSwbhe1uynpuWYV2RduesVZilNVOgs50o3+vjAaOwsNTTWGQTJxEVZ o66zXR+Tq4GK/9DSr+jRzE7+7Z44s/HcGSPTFQHAVuG6+U4trDDBa2VuNTaU7MRo aaxw74+oBVjwFHPIusqXGeTjaq7zijfrXjb+JjD8dSS6WnV1+RukEEyQWZcxTXNS MTbEwcZ7vUuicKuKTMWQQRLZ4H9WOaA+ -----END CERTIFICATE-----Generated at Sun Apr 6 02:24:15 2025 by rpki-client