$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/37af2310-315e-3e37-9b20-11ef24b51fb4.roa File: 37af2310-315e-3e37-9b20-11ef24b51fb4.roa (raw, json) Hash identifier: mBxoqI2BD6PiM+ur9C4l3MjRdyVzBOw65v5no7xYQv8= Subject key identifier: D4:5F:A5:6B:D6:E7:16:06:27:C9:D0:8D:21:BE:94:F1:A4:A4:E3:72 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F43285848A6CB69A9082089A43A12C580 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/37af2310-315e-3e37-9b20-11ef24b51fb4.roa Signing time: Fri 24 Jan 2025 14:00:52 +0000 ROA not before: Fri 24 Jan 2025 14:00:52 +0000 ROA not after: Thu 24 Apr 2025 13:00:52 +0000 asID: 198949 IP address blocks: 2602:284::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a6:cb:69:a9:08:20:89:a4:3a:12:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Jan 24 14:00:52 2025 GMT Not After : Apr 24 13:00:52 2025 GMT Subject: CN=aa8d830e-4050-40db-82ac-7f6d25e61635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:26:34:7e:33:fb:57:39:a1:b7:e8:a8:e6:b0: 95:3b:28:cb:76:b3:73:33:aa:1b:77:76:ac:84:b7: 89:48:9e:b3:4c:1a:12:d6:ab:de:35:49:2c:fb:5f: 27:37:c2:38:3f:94:a3:4d:2d:0e:8d:c3:1b:3d:98: 4c:cb:6a:fc:b7:6b:bf:39:7d:d3:11:88:6c:96:5f: 48:f1:25:d3:bf:72:d5:c3:bc:8d:5c:ae:95:ec:e4: 36:46:7d:77:61:c5:87:f2:7f:e1:60:c2:00:85:8a: 5c:c7:a5:cf:5b:04:95:96:64:00:72:c7:7c:69:56: 0e:73:ea:9a:be:b0:2a:bb:75:21:bd:e8:9f:65:f7: 4f:0b:99:33:15:87:5e:5e:f3:d7:08:14:d4:a4:1e: 4e:01:b2:33:34:2e:63:81:8c:15:dc:fc:26:be:60: 60:65:dd:73:cc:e7:cf:77:fd:88:b0:de:79:d2:f7: 6a:1b:1f:f7:a4:45:3b:32:76:a6:f5:f7:0e:64:3a: a4:12:d3:02:30:bb:96:ab:fc:01:5f:17:58:eb:9b: 90:65:9a:ce:e1:11:15:f0:a3:ee:d8:2b:c8:c1:89: 4d:27:53:76:9f:ad:30:63:1c:69:66:9b:04:42:88: 95:bc:22:5f:8b:86:5d:00:7b:41:90:98:d8:f3:7f: b2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:5F:A5:6B:D6:E7:16:06:27:C9:D0:8D:21:BE:94:F1:A4:A4:E3:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/37af2310-315e-3e37-9b20-11ef24b51fb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2602:284::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:35:49:dc:b8:ac:17:0b:b7:e3:b5:51:a8:a4:0e:7a:f7:0f: 0a:40:67:bd:d6:ec:8d:99:ea:6b:d7:cf:05:9f:62:17:2c:00: 96:ad:fb:65:ac:53:7e:fb:c4:77:f5:4c:1e:ba:97:2f:7e:c3: 74:90:4a:36:0b:07:e1:22:ff:42:ca:d0:88:03:9b:c7:12:d8: 44:42:cf:88:dc:fe:78:2c:df:79:24:31:28:a1:f7:0a:fb:f0: 73:f3:25:46:82:02:bf:f4:75:0f:b9:cf:0f:4c:0d:47:f8:c3: 56:05:58:9e:f4:eb:c1:03:3c:4b:8f:06:dc:ad:45:58:68:e3: c6:95:5e:13:f0:e8:3a:51:87:da:ee:22:55:6c:5d:e1:ac:1e: 87:c0:09:c5:98:a2:3d:a8:ee:a0:21:8f:04:ea:be:e9:24:ae: 36:4b:50:eb:07:93:8a:24:ac:e7:9f:b9:54:b4:89:5c:d9:c6: 92:07:21:80:7f:cc:39:81:59:89:e4:69:36:6a:ef:ba:86:d0: a8:a9:ef:c9:70:ba:e1:84:44:66:87:57:ad:07:40:e9:89:a1: f1:06:52:ed:9d:33:bb:fd:67:8a:07:b9:57:f7:6d:ce:8f:71: c4:11:30:97:48:5d:c6:b7:b9:13:29:30:8d:7b:76:60:ae:41: 8f:d4:44:2a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEimy2mpCCCJpDoSxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI1MDEyNDE0MDA1MloXDTI1MDQyNDEzMDA1MlowLzEtMCsGA1UEAxMk YWE4ZDgzMGUtNDA1MC00MGRiLTgyYWMtN2Y2ZDI1ZTYxNjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCY0fjP7Vzmht+io5rCVOyjLdrNzM6obd3as hLeJSJ6zTBoS1qveNUks+18nN8I4P5SjTS0OjcMbPZhMy2r8t2u/OX3TEYhsll9I 8SXTv3LVw7yNXK6V7OQ2Rn13YcWH8n/hYMIAhYpcx6XPWwSVlmQAcsd8aVYOc+qa vrAqu3UhveifZfdPC5kzFYdeXvPXCBTUpB5OAbIzNC5jgYwV3PwmvmBgZd1zzOfP d/2IsN550vdqGx/3pEU7Mnam9fcOZDqkEtMCMLuWq/wBXxdY65uQZZrO4REV8KPu 2CvIwYlNJ1N2n60wYxxpZpsEQoiVvCJfi4ZdAHtBkJjY83+yfwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNRfpWvW5xYGJ8nQjSG+lPGkpONyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvMzdhZjIzMTAtMzE1ZS0z ZTM3LTliMjAtMTFlZjI0YjUxZmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgIChDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBWNUncuKwXC7fjtVGopA569w8KQGe91uyNmepr188Fn2IXLACWrftl rFN++8R39UweupcvfsN0kEo2CwfhIv9CytCIA5vHEthEQs+I3P54LN95JDEoofcK +/Bz8yVGggK/9HUPuc8PTA1H+MNWBVie9OvBAzxLjwbcrUVYaOPGlV4T8Og6UYfa 7iJVbF3hrB6HwAnFmKI9qO6gIY8E6r7pJK42S1DrB5OKJKznn7lUtIlc2caSByGA f8w5gVmJ5Gk2au+6htCoqe/JcLrhhERmh1etB0DpiaHxBlLtnTO7/WeKB7lX923O j3HEETCXSF3Gt7kTKTCNe3ZgrkGP1EQq -----END CERTIFICATE-----Generated at Sun Apr 6 03:27:17 2025 by rpki-client