$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/21e1f23d-5f1f-317b-8982-26cebe1a6742.roa File: 21e1f23d-5f1f-317b-8982-26cebe1a6742.roa (raw, json) Hash identifier: pzCFJ9nPO4iG0om6zlKl8z9z2FJFpQs002ihWkv+hn0= Subject key identifier: F2:CC:98:7A:A3:1C:54:62:11:90:73:97:4D:E5:64:58:DC:58:37:21 Certificate issuer: /CN=0f521759-b880-4a7d-be8b-3ce70e4aba83 Certificate serial: 010D0C9F432858491ED6E699EEBB94E139A352C0 Authority key identifier: 07:C2:8B:51:71:01:77:8F:B1:D5:C0:66:6F:21:6A:D7:24:B0:E5:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/21e1f23d-5f1f-317b-8982-26cebe1a6742.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 398065 IP address blocks: 2602:817:3000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:e6:99:ee:bb:94:e1:39:a3:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f521759-b880-4a7d-be8b-3ce70e4aba83 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=6a606fab-ad46-4b7b-9322-589cd587355f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:79:58:0a:4a:40:e0:27:87:47:df:bf:e6:8c: df:35:09:b4:6c:bb:28:a1:56:83:13:7d:c5:1c:4b: e9:35:e9:50:52:73:5d:b0:f2:83:5c:2a:a0:5b:d4: 19:25:1d:e0:46:1b:26:39:e0:3f:f2:79:9e:00:7c: ba:ed:64:be:3c:03:08:46:a1:a0:e0:45:cf:ba:85: f3:fd:14:80:ea:9a:27:f1:6f:6c:7c:31:49:41:50: f2:59:11:85:60:f8:a6:05:bc:28:ae:dc:5f:4e:69: e0:01:e9:72:31:b3:97:86:56:38:52:1c:69:f2:cc: 21:e6:7f:5d:dd:e2:b8:65:62:3a:cb:72:2e:c5:08: 76:84:ce:e7:53:26:76:40:aa:0e:4f:54:7e:bb:2e: 99:8e:f5:72:41:5d:84:b2:96:36:0c:4e:fd:5b:d7: 2d:bc:43:1f:e1:a1:a8:e9:3a:d0:bf:7d:7a:23:3c: 5c:5b:01:ac:c3:b6:90:20:43:0e:f6:7c:1b:d1:f8: ff:23:f3:b0:15:a8:6b:40:8c:40:ca:d0:58:21:21: 77:c1:a4:08:b7:3b:60:bb:bf:25:1c:16:d2:41:f5: f1:9e:27:bb:53:47:6a:02:8d:f2:17:65:6c:d8:6d: 83:c6:48:8a:14:8a:cc:12:36:5c:c3:0e:2f:c7:45: 17:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CC:98:7A:A3:1C:54:62:11:90:73:97:4D:E5:64:58:DC:58:37:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/21e1f23d-5f1f-317b-8982-26cebe1a6742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.crl X509v3 Authority Key Identifier: keyid:07:C2:8B:51:71:01:77:8F:B1:D5:C0:66:6F:21:6A:D7:24:B0:E5:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer sbgp-ipAddrBlock: critical IPv6: 2602:817:3000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:1c:c5:19:70:31:50:50:bd:a5:77:7b:6e:15:52:42:14:36: 58:eb:0d:f9:3e:9a:60:2f:75:ef:9e:e5:d1:59:d1:57:d6:d0: 23:9d:27:a5:da:db:4d:be:13:13:5a:ab:29:09:bb:8a:61:4f: 9b:00:b5:61:b1:30:ea:3b:7f:6b:81:a4:5f:7b:d2:f1:56:5f: f3:6d:a7:9b:e7:9c:9a:31:02:e7:3e:d4:0e:ab:c9:c3:d2:80: e8:ac:42:b3:ee:84:48:95:dd:b1:b2:ea:9a:82:38:22:b3:d9: ac:b7:07:1c:44:60:43:66:37:84:cf:4e:dd:64:79:4e:5e:2a: 1b:7b:06:f9:a6:7b:8d:f5:8f:1f:d1:97:73:09:d6:da:26:b8: 72:13:07:74:62:4f:bd:a1:d5:aa:a7:48:e8:93:26:1a:64:8d: cb:5f:c2:22:8e:61:70:07:15:cd:59:1d:68:d8:23:29:17:c8: 98:f7:0f:c1:ae:51:f3:d6:08:33:37:1f:33:56:a7:b8:c6:3d: 4e:50:32:72:b1:c5:b9:a2:ce:ff:ef:43:d1:c7:ed:70:aa:d5: ca:34:79:a1:ac:14:f1:4f:b2:e0:85:8c:a3:86:03:df:ab:d3: ed:01:b2:86:14:9b:62:86:6a:aa:5b:61:21:6a:8d:61:91:93: f1:22:03:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEke1uaZ7ruU4TmjUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY1MjE3NTktYjg4MC00YTdkLWJlOGItM2NlNzBlNGFi YTgzMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk NmE2MDZmYWItYWQ0Ni00YjdiLTkzMjItNTg5Y2Q1ODczNTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinlYCkpA4CeHR9+/5ozfNQm0bLsooVaDE33F HEvpNelQUnNdsPKDXCqgW9QZJR3gRhsmOeA/8nmeAHy67WS+PAMIRqGg4EXPuoXz /RSA6pon8W9sfDFJQVDyWRGFYPimBbwortxfTmngAelyMbOXhlY4Uhxp8swh5n9d 3eK4ZWI6y3IuxQh2hM7nUyZ2QKoOT1R+uy6ZjvVyQV2EspY2DE79W9ctvEMf4aGo 6TrQv316IzxcWwGsw7aQIEMO9nwb0fj/I/OwFahrQIxAytBYISF3waQItztgu78l HBbSQfXxnie7U0dqAo3yF2Vs2G2DxkiKFIrMEjZcww4vx0UXjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPLMmHqjHFRiEZBzl03lZFjcWDchMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZjUy MTc1OS1iODgwLTRhN2QtYmU4Yi0zY2U3MGU0YWJhODMvMjFlMWYyM2QtNWYxZi0z MTdiLTg5ODItMjZjZWJlMWE2NzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGY1MjE3NTktYjg4MC00YTdkLWJl OGItM2NlNzBlNGFiYTgzLzBmNTIxNzU5LWI4ODAtNGE3ZC1iZThiLTNjZTcwZTRh YmE4My5jcmwwHwYDVR0jBBgwFoAUB8KLUXEBd4+x1cBmbyFq1ySw5VQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZjUyMTc1OS1iODgwLTRhN2QtYmU4Yi0zY2U3 MGU0YWJhODMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIFzAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACIcxRlwMVBQvaV3e24VUkIUNljrDfk+mmAvde+e5dFZ0VfW0COd J6Xa202+ExNaqykJu4phT5sAtWGxMOo7f2uBpF970vFWX/Ntp5vnnJoxAuc+1A6r ycPSgOisQrPuhEiV3bGy6pqCOCKz2ay3BxxEYENmN4TPTt1keU5eKht7Bvmme431 jx/Rl3MJ1tomuHITB3RiT72h1aqnSOiTJhpkjctfwiKOYXAHFc1ZHWjYIykXyJj3 D8GuUfPWCDM3HzNWp7jGPU5QMnKxxbmizv/vQ9HH7XCq1co0eaGsFPFPsuCFjKOG A9+r0+0BsoYUm2KGaqpbYSFqjWGRk/EiA60= -----END CERTIFICATE-----Generated at Fri Mar 14 09:28:26 2025 by rpki-client