$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/aa3eb4ef-8503-3f22-b9e9-67118de122fc.roa File: aa3eb4ef-8503-3f22-b9e9-67118de122fc.roa (raw, json) Hash identifier: NzRM2WR+pnxEGbn9d75/6rXy9AUJUHyfsDgueO0lel0= Subject key identifier: 40:BE:8A:21:2C:40:57:27:C8:39:93:9D:29:EE:2D:33:9D:5B:19:6D Certificate issuer: /CN=11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf Certificate serial: 010D0C9F432858493B7EBD5D7466F54028122B00 Authority key identifier: 08:EC:40:00:FC:71:C9:4B:F2:7C:CB:EA:1A:E5:AE:C4:5A:4B:6D:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/aa3eb4ef-8503-3f22-b9e9-67118de122fc.roa Signing time: Tue 18 Mar 2025 20:21:53 +0000 ROA not before: Tue 18 Mar 2025 20:21:53 +0000 ROA not after: Mon 16 Jun 2025 20:21:53 +0000 asID: 401450 IP address blocks: 2602:fa1c:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3b:7e:bd:5d:74:66:f5:40:28:12:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf Validity Not Before: Mar 18 20:21:53 2025 GMT Not After : Jun 16 20:21:53 2025 GMT Subject: CN=2846e499-f231-4883-a9a1-1673b0b09893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6a:7d:70:53:48:b1:46:06:01:62:45:14:50: df:e1:26:d4:c9:85:ff:b4:55:bb:38:a1:fe:7f:be: f5:b6:bd:97:fd:81:98:77:3c:23:13:07:44:62:8a: 0e:8a:75:ba:8f:ef:af:ff:a1:c2:fc:92:40:cc:1a: fe:27:89:a7:7d:af:1c:59:b2:c2:be:e4:65:17:80: fa:ed:09:70:39:b5:39:99:33:65:ea:ed:5c:de:f4: 9a:7d:68:4b:80:11:39:f0:2c:dd:33:a8:81:f4:80: 92:14:ff:14:03:06:ad:5b:9d:4f:99:66:a6:d5:a1: 16:f0:6d:1f:97:7c:a2:1c:b7:7b:38:c5:07:aa:76: 8a:56:4f:64:46:02:92:51:38:6d:24:b5:7a:58:c3: 58:25:a0:49:8d:01:3f:f3:c9:b1:1d:95:b1:e3:b8: 5e:6b:aa:05:10:d6:0f:14:d5:02:17:88:99:78:26: f4:fd:1d:e0:cb:be:78:06:4e:c1:8e:a5:88:8d:98: cb:e4:03:24:fe:a7:15:c7:7c:c6:f2:6c:c6:25:9b: 23:09:d8:05:99:de:f2:ff:99:11:c2:a3:12:c0:dd: cb:33:52:8b:b5:7e:e9:96:39:47:63:f4:23:42:cc: ec:4a:7d:2d:08:f4:5c:7d:53:48:bd:03:0f:a9:28: 4c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BE:8A:21:2C:40:57:27:C8:39:93:9D:29:EE:2D:33:9D:5B:19:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/aa3eb4ef-8503-3f22-b9e9-67118de122fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.crl X509v3 Authority Key Identifier: keyid:08:EC:40:00:FC:71:C9:4B:F2:7C:CB:EA:1A:E5:AE:C4:5A:4B:6D:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa1c:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:be:d8:97:05:81:28:c8:5e:67:ac:cc:55:2b:0c:dd:c3:d8: f2:94:0b:29:39:00:b4:5b:3d:3d:5e:71:be:b9:f3:5d:2a:49: ad:f1:cf:da:f8:ea:74:91:d7:b6:a7:6b:53:26:c4:ab:7a:f7: 80:c7:6c:c1:db:df:37:e2:70:55:d2:6a:18:82:eb:41:85:70: e0:4d:60:2c:7d:06:28:d4:ea:0b:fc:43:2a:97:27:bb:30:83: a5:53:86:7d:d1:4c:19:9c:36:e9:7f:20:8f:94:c5:0e:6e:c0: 83:f5:49:d9:e7:02:69:48:20:7f:fd:5f:b2:02:3a:29:d8:52: 7a:64:b5:19:9a:29:58:a6:b9:9a:05:ed:79:a1:da:26:2d:71: a1:22:37:c0:12:a5:93:30:65:93:02:94:72:cf:a3:67:c8:5a: 45:32:76:42:91:04:47:1d:23:0b:02:11:63:c4:c9:f5:cc:e1: da:65:92:fa:a5:d4:f8:75:99:ac:30:ce:d1:66:6a:7f:67:fc: 33:79:81:0e:68:53:6b:7c:7c:25:a9:f8:bc:a2:75:03:e5:ab: 79:51:bb:89:0a:96:3f:5b:e2:16:54:b2:01:1a:9c:aa:27:04: 64:b9:20:17:56:dc:06:00:58:87:ab:a0:93:66:d9:ed:2a:1f: a8:19:4f:9b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk7fr1ddGb1QCgSKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFiZDFhYTAtMmI0ZS00MzQ4LThmNTgtOGE5NGU0YmYx OGJmMB4XDTI1MDMxODIwMjE1M1oXDTI1MDYxNjIwMjE1M1owLzEtMCsGA1UEAxMk Mjg0NmU0OTktZjIzMS00ODgzLWE5YTEtMTY3M2IwYjA5ODkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2p9cFNIsUYGAWJFFFDf4SbUyYX/tFW7OKH+ f771tr2X/YGYdzwjEwdEYooOinW6j++v/6HC/JJAzBr+J4mnfa8cWbLCvuRlF4D6 7QlwObU5mTNl6u1c3vSafWhLgBE58CzdM6iB9ICSFP8UAwatW51PmWam1aEW8G0f l3yiHLd7OMUHqnaKVk9kRgKSUThtJLV6WMNYJaBJjQE/88mxHZWx47hea6oFENYP FNUCF4iZeCb0/R3gy754Bk7BjqWIjZjL5AMk/qcVx3zG8mzGJZsjCdgFmd7y/5kR wqMSwN3LM1KLtX7pljlHY/QjQszsSn0tCPRcfVNIvQMPqShMDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEC+iiEsQFcnyDmTnSnuLTOdWxltMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMWJk MWFhMC0yYjRlLTQzNDgtOGY1OC04YTk0ZTRiZjE4YmYvYWEzZWI0ZWYtODUwMy0z ZjIyLWI5ZTktNjcxMThkZTEyMmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTFiZDFhYTAtMmI0ZS00MzQ4LThm NTgtOGE5NGU0YmYxOGJmLzExYmQxYWEwLTJiNGUtNDM0OC04ZjU4LThhOTRlNGJm MThiZi5jcmwwHwYDVR0jBBgwFoAUCOxAAPxxyUvyfMvqGuWuxFpLbQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMWJkMWFhMC0yYjRlLTQzNDgtOGY1OC04YTk0 ZTRiZjE4YmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6HAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIC+2JcFgSjIXmeszFUrDN3D2PKUCyk5ALRbPT1ecb65810qSa3x z9r46nSR17ana1MmxKt694DHbMHb3zficFXSahiC60GFcOBNYCx9BijU6gv8QyqX J7swg6VThn3RTBmcNul/II+UxQ5uwIP1SdnnAmlIIH/9X7ICOinYUnpktRmaKVim uZoF7Xmh2iYtcaEiN8ASpZMwZZMClHLPo2fIWkUydkKRBEcdIwsCEWPEyfXM4dpl kvql1Ph1mawwztFman9n/DN5gQ5oU2t8fCWp+LyidQPlq3lRu4kKlj9b4hZUsgEa nKonBGS5IBdW3AYAWIeroJNm2e0qH6gZT5s= -----END CERTIFICATE-----Generated at Thu Apr 17 02:31:37 2025 by rpki-client