$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/907a2032-3d7d-36e2-bc36-8924c1c162b7.roa File: 907a2032-3d7d-36e2-bc36-8924c1c162b7.roa (raw, json) Hash identifier: eR5PR/aSwVasrqjOHxdmrE6ICLejW9eFTU3u3oywcyI= Subject key identifier: E7:A0:5A:E6:83:81:B2:E8:84:E1:15:53:CD:D9:CE:12:86:1A:CB:0D Certificate issuer: /CN=9f8abfb1-5f91-4570-a775-7435d3e52012 Certificate serial: 010D0C9F43285849218405F844D417098D7B4400 Authority key identifier: 40:25:3A:F9:1F:A1:03:19:E2:97:8A:59:30:22:60:98:D8:BB:2D:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/907a2032-3d7d-36e2-bc36-8924c1c162b7.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 53405 IP address blocks: 2602:2e7::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:05:f8:44:d4:17:09:8d:7b:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f8abfb1-5f91-4570-a775-7435d3e52012 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=ddb2fe21-d2e6-4ab1-9998-cb4cccf6bdce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3d:11:f5:f4:a1:44:0e:cb:46:b9:5d:29:b6: dc:f8:5a:bd:bc:18:f7:a9:12:87:03:e7:d6:70:69: 0b:bb:e2:10:d0:4d:7c:9d:9b:88:13:70:c9:3d:c5: ef:99:f7:c2:64:ea:69:47:9a:e2:70:96:4f:a0:8e: f2:34:ee:e7:8f:80:3b:54:ea:24:5d:ed:56:78:9d: b1:6b:ea:0c:d0:68:67:2d:56:18:1a:91:5c:6a:37: 9b:e8:56:a5:e9:6c:d0:e1:79:92:1c:cd:02:88:2e: 5e:1a:b1:e6:08:e7:8e:6c:cd:9d:fa:a0:e8:0e:45: 94:62:46:93:24:62:b7:97:a4:f5:ba:62:6b:78:b5: ec:7c:d6:16:b9:ed:1f:94:49:f5:5b:4e:0d:7c:fa: 12:d5:1a:61:aa:26:88:5d:9e:80:af:52:64:36:7a: d2:56:59:3b:c5:2f:44:3c:11:21:a7:71:a9:1c:52: d0:43:fe:50:00:e4:22:84:51:58:9a:6a:b6:63:52: 1d:05:ec:73:15:9d:f5:2b:f6:e6:56:53:41:f6:87: 0a:e1:f5:5b:35:55:d7:86:a5:97:ef:ce:97:00:60: 8d:35:32:0f:6d:45:be:fe:9c:f5:79:31:02:4c:1c: 9a:69:11:27:25:5a:c4:c1:43:3d:e4:4b:43:31:2a: a3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A0:5A:E6:83:81:B2:E8:84:E1:15:53:CD:D9:CE:12:86:1A:CB:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/907a2032-3d7d-36e2-bc36-8924c1c162b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.crl X509v3 Authority Key Identifier: keyid:40:25:3A:F9:1F:A1:03:19:E2:97:8A:59:30:22:60:98:D8:BB:2D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer sbgp-ipAddrBlock: critical IPv6: 2602:2e7::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:1f:00:ba:27:dd:fb:2e:d2:2a:28:fd:6e:bd:68:a0:0f:bb: 31:fa:84:4a:c1:a0:70:67:16:75:6f:2e:c2:7c:22:54:87:65: e3:4f:1e:3c:f4:9a:16:83:26:ff:9d:7d:47:c9:82:5e:89:9f: b9:41:b1:7d:b3:1a:f7:c0:e5:45:09:2f:97:de:3e:14:89:5f: 1c:dd:cb:8a:fc:f1:2f:f1:fa:19:d1:49:96:d6:42:69:80:7d: 6f:41:46:ad:9e:8a:fb:ef:c9:5e:df:06:75:02:dc:9c:2d:00: 27:d6:32:1f:0a:f1:61:69:24:84:4f:03:9c:6b:51:13:1e:de: af:e7:d2:2c:c6:9b:82:d5:fb:be:46:5d:93:16:88:89:1f:a0: ee:27:71:e2:c5:34:d2:5c:21:73:ff:60:9e:16:50:c2:84:11: 56:2a:9c:4a:e4:0f:f5:99:64:73:0c:b4:63:0c:e1:86:72:f6: 18:07:74:e9:f2:dc:cd:3a:6a:2b:d7:a2:03:e5:88:df:ec:55: 23:4e:1d:6c:6e:e3:fb:31:23:8c:95:bc:49:28:83:f2:69:84: c7:72:cf:df:fe:bd:b6:8d:72:e2:01:ee:55:ac:5b:c4:0d:65: 60:d7:d2:88:b8:a3:e2:25:46:5b:22:48:45:cc:63:1a:26:4c: c4:96:99:ca -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkhhAX4RNQXCY17RAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY4YWJmYjEtNWY5MS00NTcwLWE3NzUtNzQzNWQzZTUy MDEyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk ZGRiMmZlMjEtZDJlNi00YWIxLTk5OTgtY2I0Y2NjZjZiZGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD0R9fShRA7LRrldKbbc+Fq9vBj3qRKHA+fW cGkLu+IQ0E18nZuIE3DJPcXvmffCZOppR5ricJZPoI7yNO7nj4A7VOokXe1WeJ2x a+oM0GhnLVYYGpFcajeb6Fal6WzQ4XmSHM0CiC5eGrHmCOeObM2d+qDoDkWUYkaT JGK3l6T1umJreLXsfNYWue0flEn1W04NfPoS1RphqiaIXZ6Ar1JkNnrSVlk7xS9E PBEhp3GpHFLQQ/5QAOQihFFYmmq2Y1IdBexzFZ31K/bmVlNB9ocK4fVbNVXXhqWX 786XAGCNNTIPbUW+/pz1eTECTByaaREnJVrEwUM95EtDMSqjMwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOegWuaDgbLohOEVU83ZzhKGGssNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Zjhh YmZiMS01ZjkxLTQ1NzAtYTc3NS03NDM1ZDNlNTIwMTIvOTA3YTIwMzItM2Q3ZC0z NmUyLWJjMzYtODkyNGMxYzE2MmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWY4YWJmYjEtNWY5MS00NTcwLWE3 NzUtNzQzNWQzZTUyMDEyLzlmOGFiZmIxLTVmOTEtNDU3MC1hNzc1LTc0MzVkM2U1 MjAxMi5jcmwwHwYDVR0jBBgwFoAUQCU6+R+hAxnil4pZMCJgmNi7LRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZjhhYmZiMS01ZjkxLTQ1NzAtYTc3NS03NDM1 ZDNlNTIwMTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgIC5wAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAkB8Auifd+y7SKij9br1ooA+7MfqESsGgcGcWdW8uwnwiVIdl408e PPSaFoMm/519R8mCXomfuUGxfbMa98DlRQkvl94+FIlfHN3LivzxL/H6GdFJltZC aYB9b0FGrZ6K++/JXt8GdQLcnC0AJ9YyHwrxYWkkhE8DnGtREx7er+fSLMabgtX7 vkZdkxaIiR+g7idx4sU00lwhc/9gnhZQwoQRViqcSuQP9Zlkcwy0YwzhhnL2GAd0 6fLczTpqK9eiA+WI3+xVI04dbG7j+zEjjJW8SSiD8mmEx3LP3/69to1y4gHuVaxb xA1lYNfSiLij4iVGWyJIRcxjGiZMxJaZyg== -----END CERTIFICATE-----Generated at Sat Apr 12 15:09:36 2025 by rpki-client