$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/c47e0337-491b-3e57-a6f9-0040b1fabe11.roa File: c47e0337-491b-3e57-a6f9-0040b1fabe11.roa (raw, json) Hash identifier: f/p1Eiokq3OPsmP7oFC7Su2dJ/E2Uxn/kp/d9rFPDE4= Subject key identifier: B1:BC:47:2F:D6:2F:78:0D:D1:5E:0A:E5:28:74:34:D7:DC:73:E0:D1 Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Certificate serial: 010D0C9F432858494733FC917606B27475438200 Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/c47e0337-491b-3e57-a6f9-0040b1fabe11.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 33039 IP address blocks: 2602:f95c:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:fc:91:76:06:b2:74:75:43:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=75ae8ad5-d5aa-4bd7-b2f6-1e88a90f9978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6e:e3:b4:9c:f4:18:d8:b6:4c:9a:c1:90:5b: 27:51:95:a2:df:81:16:a2:4b:07:eb:2a:3f:df:13: e7:1c:ed:6a:63:c3:f1:d5:01:b4:e9:31:6f:d7:36: c2:5d:af:7f:cb:66:be:5a:0a:41:08:3b:32:a0:4b: cf:fb:ad:2a:e1:d0:bb:8a:04:12:b3:8c:f5:e6:a7: fe:60:20:3f:8f:45:ad:6e:b4:20:71:fb:09:96:92: 30:1e:db:40:3c:d7:65:9b:10:98:b2:02:5d:e2:2b: 26:fc:54:6e:8b:b8:a2:7e:1f:50:f9:59:61:5d:d1: a8:7e:17:41:09:a9:84:38:03:58:22:3e:a1:31:cc: f2:8c:36:ec:09:47:15:6e:ed:78:ff:92:3b:68:24: b0:59:dc:54:1c:72:76:7d:d5:85:4f:7c:53:60:a7: cf:fa:de:b8:13:ea:03:a6:9f:cc:b3:74:b8:1a:92: 97:93:2b:47:d7:9b:eb:95:c7:a3:fc:d9:f7:13:3e: ae:3d:1c:0c:b3:44:60:a6:d0:ff:69:ef:32:7a:44: 20:c0:62:39:a8:35:33:ed:bd:d7:01:21:6f:63:c8: 68:70:05:06:67:f9:2f:c1:56:80:c8:b6:d3:a5:6d: b9:e4:57:41:bb:da:c5:28:2e:1b:b1:cc:e2:fc:41: 00:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:BC:47:2F:D6:2F:78:0D:D1:5E:0A:E5:28:74:34:D7:DC:73:E0:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/c47e0337-491b-3e57-a6f9-0040b1fabe11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl X509v3 Authority Key Identifier: keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer sbgp-ipAddrBlock: critical IPv6: 2602:f95c:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:de:de:58:2b:ed:54:22:1e:df:6f:e4:34:f8:da:4d:64:1b: 8b:d6:69:de:05:41:2f:0b:dd:34:89:c9:14:13:64:6e:8a:39: 51:4b:51:8e:43:d3:b5:10:57:90:18:4c:41:79:40:29:6c:fb: ec:22:f8:d9:8f:40:60:8f:3c:6d:2c:59:2c:d0:60:48:47:9b: 0f:bc:45:1d:6c:6d:70:b4:74:ca:ce:69:9c:0a:ac:70:0f:03: 2b:24:88:f5:44:cc:16:0d:94:41:8f:7e:7e:3d:d2:0c:50:f0: ac:65:db:c3:df:89:29:22:58:fa:95:5e:eb:e3:6c:4a:94:cd: bf:4f:a5:e2:71:7d:de:71:e0:bb:e2:de:50:46:3b:44:79:33: a5:0f:57:ab:2f:f6:c1:95:75:c2:d4:da:2e:5d:e0:8f:b1:97: e8:48:26:d4:27:81:05:43:aa:15:eb:05:94:bc:1e:15:0d:88: 83:26:44:4c:b3:89:0c:98:3c:8f:38:c2:0c:7e:b2:cd:78:f2: bc:a1:d1:28:c1:5f:0e:63:4e:32:38:2a:80:83:f1:f8:4e:bc: 3f:15:1d:5c:75:ca:3b:e6:21:f6:04:20:99:73:6a:d1:41:5c: 66:a6:8c:66:e3:47:c1:88:8a:00:46:fb:35:9c:d7:6f:ae:94: 50:c4:cd:6f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElHM/yRdgaydHVDggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNjNzhkNjAtMzRlYi00ZmVkLThlMjUtOTI1Yjk1YTMw YzhlMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk NzVhZThhZDUtZDVhYS00YmQ3LWIyZjYtMWU4OGE5MGY5OTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum7jtJz0GNi2TJrBkFsnUZWi34EWoksH6yo/ 3xPnHO1qY8Px1QG06TFv1zbCXa9/y2a+WgpBCDsyoEvP+60q4dC7igQSs4z15qf+ YCA/j0WtbrQgcfsJlpIwHttAPNdlmxCYsgJd4ism/FRui7iifh9Q+VlhXdGofhdB CamEOANYIj6hMczyjDbsCUcVbu14/5I7aCSwWdxUHHJ2fdWFT3xTYKfP+t64E+oD pp/Ms3S4GpKXkytH15vrlcej/Nn3Ez6uPRwMs0RgptD/ae8yekQgwGI5qDUz7b3X ASFvY8hocAUGZ/kvwVaAyLbTpW255FdBu9rFKC4bsczi/EEAcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLG8Ry/WL3gN0V4K5Sh0NNfcc+DRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zM2M3 OGQ2MC0zNGViLTRmZWQtOGUyNS05MjViOTVhMzBjOGUvYzQ3ZTAzMzctNDkxYi0z ZTU3LWE2ZjktMDA0MGIxZmFiZTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzNjNzhkNjAtMzRlYi00ZmVkLThl MjUtOTI1Yjk1YTMwYzhlLzMzYzc4ZDYwLTM0ZWItNGZlZC04ZTI1LTkyNWI5NWEz MGM4ZS5jcmwwHwYDVR0jBBgwFoAUX2UlsGmXIYLm4tORRne6XDPT4EEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zM2M3OGQ2MC0zNGViLTRmZWQtOGUyNS05MjVi OTVhMzBjOGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5XAAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGXe3lgr7VQiHt9v5DT42k1kG4vWad4FQS8L3TSJyRQTZG6KOVFL UY5D07UQV5AYTEF5QCls++wi+NmPQGCPPG0sWSzQYEhHmw+8RR1sbXC0dMrOaZwK rHAPAyskiPVEzBYNlEGPfn490gxQ8Kxl28PfiSkiWPqVXuvjbEqUzb9PpeJxfd5x 4Lvi3lBGO0R5M6UPV6sv9sGVdcLU2i5d4I+xl+hIJtQngQVDqhXrBZS8HhUNiIMm REyziQyYPI84wgx+ss148ryh0SjBXw5jTjI4KoCD8fhOvD8VHVx1yjvmIfYEIJlz atFBXGamjGbjR8GIigBG+zWc12+ulFDEzW8= -----END CERTIFICATE-----Generated at Sat Apr 5 04:41:02 2025 by rpki-client