$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/1298d51a-f11e-30fd-9b81-309e6723fa54.roa File: 1298d51a-f11e-30fd-9b81-309e6723fa54.roa (raw, json) Hash identifier: GBqO7fr7e8exve0phjNdvwH6O1BMQICc4UfgNum05Zs= Subject key identifier: 22:BD:37:48:79:69:9F:6B:59:2D:E9:D4:FB:C7:6F:B5:29:05:88:05 Certificate issuer: /CN=63f043cf-2b37-4962-9d5b-bc179102509d Certificate serial: 010D0C9F43285848BDE1D58A28570414B04A2900 Authority key identifier: DF:97:12:3D:BE:3D:39:FF:38:2D:47:2A:3B:D6:64:56:81:93:BE:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/1298d51a-f11e-30fd-9b81-309e6723fa54.roa Signing time: Sat 01 Feb 2025 20:29:42 +0000 ROA not before: Sat 01 Feb 2025 20:29:42 +0000 ROA not after: Fri 02 May 2025 19:29:42 +0000 asID: 23506 IP address blocks: 2602:f704:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/63f043cf-2b37-4962-9d5b-bc179102509d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/63f043cf-2b37-4962-9d5b-bc179102509d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:e1:d5:8a:28:57:04:14:b0:4a:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63f043cf-2b37-4962-9d5b-bc179102509d Validity Not Before: Feb 1 20:29:42 2025 GMT Not After : May 2 19:29:42 2025 GMT Subject: CN=37b8550c-e8cc-48c4-be66-0365b3b3d43c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9f:9b:d8:28:d6:f7:00:2f:5c:d3:61:ee:fe: db:ef:f6:a5:69:53:cc:c9:de:91:f9:cc:bd:98:78: c7:e3:8b:d4:60:06:01:4c:bf:44:8c:ea:0e:d5:75: 5c:ad:f7:59:0c:e7:78:d0:8e:42:b3:e1:83:16:67: 53:6c:3e:00:5d:87:e9:3c:2f:09:c8:d5:9a:53:11: 89:12:83:ce:4d:7a:2f:8d:d2:57:9d:33:c7:c9:52: 1d:87:a5:c7:fd:8c:3f:47:63:14:c0:ff:77:73:d3: 3b:f0:04:28:80:aa:4c:24:ef:f2:fd:1f:8e:df:d1: 26:47:72:46:d3:20:c4:3d:44:96:86:b0:58:87:77: 8c:ab:07:eb:12:ce:db:9f:b5:98:1c:4f:94:b9:fb: 26:d3:3b:76:26:25:27:c3:49:98:84:00:b8:46:6c: 7c:9e:5f:d6:23:00:92:09:d0:8b:cc:70:4d:fe:55: 48:5b:e0:93:5f:75:64:95:f4:76:0f:e3:66:a8:41: 33:1e:fb:c0:79:99:e4:2a:62:1c:06:a1:9f:fd:92: d8:e7:30:5a:33:bc:a2:3d:a5:7d:7a:4e:0d:dd:29: a2:57:a0:bf:14:8a:eb:9a:6a:03:18:45:1f:71:f2: dd:18:4a:a8:25:f1:d4:21:b4:bc:36:72:94:1d:c8: 63:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BD:37:48:79:69:9F:6B:59:2D:E9:D4:FB:C7:6F:B5:29:05:88:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/1298d51a-f11e-30fd-9b81-309e6723fa54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/63f043cf-2b37-4962-9d5b-bc179102509d.crl X509v3 Authority Key Identifier: keyid:DF:97:12:3D:BE:3D:39:FF:38:2D:47:2A:3B:D6:64:56:81:93:BE:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f704:400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:3f:7a:dd:69:f5:59:01:ad:28:bb:a4:83:43:21:f5:29:60: 78:ac:29:45:51:a1:bc:90:b3:04:7d:96:cc:57:63:c0:df:e2: 72:91:89:eb:c5:fd:1f:23:b2:d8:b4:f9:27:38:98:d1:e2:cf: c7:40:fb:14:db:ab:da:b0:aa:f4:71:19:e7:e7:5c:1b:42:b9: 61:08:5c:69:81:cd:3c:ae:88:f8:0e:09:7e:3e:b0:f1:e5:29: d8:43:0a:cf:7e:fa:8c:44:62:db:82:6d:8e:04:f7:36:05:e1: 42:02:60:ca:63:dd:1e:0e:21:43:38:e7:7f:56:a0:64:e9:06: 80:35:6c:5b:90:16:dd:0c:b7:de:f9:63:3c:bc:b8:08:b9:5f: d2:ee:be:f3:4a:55:47:97:5a:21:ad:05:a1:b3:4b:54:2c:86: 33:df:12:7f:e5:1a:06:5a:86:b7:31:0d:df:af:35:8e:df:7e: a8:f0:c7:40:bf:fa:ae:a1:fe:d4:52:e3:cc:99:1a:b8:95:40: 85:f7:c6:33:80:ec:0d:d4:ca:f2:3c:1b:ad:09:c9:e1:47:d2: f4:3a:47:a6:8b:77:02:f7:23:02:bf:7a:8e:b6:f7:9a:85:e0: 34:2d:5c:aa:df:38:01:53:83:a1:0b:9c:12:b7:e1:66:9f:33: c8:c0:35:31 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEi94dWKKFcEFLBKKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjNmMDQzY2YtMmIzNy00OTYyLTlkNWItYmMxNzkxMDI1 MDlkMB4XDTI1MDIwMTIwMjk0MloXDTI1MDUwMjE5Mjk0MlowLzEtMCsGA1UEAxMk MzdiODU1MGMtZThjYy00OGM0LWJlNjYtMDM2NWIzYjNkNDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJ+b2CjW9wAvXNNh7v7b7/alaVPMyd6R+cy9 mHjH44vUYAYBTL9EjOoO1XVcrfdZDOd40I5Cs+GDFmdTbD4AXYfpPC8JyNWaUxGJ EoPOTXovjdJXnTPHyVIdh6XH/Yw/R2MUwP93c9M78AQogKpMJO/y/R+O39EmR3JG 0yDEPUSWhrBYh3eMqwfrEs7bn7WYHE+Uufsm0zt2JiUnw0mYhAC4Rmx8nl/WIwCS CdCLzHBN/lVIW+CTX3VklfR2D+NmqEEzHvvAeZnkKmIcBqGf/ZLY5zBaM7yiPaV9 ek4N3SmiV6C/FIrrmmoDGEUfcfLdGEqoJfHUIbS8NnKUHchjOwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCK9N0h5aZ9rWS3p1PvHb7UpBYgFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82M2Yw NDNjZi0yYjM3LTQ5NjItOWQ1Yi1iYzE3OTEwMjUwOWQvMTI5OGQ1MWEtZjExZS0z MGZkLTliODEtMzA5ZTY3MjNmYTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjNmMDQzY2YtMmIzNy00OTYyLTlk NWItYmMxNzkxMDI1MDlkLzYzZjA0M2NmLTJiMzctNDk2Mi05ZDViLWJjMTc5MTAy NTA5ZC5jcmwwHwYDVR0jBBgwFoAU35cSPb49Of84LUcqO9ZkVoGTvmcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82M2YwNDNjZi0yYjM3LTQ5NjItOWQ1Yi1iYzE3 OTEwMjUwOWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgL3BAQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFD963Wn1WQGtKLukg0Mh9SlgeKwpRVGhvJCzBH2WzFdjwN/icpGJ 68X9HyOy2LT5JziY0eLPx0D7FNur2rCq9HEZ5+dcG0K5YQhcaYHNPK6I+A4Jfj6w 8eUp2EMKz376jERi24JtjgT3NgXhQgJgymPdHg4hQzjnf1agZOkGgDVsW5AW3Qy3 3vljPLy4CLlf0u6+80pVR5daIa0FobNLVCyGM98Sf+UaBlqGtzEN3681jt9+qPDH QL/6rqH+1FLjzJkauJVAhffGM4DsDdTK8jwbrQnJ4UfS9DpHpot3AvcjAr96jrb3 moXgNC1cqt84AVODoQucErfhZp8zyMA1MQ== -----END CERTIFICATE-----Generated at Sat Apr 5 04:39:30 2025 by rpki-client