$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/9201e658-e9ec-3b79-a087-999e44a81757.roa File: 9201e658-e9ec-3b79-a087-999e44a81757.roa (raw, json) Hash identifier: UwomvgjdtfJ8rMDA7BDwJBwN7urh+hPNlVNKA9UPklw= Subject key identifier: 89:8D:50:8B:50:22:6E:C4:46:3D:79:99:B9:35:73:32:20:07:B4:2E Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F43285849631EBF47CE88D4CE33B8F8E0 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/9201e658-e9ec-3b79-a087-999e44a81757.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 32764 IP address blocks: 2602:f98b:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:bf:47:ce:88:d4:ce:33:b8:f8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=f49b7617-29f3-4282-9fd2-1cae773a3323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0a:74:b2:e5:76:fb:3b:0b:99:4e:04:bc:c2: 55:d3:15:16:6a:ac:66:ba:9c:22:a2:d9:6b:89:f9: e1:76:bb:5d:c3:af:c6:34:7f:ce:5d:a7:47:4a:b6: 4a:1b:11:08:ae:5e:0f:8c:67:6c:91:fe:13:a7:04: 28:cd:07:55:7c:29:e1:b4:6b:d2:fb:fc:fb:45:08: f3:70:0f:a9:dd:45:14:66:58:4a:cb:e0:c4:cd:2c: 61:1c:66:2a:e2:d0:3e:fa:da:77:f5:46:aa:6d:5d: 34:2d:7d:1b:f3:7b:c4:85:36:e7:17:a7:33:e2:15: b5:e3:80:6d:a3:d6:21:f1:eb:e2:34:68:21:fd:3c: b2:19:97:4a:08:24:f3:b1:dd:8a:15:f1:7b:46:44: cf:84:d4:ca:2d:b0:ca:0d:c4:0f:5c:40:5a:d7:79: 2e:6d:a8:d2:c7:70:fb:46:bf:6d:c4:77:0e:08:8e: 1c:aa:72:77:fb:61:88:90:4d:52:a7:d6:4c:03:e4: ed:54:d7:7e:b9:3b:b4:56:4d:57:24:44:8a:f4:b2: f9:f8:e3:ab:37:bd:05:3c:ad:03:7b:f8:d8:b7:e5: 81:2a:2e:f6:96:0c:9f:ca:4f:b6:53:0c:4e:43:72: 4b:7b:b7:88:e1:7c:04:57:29:78:b7:6e:3e:a7:c2: c1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8D:50:8B:50:22:6E:C4:46:3D:79:99:B9:35:73:32:20:07:B4:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/9201e658-e9ec-3b79-a087-999e44a81757.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv6: 2602:f98b:10::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:ea:06:15:e4:a3:6e:ec:64:aa:e2:1f:63:4c:c3:08:6b:ac: 36:b5:f3:11:b5:c2:fb:cf:ae:a8:25:a2:66:70:36:ce:cd:7f: 6e:69:36:9d:83:ad:9e:80:c1:fe:f8:a5:dc:4e:4a:17:40:c0: 69:d4:18:d1:a2:c6:6b:c5:a0:2d:a3:89:c8:d4:1c:70:ad:ad: e7:8b:e1:8b:0b:5a:c2:a1:8f:98:4f:5f:6f:d3:2c:05:35:29: 19:93:bc:f7:4e:ee:d0:92:09:0c:3f:05:8d:0a:1e:58:96:16: fc:5a:8c:38:36:aa:a0:7b:be:62:ad:05:34:0f:ec:19:39:e9: d7:1c:f5:0e:a3:09:36:4c:e8:3e:6b:f7:d3:75:46:17:c8:bf: 6e:da:c9:be:c1:72:59:70:25:12:53:6e:03:93:af:91:0a:96: e1:ae:7e:b9:fe:aa:dc:ad:a9:97:98:9b:c2:53:3b:45:a9:03: 93:7a:27:31:c5:d1:52:4d:80:3e:8d:f6:1d:39:ce:9e:8b:1e: 67:b5:52:d1:2c:34:3c:23:bb:d8:99:ab:7b:47:36:97:fc:bc: 02:87:85:75:22:8d:f9:b1:5e:7f:79:b5:2b:d6:a2:4c:f2:ae: 29:e1:84:9b:3f:92:79:02:09:2b:ab:88:43:be:47:73:50:9d: e8:4d:49:3c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEljHr9HzojUzjO4+OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk ZjQ5Yjc2MTctMjlmMy00MjgyLTlmZDItMWNhZTc3M2EzMzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQp0suV2+zsLmU4EvMJV0xUWaqxmupwiotlr ifnhdrtdw6/GNH/OXadHSrZKGxEIrl4PjGdskf4TpwQozQdVfCnhtGvS+/z7RQjz cA+p3UUUZlhKy+DEzSxhHGYq4tA++tp39UaqbV00LX0b83vEhTbnF6cz4hW144Bt o9Yh8eviNGgh/TyyGZdKCCTzsd2KFfF7RkTPhNTKLbDKDcQPXEBa13kubajSx3D7 Rr9txHcOCI4cqnJ3+2GIkE1Sp9ZMA+TtVNd+uTu0Vk1XJESK9LL5+OOrN70FPK0D e/jYt+WBKi72lgyfyk+2UwxOQ3JLe7eI4XwEVyl4t24+p8LBxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFImNUItQIm7ERj15mbk1czIgB7QuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvOTIwMWU2NTgtZTllYy0z Yjc5LWEwODctOTk5ZTQ0YTgxNzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5iwAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFzqBhXko27sZKriH2NMwwhrrDa18xG1wvvPrqglomZwNs7Nf25p Np2DrZ6Awf74pdxOShdAwGnUGNGixmvFoC2jicjUHHCtreeL4YsLWsKhj5hPX2/T LAU1KRmTvPdO7tCSCQw/BY0KHliWFvxajDg2qqB7vmKtBTQP7Bk56dcc9Q6jCTZM 6D5r99N1RhfIv27ayb7BcllwJRJTbgOTr5EKluGufrn+qtytqZeYm8JTO0WpA5N6 JzHF0VJNgD6N9h05zp6LHme1UtEsNDwju9iZq3tHNpf8vAKHhXUijfmxXn95tSvW okzyrinhhJs/knkCCSuriEO+R3NQnehNSTw= -----END CERTIFICATE-----Generated at Thu Apr 10 01:28:22 2025 by rpki-client