$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/bbffe655-22cb-3fa2-8874-554d2186abf2.roa File: bbffe655-22cb-3fa2-8874-554d2186abf2.roa (raw, json) Hash identifier: FcEOK7QUGETo/f4SEQwN0kRcDrvfouo6G419vA6BA3k= Subject key identifier: 21:2A:15:30:83:F3:79:AB:EF:57:98:D6:41:E3:CA:8D:48:FE:36:7B Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F43285849203C139F1FF697ADAC0A9340 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/bbffe655-22cb-3fa2-8874-554d2186abf2.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 14618 IP address blocks: 2602:f98b:30::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:13:9f:1f:f6:97:ad:ac:0a:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=18926fe3-324f-45f0-89d3-d55772e11ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a0:0a:eb:ea:10:26:d9:c5:10:42:11:99:e8: 24:57:ff:97:20:6a:e5:a8:a9:cf:3f:c5:5c:f4:49: 8f:4b:f8:6c:01:36:4a:4d:ec:2b:2c:ce:9a:92:86: 5e:c6:e0:3b:82:ed:f5:72:4d:6c:b1:31:fa:9a:f6: 2c:c9:cd:5a:ac:9f:82:60:75:2a:ff:fe:d3:42:d0: da:69:3e:83:cd:98:b3:84:1b:a2:81:0c:c1:40:ec: f8:10:e2:85:f6:fe:65:e2:4a:66:b5:aa:4e:db:3a: db:45:33:b9:77:85:3f:f6:09:03:a1:26:6d:16:4d: 4a:72:42:6a:97:4e:f7:1f:bc:14:18:2e:13:c5:57: fd:ab:f2:b6:94:e2:f8:ad:c0:a3:a2:f8:68:07:38: df:e1:66:c3:d5:60:d2:1d:14:d7:44:7b:5d:ac:6d: 66:b7:30:39:aa:a5:e9:d2:f7:cc:93:04:de:a5:ea: f7:fd:ed:30:2c:11:cc:af:21:d6:90:ac:61:d4:2e: 76:f6:b9:af:75:d3:e3:48:64:67:aa:c0:ba:38:9b: 43:f1:60:36:74:81:c9:3d:1e:bf:72:10:85:fe:39: 2c:25:28:98:9b:a5:e4:6a:d7:3a:3b:77:e6:c7:8e: c8:ff:64:a9:6f:fd:25:35:33:89:d1:77:77:cf:b9: d0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2A:15:30:83:F3:79:AB:EF:57:98:D6:41:E3:CA:8D:48:FE:36:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/bbffe655-22cb-3fa2-8874-554d2186abf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv6: 2602:f98b:30::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:71:3f:d0:84:a3:fa:e2:62:ef:c5:cf:6e:0d:71:49:1a:ec: 48:80:79:72:ab:d7:8a:4c:64:d8:65:75:4b:6c:d6:81:85:aa: 04:c4:21:fa:af:3b:7d:e0:17:f3:24:1c:1c:1a:e9:f7:54:6a: 5a:8d:23:2d:2c:2b:e0:99:2e:ad:ad:76:ea:22:ad:08:e0:d6: 3e:97:8d:c2:aa:57:3d:3b:56:81:79:af:9f:e7:8c:67:2d:ea: 93:87:23:76:92:48:8b:dd:8c:52:e3:75:1e:cf:c9:97:e4:ce: ee:00:3c:04:d1:3a:6d:ed:15:94:b7:11:79:39:1a:0e:24:12: e4:75:5c:cd:ee:0e:44:f7:22:27:ff:e9:06:2a:27:c8:de:79: 08:b6:de:11:72:c9:00:33:25:74:b4:a4:59:24:f6:0c:0f:f9: 0a:f5:a7:76:cf:55:f0:9f:58:50:e0:ba:c6:dc:38:3b:14:22: 6a:03:3f:e7:ec:38:26:dd:81:47:f7:33:52:56:6b:47:5e:4b: 0e:25:32:ef:b9:9b:81:61:7c:99:e0:94:a3:fd:ff:05:15:b1: 74:05:0e:fe:46:7b:68:8a:4d:d8:96:5c:de:95:3c:76:02:a9: 26:9e:29:ec:ef:83:75:b1:e1:fe:14:c5:3e:b7:af:69:1f:c1: 7b:83:90:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkgPBOfH/aXrawKk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk MTg5MjZmZTMtMzI0Zi00NWYwLTg5ZDMtZDU1NzcyZTExYmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaAK6+oQJtnFEEIRmegkV/+XIGrlqKnPP8Vc 9EmPS/hsATZKTewrLM6akoZexuA7gu31ck1ssTH6mvYsyc1arJ+CYHUq//7TQtDa aT6DzZizhBuigQzBQOz4EOKF9v5l4kpmtapO2zrbRTO5d4U/9gkDoSZtFk1KckJq l073H7wUGC4TxVf9q/K2lOL4rcCjovhoBzjf4WbD1WDSHRTXRHtdrG1mtzA5qqXp 0vfMkwTeper3/e0wLBHMryHWkKxh1C529rmvddPjSGRnqsC6OJtD8WA2dIHJPR6/ chCF/jksJSiYm6Xkatc6O3fmx47I/2Spb/0lNTOJ0Xd3z7nQxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCEqFTCD83mr71eY1kHjyo1I/jZ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvYmJmZmU2NTUtMjJjYi0z ZmEyLTg4NzQtNTU0ZDIxODZhYmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL5iwAw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKpxP9CEo/riYu/Fz24NcUka7EiAeXKr14pMZNhldUts1oGFqgTE IfqvO33gF/MkHBwa6fdUalqNIy0sK+CZLq2tduoirQjg1j6XjcKqVz07VoF5r5/n jGct6pOHI3aSSIvdjFLjdR7PyZfkzu4APATROm3tFZS3EXk5Gg4kEuR1XM3uDkT3 Iif/6QYqJ8jeeQi23hFyyQAzJXS0pFkk9gwP+Qr1p3bPVfCfWFDgusbcODsUImoD P+fsOCbdgUf3M1JWa0deSw4lMu+5m4FhfJnglKP9/wUVsXQFDv5Ge2iKTdiWXN6V PHYCqSaeKezvg3Wx4f4UxT63r2kfwXuDkAk= -----END CERTIFICATE-----Generated at Fri Mar 14 10:53:43 2025 by rpki-client