$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1/8d4c36be-83e8-3bb3-a703-b7faeed7798c.roa File: 8d4c36be-83e8-3bb3-a703-b7faeed7798c.roa (raw, json) Hash identifier: 1sT7sRG2yfynhDlPzoyJaL+MPE23jq0q5zp5VB0pack= Subject key identifier: A3:95:52:F3:53:22:E8:1F:68:ED:12:70:B0:36:7A:F2:5C:60:20:06 Certificate issuer: /CN=ac448c7f-05bb-4802-8533-0aad8a69acb1 Certificate serial: 010D0C9F4328584965E97DC4CE651E17280A9700 Authority key identifier: 68:1B:6C:BF:68:80:D6:70:FD:14:48:6E:E9:8B:38:01:3A:A8:4B:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1/8d4c36be-83e8-3bb3-a703-b7faeed7798c.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 400189 IP address blocks: 2602:fb16::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1/ac448c7f-05bb-4802-8533-0aad8a69acb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1/ac448c7f-05bb-4802-8533-0aad8a69acb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:7d:c4:ce:65:1e:17:28:0a:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac448c7f-05bb-4802-8533-0aad8a69acb1 Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=5c37ef48-af5a-41ae-98ec-6979834adea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:96:f7:7c:d4:f0:ef:2d:f8:92:80:c4:2e:60: 11:ba:28:f1:f8:86:6c:17:28:dd:db:74:7c:51:7e: 3c:b6:f0:9d:b1:71:b7:5b:ad:30:21:64:b1:62:97: 8d:83:50:38:24:91:11:9b:0a:9c:04:1f:9e:17:62: 47:f1:57:5c:59:79:b4:e2:41:22:1b:f6:a6:57:69: cf:45:88:33:25:9a:39:69:40:e5:3a:34:de:3c:51: c9:b4:7f:42:b4:aa:bb:fa:a5:21:8e:35:d9:0f:55: 0f:8c:91:63:e1:6d:1c:36:0d:0e:36:38:4e:3b:f1: 5e:2c:cd:4f:3d:d0:06:78:cd:21:8d:a0:5a:50:5c: 63:bb:1f:c7:0d:0e:46:de:b6:e4:6c:e4:aa:22:97: e6:1e:13:3c:48:3b:dd:3b:e0:61:22:90:6a:c4:02: bd:7b:d6:2a:a0:82:52:d5:43:ea:e5:a8:53:d9:4f: b7:e2:41:87:f9:f5:e0:02:76:61:ef:16:80:1e:7a: 4f:5f:fb:bb:d9:b0:b0:a3:24:bf:b9:af:78:6b:38: ad:e9:2b:f5:f3:b7:8b:12:f8:84:95:10:e4:ad:21: b5:d0:fa:a4:4e:a8:46:bf:ff:f2:af:da:d9:f6:98: 06:1c:3e:37:b1:76:46:2d:86:8d:e7:01:9c:e2:25: da:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:95:52:F3:53:22:E8:1F:68:ED:12:70:B0:36:7A:F2:5C:60:20:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1/8d4c36be-83e8-3bb3-a703-b7faeed7798c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1/ac448c7f-05bb-4802-8533-0aad8a69acb1.crl X509v3 Authority Key Identifier: keyid:68:1B:6C:BF:68:80:D6:70:FD:14:48:6E:E9:8B:38:01:3A:A8:4B:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb16::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:eb:d5:08:bc:a1:d9:76:7a:76:21:8f:98:c8:59:4b:46:f7: 93:68:3a:04:3a:34:c2:a5:70:26:f8:96:80:9d:bc:8d:47:c3: b9:70:ae:d8:ac:85:18:15:be:36:cd:bc:01:d7:86:77:ed:34: ec:4f:e5:63:33:ad:9b:82:d0:33:7d:2c:40:87:bf:6f:09:ce: 12:dd:c4:d7:9c:c2:ea:a7:f7:fb:2a:02:1c:fd:ac:27:08:e1: 60:1b:b5:02:e4:2a:8c:7b:74:f9:68:69:3d:c1:3f:db:56:79: b8:04:5a:2c:cb:cf:9f:58:e7:48:16:a7:b3:ec:1f:5e:b8:10: 80:a8:92:67:57:24:c8:5e:af:93:d5:b3:53:03:bd:78:8a:78: b5:b8:3d:57:e6:95:29:ab:a3:b7:26:7b:c3:71:3f:d9:db:06: 29:26:9b:74:2e:3e:35:79:2e:85:13:d1:6d:92:2c:8b:45:fd: c6:6d:07:62:65:9e:10:81:32:76:a3:69:66:11:72:79:00:ea: 2d:56:2c:36:15:af:53:d4:90:7f:8c:72:3a:12:b3:06:20:d9: 0b:01:71:28:b8:d3:04:59:ce:d7:89:0a:2c:b3:45:97:11:19: f6:0b:bf:0b:4d:32:b5:de:73:7c:f1:d5:12:5a:37:2e:0e:d0: bd:d5:ae:e5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEll6X3EzmUeFygKlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM0NDhjN2YtMDViYi00ODAyLTg1MzMtMGFhZDhhNjlh Y2IxMB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk NWMzN2VmNDgtYWY1YS00MWFlLTk4ZWMtNjk3OTgzNGFkZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJb3fNTw7y34koDELmARuijx+IZsFyjd23R8 UX48tvCdsXG3W60wIWSxYpeNg1A4JJERmwqcBB+eF2JH8VdcWXm04kEiG/amV2nP RYgzJZo5aUDlOjTePFHJtH9CtKq7+qUhjjXZD1UPjJFj4W0cNg0ONjhOO/FeLM1P PdAGeM0hjaBaUFxjux/HDQ5G3rbkbOSqIpfmHhM8SDvdO+BhIpBqxAK9e9YqoIJS 1UPq5ahT2U+34kGH+fXgAnZh7xaAHnpPX/u72bCwoyS/ua94azit6Sv187eLEviE lRDkrSG10PqkTqhGv//yr9rZ9pgGHD43sXZGLYaN5wGc4iXamwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKOVUvNTIugfaO0ScLA2evJcYCAGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYzQ0 OGM3Zi0wNWJiLTQ4MDItODUzMy0wYWFkOGE2OWFjYjEvOGQ0YzM2YmUtODNlOC0z YmIzLWE3MDMtYjdmYWVlZDc3OThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWM0NDhjN2YtMDViYi00ODAyLTg1 MzMtMGFhZDhhNjlhY2IxL2FjNDQ4YzdmLTA1YmItNDgwMi04NTMzLTBhYWQ4YTY5 YWNiMS5jcmwwHwYDVR0jBBgwFoAUaBtsv2iA1nD9FEhu6Ys4ATqoS0QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYzQ0OGM3Zi0wNWJiLTQ4MDItODUzMy0wYWFk OGE2OWFjYjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL7FgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXevVCLyh2XZ6diGPmMhZS0b3k2g6BDo0wqVwJviWgJ28jUfDuXCu 2KyFGBW+Ns28AdeGd+007E/lYzOtm4LQM30sQIe/bwnOEt3E15zC6qf3+yoCHP2s JwjhYBu1AuQqjHt0+WhpPcE/21Z5uARaLMvPn1jnSBans+wfXrgQgKiSZ1ckyF6v k9WzUwO9eIp4tbg9V+aVKaujtyZ7w3E/2dsGKSabdC4+NXkuhRPRbZIsi0X9xm0H YmWeEIEydqNpZhFyeQDqLVYsNhWvU9SQf4xyOhKzBiDZCwFxKLjTBFnO14kKLLNF lxEZ9gu/C00ytd5zfPHVElo3Lg7QvdWu5Q== -----END CERTIFICATE-----Generated at Sat Apr 5 04:42:00 2025 by rpki-client