$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/ebb55e36-3ef8-33a5-829f-4de227ff2753.roa File: ebb55e36-3ef8-33a5-829f-4de227ff2753.roa (raw, json) Hash identifier: nX1Ls3PQxRoi9uvs4DkDDEF1h8k/gzEPzrsTEatncgY= Subject key identifier: DC:4F:47:1E:0E:7C:A0:C5:8A:1E:1C:1A:5F:37:8E:D5:3C:44:DD:10 Certificate issuer: /CN=d7c75743-409b-41fb-b744-8345baaf599b Certificate serial: 010D0C9F43285849BF3F649F14F5882590F06900 Authority key identifier: 62:33:C3:19:5C:3A:85:62:DF:B7:57:13:AC:7F:5F:AB:C4:CD:25:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/ebb55e36-3ef8-33a5-829f-4de227ff2753.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 20373 IP address blocks: 2602:f939:99::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/d7c75743-409b-41fb-b744-8345baaf599b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/d7c75743-409b-41fb-b744-8345baaf599b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:64:9f:14:f5:88:25:90:f0:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c75743-409b-41fb-b744-8345baaf599b Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=05ef5033-d7e7-4ace-8132-bcf1fbd28c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4e:f1:5b:8e:47:4b:d7:88:8e:8f:d1:e1:0e: 88:ef:a7:fc:08:37:18:44:25:9f:ca:5e:5a:65:ab: ea:df:37:bd:16:79:1f:4b:04:78:f3:29:5c:63:55: 34:c8:9b:ea:f6:78:8a:77:2f:6e:13:4d:18:67:75: de:e9:6f:17:60:b6:1b:70:3e:7b:fb:ea:6e:95:38: ca:cd:d0:bc:4c:f6:60:fe:26:a2:c5:dc:df:a1:39: 4e:c4:3f:3b:65:4a:67:2b:d3:0d:e0:a7:1c:ad:d7: 58:07:5b:29:b6:d2:a1:84:aa:94:29:78:da:0f:8d: 9f:88:95:47:06:f4:8d:ef:fc:2b:e6:87:e5:6b:84: dc:a9:19:20:e8:d4:94:c2:77:91:e9:e9:36:ef:80: 53:9b:74:93:21:fb:03:58:ce:cc:ce:dd:2b:f1:26: 76:05:96:19:09:a1:a4:fc:6d:69:38:92:c4:7c:77: e9:a3:41:40:38:07:14:f3:d3:21:6f:f7:94:69:59: c9:fe:9e:47:ef:78:54:e5:e4:7c:92:3a:b1:2d:2c: ed:15:15:7c:8e:d1:72:d0:19:3d:d5:39:23:89:e3: 1f:c3:57:56:a0:ef:0b:7f:7f:db:e5:6f:b9:59:ff: a9:18:08:30:74:3e:38:43:6e:2e:fd:21:01:47:44: 77:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4F:47:1E:0E:7C:A0:C5:8A:1E:1C:1A:5F:37:8E:D5:3C:44:DD:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/ebb55e36-3ef8-33a5-829f-4de227ff2753.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/d7c75743-409b-41fb-b744-8345baaf599b.crl X509v3 Authority Key Identifier: keyid:62:33:C3:19:5C:3A:85:62:DF:B7:57:13:AC:7F:5F:AB:C4:CD:25:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b.cer sbgp-ipAddrBlock: critical IPv6: 2602:f939:99::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:40:75:43:45:96:92:21:ce:f8:92:9e:3c:d2:ae:ab:4d:cf: fd:43:84:1f:d2:ca:3c:77:49:0f:a6:ec:55:85:5d:fc:6f:5c: 89:ce:e9:5e:12:a4:70:0a:14:11:70:6a:24:6f:36:85:d5:e4: 57:c0:0c:f2:e3:a9:77:4e:a6:0c:bb:a7:64:26:af:9d:c0:71: bb:e7:0e:64:42:54:eb:59:38:9a:e4:38:43:29:0c:06:74:d6: 73:e6:e7:18:5d:7d:81:4c:0e:1f:f4:24:79:4b:8e:f4:f5:5c: 0e:23:66:82:3d:b4:6f:4d:6b:ba:3d:d2:cb:59:b4:57:37:4a: c8:ad:73:90:ca:a1:95:72:16:e3:52:57:c4:b1:de:6b:79:29: 52:77:de:d0:c6:5f:4e:9b:55:a5:c1:8d:5f:ff:a9:b9:84:52: 86:87:04:15:b0:38:94:e6:3f:21:2e:64:07:6b:93:70:f4:7e: 1c:3c:82:f6:2c:74:20:f1:59:03:c6:8a:fa:30:df:34:48:07: b4:c5:f0:a5:ff:5c:99:7e:09:73:0a:4f:2c:73:a1:77:c3:4b: f5:51:84:84:28:9f:66:eb:65:19:8d:63:6b:8c:79:0e:e8:38: 32:16:7c:c8:f6:9e:dc:31:2a:32:34:62:df:f2:bf:1e:b5:99: e5:aa:a2:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm/P2SfFPWIJZDwaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNzU3NDMtNDA5Yi00MWZiLWI3NDQtODM0NWJhYWY1 OTliMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MDVlZjUwMzMtZDdlNy00YWNlLTgxMzItYmNmMWZiZDI4YzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU7xW45HS9eIjo/R4Q6I76f8CDcYRCWfyl5a Zavq3ze9FnkfSwR48ylcY1U0yJvq9niKdy9uE00YZ3Xe6W8XYLYbcD57++pulTjK zdC8TPZg/iaixdzfoTlOxD87ZUpnK9MN4KccrddYB1spttKhhKqUKXjaD42fiJVH BvSN7/wr5ofla4TcqRkg6NSUwneR6ek274BTm3STIfsDWM7Mzt0r8SZ2BZYZCaGk /G1pOJLEfHfpo0FAOAcU89Mhb/eUaVnJ/p5H73hU5eR8kjqxLSztFRV8jtFy0Bk9 1TkjieMfw1dWoO8Lf3/b5W+5Wf+pGAgwdD44Q24u/SEBR0R3/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNxPRx4OfKDFih4cGl83jtU8RN0QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kN2M3 NTc0My00MDliLTQxZmItYjc0NC04MzQ1YmFhZjU5OWIvZWJiNTVlMzYtM2VmOC0z M2E1LTgyOWYtNGRlMjI3ZmYyNzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDdjNzU3NDMtNDA5Yi00MWZiLWI3 NDQtODM0NWJhYWY1OTliL2Q3Yzc1NzQzLTQwOWItNDFmYi1iNzQ0LTgzNDViYWFm NTk5Yi5jcmwwHwYDVR0jBBgwFoAUYjPDGVw6hWLft1cTrH9fq8TNJQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kN2M3NTc0My00MDliLTQxZmItYjc0NC04MzQ1 YmFhZjU5OWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5OQCZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGJAdUNFlpIhzviSnjzSrqtNz/1DhB/Syjx3SQ+m7FWFXfxvXInO 6V4SpHAKFBFwaiRvNoXV5FfADPLjqXdOpgy7p2Qmr53AcbvnDmRCVOtZOJrkOEMp DAZ01nPm5xhdfYFMDh/0JHlLjvT1XA4jZoI9tG9Na7o90stZtFc3Ssitc5DKoZVy FuNSV8Sx3mt5KVJ33tDGX06bVaXBjV//qbmEUoaHBBWwOJTmPyEuZAdrk3D0fhw8 gvYsdCDxWQPGivow3zRIB7TF8KX/XJl+CXMKTyxzoXfDS/VRhIQon2brZRmNY2uM eQ7oODIWfMj2ntwxKjI0Yt/yvx61meWqolQ= -----END CERTIFICATE-----Generated at Fri May 9 08:47:27 2025 by rpki-client