$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/b1d7a38e-1c90-3f83-91c8-ae777a795e58.roa File: b1d7a38e-1c90-3f83-91c8-ae777a795e58.roa (raw, json) Hash identifier: cfc9unjT007b+GmKG3UlwME1UDArgbY8Vl1L6SnfOPw= Subject key identifier: 62:C9:C8:75:4B:3E:83:77:A6:1F:48:3E:9E:3B:BF:F3:A4:CF:95:1E Certificate issuer: /CN=0a9d33e4-ed4d-4b47-b363-b42110f88557 Certificate serial: 010D0C9F432858492CAE8670D892C49C65FA2DC0 Authority key identifier: 8B:65:0F:A5:8E:C3:A9:0D:82:74:8D:DA:2E:95:21:E2:D7:FD:DA:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/b1d7a38e-1c90-3f83-91c8-ae777a795e58.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 395214 IP address blocks: 2602:ff3d::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/0a9d33e4-ed4d-4b47-b363-b42110f88557.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/0a9d33e4-ed4d-4b47-b363-b42110f88557.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:86:70:d8:92:c4:9c:65:fa:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a9d33e4-ed4d-4b47-b363-b42110f88557 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=3784b3fb-b5e0-4f7c-b2b5-a3c856610660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e1:cd:2d:79:a5:49:fd:db:c0:07:b4:f3:7b: 78:93:5d:c0:f0:e8:56:df:04:15:18:f2:bb:f6:0e: a3:95:b4:3b:87:a9:e4:d2:d5:d6:a3:f6:78:9d:21: 9d:55:26:73:a4:ca:c9:55:5a:f8:dc:c7:c2:2b:34: e8:8b:87:4a:48:36:2d:00:68:c5:fb:9d:30:56:62: 1d:4b:42:25:44:cb:4e:42:1d:ae:ae:5a:26:fd:b3: 87:19:aa:df:88:29:80:4e:13:b3:29:27:f3:71:2f: e2:0a:92:0a:fe:0f:a4:d3:a2:b0:9d:dd:ea:22:c8: b9:2f:2a:29:8b:a9:91:de:ce:e2:64:30:fc:14:2c: ee:ff:f1:f0:84:5c:41:30:bd:55:1f:09:24:df:b1: 05:e2:1a:ea:25:4f:c9:dc:7c:67:a0:2f:ec:0f:7d: 06:93:0d:37:1d:0a:9a:a9:fe:9c:fd:a6:c2:28:dc: a9:10:da:00:a7:91:1c:b2:a4:3f:c5:9b:5f:10:28: 26:7b:6a:d6:49:61:f0:b1:2e:77:5b:ff:1c:ba:96: f1:83:66:3c:46:99:b9:46:3c:90:5b:57:65:90:b8: 36:46:30:70:ed:78:5e:94:f5:dd:e3:db:0c:0b:68: 91:75:69:88:34:e2:2a:b1:54:d8:09:fa:e5:a1:de: 6c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C9:C8:75:4B:3E:83:77:A6:1F:48:3E:9E:3B:BF:F3:A4:CF:95:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/b1d7a38e-1c90-3f83-91c8-ae777a795e58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/0a9d33e4-ed4d-4b47-b363-b42110f88557.crl X509v3 Authority Key Identifier: keyid:8B:65:0F:A5:8E:C3:A9:0D:82:74:8D:DA:2E:95:21:E2:D7:FD:DA:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer sbgp-ipAddrBlock: critical IPv6: 2602:ff3d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:59:d2:65:c9:da:a7:18:fa:98:9c:c7:5e:1e:db:c2:e0:30: 02:89:9b:4e:4d:fb:61:c6:5f:1a:00:0f:39:79:39:2a:2f:53: ba:6a:94:30:f7:a6:4f:27:99:28:df:16:c1:87:60:1d:06:6d: af:9e:96:5d:27:23:3c:0c:a1:79:76:1b:da:ab:aa:30:fb:76: 12:e1:d5:f0:2e:6d:f9:3a:5e:ed:fa:55:6e:6f:bc:8f:56:94: 5e:0f:17:75:73:fa:88:9c:1b:c8:a2:50:b0:6c:06:50:dc:da: db:e1:47:91:3a:12:1e:c7:12:37:3a:b1:5e:2e:bf:b8:c9:bc: bf:78:f2:8f:ff:7c:51:be:ff:7d:b1:1a:9e:cf:4f:db:5c:8d: c2:07:7d:81:3b:0c:b5:7d:bb:1d:b0:6f:05:47:5c:d4:fc:f1: 9e:c3:d2:93:60:df:18:02:ff:06:79:22:42:e0:77:47:75:ec: 9d:b0:22:98:a6:98:6d:b8:8f:f7:79:a1:ac:2c:d6:85:3d:24: 7b:96:51:e3:a4:04:a4:3b:d1:08:cc:2e:93:3f:cc:7e:c4:5a: 8c:93:a0:51:02:ce:2d:50:32:c2:f7:95:84:53:2a:2b:56:55: 39:e7:83:e0:c5:31:04:10:d2:f9:28:42:47:e3:ad:b7:27:9e: b8:53:37:13 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEksroZw2JLEnGX6LcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE5ZDMzZTQtZWQ0ZC00YjQ3LWIzNjMtYjQyMTEwZjg4 NTU3MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk Mzc4NGIzZmItYjVlMC00ZjdjLWIyYjUtYTNjODU2NjEwNjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuHNLXmlSf3bwAe083t4k13A8OhW3wQVGPK7 9g6jlbQ7h6nk0tXWo/Z4nSGdVSZzpMrJVVr43MfCKzToi4dKSDYtAGjF+50wVmId S0IlRMtOQh2urlom/bOHGarfiCmAThOzKSfzcS/iCpIK/g+k06Kwnd3qIsi5Lyop i6mR3s7iZDD8FCzu//HwhFxBML1VHwkk37EF4hrqJU/J3HxnoC/sD30Gkw03HQqa qf6c/abCKNypENoAp5EcsqQ/xZtfECgme2rWSWHwsS53W/8cupbxg2Y8Rpm5RjyQ W1dlkLg2RjBw7XhelPXd49sMC2iRdWmINOIqsVTYCfrlod5szwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGLJyHVLPoN3ph9IPp47v/Okz5UeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYTlk MzNlNC1lZDRkLTRiNDctYjM2My1iNDIxMTBmODg1NTcvYjFkN2EzOGUtMWM5MC0z ZjgzLTkxYzgtYWU3NzdhNzk1ZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGE5ZDMzZTQtZWQ0ZC00YjQ3LWIz NjMtYjQyMTEwZjg4NTU3LzBhOWQzM2U0LWVkNGQtNGI0Ny1iMzYzLWI0MjExMGY4 ODU1Ny5jcmwwHwYDVR0jBBgwFoAUi2UPpY7DqQ2CdI3aLpUh4tf92n4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYTlkMzNlNC1lZDRkLTRiNDctYjM2My1iNDIx MTBmODg1NTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL/PQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAG1nSZcnapxj6mJzHXh7bwuAwAombTk37YcZfGgAPOXk5Ki9TumqU MPemTyeZKN8WwYdgHQZtr56WXScjPAyheXYb2quqMPt2EuHV8C5t+Tpe7fpVbm+8 j1aUXg8XdXP6iJwbyKJQsGwGUNza2+FHkToSHscSNzqxXi6/uMm8v3jyj/98Ub7/ fbEans9P21yNwgd9gTsMtX27HbBvBUdc1PzxnsPSk2DfGAL/BnkiQuB3R3XsnbAi mKaYbbiP93mhrCzWhT0ke5ZR46QEpDvRCMwukz/MfsRajJOgUQLOLVAywveVhFMq K1ZVOeeD4MUxBBDS+ShCR+OttyeeuFM3Ew== -----END CERTIFICATE-----Generated at Sat Apr 5 09:50:08 2025 by rpki-client