$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/15971b5a-708e-36a4-9675-d45099021eac.roa File: 15971b5a-708e-36a4-9675-d45099021eac.roa (raw, json) Hash identifier: E3dPphqJ4RnfgqZVi5O4pk+nbPEM20oSxRaRGDrBBRc= Subject key identifier: 20:9E:66:D7:C6:32:8D:62:17:E0:B9:C0:FE:F0:F4:95:E5:5D:33:45 Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F4328584953C4176E41C5BAAAF3964B00 Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/15971b5a-708e-36a4-9675-d45099021eac.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 13849 IP address blocks: 2602:fbb5::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:17:6e:41:c5:ba:aa:f3:96:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=fbdb8a90-b2fa-4abb-a188-e5e146819e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f3:4c:99:9c:f3:da:4a:c7:c8:77:99:43:a1: 15:24:e7:a9:34:9e:7b:c0:7b:6f:74:1d:95:bc:d4: 41:a3:2f:f5:c8:71:81:6c:cf:e7:af:c2:f0:1e:70: 78:73:3e:7e:01:4e:44:17:1b:1d:38:45:19:c7:5e: 70:ec:37:3d:3f:e6:91:29:51:19:ed:cd:23:fb:a2: c6:d6:5c:cd:86:ee:ae:76:fe:7e:35:22:de:aa:45: 83:2b:2c:5b:17:9d:81:23:7a:b5:79:97:18:cf:df: 71:7f:a2:cc:88:34:4d:e1:81:7b:ce:2f:6d:c1:5d: 7f:d2:f8:29:2f:6b:23:97:0f:9a:dd:42:27:86:ae: 6e:c9:8f:ef:8b:76:70:d5:76:4d:0f:37:e7:37:cd: a1:d6:16:06:35:7b:d9:f9:47:f8:fd:f7:d1:6d:03: a7:07:9f:4e:ab:8b:d1:f1:5a:1e:97:2a:eb:25:2d: bc:51:32:4c:66:b9:e1:3f:b4:b3:72:7c:d5:d6:1c: c8:f8:e4:a9:7b:52:af:bd:b7:42:40:6d:50:8e:3b: 49:0f:52:96:3a:c7:77:15:12:27:1a:07:a9:f7:07: 0e:51:08:37:51:dc:fc:0e:b1:9c:e5:54:44:db:9c: 94:de:6e:4f:4d:da:ea:b9:f6:7e:4b:61:d4:12:e4: 39:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9E:66:D7:C6:32:8D:62:17:E0:B9:C0:FE:F0:F4:95:E5:5D:33:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/15971b5a-708e-36a4-9675-d45099021eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbb5::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:e1:64:e8:c1:7e:1b:18:ff:a4:d8:0f:13:4e:5e:a3:fb:35: 17:4b:52:b2:21:df:66:3b:90:4b:1a:46:fa:d1:b6:eb:9a:58: 9b:cc:5d:32:27:a0:51:7d:21:c1:f8:c0:8f:30:da:72:5c:bf: 60:6c:df:9d:47:62:70:fe:70:08:98:f6:a7:6f:35:47:3e:1e: a7:65:7f:de:24:42:d6:79:4e:87:36:32:e6:92:19:a4:a9:62: 46:f2:fd:4f:3b:27:59:bd:5d:e8:f9:d7:f4:a6:eb:da:94:42: 4c:61:e2:52:2a:ce:2b:5b:2d:83:f8:a3:a7:4c:9d:4a:1e:55: 2a:bf:9d:fc:39:ad:26:6a:4c:89:58:bf:d3:2f:6c:17:bf:2c: 5d:81:aa:32:03:d0:78:3e:94:1d:f1:55:f1:7c:00:93:b4:ff: 8c:8e:6b:be:60:7b:d5:d1:db:c9:d9:a1:9f:57:cd:4a:6b:30: b0:69:9a:99:2c:d9:20:35:19:21:f3:29:85:b9:7f:90:54:17: 0a:7e:e8:d4:da:38:d2:5f:fd:47:e4:ff:bf:c5:a8:38:79:ee: b2:74:6d:3f:1c:15:f4:3b:53:25:ee:0b:84:d6:f1:00:ec:ed: 88:b5:99:57:fb:bd:92:b4:dd:7e:4e:c4:2d:06:24:97:0f:2d: 86:6d:1b:9a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElTxBduQcW6qvOWSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZmJkYjhhOTAtYjJmYS00YWJiLWExODgtZTVlMTQ2ODE5ZTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvNMmZzz2krHyHeZQ6EVJOepNJ57wHtvdB2V vNRBoy/1yHGBbM/nr8LwHnB4cz5+AU5EFxsdOEUZx15w7Dc9P+aRKVEZ7c0j+6LG 1lzNhu6udv5+NSLeqkWDKyxbF52BI3q1eZcYz99xf6LMiDRN4YF7zi9twV1/0vgp L2sjlw+a3UInhq5uyY/vi3Zw1XZNDzfnN82h1hYGNXvZ+Uf4/ffRbQOnB59Oq4vR 8VoelyrrJS28UTJMZrnhP7SzcnzV1hzI+OSpe1KvvbdCQG1QjjtJD1KWOsd3FRIn Ggep9wcOUQg3Udz8DrGc5VRE25yU3m5PTdrqufZ+S2HUEuQ5bwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCCeZtfGMo1iF+C5wP7w9JXlXTNFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvMTU5NzFiNWEtNzA4ZS0z NmE0LTk2NzUtZDQ1MDk5MDIxZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL7tQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJeFk6MF+Gxj/pNgPE05eo/s1F0tSsiHfZjuQSxpG+tG265pYm8xd MiegUX0hwfjAjzDacly/YGzfnUdicP5wCJj2p281Rz4ep2V/3iRC1nlOhzYy5pIZ pKliRvL9TzsnWb1d6PnX9Kbr2pRCTGHiUirOK1stg/ijp0ydSh5VKr+d/DmtJmpM iVi/0y9sF78sXYGqMgPQeD6UHfFV8XwAk7T/jI5rvmB71dHbydmhn1fNSmswsGma mSzZIDUZIfMphbl/kFQXCn7o1No40l/9R+T/v8WoOHnusnRtPxwV9DtTJe4LhNbx AOztiLWZV/u9krTdfk7ELQYklw8thm0bmg== -----END CERTIFICATE-----Generated at Wed Apr 16 17:09:06 2025 by rpki-client