$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/2b6966be-0a30-3097-a99a-d635fb439733.roa File: 2b6966be-0a30-3097-a99a-d635fb439733.roa (raw, json) Hash identifier: flEV3NHh39P+VNAZOzjLpyE7rxY07wNQvQVlLCaLzcc= Subject key identifier: 5D:A7:CA:A4:82:B6:12:42:50:BD:F1:E3:44:D9:D5:DC:6A:E2:51:05 Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Certificate serial: 010D0C9F432858491AA6D0FECDF04A7D75AC9C00 Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/2b6966be-0a30-3097-a99a-d635fb439733.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 8075 IP address blocks: 2602:f8d5:a1::/48 maxlen: 48 2602:f8d5:a2::/48 maxlen: 48 2602:f8d5:a3::/48 maxlen: 48 2602:f8d5:a4::/48 maxlen: 48 2602:f8d5:a5::/48 maxlen: 48 2602:f8d5:a6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:d0:fe:cd:f0:4a:7d:75:ac:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=b9fbd1f1-f352-4e5b-9d7f-0c84ac805ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:47:df:39:dc:ae:77:83:1d:b3:13:93:9a:19: ba:ff:b6:47:2f:59:67:ff:9c:aa:cb:5c:b9:1b:8c: 49:fc:42:6f:a8:59:7b:15:6e:7e:d3:fe:e8:e5:a0: 97:67:eb:8c:e7:d8:98:33:29:a3:c0:c9:10:2a:64: 8a:5e:82:fc:e3:30:52:58:00:07:b2:57:82:b7:fc: 97:68:57:35:0f:9e:d2:a9:fe:da:cd:37:ac:37:f8: 6c:2b:11:0d:f1:7f:b0:b6:fa:8c:00:eb:ab:bb:09: 1b:13:75:f3:7e:11:a5:99:43:e8:55:46:7e:89:da: f4:a8:39:30:46:5d:fe:0b:e0:91:31:66:3d:93:46: 8c:0b:b2:1e:b4:3e:fb:a3:14:34:e6:bb:d8:1c:57: 52:b3:df:78:35:ac:97:52:0b:ab:e3:3d:36:9b:d6: 2f:a7:68:ea:f9:6c:e1:d0:0b:c7:11:6a:51:f5:76: cd:00:63:15:7d:bb:6d:28:6e:40:4a:aa:9b:1d:98: dd:29:29:6d:b7:28:a3:03:5f:98:ea:0d:60:98:f5: 43:dd:7d:61:28:9c:7f:9e:62:cc:67:04:fa:c0:a7: bf:79:ae:0e:f3:73:a6:37:c9:8a:a9:9d:2e:44:04: 90:0e:56:f9:67:cc:9d:d4:0b:d5:de:4a:4e:79:38: ac:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A7:CA:A4:82:B6:12:42:50:BD:F1:E3:44:D9:D5:DC:6A:E2:51:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/2b6966be-0a30-3097-a99a-d635fb439733.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl X509v3 Authority Key Identifier: keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f8d5:a1::-2602:f8d5:a6:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:1b:fd:3a:a4:6d:67:2f:63:9b:30:fe:27:c8:24:78:d7:7f: 47:3d:2e:31:6d:cd:72:bf:86:41:54:a8:98:25:34:8b:d3:ec: 4a:2d:26:a5:c8:1d:11:c1:6b:55:fa:14:4e:2a:16:41:d9:1b: 31:24:e6:e0:52:45:43:26:7a:91:81:97:0b:81:d6:49:f5:99: cc:c4:9a:e0:f5:7b:a0:3d:27:8f:ca:d0:1b:79:ba:b8:d6:70: b3:7e:ce:63:fa:68:36:1e:66:18:16:34:0e:6d:ea:fd:14:d5: f5:d5:2c:25:14:64:e0:f6:8e:97:ee:f3:24:c2:88:03:7e:4c: 40:d4:e7:a5:a4:79:98:5b:86:a8:ab:7d:41:1a:e6:32:c3:5c: 53:10:5d:5b:db:22:73:98:81:87:7d:e7:f6:9a:57:58:93:68: 41:fc:97:10:70:37:a4:fd:da:b6:97:1e:e4:8a:bc:c6:45:69: fd:0c:e0:06:1d:47:3e:5a:20:34:74:ef:cd:09:49:7f:f9:90: d2:f5:d1:a7:10:a1:8b:39:ea:09:1a:0e:fe:2c:33:8b:97:b7: 82:7b:8d:95:a3:ec:ec:57:46:1b:89:60:8c:a2:e9:3f:1a:ae: 0b:57:a5:45:32:38:fd:14:59:e1:0a:5f:1b:fc:ee:9b:73:01: 86:ab:12:84 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEkaptD+zfBKfXWsnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwOWUxOTEtMWNiNy00NjUwLTk1ZDYtNGUyNGMwYWVj NjlkMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk YjlmYmQxZjEtZjM1Mi00ZTViLTlkN2YtMGM4NGFjODA1YWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEffOdyud4MdsxOTmhm6/7ZHL1ln/5yqy1y5 G4xJ/EJvqFl7FW5+0/7o5aCXZ+uM59iYMymjwMkQKmSKXoL84zBSWAAHsleCt/yX aFc1D57Sqf7azTesN/hsKxEN8X+wtvqMAOuruwkbE3XzfhGlmUPoVUZ+idr0qDkw Rl3+C+CRMWY9k0aMC7IetD77oxQ05rvYHFdSs994NayXUgur4z02m9Yvp2jq+Wzh 0AvHEWpR9XbNAGMVfbttKG5ASqqbHZjdKSlttyijA1+Y6g1gmPVD3X1hKJx/nmLM ZwT6wKe/ea4O83OmN8mKqZ0uRASQDlb5Z8yd1AvV3kpOeTisJQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFF2nyqSCthJCUL3x40TZ1dxq4lEFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5 ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0YzBhZWM2OWQvMmI2OTY2YmUtMGEzMC0z MDk3LWE5OWEtZDYzNWZiNDM5NzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2YwOWUxOTEtMWNiNy00NjUwLTk1 ZDYtNGUyNGMwYWVjNjlkL2NmMDllMTkxLTFjYjctNDY1MC05NWQ2LTRlMjRjMGFl YzY5ZC5jcmwwHwYDVR0jBBgwFoAUxw2n13KjMMiPALmYFa7pcm0DGqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0 YzBhZWM2OWQuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmAvjV AKEDBwAmAvjVAKYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAMRv9OqRtZy9jmzD+J8gkeNd/Rz0uMW3Ncr+G QVSomCU0i9PsSi0mpcgdEcFrVfoUTioWQdkbMSTm4FJFQyZ6kYGXC4HWSfWZzMSa 4PV7oD0nj8rQG3m6uNZws37OY/poNh5mGBY0Dm3q/RTV9dUsJRRk4PaOl+7zJMKI A35MQNTnpaR5mFuGqKt9QRrmMsNcUxBdW9sic5iBh33n9ppXWJNoQfyXEHA3pP3a tpce5Iq8xkVp/QzgBh1HPlogNHTvzQlJf/mQ0vXRpxChiznqCRoO/iwzi5e3gnuN laPs7FdGG4lgjKLpPxquC1elRTI4/RRZ4QpfG/zum3MBhqsShA== -----END CERTIFICATE-----Generated at Fri Apr 4 16:39:36 2025 by rpki-client