$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/7b77de71-0ff6-3e56-8573-0133242c5348.roa File: 7b77de71-0ff6-3e56-8573-0133242c5348.roa (raw, json) Hash identifier: l4FxPB4/9o3DbnbpF0xKv9EHcRqcjhVScOH/IrxcQdQ= Subject key identifier: 03:AB:4E:80:1E:14:C7:7B:10:B6:1D:E4:F2:EC:86:87:4B:6A:40:06 Certificate issuer: /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Certificate serial: 010D0C9F432858489BA0A9859AF4567A0E33D300 Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/7b77de71-0ff6-3e56-8573-0133242c5348.roa Signing time: Mon 20 Jan 2025 14:00:51 +0000 ROA not before: Mon 20 Jan 2025 14:00:51 +0000 ROA not after: Sun 20 Apr 2025 13:00:51 +0000 asID: 399244 IP address blocks: 2602:fb89::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9b:a0:a9:85:9a:f4:56:7a:0e:33:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Validity Not Before: Jan 20 14:00:51 2025 GMT Not After : Apr 20 13:00:51 2025 GMT Subject: CN=bf776d09-340d-4243-a6d9-cce69f4b0151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:38:65:70:98:d1:19:47:36:b6:eb:e5:ea:0b: df:6d:98:1a:4a:8c:77:03:45:b5:80:b8:2f:b7:ab: c5:41:4d:1a:e7:d4:a8:53:9d:42:32:7e:90:15:ee: 78:03:b4:77:6f:07:03:ac:f7:c4:4d:40:45:fd:50: 4c:54:d3:ad:f0:23:ca:10:d0:d2:4f:20:2f:59:d9: a7:16:a3:bc:e1:9b:e7:36:53:38:70:4a:32:88:55: 80:2c:7d:d3:14:0f:9a:81:9e:1b:bc:43:f1:09:9d: 28:8a:46:68:40:4e:72:ac:5e:1f:db:19:d4:ff:7c: 3d:7c:12:31:ce:00:0d:67:88:42:f5:3c:e1:d8:51: b1:d5:5e:b6:53:30:3b:fe:2f:af:dc:f2:85:ee:c7: 2e:8a:61:64:52:06:bc:6a:a8:b6:a3:7a:de:ed:12: ca:b5:9f:2e:22:56:63:a8:33:bd:84:29:ee:cf:9d: ff:44:28:a0:c1:29:a4:6d:9b:a6:e3:b2:60:ec:ff: 80:17:2e:77:61:7c:b6:d6:ec:84:9a:ac:3a:2a:4b: e9:c6:5a:e4:74:7c:31:25:f4:d1:f8:b5:bd:7c:5b: aa:a9:60:07:45:f1:b8:b4:50:78:f1:1a:82:c9:98: 5f:9e:f6:6e:0d:eb:43:7a:f4:2d:80:5c:78:34:11: eb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:AB:4E:80:1E:14:C7:7B:10:B6:1D:E4:F2:EC:86:87:4B:6A:40:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/7b77de71-0ff6-3e56-8573-0133242c5348.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl X509v3 Authority Key Identifier: keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb89::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:af:3a:ca:df:ba:ff:6c:4b:18:48:d3:36:97:b9:77:05:09: 9c:30:7f:57:47:9e:00:88:41:5c:db:56:ba:d0:6d:2a:2f:2b: e8:a7:cf:86:50:dc:0d:27:b3:fa:fb:c9:45:e5:f2:54:9a:13: 46:72:0b:7d:d2:9b:88:34:45:0e:2a:15:57:d8:7d:1a:c2:8d: ff:9e:b3:22:7d:37:4b:80:55:a3:71:c9:c7:4a:af:06:5a:79: d7:80:59:ed:e9:3d:45:38:21:7d:b2:f5:99:33:02:de:35:fe: c6:7f:21:5f:71:76:7c:cf:02:23:ca:18:ef:a5:0b:18:11:68: 9b:70:c4:1b:40:f9:d6:41:f2:39:b9:55:66:1a:18:c2:29:54: 25:be:12:35:c6:90:5c:ee:09:de:d2:ae:72:40:ab:ea:52:4b: 11:88:7e:7c:4b:81:2a:33:9f:e3:92:7d:cf:d9:a8:b9:dd:8c: 6a:1e:0b:b5:71:1f:05:4c:bc:05:f4:31:9e:fe:88:8b:8f:1e: 05:51:0c:68:02:56:cb:f7:b9:7a:d0:0c:83:08:3a:d5:a7:db: c9:6e:32:44:cb:2b:3a:13:2d:fe:03:34:5e:58:aa:24:42:fd: 60:98:49:6a:b3:67:12:f5:1d:16:7d:99:64:d0:e2:b8:4b:ad: 3a:8a:53:85 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiboKmFmvRWeg4z0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAyZDgyZmUtOTVhNy00ZTA5LTlhMmEtYmUxZTE1NGJh MzhkMB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk YmY3NzZkMDktMzQwZC00MjQzLWE2ZDktY2NlNjlmNGIwMTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDhlcJjRGUc2tuvl6gvfbZgaSox3A0W1gLgv t6vFQU0a59SoU51CMn6QFe54A7R3bwcDrPfETUBF/VBMVNOt8CPKENDSTyAvWdmn FqO84ZvnNlM4cEoyiFWALH3TFA+agZ4bvEPxCZ0oikZoQE5yrF4f2xnU/3w9fBIx zgANZ4hC9Tzh2FGx1V62UzA7/i+v3PKF7scuimFkUga8aqi2o3re7RLKtZ8uIlZj qDO9hCnuz53/RCigwSmkbZum47Jg7P+AFy53YXy21uyEmqw6KkvpxlrkdHwxJfTR +LW9fFuqqWAHRfG4tFB48RqCyZhfnvZuDetDevQtgFx4NBHr1wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAOrToAeFMd7ELYd5PLshodLakAGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJk ODJmZS05NWE3LTRlMDktOWEyYS1iZTFlMTU0YmEzOGQvN2I3N2RlNzEtMGZmNi0z ZTU2LTg1NzMtMDEzMzI0MmM1MzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTAyZDgyZmUtOTVhNy00ZTA5LTlh MmEtYmUxZTE1NGJhMzhkL2UwMmQ4MmZlLTk1YTctNGUwOS05YTJhLWJlMWUxNTRi YTM4ZC5jcmwwHwYDVR0jBBgwFoAUpMW3Uwr3bKTh98MEI6vYWwVwhGwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJkODJmZS05NWE3LTRlMDktOWEyYS1iZTFl MTU0YmEzOGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL7iTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAlrzrK37r/bEsYSNM2l7l3BQmcMH9XR54AiEFc21a60G0qLyvop8+G UNwNJ7P6+8lF5fJUmhNGcgt90puINEUOKhVX2H0awo3/nrMifTdLgFWjccnHSq8G WnnXgFnt6T1FOCF9svWZMwLeNf7GfyFfcXZ8zwIjyhjvpQsYEWibcMQbQPnWQfI5 uVVmGhjCKVQlvhI1xpBc7gne0q5yQKvqUksRiH58S4EqM5/jkn3P2ai53YxqHgu1 cR8FTLwF9DGe/oiLjx4FUQxoAlbL97l60AyDCDrVp9vJbjJEyys6Ey3+AzReWKok Qv1gmElqs2cS9R0WfZlk0OK4S606ilOF -----END CERTIFICATE-----Generated at Sun Apr 6 11:44:29 2025 by rpki-client