$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e62157d9-5954-48d0-b141-a5cfd44f68b8/86353164-6f9b-3fdf-a515-d7e933f0166e.roa File: 86353164-6f9b-3fdf-a515-d7e933f0166e.roa (raw, json) Hash identifier: wybMF/CX7GZBBpED/TlOeGnMuHnZmTYn4q2Y3vx5u1c= Subject key identifier: C3:64:57:34:F2:42:62:10:A0:1C:04:F5:B1:8F:B4:9E:57:00:D2:E8 Certificate issuer: /CN=e62157d9-5954-48d0-b141-a5cfd44f68b8 Certificate serial: 010D0C9F4328584913AC1CE663E2135877EEB1C0 Authority key identifier: B4:A1:C4:B6:CD:4C:2E:1C:4A:00:BF:39:37:6E:CF:F2:31:D0:62:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e62157d9-5954-48d0-b141-a5cfd44f68b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e62157d9-5954-48d0-b141-a5cfd44f68b8/86353164-6f9b-3fdf-a515-d7e933f0166e.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 396320 IP address blocks: 2602:fec0::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e62157d9-5954-48d0-b141-a5cfd44f68b8/e62157d9-5954-48d0-b141-a5cfd44f68b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e62157d9-5954-48d0-b141-a5cfd44f68b8/e62157d9-5954-48d0-b141-a5cfd44f68b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e62157d9-5954-48d0-b141-a5cfd44f68b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:1c:e6:63:e2:13:58:77:ee:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e62157d9-5954-48d0-b141-a5cfd44f68b8 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=aff21e2c-ef39-43c7-880f-ea77c6b19c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:32:0a:2d:e8:74:e6:71:14:a1:77:5c:3e:a8: 53:18:6e:d1:fe:36:4a:36:0d:5d:51:f7:d8:c6:63: d3:14:a8:b2:9a:91:98:ba:ba:72:ed:73:99:87:d9: 31:6a:e8:95:58:de:f5:b2:31:14:70:3a:7d:a4:e0: b8:da:1b:cc:fc:3d:2d:11:47:ca:36:19:ac:39:c3: 96:8a:83:03:49:6c:1f:97:0c:55:fa:ec:1a:9e:47: 06:96:04:a1:ab:67:7a:47:a2:61:f5:e7:6f:c0:b5: 17:bd:38:2a:85:e4:08:a5:59:72:fd:c0:99:be:63: aa:b1:a7:14:5c:70:2d:d0:49:7e:5e:4c:63:c9:af: 25:e4:c7:1f:3a:29:39:66:60:bc:76:8a:70:66:f5: d7:a9:a6:f5:92:ec:25:b0:c3:67:be:d8:46:f0:ee: 4e:7d:c5:67:9a:6e:e9:29:d6:e1:3b:0d:92:09:d6: 84:08:03:0e:05:73:71:1b:03:05:3f:2f:6d:08:90: 9d:78:1f:93:85:e0:5d:73:d8:6a:de:db:24:a2:95: 4d:67:27:9a:af:5d:ce:21:e3:ac:8d:a9:37:6c:e6: 3a:d7:d4:85:d0:2a:3c:58:28:da:97:3f:a9:97:54: 70:5f:e2:4f:1b:c0:87:52:3a:ab:b7:35:ea:97:7f: 79:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:64:57:34:F2:42:62:10:A0:1C:04:F5:B1:8F:B4:9E:57:00:D2:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e62157d9-5954-48d0-b141-a5cfd44f68b8/86353164-6f9b-3fdf-a515-d7e933f0166e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e62157d9-5954-48d0-b141-a5cfd44f68b8/e62157d9-5954-48d0-b141-a5cfd44f68b8.crl X509v3 Authority Key Identifier: keyid:B4:A1:C4:B6:CD:4C:2E:1C:4A:00:BF:39:37:6E:CF:F2:31:D0:62:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e62157d9-5954-48d0-b141-a5cfd44f68b8.cer sbgp-ipAddrBlock: critical IPv6: 2602:fec0::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ce:c2:7b:be:5c:a1:8e:3e:cd:ed:36:03:e4:4f:b4:36:d7: 10:d9:94:34:d0:28:63:5b:7e:46:8a:77:23:3c:22:6b:af:43: 31:28:e6:a5:db:8a:5a:d9:63:43:5a:fa:6b:dd:38:bc:90:01: c5:6e:a8:9a:8b:64:c7:65:b5:6a:85:59:af:a4:13:d1:a9:4c: df:a9:89:32:ae:08:ca:c6:a2:fd:7e:f1:6a:da:86:60:45:ca: c0:bc:49:96:a4:9b:4e:cd:f6:37:b1:6b:94:7d:d8:a6:ad:95: 43:5c:33:26:1d:26:58:e5:9b:cd:5a:35:e1:f5:f5:89:18:b1: 27:76:73:95:e7:4c:47:6d:3f:f4:4f:6d:29:86:15:27:70:f8: fa:79:13:c8:0e:2a:28:09:e5:06:8c:d4:c6:df:23:1f:1b:9a: 14:0a:9e:24:5f:04:9d:21:a5:00:db:e0:25:29:2e:7c:59:fe: 24:14:1f:63:f2:4b:cb:e4:44:36:bc:54:43:6b:13:8d:41:bb: 8e:ed:6d:d1:9b:7f:06:37:34:43:1d:25:b6:72:3e:30:1b:b2: e6:4f:60:43:31:90:97:cd:39:4b:51:39:52:0d:64:f1:0f:05: 05:c1:8e:f7:83:9d:b3:45:c6:37:bc:95:91:02:d0:b0:53:9a: fb:3a:a4:6b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkTrBzmY+ITWHfuscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYyMTU3ZDktNTk1NC00OGQwLWIxNDEtYTVjZmQ0NGY2 OGI4MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk YWZmMjFlMmMtZWYzOS00M2M3LTg4MGYtZWE3N2M2YjE5YzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzIKLeh05nEUoXdcPqhTGG7R/jZKNg1dUffY xmPTFKiympGYurpy7XOZh9kxauiVWN71sjEUcDp9pOC42hvM/D0tEUfKNhmsOcOW ioMDSWwflwxV+uwankcGlgShq2d6R6Jh9edvwLUXvTgqheQIpVly/cCZvmOqsacU XHAt0El+Xkxjya8l5McfOik5ZmC8dopwZvXXqab1kuwlsMNnvthG8O5OfcVnmm7p KdbhOw2SCdaECAMOBXNxGwMFPy9tCJCdeB+TheBdc9hq3tskopVNZyear13OIeOs jak3bOY619SF0Co8WCjalz+pl1RwX+JPG8CHUjqrtzXql395nwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMNkVzTyQmIQoBwE9bGPtJ5XANLoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lNjIx NTdkOS01OTU0LTQ4ZDAtYjE0MS1hNWNmZDQ0ZjY4YjgvODYzNTMxNjQtNmY5Yi0z ZmRmLWE1MTUtZDdlOTMzZjAxNjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTYyMTU3ZDktNTk1NC00OGQwLWIx NDEtYTVjZmQ0NGY2OGI4L2U2MjE1N2Q5LTU5NTQtNDhkMC1iMTQxLWE1Y2ZkNDRm NjhiOC5jcmwwHwYDVR0jBBgwFoAUtKHEts1MLhxKAL85N27P8jHQYrEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lNjIxNTdkOS01OTU0LTQ4ZDAtYjE0MS1hNWNm ZDQ0ZjY4YjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL+wAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALs7Ce75coY4+ze02A+RPtDbXENmUNNAoY1t+Rop3Izwia69DMSjm pduKWtljQ1r6a904vJABxW6omotkx2W1aoVZr6QT0alM36mJMq4Iysai/X7xatqG YEXKwLxJlqSbTs32N7FrlH3Ypq2VQ1wzJh0mWOWbzVo14fX1iRixJ3ZzledMR20/ 9E9tKYYVJ3D4+nkTyA4qKAnlBozUxt8jHxuaFAqeJF8EnSGlANvgJSkufFn+JBQf Y/JLy+RENrxUQ2sTjUG7ju1t0Zt/Bjc0Qx0ltnI+MBuy5k9gQzGQl805S1E5Ug1k 8Q8FBcGO94Ods0XGN7yVkQLQsFOa+zqkaw== -----END CERTIFICATE-----Generated at Fri Apr 11 23:03:06 2025 by rpki-client