$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/71e66a14-ce15-383b-b41d-9b4cab79a487.roa File: 71e66a14-ce15-383b-b41d-9b4cab79a487.roa (raw, json) Hash identifier: tpELzdUhPnLygT2QrGdvhYNMTygBxucW31YP59/+4P4= Subject key identifier: FC:A8:83:69:42:E0:F8:50:C0:2E:21:64:C3:F7:5B:DC:6A:B6:C8:31 Certificate issuer: /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13 Certificate serial: 010D0C9F4328584957F4142954F586A5F4D0D080 Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/71e66a14-ce15-383b-b41d-9b4cab79a487.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 396416 IP address blocks: 2602:fb78:80::/48 maxlen: 48 2602:fb78:a0::/48 maxlen: 48 2602:fb78:b0::/48 maxlen: 48 2602:fb78:c0::/48 maxlen: 48 2602:fb78:d0::/48 maxlen: 48 2602:fb78:e0::/48 maxlen: 48 2602:fb78:f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:14:29:54:f5:86:a5:f4:d0:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=cb4db481-f515-42c0-867b-a69e31c75e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:93:65:84:2b:b3:fe:77:c8:fa:ae:19:cb:44: e2:ed:9f:59:d2:f5:9d:e3:5d:c5:01:50:c9:de:28: 69:84:31:31:c2:86:92:d1:85:fa:70:7b:6b:10:37: 64:7a:0b:68:78:24:22:89:db:f1:a9:54:54:87:38: d8:30:7f:03:1e:26:0f:72:f2:7a:9c:18:95:90:38: 30:40:f6:e6:0b:9c:d5:b3:5f:e6:b0:0a:1e:00:3b: c3:7d:1f:7f:d5:23:27:fd:f7:d0:1a:e9:aa:68:a0: 4d:e0:cd:59:29:f2:22:0c:e0:79:b3:e4:f7:3d:31: e8:5f:3a:b6:14:23:23:36:ac:d3:80:64:1e:45:d1: 75:ef:7e:c8:9b:39:5f:1a:5f:84:8f:7a:55:35:3f: e9:78:29:df:9d:66:b0:71:2e:79:a3:c3:0b:8e:a9: 90:f8:29:7e:0e:00:77:ce:9a:14:5a:2c:f8:bc:f7: 77:d7:66:ea:9f:27:7e:1d:bd:33:9b:e9:b3:2d:57: b1:5d:0c:53:88:d3:03:11:36:47:c2:9e:2e:af:b9: 57:db:7e:5a:14:f3:87:4d:19:86:d8:30:0b:1a:31: 32:7e:9c:5b:f2:02:66:cd:d2:6f:e3:9c:b8:2b:5c: 69:12:e3:73:13:91:b5:04:3d:fa:98:b2:f0:f8:d3: f5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A8:83:69:42:E0:F8:50:C0:2E:21:64:C3:F7:5B:DC:6A:B6:C8:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/71e66a14-ce15-383b-b41d-9b4cab79a487.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl X509v3 Authority Key Identifier: keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb78:80::/48 2602:fb78:a0::/48 2602:fb78:b0::/48 2602:fb78:c0::/48 2602:fb78:d0::/48 2602:fb78:e0::/48 2602:fb78:f0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:89:5b:4b:11:61:14:77:08:c0:43:c0:ff:d9:62:ab:b8:75: cd:94:08:80:16:b0:75:d5:53:7c:e4:03:fd:6a:e7:31:f2:49: 00:5a:34:20:e9:3f:af:8a:72:9e:61:de:37:58:c9:50:33:03: e4:a4:7e:ad:16:39:51:ef:36:4b:4a:de:1f:7c:71:34:10:db: ef:82:de:94:bf:c2:45:3e:c0:f3:0e:22:8f:62:fc:cb:9a:52: ce:fb:1b:7f:a8:31:35:94:d6:eb:68:f8:df:5a:5d:3a:ca:a0: 13:54:0e:26:c5:46:74:54:65:c3:db:57:4d:11:24:92:0d:02: e2:6f:d7:0d:fe:f0:ba:6f:9e:35:a0:19:6e:24:62:ec:f9:6b: b3:5e:b7:02:a4:2b:5b:50:a5:bd:f8:93:7e:d3:f7:f3:07:8b: c3:ef:5b:a5:31:3a:06:d4:2d:9d:4d:11:02:71:85:fa:c8:cc: d9:1d:e3:4b:05:7d:b5:b4:57:97:b8:43:8f:74:b9:bf:78:29: b8:e5:0e:33:08:71:6d:57:5e:1c:68:63:30:d6:b7:23:2f:a6: c2:e4:eb:80:a4:29:07:09:8e:2f:47:32:e6:1c:7d:29:0f:60: 31:95:52:cf:69:e9:27:d3:13:e7:f5:09:3f:a3:7d:b2:eb:f4: aa:c7:9f:6c -----BEGIN CERTIFICATE----- MIIGfDCCBWSgAwIBAgIUAQ0Mn0MoWElX9BQpVPWGpfTQ0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNzExYjUtZDE2Zi00NTQ5LTllNzUtYmQyMDFmNWI3 YTEzMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk Y2I0ZGI0ODEtZjUxNS00MmMwLTg2N2ItYTY5ZTMxYzc1ZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJNlhCuz/nfI+q4Zy0Ti7Z9Z0vWd413FAVDJ 3ihphDExwoaS0YX6cHtrEDdkegtoeCQiidvxqVRUhzjYMH8DHiYPcvJ6nBiVkDgw QPbmC5zVs1/msAoeADvDfR9/1SMn/ffQGumqaKBN4M1ZKfIiDOB5s+T3PTHoXzq2 FCMjNqzTgGQeRdF1737ImzlfGl+Ej3pVNT/peCnfnWawcS55o8MLjqmQ+Cl+DgB3 zpoUWiz4vPd312bqnyd+Hb0zm+mzLVexXQxTiNMDETZHwp4ur7lX235aFPOHTRmG 2DALGjEyfpxb8gJmzdJv45y4K1xpEuNzE5G1BD36mLLw+NP1VwIDAQABo4IDjjCC A4owHQYDVR0OBBYEFPyog2lC4PhQwC4hZMP3W9xqtsgxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3 MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIwMWY1YjdhMTMvNzFlNjZhMTQtY2UxNS0z ODNiLWI0MWQtOWI0Y2FiNzlhNDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmRkNzExYjUtZDE2Zi00NTQ5LTll NzUtYmQyMDFmNWI3YTEzL2ZkZDcxMWI1LWQxNmYtNDU0OS05ZTc1LWJkMjAxZjVi N2ExMy5jcmwwHwYDVR0jBBgwFoAUHHKGSiScg7PMA5PUnLiNgqiJlT8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIw MWY1YjdhMTMuY2VyMFgGCCsGAQUFBwEHAQH/BEkwRzBFBAIAAjA/AwcAJgL7eACA AwcAJgL7eACgAwcAJgL7eACwAwcAJgL7eADAAwcAJgL7eADQAwcAJgL7eADgAwcA JgL7eADwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBACeJW0sRYRR3CMBDwP/ZYqu4dc2UCIAWsHXVU3zkA/1q 5zHySQBaNCDpP6+Kcp5h3jdYyVAzA+Skfq0WOVHvNktK3h98cTQQ2++C3pS/wkU+ wPMOIo9i/MuaUs77G3+oMTWU1uto+N9aXTrKoBNUDibFRnRUZcPbV00RJJINAuJv 1w3+8LpvnjWgGW4kYuz5a7NetwKkK1tQpb34k37T9/MHi8PvW6UxOgbULZ1NEQJx hfrIzNkd40sFfbW0V5e4Q490ub94KbjlDjMIcW1XXhxoYzDWtyMvpsLk64CkKQcJ ji9HMuYcfSkPYDGVUs9p6SfTE+f1CT+jfbLr9KrHn2w= -----END CERTIFICATE-----Generated at Sun Apr 13 00:36:18 2025 by rpki-client