$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/33edd53a-f86e-3853-b952-dc12e3e73cc6.roa File: 33edd53a-f86e-3853-b952-dc12e3e73cc6.roa (raw, json) Hash identifier: DWLrR8nZ7UF6gZ+fQ92j8kjY8EbM4WpNqM+6xuoEiyE= Subject key identifier: AF:5A:DA:1B:C0:14:76:62:6D:0A:DA:5E:76:9F:7C:C5:C3:6F:ED:7D Certificate issuer: /CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd Certificate serial: 010D0C9F4328584944694ABB0511660D545E7800 Authority key identifier: EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/33edd53a-f86e-3853-b952-dc12e3e73cc6.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 14618 IP address blocks: 2602:fa70:390::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:4a:bb:05:11:66:0d:54:5e:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=8bffe237-070f-47a2-a86c-212de7c9c8b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:69:6e:60:a5:ce:50:da:39:6a:7a:a0:cb:99: d8:d8:00:ff:c4:ba:ab:23:37:f3:a0:3b:5e:36:16: 72:37:62:92:33:bc:76:07:c0:58:82:46:a0:e9:8b: c0:9f:17:16:10:d9:9e:a0:77:df:52:01:20:e7:3a: af:21:ec:fc:fd:a2:ef:71:a8:42:71:13:6b:31:6f: 4c:28:d0:0f:ac:15:d0:c9:b6:ec:c9:97:93:a1:63: 8a:cb:f8:c2:f7:dc:0c:bc:15:97:b6:06:33:dd:94: d3:2e:e7:23:5d:2e:3b:30:ec:d5:84:97:0f:7b:96: 89:fb:ce:3a:30:54:10:46:86:1f:4b:a0:34:1f:3c: fb:45:65:08:0e:28:bb:67:c0:19:d0:01:9d:81:6b: d5:07:72:d6:68:04:ce:61:52:19:e0:c6:90:12:fc: e2:95:72:ab:b7:c9:74:b5:67:09:36:8f:46:5e:e7: fc:eb:8a:9c:b4:04:df:df:12:d7:19:46:60:26:0e: 90:59:c1:6c:86:e3:df:e7:6f:33:28:f7:ee:c7:43: 1e:e3:e8:17:31:9f:fe:ad:b8:11:c5:4a:ef:bf:bc: a5:32:38:57:9e:75:62:b1:13:37:8a:cb:39:06:8d: b6:62:fe:7d:49:9f:94:22:fc:84:83:a2:fe:3a:82: 63:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5A:DA:1B:C0:14:76:62:6D:0A:DA:5E:76:9F:7C:C5:C3:6F:ED:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/33edd53a-f86e-3853-b952-dc12e3e73cc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl X509v3 Authority Key Identifier: keyid:EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa70:390::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:c7:a9:f7:11:a2:3b:ed:13:6d:8b:66:25:6d:75:24:19:1c: bd:ec:e1:4b:09:9c:11:87:8d:7a:12:48:47:0b:68:7f:81:4e: 7c:e5:35:56:83:ca:17:f3:b7:dd:0c:93:d9:37:2b:e2:c9:fe: e5:ef:39:e6:74:fc:04:05:16:44:51:53:c7:75:71:3d:4f:a1: 5d:60:80:29:44:63:95:65:a6:83:5f:24:9c:ab:25:12:14:f6: c0:9e:9d:54:9e:37:ad:e3:f6:63:ff:49:71:36:d2:e7:ab:29: 56:1d:58:1b:7b:08:1e:5d:ed:67:ed:27:e4:7a:29:d8:75:df: 68:1b:dc:6c:91:88:80:38:e3:56:d5:64:a5:b6:5a:9f:20:45: 95:58:c1:70:be:f6:64:12:5c:cb:14:a4:74:54:d7:36:88:dc: b0:bf:64:0a:7c:aa:b8:54:41:36:ce:55:0c:de:41:27:99:7a: 4a:03:47:24:66:73:a0:f6:98:86:ec:55:d2:f2:78:b8:4f:b5: b8:35:7e:8c:29:48:07:0b:bf:5b:76:f5:b2:d1:62:dc:e9:7f: a8:85:72:47:f9:18:ab:63:d8:71:05:c2:ad:17:3f:4e:d5:3c: 24:39:34:eb:95:89:77:d3:86:e2:42:51:f1:74:bc:e5:4e:86: b1:07:5f:0c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElEaUq7BRFmDVReeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU3YjliMjgtNzkzNC00NTRhLThiMmYtMjQ2ZDg4ODlm ZGJkMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk OGJmZmUyMzctMDcwZi00N2EyLWE4NmMtMjEyZGU3YzljOGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2luYKXOUNo5anqgy5nY2AD/xLqrIzfzoDte NhZyN2KSM7x2B8BYgkag6YvAnxcWENmeoHffUgEg5zqvIez8/aLvcahCcRNrMW9M KNAPrBXQybbsyZeToWOKy/jC99wMvBWXtgYz3ZTTLucjXS47MOzVhJcPe5aJ+846 MFQQRoYfS6A0Hzz7RWUIDii7Z8AZ0AGdgWvVB3LWaATOYVIZ4MaQEvzilXKrt8l0 tWcJNo9GXuf864qctATf3xLXGUZgJg6QWcFshuPf528zKPfux0Me4+gXMZ/+rbgR xUrvv7ylMjhXnnVisRM3iss5Bo22Yv59SZ+UIvyEg6L+OoJjLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK9a2hvAFHZibQraXnaffMXDb+19MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZTdi OWIyOC03OTM0LTQ1NGEtOGIyZi0yNDZkODg4OWZkYmQvMzNlZGQ1M2EtZjg2ZS0z ODUzLWI5NTItZGMxMmUzZTczY2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWU3YjliMjgtNzkzNC00NTRhLThi MmYtMjQ2ZDg4ODlmZGJkLzFlN2I5YjI4LTc5MzQtNDU0YS04YjJmLTI0NmQ4ODg5 ZmRiZC5jcmwwHwYDVR0jBBgwFoAU7CTbIeW+m2u6JkrzwmZOds7dmxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZTdiOWIyOC03OTM0LTQ1NGEtOGIyZi0yNDZk ODg4OWZkYmQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL6cAOQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFfHqfcRojvtE22LZiVtdSQZHL3s4UsJnBGHjXoSSEcLaH+BTnzl NVaDyhfzt90Mk9k3K+LJ/uXvOeZ0/AQFFkRRU8d1cT1PoV1ggClEY5VlpoNfJJyr JRIU9sCenVSeN63j9mP/SXE20uerKVYdWBt7CB5d7WftJ+R6Kdh132gb3GyRiIA4 41bVZKW2Wp8gRZVYwXC+9mQSXMsUpHRU1zaI3LC/ZAp8qrhUQTbOVQzeQSeZekoD RyRmc6D2mIbsVdLyeLhPtbg1fowpSAcLv1t29bLRYtzpf6iFckf5GKtj2HEFwq0X P07VPCQ5NOuViXfThuJCUfF0vOVOhrEHXww= -----END CERTIFICATE-----Generated at Fri Apr 4 23:34:00 2025 by rpki-client