$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/17073da9-1980-383a-b12c-971b97acfc86.roa File: 17073da9-1980-383a-b12c-971b97acfc86.roa (raw, json) Hash identifier: gEjVZWLJeDoJnpB6d03Z0wKjLH8Ld7id/2XxUglcf1Y= Subject key identifier: 66:9F:86:D0:51:9E:B7:67:36:D7:63:96:71:F7:11:B1:06:ED:4B:C7 Certificate issuer: /CN=5cafbd32-7d6e-4297-9ac5-dc120aaa97da Certificate serial: 010D0C9F43285849797445DE1B146F69D6077F80 Authority key identifier: 04:0D:7B:D5:83:B8:8B:76:6F:49:88:24:4C:50:70:8B:4C:B7:87:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/17073da9-1980-383a-b12c-971b97acfc86.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 32507 IP address blocks: 2602:f84c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:45:de:1b:14:6f:69:d6:07:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cafbd32-7d6e-4297-9ac5-dc120aaa97da Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=f3d13896-df86-4243-92fe-69a770c24fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1f:00:d0:de:15:c3:a6:00:be:ac:cb:ba:ae: 77:57:39:4a:97:c7:b2:82:d3:d5:ac:44:cd:64:4b: 62:fc:be:e6:23:ad:e0:d1:b0:a5:3f:85:56:84:43: 47:52:2a:31:7e:5d:39:88:a3:28:53:eb:f8:dd:72: e8:22:00:24:98:16:66:d6:cc:65:79:77:b2:bf:97: 1a:81:3e:cd:53:e6:f5:21:c6:d9:78:77:13:73:0f: a8:4b:d1:32:ba:d0:9b:0e:01:5d:9f:0b:a4:0d:8e: 44:4b:2d:7c:00:eb:0a:02:43:fe:87:8e:cc:a4:ab: 66:b4:59:04:f4:21:d7:4f:76:11:d9:72:e3:9c:17: 02:8c:c3:16:1e:32:76:ef:ba:f3:be:5c:8e:16:2f: 7a:fa:f1:c8:81:29:60:d0:ec:c8:c9:59:e7:f7:3e: d0:ab:be:fd:d1:18:1c:ed:21:a9:90:15:63:67:90: ce:10:26:02:5a:55:31:a1:25:45:88:0a:59:9c:b3: bb:05:2a:75:30:11:a1:7e:5b:8c:a2:eb:32:0c:02: 55:b0:5e:4e:6b:2a:4f:3e:44:ae:59:16:4f:89:61: 4b:82:ad:b5:7f:5e:06:9c:cd:5d:fe:03:11:e9:af: db:3f:bd:3f:73:ca:d0:30:4a:ff:6d:59:f8:a7:bc: b6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9F:86:D0:51:9E:B7:67:36:D7:63:96:71:F7:11:B1:06:ED:4B:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/17073da9-1980-383a-b12c-971b97acfc86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.crl X509v3 Authority Key Identifier: keyid:04:0D:7B:D5:83:B8:8B:76:6F:49:88:24:4C:50:70:8B:4C:B7:87:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer sbgp-ipAddrBlock: critical IPv6: 2602:f84c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:7e:c4:87:77:a0:23:f4:7f:49:46:9c:82:55:b8:3f:5b:f4: 87:aa:76:7c:67:e3:68:dc:eb:b6:4e:6f:c8:72:51:25:9e:a2: 13:5e:8a:27:74:ea:e7:bb:b3:6a:5c:23:48:a5:a6:e6:21:7a: c8:06:0c:3d:3a:92:5c:d7:50:e2:72:e3:c6:5c:c5:31:7c:74: 7f:3e:c9:a1:06:d6:81:1d:fe:72:e7:9a:91:15:1d:97:b0:42: 9e:d2:38:38:08:1f:0e:7c:0d:bd:4b:22:ef:62:c3:34:cb:ce: b0:f7:1b:94:dd:4b:80:86:90:a9:62:d0:40:22:e9:a5:2a:39: cd:b5:12:41:49:ea:b0:27:8b:6b:54:a4:f3:07:19:a1:00:04: fa:45:77:41:47:43:86:56:34:58:eb:02:2e:f9:ef:65:a8:a3: e5:2a:35:8e:16:a1:29:d5:26:f2:4a:1e:aa:69:1b:bd:54:67: 3c:67:1b:57:60:ab:da:5f:27:c3:ce:a2:fa:a1:5e:02:d4:9c: e5:19:5d:f2:82:c9:a9:6a:0b:8d:df:97:31:43:de:81:d8:12: 3d:fd:0d:95:cd:11:ef:09:47:f9:7b:38:bd:9d:d6:f2:f9:65: d9:4c:63:8c:03:7f:6a:65:a0:59:04:6f:6c:1c:b5:9f:22:44: 59:85:e9:3b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl5dEXeGxRvadYHf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNhZmJkMzItN2Q2ZS00Mjk3LTlhYzUtZGMxMjBhYWE5 N2RhMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk ZjNkMTM4OTYtZGY4Ni00MjQzLTkyZmUtNjlhNzcwYzI0ZmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB8A0N4Vw6YAvqzLuq53VzlKl8eygtPVrETN ZEti/L7mI63g0bClP4VWhENHUioxfl05iKMoU+v43XLoIgAkmBZm1sxleXeyv5ca gT7NU+b1IcbZeHcTcw+oS9EyutCbDgFdnwukDY5ESy18AOsKAkP+h47MpKtmtFkE 9CHXT3YR2XLjnBcCjMMWHjJ277rzvlyOFi96+vHIgSlg0OzIyVnn9z7Qq7790Rgc 7SGpkBVjZ5DOECYCWlUxoSVFiApZnLO7BSp1MBGhfluMousyDAJVsF5OaypPPkSu WRZPiWFLgq21f14GnM1d/gMR6a/bP70/c8rQMEr/bVn4p7y2ewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGafhtBRnrdnNtdjlnH3EbEG7UvHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81Y2Fm YmQzMi03ZDZlLTQyOTctOWFjNS1kYzEyMGFhYTk3ZGEvMTcwNzNkYTktMTk4MC0z ODNhLWIxMmMtOTcxYjk3YWNmYzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWNhZmJkMzItN2Q2ZS00Mjk3LTlh YzUtZGMxMjBhYWE5N2RhLzVjYWZiZDMyLTdkNmUtNDI5Ny05YWM1LWRjMTIwYWFh OTdkYS5jcmwwHwYDVR0jBBgwFoAUBA171YO4i3ZvSYgkTFBwi0y3h1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81Y2FmYmQzMi03ZDZlLTQyOTctOWFjNS1kYzEy MGFhYTk3ZGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4TAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFV+xId3oCP0f0lGnIJVuD9b9Ieqdnxn42jc67ZOb8hyUSWeohNe iid06ue7s2pcI0ilpuYhesgGDD06klzXUOJy48ZcxTF8dH8+yaEG1oEd/nLnmpEV HZewQp7SODgIHw58Db1LIu9iwzTLzrD3G5TdS4CGkKli0EAi6aUqOc21EkFJ6rAn i2tUpPMHGaEABPpFd0FHQ4ZWNFjrAi7572Woo+UqNY4WoSnVJvJKHqppG71UZzxn G1dgq9pfJ8POovqhXgLUnOUZXfKCyalqC43flzFD3oHYEj39DZXNEe8JR/l7OL2d 1vL5ZdlMY4wDf2ploFkEb2wctZ8iRFmF6Ts= -----END CERTIFICATE-----Generated at Sun Apr 13 09:00:27 2025 by rpki-client