$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/9b7f43c6-1d60-387e-983f-5d6104c900dc.roa File: 9b7f43c6-1d60-387e-983f-5d6104c900dc.roa (raw, json) Hash identifier: GUtnu1e7dAX5GJlojW/kfgmICJBWiXFDIAFDdLyylt8= Subject key identifier: 21:63:24:4B:0E:36:52:F4:89:1F:77:17:7C:8D:60:BB:27:12:36:07 Certificate issuer: /CN=8d619cd3-f969-49ad-ac09-3fb40392cdc5 Certificate serial: 010D0C9F432858489B0DEA757389C73BA070FB80 Authority key identifier: 8F:79:41:42:96:99:E1:90:A8:95:56:77:57:30:D5:D3:A9:09:80:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/9b7f43c6-1d60-387e-983f-5d6104c900dc.roa Signing time: Mon 20 Jan 2025 09:05:13 +0000 ROA not before: Mon 20 Jan 2025 09:05:13 +0000 ROA not after: Sun 20 Apr 2025 08:05:13 +0000 asID: 30006 IP address blocks: 2602:f7df::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/8d619cd3-f969-49ad-ac09-3fb40392cdc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/8d619cd3-f969-49ad-ac09-3fb40392cdc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9b:0d:ea:75:73:89:c7:3b:a0:70:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d619cd3-f969-49ad-ac09-3fb40392cdc5 Validity Not Before: Jan 20 09:05:13 2025 GMT Not After : Apr 20 08:05:13 2025 GMT Subject: CN=8cc66e34-5e72-4949-be76-43fb2e9ff623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:be:cb:09:12:99:8a:43:14:56:b2:ec:69:58: c0:99:4a:ff:c8:9b:85:c1:82:ce:29:22:2d:41:e0: 02:ca:c0:e1:a1:20:a7:0d:54:1c:9c:93:9d:22:bb: 60:c3:85:c5:a6:4d:fe:0d:ed:bb:76:df:1b:0e:ba: 33:1d:4f:4f:5d:38:25:a4:27:ea:ab:9d:ab:7d:d4: 2f:8c:2f:72:ed:18:80:de:15:c7:5b:20:d0:1d:71: 63:3b:2e:e0:ef:b8:4f:a6:fa:9c:bc:f7:43:29:be: e5:7e:0d:82:b5:18:5e:89:4f:0e:0a:f5:69:77:d2: ef:e3:a8:0b:25:39:6a:0b:18:4b:c8:61:03:4f:0c: cb:3a:ee:98:2b:a1:8b:0f:69:b9:a8:f4:fb:07:c4: 8c:4e:83:e7:7c:4f:9c:36:95:7c:ab:27:d4:a1:cf: 72:49:58:1e:31:81:49:96:d7:63:39:7d:3c:e9:98: 00:70:47:de:46:ad:4d:92:22:f7:7b:95:c1:e3:1e: 14:01:f5:15:5c:15:3b:3f:9e:1f:88:44:b7:9c:ec: 90:bb:ae:87:fc:40:78:b8:06:01:93:b2:e7:44:0e: 97:f3:7c:79:1d:c4:81:02:64:db:c3:98:03:11:71: a2:63:d5:d0:2e:d7:aa:ea:5b:6d:89:cf:f9:f6:3c: c4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:63:24:4B:0E:36:52:F4:89:1F:77:17:7C:8D:60:BB:27:12:36:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/9b7f43c6-1d60-387e-983f-5d6104c900dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/8d619cd3-f969-49ad-ac09-3fb40392cdc5.crl X509v3 Authority Key Identifier: keyid:8F:79:41:42:96:99:E1:90:A8:95:56:77:57:30:D5:D3:A9:09:80:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7df::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:f7:12:b8:73:25:08:72:08:62:e1:ec:a9:33:e7:1c:32:64: 3b:80:1e:05:29:31:21:fb:61:aa:bd:30:7c:20:e6:24:dd:77: 52:17:0c:7d:9b:44:53:8f:64:e3:9a:39:0e:8f:9b:9d:64:a3: a0:01:e1:f0:16:1b:55:87:48:4e:33:4d:b1:77:31:e3:a2:37: 75:db:6a:e5:ae:8a:f9:a3:2b:50:7a:c7:62:02:e8:e3:54:2e: e6:89:51:f9:1a:40:60:5c:a0:85:ae:c1:25:06:18:b3:cf:86: 0d:c6:3a:62:d3:32:7d:7c:0d:10:8e:1d:a7:32:79:9d:4c:f3: e5:e1:c8:b1:a5:3f:6a:72:60:9d:dc:7a:b7:53:f8:46:38:dd: 20:69:df:1e:b8:ee:74:31:dd:47:7f:a4:01:8e:92:f5:d5:d6: 6a:cc:f8:c2:48:4a:3d:6f:81:7b:79:16:2e:49:83:bb:e9:0b: 53:a2:29:3e:1b:cc:a5:b7:09:b0:5b:a6:0c:26:8b:44:fc:72: b1:7a:34:73:a1:73:ee:a3:43:19:40:45:53:4f:05:ff:15:2d: 43:0a:c9:97:dc:83:8f:cf:12:64:8d:d6:11:ed:23:7a:b7:5e: e3:b3:7f:16:11:3e:29:db:c6:40:89:9f:4a:af:58:0c:00:45: 29:c7:36:a6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEibDep1c4nHO6Bw+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ2MTljZDMtZjk2OS00OWFkLWFjMDktM2ZiNDAzOTJj ZGM1MB4XDTI1MDEyMDA5MDUxM1oXDTI1MDQyMDA4MDUxM1owLzEtMCsGA1UEAxMk OGNjNjZlMzQtNWU3Mi00OTQ5LWJlNzYtNDNmYjJlOWZmNjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr7LCRKZikMUVrLsaVjAmUr/yJuFwYLOKSIt QeACysDhoSCnDVQcnJOdIrtgw4XFpk3+De27dt8bDrozHU9PXTglpCfqq52rfdQv jC9y7RiA3hXHWyDQHXFjOy7g77hPpvqcvPdDKb7lfg2CtRheiU8OCvVpd9Lv46gL JTlqCxhLyGEDTwzLOu6YK6GLD2m5qPT7B8SMToPnfE+cNpV8qyfUoc9ySVgeMYFJ ltdjOX086ZgAcEfeRq1NkiL3e5XB4x4UAfUVXBU7P54fiES3nOyQu66H/EB4uAYB k7LnRA6X83x5HcSBAmTbw5gDEXGiY9XQLteq6lttic/59jzEHQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCFjJEsONlL0iR93F3yNYLsnEjYHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZDYx OWNkMy1mOTY5LTQ5YWQtYWMwOS0zZmI0MDM5MmNkYzUvOWI3ZjQzYzYtMWQ2MC0z ODdlLTk4M2YtNWQ2MTA0YzkwMGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGQ2MTljZDMtZjk2OS00OWFkLWFj MDktM2ZiNDAzOTJjZGM1LzhkNjE5Y2QzLWY5NjktNDlhZC1hYzA5LTNmYjQwMzky Y2RjNS5jcmwwHwYDVR0jBBgwFoAUj3lBQpaZ4ZColVZ3VzDV06kJgAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZDYxOWNkMy1mOTY5LTQ5YWQtYWMwOS0zZmI0 MDM5MmNkYzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL33wAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAG/cSuHMlCHIIYuHsqTPnHDJkO4AeBSkxIfthqr0wfCDmJN13UhcM fZtEU49k45o5Do+bnWSjoAHh8BYbVYdITjNNsXcx46I3ddtq5a6K+aMrUHrHYgLo 41Qu5olR+RpAYFygha7BJQYYs8+GDcY6YtMyfXwNEI4dpzJ5nUzz5eHIsaU/anJg ndx6t1P4RjjdIGnfHrjudDHdR3+kAY6S9dXWasz4wkhKPW+Be3kWLkmDu+kLU6Ip PhvMpbcJsFumDCaLRPxysXo0c6Fz7qNDGUBFU08F/xUtQwrJl9yDj88SZI3WEe0j erde47N/FhE+KdvGQImfSq9YDABFKcc2pg== -----END CERTIFICATE-----Generated at Sun Apr 6 15:58:42 2025 by rpki-client