$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/d62afe2a-7630-31f0-9e51-d97ded7730a9.roa File: d62afe2a-7630-31f0-9e51-d97ded7730a9.roa (raw, json) Hash identifier: V2PP5n+Tc4q/vEJgo566x2PO1fStt+A7DJQZlNczBqc= Subject key identifier: 16:CE:EF:F9:00:1A:11:6E:F7:81:D8:65:36:E7:53:13:D5:76:A1:B0 Certificate issuer: /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Certificate serial: 010D0C9F43285848A99615B898274444057635E8 Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/d62afe2a-7630-31f0-9e51-d97ded7730a9.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 395567 IP address blocks: 2602:fead::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:15:b8:98:27:44:44:05:76:35:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=08cf94a1-6b55-4c30-888e-d69d43e3da79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fb:45:81:08:77:99:e7:8f:a1:31:4c:cf:95: 5d:d0:dc:f4:80:f0:e0:72:d6:96:7c:0d:59:6a:63: 29:b9:f4:17:bc:e7:bb:aa:77:27:9d:d4:ac:d3:d9: fd:3a:d2:ea:6e:89:2a:72:2e:45:b3:6e:e6:ec:f6: 7e:b6:71:a5:d8:c7:a1:d4:41:28:36:56:82:6d:0b: 60:fe:fa:20:5c:d2:13:f4:3f:d3:04:71:45:17:51: e9:1f:10:c8:bb:57:d8:62:e1:4d:4f:a9:60:38:5c: 42:5f:8a:4c:4b:bf:77:d7:c7:a2:ef:3e:5e:be:b0: ca:d8:82:0c:62:b1:cd:62:0a:68:12:e9:12:e1:5b: fd:d0:05:c4:e1:e8:41:90:38:e7:4b:4b:c9:bf:c6: 94:63:7c:10:47:78:5d:0c:bf:44:3a:de:9e:9e:a8: a6:5e:72:26:1e:0a:89:0b:fa:87:bc:d8:0c:09:25: 03:fe:8d:1a:01:21:94:e0:19:20:fa:8f:35:86:3b: d3:ac:55:ca:5a:f6:9d:80:01:39:de:61:c5:30:ed: 16:3b:a8:bb:4b:cd:75:05:63:e3:d4:5b:3e:71:f9: da:e8:11:e9:23:e9:03:d1:1a:5f:69:1c:af:8d:2f: 45:88:e3:79:3e:46:a1:0f:29:04:f9:3e:0d:8b:65: fa:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CE:EF:F9:00:1A:11:6E:F7:81:D8:65:36:E7:53:13:D5:76:A1:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/d62afe2a-7630-31f0-9e51-d97ded7730a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl X509v3 Authority Key Identifier: keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer sbgp-ipAddrBlock: critical IPv6: 2602:fead::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:46:76:a8:91:a6:30:78:fe:69:6d:b3:2b:69:17:1e:91:26: 8f:32:72:0b:75:bd:d1:8b:81:76:1e:56:f5:af:39:7d:d8:ae: 87:28:eb:53:c7:ae:31:c2:03:26:ce:72:8b:48:61:1b:63:3b: 52:36:08:fb:76:37:86:13:13:89:52:2b:74:e7:c2:d9:50:aa: 76:0a:37:fa:c8:86:01:89:e8:11:c1:03:5c:e1:d6:24:80:db: e3:02:6c:ba:70:36:bd:30:fd:b5:ad:24:3a:9c:02:65:58:99: bb:9f:90:3d:fe:78:f9:71:7d:18:7b:d8:49:37:15:b9:ee:07: c2:5f:9c:40:16:bb:12:de:91:f9:b2:1c:89:4f:b4:f7:9f:50: aa:6f:fb:26:34:e3:2b:c3:bf:a8:b9:ab:70:5c:b1:5f:9c:40: 9d:95:3a:5a:59:ae:63:86:e8:1b:a4:7f:73:07:de:5d:ce:89: 28:cb:9d:4e:9f:3a:4c:66:94:73:84:e6:18:03:b5:a2:95:74: c1:2b:70:e2:d1:c2:27:ea:40:17:42:ea:52:12:2c:70:35:78: dd:3b:8a:e3:a3:a4:49:f7:68:39:25:ec:b5:34:2d:9f:a3:5f: 9b:b5:3d:1a:b5:4f:8e:32:e1:c2:a2:74:17:9b:67:f4:27:26: 27:85:be:20 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEiplhW4mCdERAV2NegwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU3N2I1YWYtYTFiNS00ODU4LWI2MWQtZjA5ZmQ2N2Y3 Y2IzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MDhjZjk0YTEtNmI1NS00YzMwLTg4OGUtZDY5ZDQzZTNkYTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vtFgQh3meePoTFMz5Vd0Nz0gPDgctaWfA1Z amMpufQXvOe7qncnndSs09n9OtLqbokqci5Fs27m7PZ+tnGl2Meh1EEoNlaCbQtg /vogXNIT9D/TBHFFF1HpHxDIu1fYYuFNT6lgOFxCX4pMS79318ei7z5evrDK2IIM YrHNYgpoEukS4Vv90AXE4ehBkDjnS0vJv8aUY3wQR3hdDL9EOt6enqimXnImHgqJ C/qHvNgMCSUD/o0aASGU4Bkg+o81hjvTrFXKWvadgAE53mHFMO0WO6i7S811BWPj 1Fs+cfna6BHpI+kD0RpfaRyvjS9FiON5PkahDykE+T4Ni2X6RQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBbO7/kAGhFu94HYZTbnUxPVdqGwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3 YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlmZDY3ZjdjYjMvZDYyYWZlMmEtNzYzMC0z MWYwLTllNTEtZDk3ZGVkNzczMGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWU3N2I1YWYtYTFiNS00ODU4LWI2 MWQtZjA5ZmQ2N2Y3Y2IzL2FlNzdiNWFmLWExYjUtNDg1OC1iNjFkLWYwOWZkNjdm N2NiMy5jcmwwHwYDVR0jBBgwFoAUQ8bZZVYwh5KCSgXB185ho81dPhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlm ZDY3ZjdjYjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL+rQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGEZ2qJGmMHj+aW2zK2kXHpEmjzJyC3W90YuBdh5W9a85fdiuhyjr U8euMcIDJs5yi0hhG2M7UjYI+3Y3hhMTiVIrdOfC2VCqdgo3+siGAYnoEcEDXOHW JIDb4wJsunA2vTD9ta0kOpwCZViZu5+QPf54+XF9GHvYSTcVue4Hwl+cQBa7Et6R +bIciU+0959Qqm/7JjTjK8O/qLmrcFyxX5xAnZU6WlmuY4boG6R/cwfeXc6JKMud Tp86TGaUc4TmGAO1opV0wStw4tHCJ+pAF0LqUhIscDV43TuK46OkSfdoOSXstTQt n6Nfm7U9GrVPjjLhwqJ0F5tn9CcmJ4W+IA== -----END CERTIFICATE-----Generated at Sat Apr 12 15:16:42 2025 by rpki-client