$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/3b5fbb54-5a54-37fa-9b85-c5fa205688d3.roa File: 3b5fbb54-5a54-37fa-9b85-c5fa205688d3.roa (raw, json) Hash identifier: bYFP+eWZml8dquMT1hOEdVSIAp3QxQ0s+olUnJaJeJw= Subject key identifier: 9D:EC:1A:67:F3:F3:CC:ED:D2:D8:07:A9:02:B4:86:A2:F6:B5:4B:43 Certificate issuer: /CN=f070d399-4921-4247-a612-64e6e53f9f2b Certificate serial: 010D0C9F43285848B090B5495B932781C6E53700 Authority key identifier: 61:7C:EB:83:28:62:01:5E:92:49:7B:33:A2:DB:13:67:E0:32:59:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/3b5fbb54-5a54-37fa-9b85-c5fa205688d3.roa Signing time: Tue 28 Jan 2025 02:00:39 +0000 ROA not before: Tue 28 Jan 2025 02:00:39 +0000 ROA not after: Mon 28 Apr 2025 01:00:39 +0000 asID: 401274 IP address blocks: 2602:f84d::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/f070d399-4921-4247-a612-64e6e53f9f2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/f070d399-4921-4247-a612-64e6e53f9f2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b0:90:b5:49:5b:93:27:81:c6:e5:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f070d399-4921-4247-a612-64e6e53f9f2b Validity Not Before: Jan 28 02:00:39 2025 GMT Not After : Apr 28 01:00:39 2025 GMT Subject: CN=dae3c36f-132d-4b90-8d6d-3ff857c2221f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:dc:c8:52:03:4a:43:51:9c:be:3c:e2:ca:8b: 00:b8:ff:db:a2:cd:58:ba:c4:1c:47:4b:34:03:73: 7b:9e:83:b5:02:fe:76:c9:f6:5e:a7:f1:df:15:62: 8e:7d:26:6c:4e:50:ec:31:ae:25:ff:3a:b7:98:8f: a4:fc:34:3a:da:d4:56:85:02:00:ec:68:01:ff:79: 7b:b8:3c:ff:18:33:4c:f6:1c:e8:08:37:51:fd:48: 8a:f8:8d:8a:d0:df:a2:fd:bc:d0:37:09:eb:9e:62: 8e:63:6b:e6:9c:12:96:74:5c:ee:d9:67:3a:20:f6: 36:7e:24:df:53:1d:9f:ec:6b:20:58:62:a9:1c:eb: cd:ab:e2:14:75:56:ba:19:e8:ca:d7:b5:cc:eb:44: 7c:e9:3c:6a:25:ed:f2:8d:d0:ad:b9:01:c5:6b:13: 22:99:d4:3a:51:9e:16:e9:19:dd:a6:2d:3c:42:e7: 1a:de:e5:6f:90:38:66:f1:39:18:9f:dc:1d:16:c1: a0:fb:a7:a4:53:a3:f5:4b:4c:7d:93:77:ee:62:f3: 60:e6:34:4b:fd:e4:97:9e:a2:ef:24:ea:3d:22:2e: 73:10:6a:85:19:8f:35:79:38:88:3c:c1:ef:56:12: cb:e8:03:e4:a6:64:eb:c0:21:b9:55:41:bf:24:0a: 76:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EC:1A:67:F3:F3:CC:ED:D2:D8:07:A9:02:B4:86:A2:F6:B5:4B:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/3b5fbb54-5a54-37fa-9b85-c5fa205688d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/f070d399-4921-4247-a612-64e6e53f9f2b.crl X509v3 Authority Key Identifier: keyid:61:7C:EB:83:28:62:01:5E:92:49:7B:33:A2:DB:13:67:E0:32:59:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b.cer sbgp-ipAddrBlock: critical IPv6: 2602:f84d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:37:09:b9:1e:7d:b6:31:c1:fc:6f:87:6f:bc:68:34:c7:fc: 06:20:6d:ae:b6:ca:07:15:30:55:fc:5e:d4:1f:b9:09:06:66: 9e:2e:79:14:2c:da:23:f4:a9:2b:38:73:8a:f3:b9:6c:3a:18: b4:0f:22:6b:0f:5b:c7:4e:66:9a:61:0f:09:11:b4:0a:e0:b6: 95:fe:7f:dc:d8:49:c1:6b:84:1b:f7:e0:db:44:e6:30:41:ce: ec:7d:f3:99:e7:51:ff:49:16:50:86:71:b4:e2:c1:c1:39:54: a8:21:39:87:13:51:fd:f6:9a:3e:6e:0e:4d:59:3a:14:c3:48: 1e:74:1e:e0:75:ba:85:72:61:58:5c:7b:12:df:2f:a9:e5:ef: 55:4b:59:2b:41:8c:a1:27:13:3d:fc:56:35:32:15:27:55:4e: 29:ed:eb:95:b7:95:67:40:18:fb:62:4a:7d:27:5b:6d:a4:7d: 89:7c:a2:55:2e:86:90:2e:a9:5b:c6:c7:52:f8:3c:79:eb:a8: e2:41:d4:f1:17:0b:1a:4d:64:7c:9e:e9:71:0e:1d:b5:6a:30: c9:4c:91:59:39:f1:68:21:cc:79:0a:a2:8c:16:04:5b:94:03: 99:2d:07:1c:da:06:0d:de:ee:09:ea:e8:7b:78:1c:d1:f5:66: 91:54:a8:34 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEiwkLVJW5MngcblNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA3MGQzOTktNDkyMS00MjQ3LWE2MTItNjRlNmU1M2Y5 ZjJiMB4XDTI1MDEyODAyMDAzOVoXDTI1MDQyODAxMDAzOVowLzEtMCsGA1UEAxMk ZGFlM2MzNmYtMTMyZC00YjkwLThkNmQtM2ZmODU3YzIyMjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NzIUgNKQ1GcvjziyosAuP/bos1YusQcR0s0 A3N7noO1Av52yfZep/HfFWKOfSZsTlDsMa4l/zq3mI+k/DQ62tRWhQIA7GgB/3l7 uDz/GDNM9hzoCDdR/UiK+I2K0N+i/bzQNwnrnmKOY2vmnBKWdFzu2Wc6IPY2fiTf Ux2f7GsgWGKpHOvNq+IUdVa6GejK17XM60R86TxqJe3yjdCtuQHFaxMimdQ6UZ4W 6Rndpi08Quca3uVvkDhm8TkYn9wdFsGg+6ekU6P1S0x9k3fuYvNg5jRL/eSXnqLv JOo9Ii5zEGqFGY81eTiIPMHvVhLL6APkpmTrwCG5VUG/JAp23QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJ3sGmfz88zt0tgHqQK0hqL2tUtDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mMDcw ZDM5OS00OTIxLTQyNDctYTYxMi02NGU2ZTUzZjlmMmIvM2I1ZmJiNTQtNWE1NC0z N2ZhLTliODUtYzVmYTIwNTY4OGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjA3MGQzOTktNDkyMS00MjQ3LWE2 MTItNjRlNmU1M2Y5ZjJiL2YwNzBkMzk5LTQ5MjEtNDI0Ny1hNjEyLTY0ZTZlNTNm OWYyYi5jcmwwHwYDVR0jBBgwFoAUYXzrgyhiAV6SSXszotsTZ+AyWcAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mMDcwZDM5OS00OTIxLTQyNDctYTYxMi02NGU2 ZTUzZjlmMmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4TQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGTcJuR59tjHB/G+Hb7xoNMf8BiBtrrbKBxUwVfxe1B+5CQZmni55 FCzaI/SpKzhzivO5bDoYtA8iaw9bx05mmmEPCRG0CuC2lf5/3NhJwWuEG/fg20Tm MEHO7H3zmedR/0kWUIZxtOLBwTlUqCE5hxNR/faaPm4OTVk6FMNIHnQe4HW6hXJh WFx7Et8vqeXvVUtZK0GMoScTPfxWNTIVJ1VOKe3rlbeVZ0AY+2JKfSdbbaR9iXyi VS6GkC6pW8bHUvg8eeuo4kHU8RcLGk1kfJ7pcQ4dtWowyUyRWTnxaCHMeQqijBYE W5QDmS0HHNoGDd7uCeroe3gc0fVmkVSoNA== -----END CERTIFICATE-----Generated at Fri Apr 11 23:29:59 2025 by rpki-client