$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec/7d68b9ce-b762-3e17-8013-4ff3f5937365.roa File: 7d68b9ce-b762-3e17-8013-4ff3f5937365.roa (raw, json) Hash identifier: Xs0AmTfpmcJRTtPZ7BFT+oHYIfZHscl+m7djYY7pPxQ= Subject key identifier: B1:75:E3:79:DA:53:E0:59:14:F6:2A:03:0D:99:E7:C2:5A:5A:BB:70 Certificate issuer: /CN=ad03f8e2-2c6b-41ab-8a4f-a20f958719ec Certificate serial: 010D0C9F432858495D896AC461D4B634D6AD7900 Authority key identifier: 5D:5F:F1:BE:36:F6:F7:F7:0E:7B:B6:2D:C5:C6:79:16:5E:87:55:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec/7d68b9ce-b762-3e17-8013-4ff3f5937365.roa Signing time: Mon 31 Mar 2025 01:00:47 +0000 ROA not before: Mon 31 Mar 2025 01:00:47 +0000 ROA not after: Sun 29 Jun 2025 01:00:47 +0000 asID: 401268 IP address blocks: 2602:f86d::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5d:89:6a:c4:61:d4:b6:34:d6:ad:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad03f8e2-2c6b-41ab-8a4f-a20f958719ec Validity Not Before: Mar 31 01:00:47 2025 GMT Not After : Jun 29 01:00:47 2025 GMT Subject: CN=9d16f2fa-fe4c-4e98-93a5-37b3cb295cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f3:a7:ba:22:7c:7a:7a:1f:f8:9d:cf:07:04: 6c:8d:36:b4:5e:05:ad:fd:c7:c8:e6:2f:6a:18:01: fc:35:ef:1d:24:ac:14:dc:28:fa:58:fd:60:da:d8: 47:9e:32:14:8c:50:34:00:e9:3c:a2:1b:56:0b:33: 94:b7:a0:2f:cd:31:54:5a:ca:82:83:b8:36:b6:ee: 3a:05:f1:f6:fa:40:50:59:de:37:1d:2d:e5:d1:1e: 21:0f:dc:17:d7:de:af:14:34:07:06:78:25:7a:c8: da:4f:31:aa:91:42:91:71:4b:ed:7a:7e:2d:70:21: f9:8b:b7:43:c7:90:86:b2:4f:b3:9b:aa:8e:4e:ad: d3:5a:af:af:b7:e1:41:19:61:61:0c:2d:c5:a7:4f: eb:38:0d:47:c3:96:3d:e9:9b:bd:e9:7b:e7:06:77: 87:37:29:0d:cc:e0:89:3b:ff:17:61:0a:94:87:80: b9:e6:7d:ce:e4:81:52:83:00:63:e4:82:d0:24:23: 5a:30:a6:d1:d5:cd:23:ce:d5:d3:46:d1:fa:b5:24: 97:97:06:b6:55:60:f1:3b:fb:14:60:71:c2:e2:12: 1c:f2:4e:62:c3:9f:96:d9:47:43:c3:51:f1:be:7b: 67:9d:9b:4f:79:2a:85:a5:0b:bb:f4:85:a6:73:b5: 59:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:75:E3:79:DA:53:E0:59:14:F6:2A:03:0D:99:E7:C2:5A:5A:BB:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec/7d68b9ce-b762-3e17-8013-4ff3f5937365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec.crl X509v3 Authority Key Identifier: keyid:5D:5F:F1:BE:36:F6:F7:F7:0E:7B:B6:2D:C5:C6:79:16:5E:87:55:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec.cer sbgp-ipAddrBlock: critical IPv6: 2602:f86d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f5:48:57:0c:a1:f4:b2:4c:18:16:70:93:ff:94:56:5b:82: 79:c9:e1:ae:b1:a3:3e:5d:09:f4:36:01:0d:bc:2b:27:83:f0: 9b:9b:d0:4c:1f:41:5a:8d:60:d6:81:8f:0c:51:b1:10:28:c8: 7c:22:f3:0d:79:f4:02:3b:38:d1:ef:cb:08:ec:41:9a:f4:cc: dd:4b:ce:2f:40:67:ba:be:91:c5:7a:8a:fa:51:3f:0e:de:17: dd:41:d1:92:00:22:de:09:4a:9b:d1:d5:65:e9:bf:b6:e0:68: be:f7:ef:63:60:54:06:0b:c0:03:c7:b1:39:69:73:60:86:56: d1:74:5a:29:5a:04:25:6b:f0:74:45:b4:4e:4c:0c:96:a6:ff: 74:df:dd:b7:b2:be:eb:0d:d0:47:ec:c5:31:4a:28:5d:58:62: 00:fd:14:d7:3d:07:25:75:0c:0b:53:43:a2:ca:a9:42:b9:e1: 4f:f0:dd:28:a2:33:6e:00:04:90:a9:7d:ee:05:cb:d7:18:68: ed:72:40:39:cc:af:6e:2c:87:93:35:6e:07:be:8a:76:1e:7c: 21:e9:41:95:78:38:23:52:90:b1:ee:4b:3e:64:93:e1:ee:f6: a0:db:f1:e1:c4:b9:4f:89:28:7c:99:b8:49:65:58:7a:97:17: 3a:64:53:01 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEldiWrEYdS2NNateQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQwM2Y4ZTItMmM2Yi00MWFiLThhNGYtYTIwZjk1ODcx OWVjMB4XDTI1MDMzMTAxMDA0N1oXDTI1MDYyOTAxMDA0N1owLzEtMCsGA1UEAxMk OWQxNmYyZmEtZmU0Yy00ZTk4LTkzYTUtMzdiM2NiMjk1Y2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPOnuiJ8enof+J3PBwRsjTa0XgWt/cfI5i9q GAH8Ne8dJKwU3Cj6WP1g2thHnjIUjFA0AOk8ohtWCzOUt6AvzTFUWsqCg7g2tu46 BfH2+kBQWd43HS3l0R4hD9wX196vFDQHBnglesjaTzGqkUKRcUvten4tcCH5i7dD x5CGsk+zm6qOTq3TWq+vt+FBGWFhDC3Fp0/rOA1Hw5Y96Zu96XvnBneHNykNzOCJ O/8XYQqUh4C55n3O5IFSgwBj5ILQJCNaMKbR1c0jztXTRtH6tSSXlwa2VWDxO/sU YHHC4hIc8k5iw5+W2UdDw1HxvntnnZtPeSqFpQu79IWmc7VZ+QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLF143naU+BZFPYqAw2Z58JaWrtwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hZDAz ZjhlMi0yYzZiLTQxYWItOGE0Zi1hMjBmOTU4NzE5ZWMvN2Q2OGI5Y2UtYjc2Mi0z ZTE3LTgwMTMtNGZmM2Y1OTM3MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWQwM2Y4ZTItMmM2Yi00MWFiLThh NGYtYTIwZjk1ODcxOWVjL2FkMDNmOGUyLTJjNmItNDFhYi04YTRmLWEyMGY5NTg3 MTllYy5jcmwwHwYDVR0jBBgwFoAUXV/xvjb29/cOe7YtxcZ5Fl6HVbwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hZDAzZjhlMi0yYzZiLTQxYWItOGE0Zi1hMjBm OTU4NzE5ZWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4bQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAOvVIVwyh9LJMGBZwk/+UVluCecnhrrGjPl0J9DYBDbwrJ4Pwm5vQ TB9BWo1g1oGPDFGxECjIfCLzDXn0Ajs40e/LCOxBmvTM3UvOL0Bnur6RxXqK+lE/ Dt4X3UHRkgAi3glKm9HVZem/tuBovvfvY2BUBgvAA8exOWlzYIZW0XRaKVoEJWvw dEW0TkwMlqb/dN/dt7K+6w3QR+zFMUooXVhiAP0U1z0HJXUMC1NDosqpQrnhT/Dd KKIzbgAEkKl97gXL1xho7XJAOcyvbiyHkzVuB76Kdh58IelBlXg4I1KQse5LPmST 4e72oNvx4cS5T4kofJm4SWVYepcXOmRTAQ== -----END CERTIFICATE-----Generated at Sun Apr 6 11:44:32 2025 by rpki-client