$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/230f3db2-0c43-36ca-becb-741ae0a67dad.roa File: 230f3db2-0c43-36ca-becb-741ae0a67dad.roa (raw, json) Hash identifier: xUWauTG5yH0gVQ2HMSmJ/KqN4UpOw1AVVFg6pr2ajOY= Subject key identifier: CE:5C:6F:44:67:B9:60:45:60:75:AF:52:A0:7F:F5:5A:AF:25:73:A3 Certificate issuer: /CN=b3f5323f-8bea-48c6-aa03-949255dd1997 Certificate serial: 010D0C9F432858497F09A4A6C1B334335B612C80 Authority key identifier: 53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/230f3db2-0c43-36ca-becb-741ae0a67dad.roa Signing time: Sat 12 Apr 2025 01:00:48 +0000 ROA not before: Sat 12 Apr 2025 01:00:48 +0000 ROA not after: Fri 11 Jul 2025 01:00:48 +0000 asID: 46474 IP address blocks: 2602:819:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:09:a4:a6:c1:b3:34:33:5b:61:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3f5323f-8bea-48c6-aa03-949255dd1997 Validity Not Before: Apr 12 01:00:48 2025 GMT Not After : Jul 11 01:00:48 2025 GMT Subject: CN=ddd19ebe-499b-41e1-8a8a-11cf66d5794c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7a:1b:2f:db:25:17:70:54:2d:d5:50:7b:af: 3e:fc:6c:d8:2b:4d:10:94:39:a9:35:e2:a7:1b:55: d7:e7:9c:46:07:70:ab:e2:1e:63:f3:bb:29:55:b4: d2:9c:4a:2b:a7:ee:1c:9f:a9:20:1f:37:38:16:0e: 9f:2b:59:04:fa:69:1c:bf:4a:a5:c4:07:d4:ab:95: 55:ad:2d:20:1e:47:74:ee:6b:a4:54:3f:c7:52:85: fe:6d:86:d3:2a:f7:a1:77:dd:85:20:96:66:23:a3: bb:aa:0c:dc:e6:38:33:d3:2e:c2:27:f1:40:e7:2a: b3:34:60:0d:0b:f7:e9:0f:f4:b0:1d:b3:e1:a5:07: 4c:df:9d:40:1a:75:cc:c9:d6:27:ec:77:01:b3:b8: 01:b9:56:ed:39:0c:50:85:10:ca:e9:8f:07:c5:49: f2:cb:06:6d:38:1f:86:9f:9f:39:00:3a:5d:e5:04: 57:c3:56:7d:1c:1a:03:57:16:82:30:b3:bc:6e:57: 3f:af:d8:95:2f:96:74:26:25:c5:ae:71:e2:df:76: 58:a3:bf:37:7f:82:69:64:c1:52:ae:d1:8c:9e:4e: 61:be:02:2e:87:16:c7:b4:f2:19:5b:5a:24:33:6b: e8:19:b9:af:0c:11:39:be:38:08:6a:90:78:ee:67: 2c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5C:6F:44:67:B9:60:45:60:75:AF:52:A0:7F:F5:5A:AF:25:73:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/230f3db2-0c43-36ca-becb-741ae0a67dad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl X509v3 Authority Key Identifier: keyid:53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer sbgp-ipAddrBlock: critical IPv6: 2602:819:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:b2:7d:3c:83:8d:bf:b5:72:36:99:c4:a2:29:6f:54:19:e7: 69:91:ca:72:88:86:f1:68:51:0c:91:4d:30:91:72:8b:3a:55: b5:20:78:74:5b:5b:86:47:0a:f6:2e:50:ea:54:5a:a6:bf:16: 08:48:d3:4f:d7:c9:dc:a5:64:aa:0b:40:6c:af:2f:d3:78:16: 0d:b8:51:ac:96:b5:56:7a:ae:3f:25:ef:29:60:c8:82:c3:66: 7d:45:89:4a:58:1e:3e:fb:65:42:fe:5c:6a:4c:d3:30:3a:52: 62:ca:21:76:2e:4d:8d:18:cd:45:50:02:ff:2a:be:60:fc:75: 40:17:27:55:b3:b9:a1:07:d3:de:33:95:0e:7b:ce:e4:97:5d: cb:96:ec:20:00:6a:e8:b2:e8:3c:cc:94:7f:6d:57:04:57:36: 94:2e:86:89:15:72:90:17:68:3e:2d:06:fc:87:b2:c3:4c:71: 9b:0d:16:61:30:3c:06:fb:33:35:9c:37:88:6f:5d:3e:24:57: 3a:db:a1:ad:c3:d9:1a:ea:db:40:5f:23:02:79:87:a2:a5:aa: 9a:c8:64:8c:34:af:9d:e6:37:1a:0c:f1:e9:16:14:ce:6a:83: e8:f0:e9:ac:8e:92:60:b3:15:8d:51:2d:69:ca:90:3a:04:6e: 40:11:af:94 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl/CaSmwbM0M1thLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjNmNTMyM2YtOGJlYS00OGM2LWFhMDMtOTQ5MjU1ZGQx OTk3MB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk ZGRkMTllYmUtNDk5Yi00MWUxLThhOGEtMTFjZjY2ZDU3OTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonobL9slF3BULdVQe68+/GzYK00QlDmpNeKn G1XX55xGB3Cr4h5j87spVbTSnEorp+4cn6kgHzc4Fg6fK1kE+mkcv0qlxAfUq5VV rS0gHkd07mukVD/HUoX+bYbTKvehd92FIJZmI6O7qgzc5jgz0y7CJ/FA5yqzNGAN C/fpD/SwHbPhpQdM351AGnXMydYn7HcBs7gBuVbtOQxQhRDK6Y8HxUnyywZtOB+G n585ADpd5QRXw1Z9HBoDVxaCMLO8blc/r9iVL5Z0JiXFrnHi33ZYo783f4JpZMFS rtGMnk5hvgIuhxbHtPIZW1okM2voGbmvDBE5vjgIapB47mcskQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM5cb0RnuWBFYHWvUqB/9VqvJXOjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iM2Y1 MzIzZi04YmVhLTQ4YzYtYWEwMy05NDkyNTVkZDE5OTcvMjMwZjNkYjItMGM0My0z NmNhLWJlY2ItNzQxYWUwYTY3ZGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjNmNTMyM2YtOGJlYS00OGM2LWFh MDMtOTQ5MjU1ZGQxOTk3L2IzZjUzMjNmLThiZWEtNDhjNi1hYTAzLTk0OTI1NWRk MTk5Ny5jcmwwHwYDVR0jBBgwFoAUU4ELix9UHi+CHErdwD5wsGKV7F0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iM2Y1MzIzZi04YmVhLTQ4YzYtYWEwMy05NDky NTVkZDE5OTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIGeAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAESyfTyDjb+1cjaZxKIpb1QZ52mRynKIhvFoUQyRTTCRcos6VbUg eHRbW4ZHCvYuUOpUWqa/FghI00/XydylZKoLQGyvL9N4Fg24UayWtVZ6rj8l7ylg yILDZn1FiUpYHj77ZUL+XGpM0zA6UmLKIXYuTY0YzUVQAv8qvmD8dUAXJ1WzuaEH 094zlQ57zuSXXcuW7CAAauiy6DzMlH9tVwRXNpQuhokVcpAXaD4tBvyHssNMcZsN FmEwPAb7MzWcN4hvXT4kVzrboa3D2Rrq20BfIwJ5h6KlqprIZIw0r53mNxoM8ekW FM5qg+jw6ayOkmCzFY1RLWnKkDoEbkARr5Q= -----END CERTIFICATE-----Generated at Sat Apr 19 18:36:53 2025 by rpki-client