$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/02af4fd6-b34b-3ffb-af01-7175b91b078a.roa File: 02af4fd6-b34b-3ffb-af01-7175b91b078a.roa (raw, json) Hash identifier: 6OT+FxGYX7UvK0zA8S16l2nll4RKLEd4M8vAu8Bkxzs= Subject key identifier: AA:A7:85:B6:B8:3C:85:91:76:87:E1:50:E1:E1:85:CD:F8:39:6E:35 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285848E006604D4D6CB97809DCBBC0 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/02af4fd6-b34b-3ffb-af01-7175b91b078a.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 11955 IP address blocks: 2603:90c8::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:60:4d:4d:6c:b9:78:09:dc:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=43b79a52-936b-4fcd-90a5-c553924105be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:33:45:b3:c3:46:9c:5a:ce:e3:75:e6:ea:af: 7c:0e:98:49:ad:c6:dd:d8:44:3d:bb:2d:d6:27:9e: 02:58:a4:24:da:47:c7:6b:45:7e:5e:c7:6e:72:6d: 55:e2:f6:bc:dd:61:22:97:c5:58:d9:5e:d5:33:dc: bc:d0:7a:d9:69:43:e9:88:c2:46:af:b0:c2:1b:ba: e0:e7:23:9c:0c:82:4c:84:95:ef:7f:4d:4a:c7:38: ce:a5:04:4b:9e:12:40:16:f3:c6:a9:3f:7e:27:f9: f7:86:eb:0b:e8:0d:4a:32:89:0a:2b:89:9c:b5:a5: 99:d5:49:aa:a1:25:a0:25:0f:98:d3:70:7b:77:3e: 43:8b:d7:17:8a:ac:4a:e1:d3:18:9b:fe:f1:c1:85: 1b:db:f3:2a:a3:7b:c5:c2:14:36:0f:56:df:31:7a: f6:eb:0d:6b:77:a3:99:7c:52:f5:a5:64:40:a2:3f: 63:60:c2:7f:d3:83:d5:1b:5c:27:7a:af:a4:da:47: 70:ca:70:90:70:74:59:dd:ea:68:2c:52:85:2f:5b: d9:49:18:2b:90:d6:10:9b:da:12:db:af:46:2b:3b: 39:2b:8a:a5:25:d6:a9:a9:8d:3d:f0:1e:f1:56:da: 05:50:75:9d:d8:fa:29:5e:16:6c:51:0f:0c:0e:d4: f7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A7:85:B6:B8:3C:85:91:76:87:E1:50:E1:E1:85:CD:F8:39:6E:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/02af4fd6-b34b-3ffb-af01-7175b91b078a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2603:90c8::/30 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:83:0d:66:d5:67:f0:15:42:96:53:97:63:8e:c6:57:01:19: 51:46:ee:1f:58:4d:6d:62:43:12:b7:d8:6d:01:6f:55:b9:b1: 07:40:fb:f7:ff:20:1a:88:e5:b3:bd:19:f4:ae:0e:ae:45:34: 1f:3f:a5:ce:bf:39:21:ea:b4:87:91:30:40:58:54:c9:02:f0: ef:a0:c6:a5:b0:3b:97:7d:08:6f:5c:b3:44:4e:3a:ed:aa:12: 1e:7f:0f:30:98:cb:36:7f:53:6a:4e:d7:81:73:b6:4d:ab:50: 22:17:88:14:32:dc:69:9e:5e:62:bd:4b:2f:0b:ac:e1:e4:cd: a9:f7:24:9c:58:2b:9c:0b:0e:ae:4c:57:89:74:11:63:1c:b0: 49:3a:d2:5d:bb:38:89:bd:0a:76:26:d9:62:93:c4:3c:d7:13: 95:f6:71:df:4c:dc:1f:5f:f8:cf:38:ac:07:c5:f1:de:de:40: ad:b2:e0:e6:dc:3c:d2:0c:24:6a:7e:ee:11:ec:47:43:04:88: 8a:9c:26:b6:7d:44:0f:81:c0:71:05:f1:32:22:fb:1b:ad:a6: 1f:a9:06:21:da:66:ed:00:a6:f1:76:70:4c:f5:15:4d:24:53: f4:06:81:6e:11:53:3d:df:a4:76:af:5d:6b:f0:4a:05:0c:32: 34:02:12:16 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBmBNTWy5eAncu8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk NDNiNzlhNTItOTM2Yi00ZmNkLTkwYTUtYzU1MzkyNDEwNWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zNFs8NGnFrO43Xm6q98DphJrcbd2EQ9uy3W J54CWKQk2kfHa0V+Xsducm1V4va83WEil8VY2V7VM9y80HrZaUPpiMJGr7DCG7rg 5yOcDIJMhJXvf01KxzjOpQRLnhJAFvPGqT9+J/n3husL6A1KMokKK4mctaWZ1Umq oSWgJQ+Y03B7dz5Di9cXiqxK4dMYm/7xwYUb2/Mqo3vFwhQ2D1bfMXr26w1rd6OZ fFL1pWRAoj9jYMJ/04PVG1wneq+k2kdwynCQcHRZ3epoLFKFL1vZSRgrkNYQm9oS 269GKzs5K4qlJdapqY098B7xVtoFUHWd2PopXhZsUQ8MDtT31QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKqnhba4PIWRdofhUOHhhc34OW41MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMDJhZjRmZDYtYjM0Yi0z ZmZiLWFmMDEtNzE3NWI5MWIwNzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCJgOQyDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCagw1m1WfwFUKWU5djjsZXARlRRu4fWE1tYkMSt9htAW9VubEHQPv3 /yAaiOWzvRn0rg6uRTQfP6XOvzkh6rSHkTBAWFTJAvDvoMalsDuXfQhvXLNETjrt qhIefw8wmMs2f1NqTteBc7ZNq1AiF4gUMtxpnl5ivUsvC6zh5M2p9yScWCucCw6u TFeJdBFjHLBJOtJduziJvQp2Jtlik8Q81xOV9nHfTNwfX/jPOKwHxfHe3kCtsuDm 3DzSDCRqfu4R7EdDBIiKnCa2fUQPgcBxBfEyIvsbraYfqQYh2mbtAKbxdnBM9RVN JFP0BoFuEVM936R2r11r8EoFDDI0AhIW -----END CERTIFICATE-----Generated at Sat Apr 5 03:43:06 2025 by rpki-client