$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2851502-ec1f-392a-80d4-f10b991ad233.roa File: a2851502-ec1f-392a-80d4-f10b991ad233.roa (raw, json) Hash identifier: o2VSAmNUKdCXwpwpyyQkcQLH4Ma0PSe8Z6a/RxGWYWY= Subject key identifier: 14:81:FB:F0:BD:3D:0C:37:52:3C:75:BB:AA:E0:F3:9A:C4:F1:B4:26 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285848E006907A15B35F83B83B1F00 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2851502-ec1f-392a-80d4-f10b991ad233.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 33363 IP address blocks: 2603:9001::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:90:7a:15:b3:5f:83:b8:3b:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=e24640d2-60c4-411c-87d7-694372bc8495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:39:44:4c:3e:4c:e1:15:b5:04:d2:d7:1b:22: f4:56:43:47:d3:bf:45:7d:36:f4:6b:cc:f4:52:d5: 81:ec:0c:cf:97:8c:95:db:2d:c0:1c:88:9c:25:f9: 70:11:a4:1a:a1:70:5d:db:a3:cd:2d:12:fa:dc:d3: 70:58:f2:7b:f0:17:b8:0a:ad:e6:91:1f:9e:21:2c: be:4b:a6:00:5c:9f:af:4d:26:98:b8:15:b1:27:90: 4c:3a:0d:16:7c:ce:65:44:61:c2:69:b4:39:69:31: 0d:7d:51:d0:40:16:25:82:79:3b:77:0c:f5:a5:02: 64:40:dd:2e:7f:7a:52:cb:ea:2e:89:7e:dc:68:b2: 4d:1f:64:06:5b:72:cc:1e:b5:7e:0b:63:07:c1:5e: 80:b6:f4:6f:ca:28:21:e5:ca:3c:e3:bc:47:70:66: 8f:21:85:dc:5f:7e:1f:f0:40:62:f3:0f:db:e2:e8: e6:62:47:3c:92:1d:26:4a:0b:97:f3:17:c5:33:12: a8:37:26:c2:05:f3:31:16:12:49:a5:76:ff:d3:24: f4:14:bf:2a:54:5d:d5:6b:7e:f6:9c:d4:aa:95:0d: cd:48:a9:a3:00:47:bc:14:3b:bb:fd:bb:df:e2:88: 67:85:9c:1c:3b:fe:9e:9e:ba:fe:80:bf:17:f3:4d: 1d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:81:FB:F0:BD:3D:0C:37:52:3C:75:BB:AA:E0:F3:9A:C4:F1:B4:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2851502-ec1f-392a-80d4-f10b991ad233.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2603:9001::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:96:80:b6:bb:23:5c:85:ba:46:5b:d5:ae:0e:e2:43:09:cf: c7:7c:c4:52:a6:49:cd:7a:26:26:8f:d7:12:1f:64:43:a6:fc: f1:45:0e:b9:db:91:46:51:83:99:11:ee:5d:db:a0:48:81:d2: 3f:74:f6:83:67:7d:e8:5f:a9:f9:c1:f5:9d:91:b6:41:78:05: 8f:8d:23:34:ea:70:47:fc:44:52:9f:fe:6d:ed:fa:87:6a:01: 76:ea:46:83:ae:74:45:80:80:4a:4c:7a:10:86:86:86:fe:e7: ee:6d:3c:c4:9f:f3:2b:6e:6c:fa:85:6f:0a:ef:3d:4c:71:50: c9:b3:27:a0:c2:f7:e0:0a:a7:25:89:8f:14:a9:96:5a:12:7f: 0c:c0:e8:34:e4:09:a5:5a:6c:f5:c2:d0:04:29:4f:59:c8:d1: 5f:2c:2f:e0:0a:2c:ac:d1:30:0b:48:32:59:c1:a1:29:c5:bd: 04:75:f0:ca:e9:8e:8a:d8:50:91:d2:dd:e3:77:28:45:fc:68: 86:40:24:6e:de:17:cd:50:d6:19:f2:f9:e6:0f:67:5b:d0:fd: ba:71:e4:84:c9:62:7b:51:fe:a7:fb:16:ed:cf:a6:40:dd:86: 3f:f4:f4:e0:1d:4f:f9:86:3b:3e:37:6e:d1:ae:52:61:bf:f0: 3d:bf:9e:2a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBpB6FbNfg7g7HwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk ZTI0NjQwZDItNjBjNC00MTFjLTg3ZDctNjk0MzcyYmM4NDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjlETD5M4RW1BNLXGyL0VkNH079FfTb0a8z0 UtWB7AzPl4yV2y3AHIicJflwEaQaoXBd26PNLRL63NNwWPJ78Be4Cq3mkR+eISy+ S6YAXJ+vTSaYuBWxJ5BMOg0WfM5lRGHCabQ5aTENfVHQQBYlgnk7dwz1pQJkQN0u f3pSy+ouiX7caLJNH2QGW3LMHrV+C2MHwV6AtvRvyigh5co847xHcGaPIYXcX34f 8EBi8w/b4ujmYkc8kh0mSguX8xfFMxKoNybCBfMxFhJJpXb/0yT0FL8qVF3Va372 nNSqlQ3NSKmjAEe8FDu7/bvf4ohnhZwcO/6enrr+gL8X800dHQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBSB+/C9PQw3Ujx1u6rg85rE8bQmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYTI4NTE1MDItZWMxZi0z OTJhLTgwZDQtZjEwYjk5MWFkMjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgOQATBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBxloC2uyNchbpGW9WuDuJDCc/HfMRSpknNeiYmj9cSH2RDpvzxRQ65 25FGUYOZEe5d26BIgdI/dPaDZ33oX6n5wfWdkbZBeAWPjSM06nBH/ERSn/5t7fqH agF26kaDrnRFgIBKTHoQhoaG/ufubTzEn/Mrbmz6hW8K7z1McVDJsyegwvfgCqcl iY8UqZZaEn8MwOg05AmlWmz1wtAEKU9ZyNFfLC/gCiys0TALSDJZwaEpxb0EdfDK 6Y6K2FCR0t3jdyhF/GiGQCRu3hfNUNYZ8vnmD2db0P26ceSEyWJ7Uf6n+xbtz6ZA 3YY/9PTgHU/5hjs+N27RrlJhv/A9v54q -----END CERTIFICATE-----Generated at Sat Apr 5 03:45:24 2025 by rpki-client