$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/72dcbffd-aa50-3b47-a2bc-0a5442f9a835.roa File: 72dcbffd-aa50-3b47-a2bc-0a5442f9a835.roa (raw, json) Hash identifier: fa4nM1Jgj1JKSKik0mUsLobqOrrTe/ugrqj1F0QsK+4= Subject key identifier: B5:A1:15:7F:01:3B:37:50:E4:AE:A4:45:AD:60:B8:63:C6:21:19:02 Certificate issuer: /CN=007561fe-4b04-417a-b423-349b8b4b047d Certificate serial: 010D0C9F43285848AF2B862DA59FCE7A6742C280 Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/72dcbffd-aa50-3b47-a2bc-0a5442f9a835.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 19651 IP address blocks: 2602:f9ec::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:86:2d:a5:9f:ce:7a:67:42:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=2460071d-9488-41fc-9736-274372fa2d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:80:23:18:61:fb:41:09:12:b6:76:e3:c8:4c: 96:df:d4:b8:f5:a4:ae:a2:89:9f:b6:89:b5:d8:f7: 1e:63:c8:bd:b0:95:75:c2:ec:8b:68:d5:67:f0:0d: e5:fd:23:15:f0:75:00:84:d5:e7:21:23:6a:7e:26: ee:bb:de:19:c2:3e:b2:80:d8:cf:42:7a:82:30:36: 6e:c5:f2:02:25:48:c0:f0:f7:e9:07:7f:ac:6f:e6: db:d7:40:c8:13:a7:6a:90:05:c2:8f:9c:68:34:f3: ae:4c:64:65:27:c1:5a:f4:e0:d2:f3:ab:99:b1:1a: b8:1f:34:a5:71:da:f2:31:8d:4c:45:92:e3:7e:70: ae:04:90:b0:38:7f:d6:61:85:c6:d8:eb:61:b3:40: 91:84:6e:23:df:18:d2:f3:5e:20:4e:69:29:ec:9f: 9f:04:45:2b:9d:11:7a:7f:f8:46:65:23:13:b5:01: 35:1b:26:7e:36:11:c0:08:d9:7d:c6:f9:cd:e2:9f: 2f:1a:40:88:52:89:de:2f:26:ec:e9:b8:ff:3d:4e: 66:40:61:6b:10:ac:7c:4c:51:cf:2f:2a:29:dc:ba: 0c:51:64:0f:3d:b5:7a:b3:c0:81:f9:b0:30:2c:be: d9:76:88:95:a1:74:3b:f4:df:43:0f:aa:d7:8f:db: ab:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A1:15:7F:01:3B:37:50:E4:AE:A4:45:AD:60:B8:63:C6:21:19:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/72dcbffd-aa50-3b47-a2bc-0a5442f9a835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl X509v3 Authority Key Identifier: keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9ec::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:10:fa:bb:20:b2:29:4c:c4:e0:d1:3f:00:6f:39:3a:2a:f9: 4c:46:06:22:0a:57:92:81:fb:8b:a6:54:f9:13:cb:2b:2a:6a: 0e:c0:38:08:a8:cb:18:e8:9f:4e:32:df:3b:a8:9b:20:20:c9: 2e:6a:23:dd:f5:d1:3e:bc:6d:a6:1c:ee:7a:5d:1d:8a:61:86: ef:6a:10:7b:7d:9f:f9:c5:c2:50:4f:5e:26:9b:3a:19:70:09: a7:7f:fc:93:6d:b0:c7:f7:da:ad:d3:c9:83:81:e0:1e:cd:42: a5:ef:56:0c:55:73:eb:f7:ec:73:c7:92:a0:bb:33:bd:de:5d: 46:82:e2:7c:02:53:87:ad:b5:ca:74:29:cf:ad:0e:ee:0c:9a: af:50:47:47:37:dc:1e:ef:03:e8:81:40:86:91:7d:4f:a9:76: 5d:81:29:c7:f7:33:99:72:4c:1d:f6:a5:ff:c0:a5:aa:24:17: 4b:16:68:b7:f8:c1:2a:fd:e2:4b:02:2a:02:22:b5:17:72:67: 30:c6:1a:d8:5c:7a:55:36:02:f0:d9:ed:28:f3:f1:4b:76:14: 47:a4:15:74:99:e5:cf:9e:04:02:6f:e5:b9:4d:f1:42:ba:ba: 2d:1d:b2:da:56:7a:a6:d6:81:c2:75:03:b0:ae:5b:a8:a8:00: 98:5b:05:3e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEivK4YtpZ/OemdCwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA3NTYxZmUtNGIwNC00MTdhLWI0MjMtMzQ5YjhiNGIw NDdkMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk MjQ2MDA3MWQtOTQ4OC00MWZjLTk3MzYtMjc0MzcyZmEyZDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4AjGGH7QQkStnbjyEyW39S49aSuoomftom1 2PceY8i9sJV1wuyLaNVn8A3l/SMV8HUAhNXnISNqfibuu94Zwj6ygNjPQnqCMDZu xfICJUjA8PfpB3+sb+bb10DIE6dqkAXCj5xoNPOuTGRlJ8Fa9ODS86uZsRq4HzSl cdryMY1MRZLjfnCuBJCwOH/WYYXG2Oths0CRhG4j3xjS814gTmkp7J+fBEUrnRF6 f/hGZSMTtQE1GyZ+NhHACNl9xvnN4p8vGkCIUoneLybs6bj/PU5mQGFrEKx8TFHP Lyop3LoMUWQPPbV6s8CB+bAwLL7ZdoiVoXQ79N9DD6rXj9urGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLWhFX8BOzdQ5K6kRa1guGPGIRkCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDc1 NjFmZS00YjA0LTQxN2EtYjQyMy0zNDliOGI0YjA0N2QvNzJkY2JmZmQtYWE1MC0z YjQ3LWEyYmMtMGE1NDQyZjlhODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDA3NTYxZmUtNGIwNC00MTdhLWI0 MjMtMzQ5YjhiNGIwNDdkLzAwNzU2MWZlLTRiMDQtNDE3YS1iNDIzLTM0OWI4YjRi MDQ3ZC5jcmwwHwYDVR0jBBgwFoAUam3UldcOa/DEVubcc/Wc40Ocg3UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDc1NjFmZS00YjA0LTQxN2EtYjQyMy0zNDli OGI0YjA0N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL57AAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAsQ+rsgsilMxODRPwBvOToq+UxGBiIKV5KB+4umVPkTyysqag7A OAioyxjon04y3zuomyAgyS5qI9310T68baYc7npdHYphhu9qEHt9n/nFwlBPXiab OhlwCad//JNtsMf32q3TyYOB4B7NQqXvVgxVc+v37HPHkqC7M73eXUaC4nwCU4et tcp0Kc+tDu4Mmq9QR0c33B7vA+iBQIaRfU+pdl2BKcf3M5lyTB32pf/ApaokF0sW aLf4wSr94ksCKgIitRdyZzDGGthcelU2AvDZ7Sjz8Ut2FEekFXSZ5c+eBAJv5blN 8UK6ui0dstpWeqbWgcJ1A7CuW6ioAJhbBT4= -----END CERTIFICATE-----Generated at Fri Apr 4 15:58:29 2025 by rpki-client