$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/85d497f8-78e4-3391-92ca-84fdc016389c.roa File: 85d497f8-78e4-3391-92ca-84fdc016389c.roa (raw, json) Hash identifier: PALTFRdFznFxv4LXsVflQvPNrfk7MC0+mBOe2T/QjPo= Subject key identifier: 88:66:7E:D2:45:24:7B:A9:C9:58:DD:16:6E:91:BD:F0:85:97:8C:18 Certificate issuer: /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2 Certificate serial: 010D0C9F4328584940394FCB14005C39541D1DB0 Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/85d497f8-78e4-3391-92ca-84fdc016389c.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 199203 IP address blocks: 2602:f9a9:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:4f:cb:14:00:5c:39:54:1d:1d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=9d87add2-a2dd-404a-a53b-067f8a1d67be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:65:ea:72:27:73:1f:32:02:e5:95:94:36:b1: 8f:a9:70:47:15:44:da:2c:91:05:bc:71:db:3f:f8: de:26:fc:29:83:9e:a8:f3:a7:19:e3:87:44:16:77: 84:5c:ed:c3:62:30:af:6d:4c:d3:6a:38:46:0a:9f: 64:f2:20:5f:b1:2d:ff:33:2e:03:b3:0b:cf:31:3b: 57:c4:cc:fd:ca:2d:3a:63:e0:9c:f7:80:f7:09:8c: c3:4f:8c:64:52:8a:fe:33:e4:af:10:f5:70:6e:4b: 11:1d:74:75:8c:86:14:da:82:e8:01:5f:a5:06:0f: a6:d1:af:48:90:b1:c9:04:f1:9a:68:d0:c1:fc:81: 45:73:25:29:0c:8e:6c:c6:f2:46:0b:63:4f:52:6f: b0:5b:c1:12:17:20:6f:f1:f9:59:67:86:2f:e0:e1: 5c:18:92:83:af:59:64:4c:31:7b:9c:22:41:31:b5: b0:5a:19:70:a2:70:96:c2:7a:62:89:7d:e4:81:c1: 4c:5e:f3:a8:f2:dc:a0:e1:16:35:9f:2f:aa:b6:5f: d9:be:5c:5f:90:8b:22:38:4f:9b:7c:9d:01:04:55: 2e:41:c2:33:56:fc:82:44:24:24:03:08:b8:c7:3f: b8:93:6d:a0:16:b0:e4:72:e1:0a:f8:bc:3c:3e:3c: 1f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:66:7E:D2:45:24:7B:A9:C9:58:DD:16:6E:91:BD:F0:85:97:8C:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/85d497f8-78e4-3391-92ca-84fdc016389c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl X509v3 Authority Key Identifier: keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9a9:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:0d:82:43:c5:23:9a:53:f2:35:da:fc:7f:18:af:94:4d:24: 4f:3e:d4:34:d8:9e:75:86:6b:29:bd:da:2b:d2:d3:40:52:1e: 6c:3f:b7:67:6b:21:7e:6a:80:df:56:04:8c:72:12:6b:28:d3: 7f:b0:bd:17:b2:ce:f7:e3:a2:f3:95:0c:b8:63:b2:62:9a:6f: 89:ab:d2:1f:e0:0d:b8:7a:f9:4c:36:bb:88:ea:1d:c2:98:b8: 67:cd:7e:2d:74:f6:4d:19:67:5d:fa:91:e4:a9:9e:69:13:e8: 48:4a:34:66:de:b3:c4:08:e2:9b:60:9a:44:e3:23:fd:63:81: 9b:3a:a7:cb:52:22:10:a7:ae:9c:48:f1:d3:b6:08:2c:c8:0c: 88:0b:24:02:b2:5c:6d:54:37:ff:e1:d8:78:57:23:73:29:4e: 2a:a0:2c:5d:a4:77:f5:1c:08:40:94:0f:cd:8a:80:34:92:2c: cd:ed:dd:80:ba:24:34:ba:9f:1a:f4:91:33:e8:b8:91:df:f7: c9:af:f7:7b:72:e6:38:22:c2:70:04:f5:62:5c:64:72:bf:24: e6:8b:11:06:5c:d1:3f:33:71:0c:ad:6e:ce:6e:c5:4c:14:d5: aa:75:07:07:37:11:d9:c2:50:be:89:d8:ba:5a:13:a5:4d:30: db:3a:05:7b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOU/LFABcOVQdHbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyMjc5ZDgtMmVkNS00NzQ1LTkyMzEtOWRiZDEwYmJi MWEyMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk OWQ4N2FkZDItYTJkZC00MDRhLWE1M2ItMDY3ZjhhMWQ2N2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmXqcidzHzIC5ZWUNrGPqXBHFUTaLJEFvHHb P/jeJvwpg56o86cZ44dEFneEXO3DYjCvbUzTajhGCp9k8iBfsS3/My4DswvPMTtX xMz9yi06Y+Cc94D3CYzDT4xkUor+M+SvEPVwbksRHXR1jIYU2oLoAV+lBg+m0a9I kLHJBPGaaNDB/IFFcyUpDI5sxvJGC2NPUm+wW8ESFyBv8flZZ4Yv4OFcGJKDr1lk TDF7nCJBMbWwWhlwonCWwnpiiX3kgcFMXvOo8tyg4RY1ny+qtl/ZvlxfkIsiOE+b fJ0BBFUuQcIzVvyCRCQkAwi4xz+4k22gFrDkcuEK+Lw8PjwfNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIhmftJFJHupyVjdFm6RvfCFl4wYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDIy NzlkOC0yZWQ1LTQ3NDUtOTIzMS05ZGJkMTBiYmIxYTIvODVkNDk3ZjgtNzhlNC0z MzkxLTkyY2EtODRmZGMwMTYzODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2QyMjc5ZDgtMmVkNS00NzQ1LTky MzEtOWRiZDEwYmJiMWEyLzNkMjI3OWQ4LTJlZDUtNDc0NS05MjMxLTlkYmQxMGJi YjFhMi5jcmwwHwYDVR0jBBgwFoAUSb7JmMg+rj/d6ly9Ou3KOIKBHm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDIyNzlkOC0yZWQ1LTQ3NDUtOTIzMS05ZGJk MTBiYmIxYTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5qQAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABoNgkPFI5pT8jXa/H8Yr5RNJE8+1DTYnnWGaym92ivS00BSHmw/ t2drIX5qgN9WBIxyEmso03+wvReyzvfjovOVDLhjsmKab4mr0h/gDbh6+Uw2u4jq HcKYuGfNfi109k0ZZ136keSpnmkT6EhKNGbes8QI4ptgmkTjI/1jgZs6p8tSIhCn rpxI8dO2CCzIDIgLJAKyXG1UN//h2HhXI3MpTiqgLF2kd/UcCECUD82KgDSSLM3t 3YC6JDS6nxr0kTPouJHf98mv93ty5jgiwnAE9WJcZHK/JOaLEQZc0T8zcQytbs5u xUwU1ap1Bwc3EdnCUL6J2LpaE6VNMNs6BXs= -----END CERTIFICATE-----Generated at Fri Apr 4 20:16:53 2025 by rpki-client