$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/f234a7c1-27f3-3c6f-9a9a-0bc3a720dd20.roa File: f234a7c1-27f3-3c6f-9a9a-0bc3a720dd20.roa (raw, json) Hash identifier: rwjyIriPX2ZLMfqLmDlfXolTaB0mKiRqa6cbkwTwzFo= Subject key identifier: 9F:9A:23:A2:A5:EE:D1:A2:E9:C8:D2:3B:AD:D4:C6:78:5B:D9:15:CE Certificate issuer: /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2 Certificate serial: 010D0C9F432858494F93E81A2F0FCF1D56097660 Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/f234a7c1-27f3-3c6f-9a9a-0bc3a720dd20.roa Signing time: Wed 26 Mar 2025 01:00:40 +0000 ROA not before: Wed 26 Mar 2025 01:00:40 +0000 ROA not after: Tue 24 Jun 2025 01:00:40 +0000 asID: 199203 IP address blocks: 2602:f9a9:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4f:93:e8:1a:2f:0f:cf:1d:56:09:76:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2 Validity Not Before: Mar 26 01:00:40 2025 GMT Not After : Jun 24 01:00:40 2025 GMT Subject: CN=83fc3fc7-3288-4c5c-b6e9-2bfce33ba7a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ba:8a:4f:73:c7:fd:6b:11:18:f6:cc:05:5d: c0:46:d3:c8:b0:8d:3c:58:47:6a:ec:90:82:ca:e5: a9:d2:e3:06:a5:6f:fc:47:9b:3a:ce:56:35:08:65: c1:44:73:a8:e2:1a:06:31:31:fe:cf:72:e0:3b:ef: 8d:cf:ac:58:b4:83:dc:80:5a:a5:8d:e8:c0:d6:cc: 8b:e1:a8:6e:55:5c:f5:14:a5:c8:7a:ef:33:8c:c6: 18:8f:b4:d9:a3:c7:66:6a:ac:31:8f:77:e9:f9:07: 43:f3:98:85:d4:e8:ac:e7:29:9c:49:9b:27:e2:7c: c7:7e:88:72:0f:0e:22:c0:60:83:ee:3d:a8:72:0d: d4:f6:28:e7:f9:e8:d1:bf:52:c4:25:9c:e8:58:d6: e1:e6:c8:3f:4d:b6:d6:b2:89:f0:a6:ca:c7:c8:f1: 5b:33:ac:c8:18:7c:93:a9:e4:48:93:e1:f0:e7:a7: 76:3b:02:b4:9f:e8:54:a7:9e:15:94:37:cf:28:de: 7a:9d:bf:14:c4:74:71:3e:66:fa:6f:18:e9:24:ee: 4d:03:76:e6:f0:7f:d1:e3:84:c7:9f:fb:b4:cb:00: c3:bf:0f:ea:d8:21:a4:b9:e4:5e:c2:7e:6a:b1:b6: 32:b4:29:e9:a4:61:69:1a:bf:3b:51:bc:46:12:cb: 20:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9A:23:A2:A5:EE:D1:A2:E9:C8:D2:3B:AD:D4:C6:78:5B:D9:15:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/f234a7c1-27f3-3c6f-9a9a-0bc3a720dd20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl X509v3 Authority Key Identifier: keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9a9:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:8b:f4:db:08:18:ca:3f:34:1c:dd:7d:02:55:c8:4e:64:3e: 07:7d:bd:a8:5f:ba:f5:0b:91:94:f7:fc:37:82:44:d7:15:97: 47:64:54:eb:35:5b:44:5c:8b:b7:71:78:90:43:9e:7a:27:b1: b5:db:20:19:d8:d6:d9:8a:2f:a3:65:0e:e9:a8:41:b0:88:9b: da:0b:11:2d:c4:9d:e6:21:1b:ef:47:9b:ff:1c:49:8c:cb:cf: 6f:95:1d:e9:8b:39:6e:b9:87:20:10:b2:58:58:06:0c:e9:5b: e9:08:2f:7b:78:9e:e9:33:66:81:fa:84:aa:00:1a:99:4f:0c: f4:03:b4:e3:4d:a9:dc:a9:32:1b:55:5d:96:fd:43:1f:7e:f8: 92:3f:f8:0b:48:1c:73:91:99:44:2f:36:bb:c4:cb:42:6b:f8: 58:68:10:8a:a1:5c:3a:68:47:eb:24:8b:77:d8:1d:09:08:76: 5b:6e:e6:45:f8:96:b6:5d:d0:17:a1:b6:7b:80:78:c0:49:93: 2b:e3:75:3d:f6:52:42:89:a0:68:12:76:44:47:0d:33:87:23: 8c:b6:14:5b:ad:66:f3:75:a0:f3:21:7f:e9:5d:6b:d5:83:76: 61:36:ce:cf:ea:00:ac:53:3b:a6:c2:fc:27:02:10:dd:ef:bb: f8:7b:36:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElPk+gaLw/PHVYJdmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyMjc5ZDgtMmVkNS00NzQ1LTkyMzEtOWRiZDEwYmJi MWEyMB4XDTI1MDMyNjAxMDA0MFoXDTI1MDYyNDAxMDA0MFowLzEtMCsGA1UEAxMk ODNmYzNmYzctMzI4OC00YzVjLWI2ZTktMmJmY2UzM2JhN2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbqKT3PH/WsRGPbMBV3ARtPIsI08WEdq7JCC yuWp0uMGpW/8R5s6zlY1CGXBRHOo4hoGMTH+z3LgO++Nz6xYtIPcgFqljejA1syL 4ahuVVz1FKXIeu8zjMYYj7TZo8dmaqwxj3fp+QdD85iF1Ois5ymcSZsn4nzHfohy Dw4iwGCD7j2ocg3U9ijn+ejRv1LEJZzoWNbh5sg/TbbWsonwpsrHyPFbM6zIGHyT qeRIk+Hw56d2OwK0n+hUp54VlDfPKN56nb8UxHRxPmb6bxjpJO5NA3bm8H/R44TH n/u0ywDDvw/q2CGkueRewn5qsbYytCnppGFpGr87UbxGEssgMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ+aI6Kl7tGi6cjSO63Uxnhb2RXOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDIy NzlkOC0yZWQ1LTQ3NDUtOTIzMS05ZGJkMTBiYmIxYTIvZjIzNGE3YzEtMjdmMy0z YzZmLTlhOWEtMGJjM2E3MjBkZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2QyMjc5ZDgtMmVkNS00NzQ1LTky MzEtOWRiZDEwYmJiMWEyLzNkMjI3OWQ4LTJlZDUtNDc0NS05MjMxLTlkYmQxMGJi YjFhMi5jcmwwHwYDVR0jBBgwFoAUSb7JmMg+rj/d6ly9Ou3KOIKBHm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDIyNzlkOC0yZWQ1LTQ3NDUtOTIzMS05ZGJk MTBiYmIxYTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5qQAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABWL9NsIGMo/NBzdfQJVyE5kPgd9vahfuvULkZT3/DeCRNcVl0dk VOs1W0Rci7dxeJBDnnonsbXbIBnY1tmKL6NlDumoQbCIm9oLES3EneYhG+9Hm/8c SYzLz2+VHemLOW65hyAQslhYBgzpW+kIL3t4nukzZoH6hKoAGplPDPQDtONNqdyp MhtVXZb9Qx9++JI/+AtIHHORmUQvNrvEy0Jr+FhoEIqhXDpoR+ski3fYHQkIdltu 5kX4lrZd0BehtnuAeMBJkyvjdT32UkKJoGgSdkRHDTOHI4y2FFutZvN1oPMhf+ld a9WDdmE2zs/qAKxTO6bC/CcCEN3vu/h7Nk4= -----END CERTIFICATE-----Generated at Fri Apr 4 16:04:46 2025 by rpki-client