$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/6438b4f0-6457-3b4a-add9-78b5ec57b12d.roa File: 6438b4f0-6457-3b4a-add9-78b5ec57b12d.roa (raw, json) Hash identifier: Ew6keGqcCDMRAnKsN6w4+gm6kgMaAZvUCnNyvwIPDDQ= Subject key identifier: 4E:60:33:C5:E6:1B:63:32:C3:88:BF:97:43:81:63:39:89:ED:60:3C Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F43285848E59BCEC0F1D416A846951700 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/6438b4f0-6457-3b4a-add9-78b5ec57b12d.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 210645 IP address blocks: 2602:2c9:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:ce:c0:f1:d4:16:a8:46:95:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=d8f2d59f-b37d-4c54-a944-76611f03070f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ca:c3:a8:42:74:d6:34:63:2a:9d:c3:47:76: cd:a1:99:9e:4f:14:5f:99:88:26:69:aa:35:d6:ae: ea:50:95:aa:2f:e3:91:89:b6:16:ce:06:3c:39:8a: 0d:12:91:a8:aa:e8:ad:52:a3:37:77:a8:d7:40:51: e1:05:c9:89:cb:0a:43:7d:c5:de:87:90:eb:a3:69: 2e:63:9d:33:e9:ed:bf:13:4d:77:ee:90:22:45:8c: 2c:19:ce:bd:19:f4:35:fa:b2:21:ad:f3:df:69:d9: d4:9d:1e:0c:59:ab:0d:9f:4b:0b:b2:3e:52:64:51: 75:3d:88:bf:3d:76:1c:08:c1:dc:39:fa:cf:0b:04: 94:e9:05:99:aa:20:f3:a7:bc:e9:60:b9:6d:aa:92: 75:a5:a2:56:78:9d:61:93:bb:9f:98:e8:58:9c:c5: 73:dc:1a:dc:2e:12:23:40:86:8a:ea:75:ca:f1:7f: 2c:48:76:6e:43:c4:3a:7d:12:b0:06:db:53:9f:d0: f7:ea:03:3f:40:c7:9c:f8:ed:ba:ea:83:15:64:bf: 27:79:fe:a6:da:fd:b0:7f:af:c5:fe:e4:5a:70:87: 3e:5c:96:07:e8:e7:d7:d2:28:48:f0:ce:08:c2:4f: ba:9c:5a:c3:a4:41:b4:35:f9:0e:35:36:91:5b:67: 13:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:60:33:C5:E6:1B:63:32:C3:88:BF:97:43:81:63:39:89:ED:60:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/6438b4f0-6457-3b4a-add9-78b5ec57b12d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c9:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:7c:54:95:ab:5e:04:86:22:03:50:27:5b:5b:31:90:83:cd: 0f:16:a6:9f:ef:f2:94:81:5e:74:e9:d6:78:40:93:77:e2:ef: 6d:70:64:36:ff:a2:a5:3e:cf:c2:a4:54:91:6d:8b:fd:21:80: fd:f4:2d:5d:5c:9f:10:1e:b2:b5:cd:85:30:1f:bc:58:ca:4a: b6:70:69:d9:ad:e7:09:c2:19:ba:68:80:d2:f4:a9:ce:14:0b: 2f:cd:aa:b4:2c:b4:e7:06:3c:2c:0b:72:dd:8f:fc:f6:e4:4e: 51:41:6f:ea:ba:b0:d8:35:97:c0:9e:c9:f9:ae:f4:38:3a:5b: 38:8c:77:9c:74:45:30:74:ad:a8:de:0d:0b:c6:0c:70:4c:00: 50:fb:ad:25:e8:17:aa:1f:c5:bd:3a:b9:b5:4d:ac:49:a2:97: 07:3f:b1:01:20:53:d6:62:b7:e3:f9:74:e1:36:17:2e:e0:a7: f9:a7:89:fd:1a:88:07:76:4a:f1:45:50:e3:2a:d5:88:3f:26: 19:ee:a1:65:ce:da:63:41:30:02:f9:cd:89:4c:13:07:46:61: 44:15:2f:7a:1e:a5:74:59:3a:99:18:a7:43:fa:88:1f:4e:e2: 1a:fb:b2:df:d2:b1:59:5f:c0:42:d2:4d:d4:2c:89:58:98:c0: cc:a7:76:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjlm87A8dQWqEaVFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZDhmMmQ1OWYtYjM3ZC00YzU0LWE5NDQtNzY2MTFmMDMwNzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8rDqEJ01jRjKp3DR3bNoZmeTxRfmYgmaao1 1q7qUJWqL+ORibYWzgY8OYoNEpGoquitUqM3d6jXQFHhBcmJywpDfcXeh5Dro2ku Y50z6e2/E0137pAiRYwsGc69GfQ1+rIhrfPfadnUnR4MWasNn0sLsj5SZFF1PYi/ PXYcCMHcOfrPCwSU6QWZqiDzp7zpYLltqpJ1paJWeJ1hk7ufmOhYnMVz3BrcLhIj QIaK6nXK8X8sSHZuQ8Q6fRKwBttTn9D36gM/QMec+O266oMVZL8nef6m2v2wf6/F /uRacIc+XJYH6OfX0ihI8M4Iwk+6nFrDpEG0NfkONTaRW2cT0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE5gM8XmG2Myw4i/l0OBYzmJ7WA8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvNjQzOGI0ZjAtNjQ1Ny0z YjRhLWFkZDktNzhiNWVjNTdiMTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyQAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFt8VJWrXgSGIgNQJ1tbMZCDzQ8Wpp/v8pSBXnTp1nhAk3fi721w ZDb/oqU+z8KkVJFti/0hgP30LV1cnxAesrXNhTAfvFjKSrZwadmt5wnCGbpogNL0 qc4UCy/NqrQstOcGPCwLct2P/PbkTlFBb+q6sNg1l8Ceyfmu9Dg6WziMd5x0RTB0 rajeDQvGDHBMAFD7rSXoF6ofxb06ubVNrEmilwc/sQEgU9Zit+P5dOE2Fy7gp/mn if0aiAd2SvFFUOMq1Yg/JhnuoWXO2mNBMAL5zYlMEwdGYUQVL3oepXRZOpkYp0P6 iB9O4hr7st/SsVlfwELSTdQsiViYwMyndkw= -----END CERTIFICATE-----Generated at Wed Apr 9 16:55:25 2025 by rpki-client