$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/0e7b6b94-9855-32f8-8b01-5e42800b5852.roa File: 0e7b6b94-9855-32f8-8b01-5e42800b5852.roa (raw, json) Hash identifier: LgbNWl67YZfDiiob9ZprOjKleBYluL3G+oSHVmiIGco= Subject key identifier: 07:FE:23:FB:3E:47:35:81:43:43:1A:2D:A9:0F:90:E9:A6:19:42:6B Certificate issuer: /CN=238027b7-f885-48c0-bd75-bd1fe124e1e0 Certificate serial: 010D0C9F432858495EEEE8CE5894399CC5A32380 Authority key identifier: A1:A4:ED:D3:2D:32:25:51:ED:8A:2F:75:66:9A:34:E6:D0:D2:71:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/0e7b6b94-9855-32f8-8b01-5e42800b5852.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 398485 IP address blocks: 2602:fb2b::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/238027b7-f885-48c0-bd75-bd1fe124e1e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/238027b7-f885-48c0-bd75-bd1fe124e1e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:e8:ce:58:94:39:9c:c5:a3:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238027b7-f885-48c0-bd75-bd1fe124e1e0 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=9753e7cf-31a1-4a13-91ea-b8938e0c2f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cc:36:c5:17:a9:4b:0e:05:8a:f9:99:02:cd: 18:9a:5c:e2:26:74:3c:d3:f3:e5:0a:9e:77:68:fb: 06:d3:6d:d8:23:1e:43:f0:ac:08:e0:f8:61:14:69: ba:a5:aa:38:99:98:60:49:ec:33:a6:e5:09:6a:1a: 4e:3d:5e:5d:71:53:bf:03:af:79:5d:77:71:75:ee: 63:4a:ff:d8:40:e1:c6:6d:74:9e:5b:83:b5:e2:4f: 3f:26:50:65:5c:da:f5:f7:a0:a7:3c:ee:65:7d:44: 5e:54:64:db:04:e1:3b:1d:bf:af:06:3c:9c:92:d8: d3:24:80:df:07:cc:98:d9:ea:3a:a0:84:c6:b9:29: ee:d1:21:9c:5d:29:ac:8e:f4:1e:78:63:24:ca:08: 94:45:2f:d9:11:f5:b5:ee:a3:41:c8:2e:66:ea:d8: 56:cd:b3:1a:92:6e:c8:d7:d5:86:0c:9c:e8:4e:f0: 81:62:68:bb:5f:61:4f:d4:76:b5:53:07:32:d0:34: 1d:c2:38:de:69:24:64:cc:19:de:94:98:f1:80:1f: 50:70:6c:35:ad:74:3d:14:28:96:c6:72:a3:e7:8a: 79:d8:ce:df:2f:03:0f:e8:6a:a0:c5:66:05:ba:bb: df:e3:c3:db:f7:dd:38:a9:3f:6c:68:d6:22:b9:e1: 48:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FE:23:FB:3E:47:35:81:43:43:1A:2D:A9:0F:90:E9:A6:19:42:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/0e7b6b94-9855-32f8-8b01-5e42800b5852.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/238027b7-f885-48c0-bd75-bd1fe124e1e0.crl X509v3 Authority Key Identifier: keyid:A1:A4:ED:D3:2D:32:25:51:ED:8A:2F:75:66:9A:34:E6:D0:D2:71:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb2b::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:be:61:58:c9:f3:62:e1:22:d4:dd:d3:8f:b5:4b:d3:03:0a: 61:d4:ab:e1:3d:90:87:30:da:16:2f:ff:d9:71:94:59:79:f7: 14:38:18:8f:25:66:1d:ac:27:72:0e:68:15:4b:f2:23:46:c1: 2d:70:09:02:18:8f:8e:8d:19:38:98:65:89:59:4d:4b:14:e2: b5:69:56:18:39:72:58:93:b1:b0:61:77:e6:0d:e1:fd:d7:63: c7:fc:36:f3:f0:27:58:de:e9:03:ce:33:3e:0a:03:31:4f:78: 55:a7:8c:8f:88:ae:89:f5:8f:1b:03:d5:a4:bd:9f:58:2e:1e: 0a:9f:eb:87:4a:6a:03:f5:74:bf:1e:21:97:71:ec:e6:3a:c6: a5:dc:50:b7:59:11:99:e2:7d:2d:ca:8b:8b:8b:87:e3:a6:05: 49:ac:78:1d:5b:9e:35:fe:e9:c3:a0:d8:84:1b:84:b9:db:eb: 8a:5f:80:ec:61:6f:0d:df:c2:95:58:70:3d:7a:65:cf:1d:63: 53:40:b5:38:56:e1:71:03:d0:14:c4:0b:bd:c8:96:ad:d4:d9: e1:61:72:64:18:11:08:b9:15:d6:51:58:51:2f:7d:a5:ed:50: 85:a1:a9:1b:ad:12:bf:15:e8:c1:83:01:f5:ee:95:cd:c6:6c: 4f:44:1e:14 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEle7ujOWJQ5nMWjI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjM4MDI3YjctZjg4NS00OGMwLWJkNzUtYmQxZmUxMjRl MWUwMB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk OTc1M2U3Y2YtMzFhMS00YTEzLTkxZWEtYjg5MzhlMGMyZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cw2xRepSw4FivmZAs0YmlziJnQ80/PlCp53 aPsG023YIx5D8KwI4PhhFGm6pao4mZhgSewzpuUJahpOPV5dcVO/A695XXdxde5j Sv/YQOHGbXSeW4O14k8/JlBlXNr196CnPO5lfUReVGTbBOE7Hb+vBjycktjTJIDf B8yY2eo6oITGuSnu0SGcXSmsjvQeeGMkygiURS/ZEfW17qNByC5m6thWzbMakm7I 19WGDJzoTvCBYmi7X2FP1Ha1Uwcy0DQdwjjeaSRkzBnelJjxgB9QcGw1rXQ9FCiW xnKj54p52M7fLwMP6GqgxWYFurvf48Pb9904qT9saNYiueFI5wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAf+I/s+RzWBQ0MaLakPkOmmGUJrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMzgw MjdiNy1mODg1LTQ4YzAtYmQ3NS1iZDFmZTEyNGUxZTAvMGU3YjZiOTQtOTg1NS0z MmY4LThiMDEtNWU0MjgwMGI1ODUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjM4MDI3YjctZjg4NS00OGMwLWJk NzUtYmQxZmUxMjRlMWUwLzIzODAyN2I3LWY4ODUtNDhjMC1iZDc1LWJkMWZlMTI0 ZTFlMC5jcmwwHwYDVR0jBBgwFoAUoaTt0y0yJVHtii91Zpo05tDScaowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMzgwMjdiNy1mODg1LTQ4YzAtYmQ3NS1iZDFm ZTEyNGUxZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL7KwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAd75hWMnzYuEi1N3Tj7VL0wMKYdSr4T2QhzDaFi//2XGUWXn3FDgY jyVmHawncg5oFUvyI0bBLXAJAhiPjo0ZOJhliVlNSxTitWlWGDlyWJOxsGF35g3h /ddjx/w28/AnWN7pA84zPgoDMU94VaeMj4iuifWPGwPVpL2fWC4eCp/rh0pqA/V0 vx4hl3Hs5jrGpdxQt1kRmeJ9LcqLi4uH46YFSax4HVueNf7pw6DYhBuEudvril+A 7GFvDd/ClVhwPXplzx1jU0C1OFbhcQPQFMQLvciWrdTZ4WFyZBgRCLkV1lFYUS99 pe1QhaGpG60SvxXowYMB9e6VzcZsT0QeFA== -----END CERTIFICATE-----Generated at Sun Apr 6 21:28:22 2025 by rpki-client