$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/2d21ff92-bd3f-3e7d-b039-55a0bf83d66a.roa File: 2d21ff92-bd3f-3e7d-b039-55a0bf83d66a.roa (raw, json) Hash identifier: /fUVevTRRHVQiJk8JntJ7f9BVuPCPVsuDnvJzMkZZtE= Subject key identifier: 5B:FD:D4:B1:FE:93:71:6F:91:F0:31:47:51:FB:0A:70:CC:DF:1C:E8 Certificate issuer: /CN=4272c123-bab5-43cb-a3b9-ac162a3b30af Certificate serial: 010D0C9F43285848E9CBE251873E3064B8138A00 Authority key identifier: F9:CE:7E:1C:E8:1E:7F:65:34:69:CD:9A:A5:DC:BC:87:38:0B:67:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/2d21ff92-bd3f-3e7d-b039-55a0bf83d66a.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 400013 IP address blocks: 2602:80c:100b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:e2:51:87:3e:30:64:b8:13:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4272c123-bab5-43cb-a3b9-ac162a3b30af Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=7df3ed10-899b-45bb-b139-66647589444e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a5:a0:a2:2f:2c:6c:2b:2c:01:2a:b0:1c:20: b0:12:ac:19:b3:ab:58:7c:de:e1:85:f3:87:c6:f7: 82:db:1b:77:b2:28:fa:df:08:c7:9b:de:cb:d1:cd: fd:1e:a7:bb:39:64:b0:54:20:b9:c4:49:2f:ab:8d: 1b:37:b1:85:6d:82:4a:fe:a9:82:49:eb:ac:a1:9d: 7d:0c:ab:f5:fa:6d:d0:31:15:13:cf:60:4a:47:72: 55:94:ce:2d:81:d2:0c:d2:07:de:5d:6f:19:ee:72: 7b:cf:64:fa:a5:e0:c9:b4:48:d7:1c:cd:56:63:e3: e9:b3:d9:c8:3c:38:fb:55:f9:ec:74:ae:a4:26:53: 6c:4d:68:61:b2:b5:6e:33:7d:55:0b:ad:ed:f3:84: 83:4d:8c:cf:da:02:e1:dc:06:44:e2:a2:08:d3:13: bb:d3:ea:9b:53:86:d0:21:ad:c6:20:a9:ed:d0:39: 03:04:9d:b9:13:4b:22:a8:d1:bd:0a:35:7f:00:35: 2a:cf:41:a8:e0:39:36:7e:72:64:e9:2c:a1:90:bd: 7e:35:e5:cb:36:34:a8:12:f8:09:4b:8c:1f:99:b3: f0:8c:cf:26:05:2c:7c:3b:c3:7a:96:05:8a:d4:f6: b4:7c:86:c7:49:d5:40:b6:6d:88:ec:ea:59:c0:66: 5f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FD:D4:B1:FE:93:71:6F:91:F0:31:47:51:FB:0A:70:CC:DF:1C:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/2d21ff92-bd3f-3e7d-b039-55a0bf83d66a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.crl X509v3 Authority Key Identifier: keyid:F9:CE:7E:1C:E8:1E:7F:65:34:69:CD:9A:A5:DC:BC:87:38:0B:67:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer sbgp-ipAddrBlock: critical IPv6: 2602:80c:100b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:b9:72:fe:15:d2:1d:c6:33:27:2e:f2:59:36:c6:15:f4:5b: da:2a:dc:aa:42:5a:06:16:02:16:f4:e3:01:9e:85:e6:ab:f1: 7b:45:f8:03:3e:5d:5f:fc:17:3e:3e:fa:f4:65:ed:3e:f7:f8: e3:75:37:a6:3c:4c:ac:06:87:94:f2:78:34:a1:0c:17:0f:2a: 76:71:16:03:2b:7e:0e:a0:14:4c:28:04:5c:13:3a:fd:a2:70: d6:09:1e:0f:8c:b9:4d:44:4f:df:fd:ab:4d:38:91:0e:2c:8f: 2c:d7:bf:53:ab:9a:3f:99:ac:2a:e7:fb:50:bc:79:8d:73:51: 26:d5:11:ad:f2:37:60:39:eb:d9:7b:68:a9:b6:15:3f:1c:2c: 35:5e:86:46:f1:d7:f4:a8:a0:00:bf:1b:bb:66:37:96:80:d0: f3:1a:ad:27:89:51:e0:53:e6:f3:1f:a2:07:1b:49:47:c6:ac: c9:d2:f1:54:a4:24:2c:b9:14:85:6e:96:a7:94:e1:6e:47:e9: f7:5a:7a:0a:5a:35:84:76:1f:78:bf:f4:9c:e5:bc:99:8e:87: 5b:cb:8c:f2:9b:44:14:c0:ed:bf:5d:e4:10:17:67:fc:f5:a4: a5:51:fe:59:d5:54:a6:c4:76:37:71:16:bb:ae:13:7e:e5:23: fa:02:2e:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjpy+JRhz4wZLgTigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI3MmMxMjMtYmFiNS00M2NiLWEzYjktYWMxNjJhM2Iz MGFmMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk N2RmM2VkMTAtODk5Yi00NWJiLWIxMzktNjY2NDc1ODk0NDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqWgoi8sbCssASqwHCCwEqwZs6tYfN7hhfOH xveC2xt3sij63wjHm97L0c39Hqe7OWSwVCC5xEkvq40bN7GFbYJK/qmCSeusoZ19 DKv1+m3QMRUTz2BKR3JVlM4tgdIM0gfeXW8Z7nJ7z2T6peDJtEjXHM1WY+Pps9nI PDj7VfnsdK6kJlNsTWhhsrVuM31VC63t84SDTYzP2gLh3AZE4qII0xO70+qbU4bQ Ia3GIKnt0DkDBJ25E0siqNG9CjV/ADUqz0Go4Dk2fnJk6SyhkL1+NeXLNjSoEvgJ S4wfmbPwjM8mBSx8O8N6lgWK1Pa0fIbHSdVAtm2I7OpZwGZfewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFv91LH+k3FvkfAxR1H7CnDM3xzoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80Mjcy YzEyMy1iYWI1LTQzY2ItYTNiOS1hYzE2MmEzYjMwYWYvMmQyMWZmOTItYmQzZi0z ZTdkLWIwMzktNTVhMGJmODNkNjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDI3MmMxMjMtYmFiNS00M2NiLWEz YjktYWMxNjJhM2IzMGFmLzQyNzJjMTIzLWJhYjUtNDNjYi1hM2I5LWFjMTYyYTNi MzBhZi5jcmwwHwYDVR0jBBgwFoAU+c5+HOgef2U0ac2apdy8hzgLZ1IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MjcyYzEyMy1iYWI1LTQzY2ItYTNiOS1hYzE2 MmEzYjMwYWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDBAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIO5cv4V0h3GMycu8lk2xhX0W9oq3KpCWgYWAhb04wGehear8XtF +AM+XV/8Fz4++vRl7T73+ON1N6Y8TKwGh5TyeDShDBcPKnZxFgMrfg6gFEwoBFwT Ov2icNYJHg+MuU1ET9/9q004kQ4sjyzXv1Ormj+ZrCrn+1C8eY1zUSbVEa3yN2A5 69l7aKm2FT8cLDVehkbx1/SooAC/G7tmN5aA0PMarSeJUeBT5vMfogcbSUfGrMnS 8VSkJCy5FIVulqeU4W5H6fdaegpaNYR2H3i/9JzlvJmOh1vLjPKbRBTA7b9d5BAX Z/z1pKVR/lnVVKbEdjdxFruuE37lI/oCLu4= -----END CERTIFICATE-----Generated at Tue Apr 8 03:22:45 2025 by rpki-client