$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/30b7c806-6a96-33a0-bafa-ab6449b34a8f.roa File: 30b7c806-6a96-33a0-bafa-ab6449b34a8f.roa (raw, json) Hash identifier: z2a0Ge5IPKodArocwdwWrp1LvJ7OWe7BAXV7X9iU1Jg= Subject key identifier: CD:33:07:0B:30:4C:7E:A3:96:8A:E8:96:E8:10:A7:0D:2E:8C:04:FA Certificate issuer: /CN=643914aa-5306-4352-8a01-3ac381827191 Certificate serial: 010D0C9F43285848BE862A5064234996C7F4BC80 Authority key identifier: EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/30b7c806-6a96-33a0-bafa-ab6449b34a8f.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 400442 IP address blocks: 2602:fbc7:1::/48 maxlen: 48 2602:fbc7:2::/48 maxlen: 48 2602:fbc7:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:2a:50:64:23:49:96:c7:f4:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643914aa-5306-4352-8a01-3ac381827191 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=ed261a49-0804-4bf8-ae6b-f4106ff0369f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3b:31:b1:0a:e6:37:49:f3:75:72:68:47:2c: 56:b8:b8:98:27:91:7a:10:0f:65:4e:e3:e4:f3:d9: 0d:37:e8:d0:50:a5:74:27:7c:8a:bb:ab:f9:ce:26: dd:26:b5:31:d5:c7:c9:68:3f:e2:37:66:ee:9a:d7: 2d:1d:b1:e5:02:44:e1:07:19:c3:b5:8e:61:ed:bd: eb:c6:b5:81:cf:02:3b:a1:70:1e:38:ba:38:39:8b: e6:b5:1f:f8:b7:40:82:4d:2a:24:67:2b:12:36:c6: 34:d0:b8:32:1a:95:fe:c2:c7:be:a4:15:f3:5e:44: 7f:b0:dc:2b:ba:6f:f3:24:7c:f3:90:9a:f6:9d:99: 94:85:82:ee:86:2c:59:1a:62:3b:ed:3e:26:f8:07: da:bd:b8:4e:61:45:f6:6d:26:db:c2:b7:67:97:9e: 9c:72:10:21:28:52:34:58:85:0c:b7:dc:55:a8:65: 04:89:07:04:f7:b8:35:18:90:63:62:3a:aa:5b:15: 9f:2a:c7:0c:b5:aa:43:8b:3a:af:a5:a2:9a:15:e4: 83:de:a7:6d:fe:8e:bb:07:73:24:fd:c4:04:a1:78: e0:f2:b5:9d:fa:67:1e:95:7e:b8:b2:30:c3:2c:1b: 57:4f:30:cf:16:90:66:5d:cd:fc:7d:bf:40:84:72: f4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:33:07:0B:30:4C:7E:A3:96:8A:E8:96:E8:10:A7:0D:2E:8C:04:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/30b7c806-6a96-33a0-bafa-ab6449b34a8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl X509v3 Authority Key Identifier: keyid:EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbc7:1::-2602:fbc7:3:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:0d:66:ef:69:97:79:53:0f:42:9b:54:b6:7c:a4:81:d3:58: 38:7b:69:ab:a2:d4:ff:66:56:13:87:6f:bf:bf:ba:df:5f:92: 11:89:a9:e9:5e:ef:76:55:a6:69:e7:67:68:cc:c0:e4:33:2d: d0:17:f7:4c:fe:47:9a:98:00:1d:a2:84:50:20:9f:0f:9e:e0: 69:53:e0:0a:d8:20:5d:c2:c5:80:19:3c:36:51:a8:2a:8f:35: ab:b9:6a:22:ab:d3:63:6a:9c:cf:f4:c2:d3:11:54:21:be:36: a5:a0:e5:35:63:82:54:a5:35:b2:b6:8d:63:11:47:84:4f:06: 70:99:35:87:c8:6f:b7:60:cf:c6:e6:07:81:96:d9:8a:b7:46: da:23:ba:cc:29:d5:5f:33:d6:58:61:e7:69:16:40:76:07:b9: 80:08:da:8a:21:21:05:6c:ed:ea:f2:05:a8:43:01:c3:bd:07: 5f:70:d5:5b:ad:3a:3e:ab:4d:7a:46:ea:ed:d3:5c:5a:4f:1c: 3a:3d:c4:e7:c5:ee:6c:9e:b8:a8:3d:03:ea:41:88:99:54:e0: 9c:58:59:0e:d6:fa:80:99:ad:1a:d6:a6:62:7b:f9:7d:89:03: ee:de:9c:d6:de:70:c6:8f:5f:40:86:4d:bd:c9:7c:dd:91:ec: 2e:9b:c3:0b -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEi+hipQZCNJlsf0vIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzOTE0YWEtNTMwNi00MzUyLThhMDEtM2FjMzgxODI3 MTkxMB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk ZWQyNjFhNDktMDgwNC00YmY4LWFlNmItZjQxMDZmZjAzNjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDsxsQrmN0nzdXJoRyxWuLiYJ5F6EA9lTuPk 89kNN+jQUKV0J3yKu6v5zibdJrUx1cfJaD/iN2bumtctHbHlAkThBxnDtY5h7b3r xrWBzwI7oXAeOLo4OYvmtR/4t0CCTSokZysSNsY00LgyGpX+wse+pBXzXkR/sNwr um/zJHzzkJr2nZmUhYLuhixZGmI77T4m+AfavbhOYUX2bSbbwrdnl56cchAhKFI0 WIUMt9xVqGUEiQcE97g1GJBjYjqqWxWfKscMtapDizqvpaKaFeSD3qdt/o67B3Mk /cQEoXjg8rWd+mcelX64sjDDLBtXTzDPFpBmXc38fb9AhHL0ZQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFM0zBwswTH6jlorolugQpw0ujAT6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NDM5 MTRhYS01MzA2LTQzNTItOGEwMS0zYWMzODE4MjcxOTEvMzBiN2M4MDYtNmE5Ni0z M2EwLWJhZmEtYWI2NDQ5YjM0YThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjQzOTE0YWEtNTMwNi00MzUyLThh MDEtM2FjMzgxODI3MTkxLzY0MzkxNGFhLTUzMDYtNDM1Mi04YTAxLTNhYzM4MTgy NzE5MS5jcmwwHwYDVR0jBBgwFoAU6ypHSeXO8IXeGteSyakttOVzF3EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NDM5MTRhYS01MzA2LTQzNTItOGEwMS0zYWMz ODE4MjcxOTEuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmAvvH AAEDBwImAvvHAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEATg1m72mXeVMPQptUtnykgdNYOHtpq6LU/2ZW E4dvv7+631+SEYmp6V7vdlWmaednaMzA5DMt0Bf3TP5HmpgAHaKEUCCfD57gaVPg CtggXcLFgBk8NlGoKo81q7lqIqvTY2qcz/TC0xFUIb42paDlNWOCVKU1sraNYxFH hE8GcJk1h8hvt2DPxuYHgZbZirdG2iO6zCnVXzPWWGHnaRZAdge5gAjaiiEhBWzt 6vIFqEMBw70HX3DVW606PqtNekbq7dNcWk8cOj3E58XubJ64qD0D6kGImVTgnFhZ Dtb6gJmtGtamYnv5fYkD7t6c1t5wxo9fQIZNvcl83ZHsLpvDCw== -----END CERTIFICATE-----Generated at Sun Apr 6 01:12:00 2025 by rpki-client