$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/9b37bf87-6e73-341b-93c2-4a27e0f6a79c.roa File: 9b37bf87-6e73-341b-93c2-4a27e0f6a79c.roa (raw, json) Hash identifier: uHKz4rFpmR5hh5ilVNzk8P2noyeEoSCBNf15Np/N/OI= Subject key identifier: 66:E4:F6:30:D5:76:30:6F:8A:52:A1:E6:1B:0A:1F:C4:F7:5B:53:83 Certificate issuer: /CN=643914aa-5306-4352-8a01-3ac381827191 Certificate serial: 010D0C9F43285848B4C0D28632954B1582C3B8F0 Authority key identifier: EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/9b37bf87-6e73-341b-93c2-4a27e0f6a79c.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 400442 IP address blocks: 2602:fbc7::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:d2:86:32:95:4b:15:82:c3:b8:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643914aa-5306-4352-8a01-3ac381827191 Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=372c3dfc-8f9b-44ea-b4d0-f971f59cdcb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:47:8f:65:16:3a:94:d2:66:90:42:2e:80:a3: 21:f3:62:e3:44:0b:06:03:ad:d4:5b:3f:9c:ce:db: ba:49:62:79:dc:6a:40:fc:0c:82:1c:40:56:9c:f8: 4c:ad:c3:c6:e2:24:e3:13:58:8b:7c:8e:8b:e8:3a: 48:eb:4c:f1:9a:02:29:26:df:6d:e7:95:c9:02:ff: e3:ba:82:ab:be:57:e5:46:7b:f2:f1:6c:6b:4e:03: 74:b3:c5:95:f9:30:20:64:fa:f8:80:e5:a4:b7:18: cf:b4:41:c7:2e:a8:ac:9b:3f:4e:00:a5:d5:6e:79: a6:06:d9:f8:01:fa:4c:22:85:0c:5b:2f:de:d0:ae: f1:d6:50:a5:3f:16:d7:16:9e:8d:ac:4d:ac:c4:df: c8:f1:db:01:76:21:7a:e8:fc:fa:fb:38:bd:2a:20: 42:a6:c0:c1:2b:6f:94:9d:cd:8c:07:ce:60:f0:3d: c4:4c:0c:41:03:15:65:65:03:9c:20:07:35:09:f0: ae:80:d1:9c:79:b2:7c:19:14:0f:f6:63:55:35:26: 69:fd:b5:13:07:dc:05:e5:28:98:96:9b:f6:f0:f8: 12:53:5a:47:03:c2:05:f5:d3:6e:f5:66:46:a9:02: f0:0d:2a:36:c1:b0:22:9d:3c:8a:29:59:fc:34:eb: 5a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E4:F6:30:D5:76:30:6F:8A:52:A1:E6:1B:0A:1F:C4:F7:5B:53:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/9b37bf87-6e73-341b-93c2-4a27e0f6a79c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl X509v3 Authority Key Identifier: keyid:EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbc7::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:29:a5:96:46:80:c6:5b:ae:c4:a8:cd:36:a9:14:7f:5b:47: be:e6:6d:ec:bd:eb:72:5d:a9:2e:df:0d:c4:c0:c1:f7:91:aa: 40:6a:a9:42:75:00:e4:68:82:1b:5d:a9:f5:9b:38:f1:09:fa: 03:93:41:c7:88:11:1c:63:3e:a7:e1:c8:0c:00:7b:ca:b2:c8: 56:1c:27:52:8e:48:d4:de:e6:21:c2:40:4c:67:a1:87:ac:07: f0:8d:05:96:e3:d9:3b:2b:4e:87:f9:a0:90:54:2a:8b:7a:1f: cf:9b:9a:d2:fc:5e:fb:79:47:bf:17:b2:b5:77:be:8c:42:dc: a8:d8:82:88:9e:1e:fd:68:15:63:f1:ed:fa:10:c6:57:f0:ef: c8:43:13:bf:ae:dd:48:54:c3:d8:3d:72:3c:b2:74:64:a3:b1: aa:39:37:2e:ff:cb:de:ee:34:f8:a9:21:93:ed:58:3b:94:8c: 69:f8:af:7c:19:f7:74:0b:81:fc:bd:fd:b7:7a:e3:e1:6d:8b: 90:5b:00:ab:02:40:d4:df:24:d0:74:09:7d:d7:2c:16:a1:d4: 9c:b9:0a:5a:b2:da:e6:c5:2b:a4:73:08:9f:8d:a0:ff:45:d8: 97:20:05:9d:29:09:03:2a:89:88:b0:e8:ce:8e:73:6e:9f:df: 7a:94:af:40 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEi0wNKGMpVLFYLDuPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzOTE0YWEtNTMwNi00MzUyLThhMDEtM2FjMzgxODI3 MTkxMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk MzcyYzNkZmMtOGY5Yi00NGVhLWI0ZDAtZjk3MWY1OWNkY2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50ePZRY6lNJmkEIugKMh82LjRAsGA63UWz+c ztu6SWJ53GpA/AyCHEBWnPhMrcPG4iTjE1iLfI6L6DpI60zxmgIpJt9t55XJAv/j uoKrvlflRnvy8WxrTgN0s8WV+TAgZPr4gOWktxjPtEHHLqismz9OAKXVbnmmBtn4 AfpMIoUMWy/e0K7x1lClPxbXFp6NrE2sxN/I8dsBdiF66Pz6+zi9KiBCpsDBK2+U nc2MB85g8D3ETAxBAxVlZQOcIAc1CfCugNGcebJ8GRQP9mNVNSZp/bUTB9wF5SiY lpv28PgSU1pHA8IF9dNu9WZGqQLwDSo2wbAinTyKKVn8NOtaFQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGbk9jDVdjBvilKh5hsKH8T3W1ODMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NDM5 MTRhYS01MzA2LTQzNTItOGEwMS0zYWMzODE4MjcxOTEvOWIzN2JmODctNmU3My0z NDFiLTkzYzItNGEyN2UwZjZhNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjQzOTE0YWEtNTMwNi00MzUyLThh MDEtM2FjMzgxODI3MTkxLzY0MzkxNGFhLTUzMDYtNDM1Mi04YTAxLTNhYzM4MTgy NzE5MS5jcmwwHwYDVR0jBBgwFoAU6ypHSeXO8IXeGteSyakttOVzF3EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NDM5MTRhYS01MzA2LTQzNTItOGEwMS0zYWMz ODE4MjcxOTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL7xwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXimllkaAxluuxKjNNqkUf1tHvuZt7L3rcl2pLt8NxMDB95GqQGqp QnUA5GiCG12p9Zs48Qn6A5NBx4gRHGM+p+HIDAB7yrLIVhwnUo5I1N7mIcJATGeh h6wH8I0FluPZOytOh/mgkFQqi3ofz5ua0vxe+3lHvxeytXe+jELcqNiCiJ4e/WgV Y/Ht+hDGV/DvyEMTv67dSFTD2D1yPLJ0ZKOxqjk3Lv/L3u40+Kkhk+1YO5SMafiv fBn3dAuB/L39t3rj4W2LkFsAqwJA1N8k0HQJfdcsFqHUnLkKWrLa5sUrpHMIn42g /0XYlyAFnSkJAyqJiLDozo5zbp/fepSvQA== -----END CERTIFICATE-----Generated at Sun Apr 6 01:10:02 2025 by rpki-client