$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/3c7bdba5-8362-330b-97ea-a2d35f272c00.roa File: 3c7bdba5-8362-330b-97ea-a2d35f272c00.roa (raw, json) Hash identifier: 2UN9jT96bTSOD2cXyz+Xpedg9SbIIl0O8Nki4wJYhqw= Subject key identifier: B2:AC:37:69:8C:4D:DE:93:83:D3:C7:90:D9:45:B2:18:15:E8:0E:2D Certificate issuer: /CN=91a20fbd-d241-4454-b2ba-4938f807efb0 Certificate serial: 010D0C9F43285848BD20E38F9880136BB6DCF000 Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/3c7bdba5-8362-330b-97ea-a2d35f272c00.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 26768 IP address blocks: 2602:2a4:9d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:20:e3:8f:98:80:13:6b:b6:dc:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=81e1d4cd-2dff-4f64-97cf-2e3ac25472fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8a:a7:a7:45:b0:51:0f:0c:2c:05:be:56:58: ab:85:ef:a1:e6:e5:f8:cb:60:df:a4:7c:db:d2:4f: 0c:65:2b:d4:40:64:f2:1e:5a:11:0c:f7:61:31:5d: 39:38:7d:3c:7c:b2:4e:1b:3b:84:5d:3f:c6:6f:cd: 74:fc:46:8b:c1:64:38:b2:a4:3a:09:97:ed:fc:da: 0a:9f:63:c8:10:6e:7d:ba:1b:d4:52:45:49:7a:d5: 68:9a:5e:2b:1a:46:c1:dc:a4:58:08:5c:64:07:2b: 1c:32:6e:6e:28:8d:5d:57:a5:ee:75:ee:cb:0b:38: e9:9f:3b:ef:6d:29:72:3d:85:b2:20:5b:d7:d7:a9: 21:62:dd:59:e8:21:a9:01:49:67:b2:1e:6f:95:e9: 74:38:1f:fd:65:ef:c2:0e:40:a8:85:53:b2:80:18: 71:41:79:d7:b6:2d:07:e8:91:7c:85:ed:30:fb:1d: 6a:b1:b0:1e:f9:ec:05:ab:85:ef:e3:bc:81:d7:ec: 1a:5f:6d:4a:37:36:c3:13:b1:e2:6b:3f:d3:d3:4d: 29:15:0d:3c:f8:55:ea:18:b8:9b:a6:7d:86:ce:48: fe:43:d5:9c:ec:1a:13:73:e9:14:41:df:ed:87:b8: 45:72:6a:f7:59:0c:52:79:53:e1:9d:83:0e:bb:3d: a0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:AC:37:69:8C:4D:DE:93:83:D3:C7:90:D9:45:B2:18:15:E8:0E:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/3c7bdba5-8362-330b-97ea-a2d35f272c00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl X509v3 Authority Key Identifier: keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer sbgp-ipAddrBlock: critical IPv6: 2602:2a4:9d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:03:71:43:93:b7:b0:18:ba:39:9d:87:47:46:96:a9:46:74: c1:7a:63:59:cb:74:a3:64:04:4e:11:af:fa:90:52:c8:88:ef: 57:48:0c:e7:f5:03:78:a2:3b:79:86:e0:7c:75:0c:62:1f:5e: 14:4c:92:32:c0:07:e6:19:bb:c1:93:a9:b6:29:33:82:5c:ff: 60:a9:56:aa:d7:bf:4e:91:a6:fb:ec:10:35:16:d5:4b:53:20: 79:1e:63:3a:8f:e2:d1:37:bd:73:e9:09:f0:6d:c5:66:8e:73: f2:07:87:98:6f:be:b9:e1:8e:4a:dc:a3:4c:9f:a4:e0:70:f7: 50:00:b1:86:05:e8:34:41:a3:c6:2d:12:23:51:9d:75:c2:21: 88:ee:53:94:e6:e7:77:10:73:3d:72:a6:08:43:fd:72:8a:3f: 7b:22:07:ed:32:50:e5:e4:f8:d0:78:7e:e7:f6:98:b8:4d:43: 6b:77:bc:27:54:f5:5b:15:51:96:76:81:52:30:0e:e8:8a:08: 4d:0b:28:d6:96:b2:b1:de:59:b3:2f:c3:b9:bd:bc:47:da:22: 8e:59:5f:41:56:4d:eb:8c:eb:67:c0:f3:c0:7c:8a:a3:09:2f: 47:8d:22:c9:24:ca:cf:87:36:58:34:1a:d4:40:51:a5:99:5b: 21:f4:bd:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEi9IOOPmIATa7bc8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFhMjBmYmQtZDI0MS00NDU0LWIyYmEtNDkzOGY4MDdl ZmIwMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk ODFlMWQ0Y2QtMmRmZi00ZjY0LTk3Y2YtMmUzYWMyNTQ3MmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oqnp0WwUQ8MLAW+Vlirhe+h5uX4y2DfpHzb 0k8MZSvUQGTyHloRDPdhMV05OH08fLJOGzuEXT/Gb810/EaLwWQ4sqQ6CZft/NoK n2PIEG59uhvUUkVJetVoml4rGkbB3KRYCFxkByscMm5uKI1dV6Xude7LCzjpnzvv bSlyPYWyIFvX16khYt1Z6CGpAUlnsh5vlel0OB/9Ze/CDkCohVOygBhxQXnXti0H 6JF8he0w+x1qsbAe+ewFq4Xv47yB1+waX21KNzbDE7Hiaz/T000pFQ08+FXqGLib pn2Gzkj+Q9Wc7BoTc+kUQd/th7hFcmr3WQxSeVPhnYMOuz2g+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLKsN2mMTd6Tg9PHkNlFshgV6A4tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MWEy MGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4ZjgwN2VmYjAvM2M3YmRiYTUtODM2Mi0z MzBiLTk3ZWEtYTJkMzVmMjcyYzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTFhMjBmYmQtZDI0MS00NDU0LWIy YmEtNDkzOGY4MDdlZmIwLzkxYTIwZmJkLWQyNDEtNDQ1NC1iMmJhLTQ5MzhmODA3 ZWZiMC5jcmwwHwYDVR0jBBgwFoAUtn7s2ynC3v5dSgA3ROxJkNFVVs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MWEyMGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4 ZjgwN2VmYjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICpACd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFEDcUOTt7AYujmdh0dGlqlGdMF6Y1nLdKNkBE4Rr/qQUsiI71dI DOf1A3iiO3mG4Hx1DGIfXhRMkjLAB+YZu8GTqbYpM4Jc/2CpVqrXv06RpvvsEDUW 1UtTIHkeYzqP4tE3vXPpCfBtxWaOc/IHh5hvvrnhjkrco0yfpOBw91AAsYYF6DRB o8YtEiNRnXXCIYjuU5Tm53cQcz1ypghD/XKKP3siB+0yUOXk+NB4fuf2mLhNQ2t3 vCdU9VsVUZZ2gVIwDuiKCE0LKNaWsrHeWbMvw7m9vEfaIo5ZX0FWTeuM62fA88B8 iqMJL0eNIskkys+HNlg0GtRAUaWZWyH0vQQ= -----END CERTIFICATE-----Generated at Sun Apr 6 22:42:52 2025 by rpki-client