$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/7902899e-42c1-3c3c-aba3-5953cd19370b.roa File: 7902899e-42c1-3c3c-aba3-5953cd19370b.roa (raw, json) Hash identifier: 2f986wxXZXRil+24Xh5cfUkxZnzUxH0Ly76saA6LGLs= Subject key identifier: 58:B0:97:C1:C5:4F:4D:DC:B9:FA:7D:08:8A:09:8C:36:27:15:2B:99 Certificate issuer: /CN=98161ef7-249b-450b-ba6a-5819e613ed63 Certificate serial: 010D0C9F43285848E866628C173C2089ED2CA100 Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/7902899e-42c1-3c3c-aba3-5953cd19370b.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 14923 IP address blocks: 2602:2b7:c28::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:62:8c:17:3c:20:89:ed:2c:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=8962b466-6584-47b1-95e0-7583c072052b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8f:e3:d9:ed:5f:70:74:94:13:5e:95:95:81: 26:bb:e7:32:78:06:ec:4d:dd:63:cf:20:ba:33:c4: 54:72:d4:48:30:68:26:1d:b0:22:e8:98:c9:f4:f0: df:f7:f3:8c:cc:98:85:55:a0:b0:9d:00:1f:b4:89: b8:b1:e2:ff:91:86:31:b1:9f:2a:52:78:f4:23:22: 80:b9:2d:b5:6c:0f:4c:07:9e:4f:93:d3:7a:9e:bb: 71:cc:cf:25:ae:91:b1:a5:bc:d8:42:1d:b3:32:2e: e7:1b:7e:c4:9d:29:c9:45:4a:a2:7f:4e:a5:b6:50: 9f:cd:cb:c4:a5:37:af:a8:a9:94:22:3b:1d:d6:4a: 14:5c:3d:54:33:a9:b5:21:dd:74:42:09:24:da:b2: 32:6f:b8:d4:4d:87:0e:68:de:e2:64:c0:d1:f6:9a: cb:e7:ad:06:75:57:89:b0:fd:44:38:29:e6:e5:3b: cd:b0:b4:cb:15:75:71:b4:70:83:47:9e:8c:34:d5: 51:57:83:65:89:da:0e:7e:02:ce:1c:dd:c9:0b:f6: b0:80:cc:db:a6:c1:e6:85:b2:69:f5:d8:6b:13:4c: f8:fa:e8:ec:b0:b8:d1:0a:f2:8f:2e:47:ed:23:d7: 5b:7a:75:70:c2:e8:98:a0:f4:04:bb:9f:7d:18:17: e4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B0:97:C1:C5:4F:4D:DC:B9:FA:7D:08:8A:09:8C:36:27:15:2B:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/7902899e-42c1-3c3c-aba3-5953cd19370b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl X509v3 Authority Key Identifier: keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer sbgp-ipAddrBlock: critical IPv6: 2602:2b7:c28::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:19:5a:a5:ca:50:53:42:1c:6f:02:8f:4d:1d:a2:6a:90:26: 08:92:c7:c9:8a:e1:2c:7f:9b:40:f0:99:ec:76:db:6e:de:5a: d6:85:6e:d9:74:32:5d:94:cd:1a:fb:40:38:45:03:10:83:d8: 3c:be:9f:56:60:24:b6:b3:90:a4:71:1c:f2:fd:af:c6:7e:ba: fb:db:78:46:7a:0c:40:ff:70:e2:29:e4:74:95:8d:7c:0d:b9: 07:2b:25:a1:72:05:50:39:83:10:47:aa:79:5c:f6:9b:23:d0: b7:80:77:c8:0e:d7:d7:19:0d:92:83:ee:e5:ba:36:5d:cf:14: 94:de:46:d4:1e:fd:74:69:a0:a9:d5:08:93:21:09:9d:15:e8: da:1e:67:7b:5f:be:df:65:85:23:a0:7f:81:5a:9d:0d:89:d2: f1:2e:8b:f1:f0:67:68:e5:97:82:a3:e3:71:65:f5:cb:25:5d: 93:90:bb:70:15:ea:e1:89:61:5a:8e:21:1d:4d:4f:95:4b:22: 2f:89:06:af:2b:96:2e:db:62:f6:7d:6c:59:1b:ec:56:a7:74: 49:e5:4c:9e:11:e7:85:ea:43:9f:e6:b4:fb:58:b4:d6:ce:0f: 8f:57:1f:53:be:65:d8:11:68:c6:c1:a9:4e:d0:da:40:a4:e4: 03:68:79:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjoZmKMFzwgie0soQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgxNjFlZjctMjQ5Yi00NTBiLWJhNmEtNTgxOWU2MTNl ZDYzMB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk ODk2MmI0NjYtNjU4NC00N2IxLTk1ZTAtNzU4M2MwNzIwNTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4/j2e1fcHSUE16VlYEmu+cyeAbsTd1jzyC6 M8RUctRIMGgmHbAi6JjJ9PDf9/OMzJiFVaCwnQAftIm4seL/kYYxsZ8qUnj0IyKA uS21bA9MB55Pk9N6nrtxzM8lrpGxpbzYQh2zMi7nG37EnSnJRUqif06ltlCfzcvE pTevqKmUIjsd1koUXD1UM6m1Id10Qgkk2rIyb7jUTYcOaN7iZMDR9prL560GdVeJ sP1EOCnm5TvNsLTLFXVxtHCDR56MNNVRV4NlidoOfgLOHN3JC/awgMzbpsHmhbJp 9dhrE0z4+ujssLjRCvKPLkftI9dbenVwwuiYoPQEu599GBfk8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFiwl8HFT03cufp9CIoJjDYnFSuZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODE2 MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5ZTYxM2VkNjMvNzkwMjg5OWUtNDJjMS0z YzNjLWFiYTMtNTk1M2NkMTkzNzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTgxNjFlZjctMjQ5Yi00NTBiLWJh NmEtNTgxOWU2MTNlZDYzLzk4MTYxZWY3LTI0OWItNDUwYi1iYTZhLTU4MTllNjEz ZWQ2My5jcmwwHwYDVR0jBBgwFoAU1BnUREsRiVyMbWhl/etLT/KsGnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ODE2MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5 ZTYxM2VkNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICtwwo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABUZWqXKUFNCHG8Cj00domqQJgiSx8mK4Sx/m0Dwmex2227eWtaF btl0Ml2UzRr7QDhFAxCD2Dy+n1ZgJLazkKRxHPL9r8Z+uvvbeEZ6DED/cOIp5HSV jXwNuQcrJaFyBVA5gxBHqnlc9psj0LeAd8gO19cZDZKD7uW6Nl3PFJTeRtQe/XRp oKnVCJMhCZ0V6NoeZ3tfvt9lhSOgf4FanQ2J0vEui/HwZ2jll4Kj43Fl9cslXZOQ u3AV6uGJYVqOIR1NT5VLIi+JBq8rli7bYvZ9bFkb7FandEnlTJ4R54XqQ5/mtPtY tNbOD49XH1O+ZdgRaMbBqU7Q2kCk5ANoeWE= -----END CERTIFICATE-----Generated at Sat Apr 5 10:10:57 2025 by rpki-client