$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/381fe162-8140-3694-81fa-38c3b160b29d.roa File: 381fe162-8140-3694-81fa-38c3b160b29d.roa (raw, json) Hash identifier: nACk2EkXqLu0nXXPYH5CBzThsN2ZQ1+KF9raiidRnDg= Subject key identifier: 3F:DD:A8:07:65:0A:DB:E7:53:23:78:3F:13:EE:1A:BD:FF:8C:D1:11 Certificate issuer: /CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea Certificate serial: 010D0C9F4328584975444ABF0D219786A7C4E100 Authority key identifier: 2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/381fe162-8140-3694-81fa-38c3b160b29d.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 400861 IP address blocks: 2602:2da:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:4a:bf:0d:21:97:86:a7:c4:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=b9585dfc-f1e0-4405-a733-083a85a72540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:5a:ed:5f:fa:88:11:80:ea:75:5a:9f:d9:ad: 5c:66:55:37:58:7d:6c:22:7e:c2:08:ea:34:94:75: cb:bb:70:b6:ea:ec:75:c6:13:ff:70:85:f5:e9:6e: de:62:3a:22:8e:64:81:b6:0f:c6:6f:cb:bc:7b:00: db:46:1e:10:53:cc:f4:0a:dc:3a:8c:25:cc:04:de: 6a:e9:82:b6:4c:42:c5:99:32:41:67:a4:60:28:d6: 1f:4f:8b:2f:db:cc:f6:60:67:99:cb:ca:16:13:af: be:5c:aa:ff:0c:6c:03:aa:85:b2:d0:2b:40:87:3a: 9d:8b:d7:93:e3:0b:1c:81:be:f4:a9:47:40:84:2c: 8f:55:a5:65:cf:f8:8f:ae:17:c6:6d:05:61:bc:93: 1e:2c:0d:79:30:cc:7c:62:8d:c5:ea:34:28:8e:03: 44:cd:8b:6e:f8:8d:19:c2:23:a6:2d:b2:ba:5f:17: 2c:bf:8c:c4:58:7a:56:77:ec:4a:f1:6b:eb:e9:4f: ca:a5:0b:f3:49:26:3d:7a:52:31:2f:8e:98:54:94: 58:c4:92:b8:6d:51:13:fd:62:a3:77:ee:10:b4:77: 0e:ae:8c:99:77:d9:19:7c:fe:e6:45:42:01:da:de: fc:e1:93:3f:3f:1f:89:45:5e:ea:14:e4:79:cb:48: 30:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DD:A8:07:65:0A:DB:E7:53:23:78:3F:13:EE:1A:BD:FF:8C:D1:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/381fe162-8140-3694-81fa-38c3b160b29d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl X509v3 Authority Key Identifier: keyid:2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer sbgp-ipAddrBlock: critical IPv6: 2602:2da:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:25:22:3d:fb:ad:3d:a4:37:52:84:e9:8e:50:14:36:7e:8e: b4:08:d2:08:1f:96:28:9b:4a:11:a1:d7:ce:25:17:2f:76:4c: 92:b3:72:66:7c:1b:41:2f:f5:6d:97:26:ab:f7:35:0d:04:86: 26:b0:89:34:61:a5:99:dc:5c:ca:10:39:9c:dc:ae:d8:21:21: 69:93:d6:f6:c2:ed:dd:d3:8a:07:2a:6a:28:12:b1:a2:f3:8e: a8:90:45:97:3d:d4:e5:2d:ba:c2:af:90:82:5d:e4:8c:8d:b2: 1f:a8:10:d9:9a:b5:98:ab:dd:e4:7c:43:fd:dd:d6:29:16:b6: 3e:69:0c:f2:49:99:49:d3:54:6a:d6:3c:e1:0a:6d:81:1b:06: e5:88:55:ff:b0:a1:1a:52:4a:73:80:f6:3d:88:ba:1b:b1:76: 5a:50:ea:f7:eb:da:c4:dd:3f:7d:8b:3d:36:9a:59:f6:08:5c: b6:d4:df:26:dc:7b:2a:76:15:e0:19:5c:e1:b8:3d:67:ab:d5: 36:5d:d9:ec:23:d5:12:7e:ed:e2:a5:6d:f9:d0:89:24:41:9f: e8:df:43:d8:ca:a2:35:6b:2f:16:2b:a1:82:f5:96:f5:7a:40: d8:8e:71:23:53:74:04:e9:0d:37:a1:f1:a3:9c:63:83:82:22: dd:18:b2:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl1REq/DSGXhqfE4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFiMTdiZWEtZTY2NS00ZWQxLWFiZTMtZDJhOWFjMzRl MGVhMB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk Yjk1ODVkZmMtZjFlMC00NDA1LWE3MzMtMDgzYTg1YTcyNTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8FrtX/qIEYDqdVqf2a1cZlU3WH1sIn7CCOo0 lHXLu3C26ux1xhP/cIX16W7eYjoijmSBtg/Gb8u8ewDbRh4QU8z0Ctw6jCXMBN5q 6YK2TELFmTJBZ6RgKNYfT4sv28z2YGeZy8oWE6++XKr/DGwDqoWy0CtAhzqdi9eT 4wscgb70qUdAhCyPVaVlz/iPrhfGbQVhvJMeLA15MMx8Yo3F6jQojgNEzYtu+I0Z wiOmLbK6Xxcsv4zEWHpWd+xK8Wvr6U/KpQvzSSY9elIxL46YVJRYxJK4bVET/WKj d+4QtHcOroyZd9kZfP7mRUIB2t784ZM/Px+JRV7qFOR5y0gw9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD/dqAdlCtvnUyN4PxPuGr3/jNERMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYWIx N2JlYS1lNjY1LTRlZDEtYWJlMy1kMmE5YWMzNGUwZWEvMzgxZmUxNjItODE0MC0z Njk0LTgxZmEtMzhjM2IxNjBiMjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWFiMTdiZWEtZTY2NS00ZWQxLWFi ZTMtZDJhOWFjMzRlMGVhL2FhYjE3YmVhLWU2NjUtNGVkMS1hYmUzLWQyYTlhYzM0 ZTBlYS5jcmwwHwYDVR0jBBgwFoAULaiA1O+1z0U8T5SFN3XGDcEUFSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYWIxN2JlYS1lNjY1LTRlZDEtYWJlMy1kMmE5 YWMzNGUwZWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIC2gAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAAlIj37rT2kN1KE6Y5QFDZ+jrQI0ggfliibShGh184lFy92TJKz cmZ8G0Ev9W2XJqv3NQ0EhiawiTRhpZncXMoQOZzcrtghIWmT1vbC7d3TigcqaigS saLzjqiQRZc91OUtusKvkIJd5IyNsh+oENmatZir3eR8Q/3d1ikWtj5pDPJJmUnT VGrWPOEKbYEbBuWIVf+woRpSSnOA9j2IuhuxdlpQ6vfr2sTdP32LPTaaWfYIXLbU 3ybceyp2FeAZXOG4PWer1TZd2ewj1RJ+7eKlbfnQiSRBn+jfQ9jKojVrLxYroYL1 lvV6QNiOcSNTdATpDTeh8aOcY4OCIt0YsrU= -----END CERTIFICATE-----Generated at Sat Apr 12 13:17:24 2025 by rpki-client