$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/02a8f3a8-f97b-332c-a828-b53d2e18f8b6.roa File: 02a8f3a8-f97b-332c-a828-b53d2e18f8b6.roa (raw, json) Hash identifier: wBK98z9RAZR/kTm2AGkvGqyDAB5rqNnB/x/vDogIkiU= Subject key identifier: 9B:9B:79:94:08:32:97:64:AA:37:9A:99:CC:D4:27:0B:8F:69:36:1B Certificate issuer: /CN=ab1101f4-a527-459b-8c16-d78b261e6de3 Certificate serial: 010D0C9F4328584957F4156555169F34B1145060 Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/02a8f3a8-f97b-332c-a828-b53d2e18f8b6.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 31898 IP address blocks: 2602:277:7c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:15:65:55:16:9f:34:b1:14:50:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=7f0024e2-6200-46ba-817c-3f5cc92d22d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1f:27:8c:f4:33:de:a1:06:5f:0c:eb:c1:67: 5e:9f:dc:04:8c:35:f6:81:75:f0:8d:7b:a1:e1:9c: 59:7f:8c:a9:44:b0:00:b6:20:c9:88:11:2e:3a:06: fd:9b:ea:22:0c:26:61:7f:5e:7e:38:87:1d:e3:1f: 98:b0:6c:cc:b9:33:15:4d:b0:70:43:a5:28:95:4e: 8e:28:6d:9c:2d:d2:88:8f:1a:e1:d6:7c:5a:1e:d2: 70:4e:91:48:ac:2c:cf:5e:5f:fb:f2:f7:58:c3:5f: a6:c5:9c:b9:14:1f:49:34:a3:c5:12:65:93:8e:1c: ba:d1:ef:c2:c6:1d:e0:7b:62:ff:81:79:79:be:c3: 88:58:9e:eb:91:c8:8b:55:af:59:75:a4:5b:45:02: 4a:1d:a7:52:51:01:fc:02:47:f8:60:3f:90:d7:a7: 8f:86:32:90:1e:1d:a3:f5:06:6d:c6:f1:b9:ea:b4: c6:ce:e2:83:1a:5a:4b:76:94:27:d2:7b:41:3a:9e: f8:c1:4b:19:c5:de:e2:a9:71:23:db:9d:74:0e:2f: 96:84:e9:81:56:85:79:35:0b:fc:95:1f:81:6d:f2: ad:70:07:cb:04:f8:cc:a9:e1:b7:1e:95:e5:f2:14: 4f:f7:c1:c5:c5:3a:2f:a6:ea:37:a5:b8:cb:76:48: 39:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:9B:79:94:08:32:97:64:AA:37:9A:99:CC:D4:27:0B:8F:69:36:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/02a8f3a8-f97b-332c-a828-b53d2e18f8b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl X509v3 Authority Key Identifier: keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer sbgp-ipAddrBlock: critical IPv6: 2602:277:7c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:31:99:94:c8:6a:d3:9a:d7:de:01:c2:0c:e5:fc:bd:7f:08: e0:ca:82:d3:97:35:0a:83:c8:3d:a0:2f:45:77:a7:c1:3a:db: a6:a0:1b:4a:b5:12:16:f4:67:37:42:36:82:57:fd:58:41:b3: bc:da:1a:08:6b:68:3f:bf:ee:2e:5b:88:0b:6b:b9:c2:ce:15: 30:dd:c7:ee:57:d0:e8:fc:38:a0:b5:90:f1:47:e5:bd:fc:7c: 30:30:9c:b1:35:40:d1:eb:43:be:38:e1:c9:b1:d1:0c:2b:49: cd:31:7d:20:1a:ce:58:c4:ff:32:c7:af:a9:6b:b2:01:8c:a0: b6:5f:c9:98:b3:1a:66:df:84:33:d2:e5:5d:98:36:ed:04:79: f6:58:c5:55:ff:43:c7:b0:09:b2:26:c3:0d:9c:24:19:6c:54: ad:65:29:14:1f:ba:2b:45:89:5a:71:b6:8d:d3:2f:f8:04:e8: c2:40:c8:f6:86:75:8a:0d:54:b0:76:d8:e7:98:e6:0c:9a:9f: 50:2f:50:2f:f5:7a:c2:f4:39:d6:d0:64:fd:bf:0e:6f:b9:05: 74:10:d1:4e:52:98:fa:d6:8b:a2:1a:46:a5:c1:5e:54:2e:ef: a5:d5:b8:d4:e4:32:f4:2a:10:8f:f4:25:10:fc:da:d0:56:31: 2f:97:42:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElX9BVlVRafNLEUUGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxMTAxZjQtYTUyNy00NTliLThjMTYtZDc4YjI2MWU2 ZGUzMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk N2YwMDI0ZTItNjIwMC00NmJhLTgxN2MtM2Y1Y2M5MmQyMmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx8njPQz3qEGXwzrwWden9wEjDX2gXXwjXuh 4ZxZf4ypRLAAtiDJiBEuOgb9m+oiDCZhf15+OIcd4x+YsGzMuTMVTbBwQ6UolU6O KG2cLdKIjxrh1nxaHtJwTpFIrCzPXl/78vdYw1+mxZy5FB9JNKPFEmWTjhy60e/C xh3ge2L/gXl5vsOIWJ7rkciLVa9ZdaRbRQJKHadSUQH8Akf4YD+Q16ePhjKQHh2j 9QZtxvG56rTGzuKDGlpLdpQn0ntBOp74wUsZxd7iqXEj2510Di+WhOmBVoV5NQv8 lR+BbfKtcAfLBPjMqeG3HpXl8hRP98HFxTovpuo3pbjLdkg55QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJubeZQIMpdkqjeamczUJwuPaTYbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjEx MDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhiMjYxZTZkZTMvMDJhOGYzYTgtZjk3Yi0z MzJjLWE4MjgtYjUzZDJlMThmOGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxMTAxZjQtYTUyNy00NTliLThj MTYtZDc4YjI2MWU2ZGUzL2FiMTEwMWY0LWE1MjctNDU5Yi04YzE2LWQ3OGIyNjFl NmRlMy5jcmwwHwYDVR0jBBgwFoAUmZxX2Q4wTnTaeEpb0pxnHt56bjMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjExMDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhi MjYxZTZkZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICdwB8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEUxmZTIatOa194Bwgzl/L1/CODKgtOXNQqDyD2gL0V3p8E626ag G0q1Ehb0ZzdCNoJX/VhBs7zaGghraD+/7i5biAtrucLOFTDdx+5X0Oj8OKC1kPFH 5b38fDAwnLE1QNHrQ7444cmx0QwrSc0xfSAazljE/zLHr6lrsgGMoLZfyZizGmbf hDPS5V2YNu0EefZYxVX/Q8ewCbImww2cJBlsVK1lKRQfuitFiVpxto3TL/gE6MJA yPaGdYoNVLB22OeY5gyan1AvUC/1esL0OdbQZP2/Dm+5BXQQ0U5SmPrWi6IaRqXB XlQu76XVuNTkMvQqEI/0JRD82tBWMS+XQnc= -----END CERTIFICATE-----Generated at Sat Apr 5 17:50:04 2025 by rpki-client