$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/b0aeb068-9565-3d62-9153-36565ab91c51.roa File: b0aeb068-9565-3d62-9153-36565ab91c51.roa (raw, json) Hash identifier: E3qbywcx1erDEX/X7klttE6X+CHd3VDH0E1CD6x/5P8= Subject key identifier: AA:10:1D:DA:73:2A:64:C5:BB:E7:3E:A2:F8:A1:24:9D:70:F1:13:25 Certificate issuer: /CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488 Certificate serial: 010D0C9F432858496586E88FD3A21ADBE4F81D80 Authority key identifier: 77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/b0aeb068-9565-3d62-9153-36565ab91c51.roa Signing time: Wed 02 Apr 2025 21:42:18 +0000 ROA not before: Wed 02 Apr 2025 21:42:18 +0000 ROA not after: Tue 01 Jul 2025 21:42:18 +0000 asID: 3819 IP address blocks: 2602:f69a:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:86:e8:8f:d3:a2:1a:db:e4:f8:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488 Validity Not Before: Apr 2 21:42:18 2025 GMT Not After : Jul 1 21:42:18 2025 GMT Subject: CN=d4f869e1-8d6a-44ef-8d3a-6004a680763c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:25:6f:17:32:e0:aa:fa:14:08:54:3e:dd:23: 27:75:eb:f5:25:36:f1:98:3f:43:2d:ca:9d:ec:b5: a6:72:93:b3:af:6e:e8:d1:2e:c4:e5:04:43:f4:1e: 5d:51:f9:5c:18:92:23:f6:a9:44:c8:58:37:14:88: 61:9f:a1:ba:af:1a:5c:96:d9:cb:b1:16:d3:c5:f0: f6:8b:08:ab:d5:83:90:5a:64:fc:b4:74:6a:ca:9a: cf:0b:19:ee:55:a1:e3:db:68:17:6b:5d:d2:36:3a: a8:0b:a1:71:be:2a:de:fa:75:aa:28:00:57:c3:55: ff:01:4b:9f:10:50:41:ae:cb:20:e5:c3:3d:82:27: 67:f6:ba:9d:79:da:64:d6:a0:37:ec:e2:4f:3e:f7: ac:1e:44:16:94:bf:87:3c:4b:4c:da:d1:a0:17:a0: 5c:06:3b:5b:c2:4a:35:94:ee:55:b0:f4:f5:d7:86: df:15:16:53:40:cc:a6:37:82:0d:52:db:51:c6:c4: 72:eb:7e:b0:25:94:4d:55:c2:09:81:6b:9f:ee:0c: ef:5f:0c:4c:af:79:83:50:fd:53:96:bc:54:63:4c: e8:d8:94:a1:b1:28:d3:fc:35:c8:56:7f:a5:d2:3a: ee:ed:56:3e:be:c3:3f:b4:99:45:1a:2d:51:8f:0d: f2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:10:1D:DA:73:2A:64:C5:BB:E7:3E:A2:F8:A1:24:9D:70:F1:13:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/b0aeb068-9565-3d62-9153-36565ab91c51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl X509v3 Authority Key Identifier: keyid:77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer sbgp-ipAddrBlock: critical IPv6: 2602:f69a:17::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:71:b5:3c:22:97:b9:ec:24:f9:b1:1f:ef:dd:ba:a3:1a:f2: 59:68:fd:90:db:b5:88:91:2f:1d:88:d3:97:5d:bc:d7:58:c8: 80:13:50:01:5b:81:c1:bc:89:75:84:08:16:4e:2c:4f:bc:91: c9:da:70:d7:7a:bf:de:d9:f0:99:68:7d:45:41:83:2e:04:1e: 91:83:7f:45:e5:1b:9d:7d:54:24:d3:9c:03:fb:af:37:4a:94: 5b:80:98:e4:89:2c:e9:78:56:20:81:dc:1a:7a:e5:f7:ad:26: 29:20:86:c9:b5:c9:9a:9b:5f:f6:f5:ce:57:5c:d8:09:d1:74: 1d:cb:45:d7:ef:24:6b:f9:82:17:30:e2:4a:14:38:30:b7:35: 8c:1b:57:cd:bd:d5:21:32:e4:6a:ef:70:c4:a7:ed:45:46:68: c3:9a:07:4c:0d:f1:2d:a6:3e:4b:a9:b4:26:7b:97:27:b4:8d: f2:8d:98:32:7e:2a:21:1b:d4:e9:c4:29:3f:7d:01:b0:d3:c9: d1:3e:6f:12:93:94:3e:b2:52:b2:3d:97:56:e7:be:0b:a9:07: 2c:63:ba:99:6f:6a:7a:2a:00:86:3e:1b:95:67:a9:b3:c3:87: ab:73:13:f5:3a:d5:d3:4d:6d:71:7d:bd:65:31:75:66:61:89: 5c:64:21:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEllhuiP06Ia2+T4HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YmE3Y2EtMDRkYy00OWEyLWFlNzktNGU2ZjZiMzRl NDg4MB4XDTI1MDQwMjIxNDIxOFoXDTI1MDcwMTIxNDIxOFowLzEtMCsGA1UEAxMk ZDRmODY5ZTEtOGQ2YS00NGVmLThkM2EtNjAwNGE2ODA3NjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviVvFzLgqvoUCFQ+3SMndev1JTbxmD9DLcqd 7LWmcpOzr27o0S7E5QRD9B5dUflcGJIj9qlEyFg3FIhhn6G6rxpcltnLsRbTxfD2 iwir1YOQWmT8tHRqyprPCxnuVaHj22gXa13SNjqoC6Fxvire+nWqKABXw1X/AUuf EFBBrssg5cM9gidn9rqdedpk1qA37OJPPvesHkQWlL+HPEtM2tGgF6BcBjtbwko1 lO5VsPT114bfFRZTQMymN4INUttRxsRy636wJZRNVcIJgWuf7gzvXwxMr3mDUP1T lrxUY0zo2JShsSjT/DXIVn+l0jru7VY+vsM/tJlFGi1Rjw3y0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKoQHdpzKmTFu+c+ovihJJ1w8RMlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hYzli YTdjYS0wNGRjLTQ5YTItYWU3OS00ZTZmNmIzNGU0ODgvYjBhZWIwNjgtOTU2NS0z ZDYyLTkxNTMtMzY1NjVhYjkxYzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWM5YmE3Y2EtMDRkYy00OWEyLWFl NzktNGU2ZjZiMzRlNDg4L2FjOWJhN2NhLTA0ZGMtNDlhMi1hZTc5LTRlNmY2YjM0 ZTQ4OC5jcmwwHwYDVR0jBBgwFoAUdwqi3iU4yVnSsvQGasfVER2E/iQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hYzliYTdjYS0wNGRjLTQ5YTItYWU3OS00ZTZm NmIzNGU0ODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL2mgAX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFFxtTwil7nsJPmxH+/duqMa8llo/ZDbtYiRLx2I05ddvNdYyIAT UAFbgcG8iXWECBZOLE+8kcnacNd6v97Z8JlofUVBgy4EHpGDf0XlG519VCTTnAP7 rzdKlFuAmOSJLOl4ViCB3Bp65fetJikghsm1yZqbX/b1zldc2AnRdB3LRdfvJGv5 ghcw4koUODC3NYwbV8291SEy5GrvcMSn7UVGaMOaB0wN8S2mPkuptCZ7lye0jfKN mDJ+KiEb1OnEKT99AbDTydE+bxKTlD6yUrI9l1bnvgupByxjuplvanoqAIY+G5Vn qbPDh6tzE/U61dNNbXF9vWUxdWZhiVxkIYc= -----END CERTIFICATE-----Generated at Fri Apr 18 19:18:19 2025 by rpki-client