$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/bfefd033-46a6-3be3-95e8-359a21c308d2.roa File: bfefd033-46a6-3be3-95e8-359a21c308d2.roa (raw, json) Hash identifier: J/O7POtw11TGwmCo4d7AhhvCFCsSwmIDwL5BGiewu1A= Subject key identifier: 76:C4:6B:88:F6:6B:3F:08:9E:35:DF:C3:D1:4B:D5:20:A9:71:38:F1 Certificate issuer: /CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488 Certificate serial: 010D0C9F4328584965822EC8ED2A9E79592B0700 Authority key identifier: 77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/bfefd033-46a6-3be3-95e8-359a21c308d2.roa Signing time: Wed 02 Apr 2025 21:32:46 +0000 ROA not before: Wed 02 Apr 2025 21:32:46 +0000 ROA not after: Tue 01 Jul 2025 21:32:46 +0000 asID: 3819 IP address blocks: 2602:f69a:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:82:2e:c8:ed:2a:9e:79:59:2b:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488 Validity Not Before: Apr 2 21:32:46 2025 GMT Not After : Jul 1 21:32:46 2025 GMT Subject: CN=01aa3a54-573d-4d1f-b273-02480eb8f881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c7:ff:c8:fd:19:6f:d1:d4:74:15:81:62:e7: eb:db:32:69:b1:ef:da:04:43:21:ac:35:ac:b0:38: 96:ae:51:21:02:4c:97:07:a9:b3:a6:46:20:83:7c: db:16:25:5f:d0:8a:28:4c:58:80:e8:4e:c1:38:5e: ae:4f:4c:9c:5c:d4:2d:19:21:5a:ae:45:b9:00:1e: 90:89:46:9e:0e:32:34:ba:b3:d4:43:fb:6f:8f:27: 00:6e:60:01:1a:1d:f5:22:c8:b3:7b:8e:ec:8e:38: bc:ce:bd:12:a7:e9:a7:c8:2e:38:17:05:32:a0:fa: 43:da:5a:59:04:05:cd:d1:4b:d1:70:d2:bd:ad:46: 72:72:e3:98:9d:79:be:82:42:06:d1:04:1c:19:95: b5:64:fe:2e:3f:39:29:7f:d3:96:84:38:7a:6e:40: 17:b3:0a:3a:85:87:5d:06:b1:7b:84:de:df:71:82: 90:ad:1d:59:71:aa:3a:93:65:2d:0b:dd:9e:e6:de: 54:a0:6b:f3:c9:47:f4:a5:0f:b3:51:6d:d9:a0:dd: 19:5b:2e:5e:60:f6:d0:76:b4:c4:45:32:ad:28:6a: 4a:cc:ef:6a:d5:95:0e:15:82:b9:03:4c:e7:3e:e6: 61:c1:4d:35:3a:1d:72:19:a5:a4:08:c4:d2:e4:12: 6a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C4:6B:88:F6:6B:3F:08:9E:35:DF:C3:D1:4B:D5:20:A9:71:38:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/bfefd033-46a6-3be3-95e8-359a21c308d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl X509v3 Authority Key Identifier: keyid:77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer sbgp-ipAddrBlock: critical IPv6: 2602:f69a:8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:e2:04:3c:e2:8a:5c:2c:9f:55:08:24:b4:46:3b:cf:ae:67: 94:9e:63:20:39:dd:9e:6d:72:b7:85:f2:17:57:60:08:5a:ae: 91:9a:9a:5b:f6:89:42:7b:92:0e:7b:66:9a:f7:55:ef:f8:e6: 51:49:fd:30:a5:8f:9e:e8:f9:40:bd:aa:8f:15:68:e6:98:6b: 02:a0:d7:fa:fd:9d:62:5a:f2:82:5b:d9:6c:1f:e6:cf:02:cd: 27:cd:4a:0f:53:47:24:b0:77:74:bf:2f:bc:6c:e7:f5:70:07: 40:9f:fa:c7:37:26:39:86:62:09:11:3d:57:1b:ae:47:f6:79: a1:bd:a0:d0:4a:e7:ec:a4:10:14:b7:a4:63:d7:ae:02:75:fb: 27:a1:f4:9d:28:60:87:d4:6b:2a:cd:cd:1c:f1:f1:fb:c3:58: af:1b:db:5e:c1:7a:74:46:b3:a7:dd:57:85:3f:a3:a1:20:d3: 75:e5:08:8a:bb:a5:df:b0:61:d3:b5:29:4f:d9:2e:2f:58:c8: 6f:6a:cc:6c:6d:bc:a3:10:7d:1e:f9:dd:e9:a5:7f:c8:81:50: a8:b9:be:61:91:74:77:90:5e:8c:5c:e0:5a:fe:32:0a:d3:08: f2:c3:b7:b3:a9:b9:67:d3:b0:a4:d9:37:8e:59:32:1d:c9:c5: 9e:88:b1:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEllgi7I7SqeeVkrBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YmE3Y2EtMDRkYy00OWEyLWFlNzktNGU2ZjZiMzRl NDg4MB4XDTI1MDQwMjIxMzI0NloXDTI1MDcwMTIxMzI0NlowLzEtMCsGA1UEAxMk MDFhYTNhNTQtNTczZC00ZDFmLWIyNzMtMDI0ODBlYjhmODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMf/yP0Zb9HUdBWBYufr2zJpse/aBEMhrDWs sDiWrlEhAkyXB6mzpkYgg3zbFiVf0IooTFiA6E7BOF6uT0ycXNQtGSFarkW5AB6Q iUaeDjI0urPUQ/tvjycAbmABGh31Isize47sjji8zr0Sp+mnyC44FwUyoPpD2lpZ BAXN0UvRcNK9rUZycuOYnXm+gkIG0QQcGZW1ZP4uPzkpf9OWhDh6bkAXswo6hYdd BrF7hN7fcYKQrR1Zcao6k2UtC92e5t5UoGvzyUf0pQ+zUW3ZoN0ZWy5eYPbQdrTE RTKtKGpKzO9q1ZUOFYK5A0znPuZhwU01Oh1yGaWkCMTS5BJqoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHbEa4j2az8InjXfw9FL1SCpcTjxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hYzli YTdjYS0wNGRjLTQ5YTItYWU3OS00ZTZmNmIzNGU0ODgvYmZlZmQwMzMtNDZhNi0z YmUzLTk1ZTgtMzU5YTIxYzMwOGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWM5YmE3Y2EtMDRkYy00OWEyLWFl NzktNGU2ZjZiMzRlNDg4L2FjOWJhN2NhLTA0ZGMtNDlhMi1hZTc5LTRlNmY2YjM0 ZTQ4OC5jcmwwHwYDVR0jBBgwFoAUdwqi3iU4yVnSsvQGasfVER2E/iQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hYzliYTdjYS0wNGRjLTQ5YTItYWU3OS00ZTZm NmIzNGU0ODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL2mgAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHfiBDziilwsn1UIJLRGO8+uZ5SeYyA53Z5tcreF8hdXYAharpGa mlv2iUJ7kg57Zpr3Ve/45lFJ/TClj57o+UC9qo8VaOaYawKg1/r9nWJa8oJb2Wwf 5s8CzSfNSg9TRySwd3S/L7xs5/VwB0Cf+sc3JjmGYgkRPVcbrkf2eaG9oNBK5+yk EBS3pGPXrgJ1+yeh9J0oYIfUayrNzRzx8fvDWK8b217BenRGs6fdV4U/o6Eg03Xl CIq7pd+wYdO1KU/ZLi9YyG9qzGxtvKMQfR753emlf8iBUKi5vmGRdHeQXoxc4Fr+ MgrTCPLDt7OpuWfTsKTZN45ZMh3JxZ6Iscc= -----END CERTIFICATE-----Generated at Fri Apr 18 19:17:27 2025 by rpki-client