$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/f2095247-f4d4-35a7-bc49-3fdf472c3d68.roa File: f2095247-f4d4-35a7-bc49-3fdf472c3d68.roa (raw, json) Hash identifier: wJRL+eN2/VOE2NNlJqLVn2E9HG03/f+FjundrDG8GqY= Subject key identifier: 23:2A:45:F7:E5:73:DC:03:C1:E2:4F:6C:67:72:23:30:DA:C7:5E:0B Certificate issuer: /CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488 Certificate serial: 010D0C9F432858496584FDDC635EF6CE49FAA200 Authority key identifier: 77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/f2095247-f4d4-35a7-bc49-3fdf472c3d68.roa Signing time: Wed 02 Apr 2025 21:38:26 +0000 ROA not before: Wed 02 Apr 2025 21:38:26 +0000 ROA not after: Tue 01 Jul 2025 21:38:26 +0000 asID: 3819 IP address blocks: 2602:f69a:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:84:fd:dc:63:5e:f6:ce:49:fa:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488 Validity Not Before: Apr 2 21:38:26 2025 GMT Not After : Jul 1 21:38:26 2025 GMT Subject: CN=c12568ff-21e0-411e-a18e-7c2a0abdfaac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:39:7e:f3:bd:a8:64:25:d9:f1:d5:e6:83:86: e3:32:08:5c:ca:48:06:d9:ef:75:6c:dd:af:4a:41: df:b6:c1:1b:88:17:5d:8e:18:1c:07:de:7b:b8:55: f0:7f:27:eb:bd:76:bf:ce:37:02:c4:bb:97:0d:48: f2:a8:d8:10:d5:db:e6:9e:dc:92:1d:1d:1d:40:f8: 06:67:41:1d:af:32:f9:b2:ab:d3:95:2f:c8:47:2c: 86:0f:39:7f:23:fa:15:12:f4:d9:9e:6f:26:b1:30: ea:8b:a4:a6:56:83:77:6e:d8:f6:09:9e:9e:9c:bf: ca:ec:43:da:8f:2d:49:1a:6b:05:09:3c:80:4c:fc: 28:ec:12:29:69:77:1e:a8:a0:55:93:b1:eb:8b:3e: 76:1c:41:4b:55:8e:0c:15:7c:c8:6f:5d:90:d2:05: 02:c7:65:e1:f7:96:8f:ef:0f:8e:71:93:55:88:ca: 3d:eb:97:34:fd:04:dd:e5:d8:3d:37:8a:1e:49:35: 65:7f:0e:99:82:c4:1f:66:11:8d:7a:d5:92:d9:48: f7:1d:29:b3:73:db:7c:3a:bb:b6:1a:77:6d:74:3d: f8:c7:05:f5:a3:9c:f1:93:e1:c9:93:a5:43:08:f0: 13:ed:fa:0d:7c:31:72:ed:54:f4:d5:41:13:7b:43: 20:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2A:45:F7:E5:73:DC:03:C1:E2:4F:6C:67:72:23:30:DA:C7:5E:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/f2095247-f4d4-35a7-bc49-3fdf472c3d68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl X509v3 Authority Key Identifier: keyid:77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer sbgp-ipAddrBlock: critical IPv6: 2602:f69a:10::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:17:4a:96:55:04:9f:b6:68:57:d9:48:b6:a7:32:d3:77:45: 23:81:84:17:29:5f:45:e3:7a:1d:86:d5:ca:43:30:b0:7d:0e: 24:63:db:cd:68:d6:8f:70:8e:bb:0d:44:d2:23:76:1c:10:95: dd:d9:6c:db:24:c9:45:ad:f7:03:75:71:45:87:20:14:fe:b6: 2e:14:ec:a7:69:b0:98:5d:78:4a:90:c7:42:83:83:94:3b:13: d5:0a:74:ed:90:00:31:29:52:21:8e:ff:12:c7:1f:28:5e:fa: 32:3b:29:58:f9:d1:04:93:72:77:18:f9:ba:2e:a8:26:ea:4e: 4f:b4:08:58:1e:2a:e1:57:de:c8:dd:6a:1f:92:a1:bb:36:10: 60:d8:63:2e:9b:1e:18:92:a1:dd:32:c6:40:9b:de:0d:d1:61: e8:54:3a:90:6f:ed:e2:09:cc:a8:0a:ef:64:bc:94:71:70:eb: 2c:28:3c:65:15:8c:de:2a:4e:30:e8:1c:68:07:00:d0:37:77: 29:c6:88:e8:88:30:46:d4:e8:03:8f:e0:82:d2:ca:1a:21:9f: 34:82:c3:41:18:a4:90:6f:03:d9:7d:4f:13:d2:29:2c:d2:d3: b1:c7:03:47:3e:db:9a:4c:a6:7f:1a:79:80:25:69:2a:ca:01: 57:e9:1f:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEllhP3cY172zkn6ogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YmE3Y2EtMDRkYy00OWEyLWFlNzktNGU2ZjZiMzRl NDg4MB4XDTI1MDQwMjIxMzgyNloXDTI1MDcwMTIxMzgyNlowLzEtMCsGA1UEAxMk YzEyNTY4ZmYtMjFlMC00MTFlLWExOGUtN2MyYTBhYmRmYWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jl+872oZCXZ8dXmg4bjMghcykgG2e91bN2v SkHftsEbiBddjhgcB957uFXwfyfrvXa/zjcCxLuXDUjyqNgQ1dvmntySHR0dQPgG Z0EdrzL5sqvTlS/IRyyGDzl/I/oVEvTZnm8msTDqi6SmVoN3btj2CZ6enL/K7EPa jy1JGmsFCTyATPwo7BIpaXceqKBVk7Hriz52HEFLVY4MFXzIb12Q0gUCx2Xh95aP 7w+OcZNViMo965c0/QTd5dg9N4oeSTVlfw6ZgsQfZhGNetWS2Uj3HSmzc9t8Oru2 GndtdD34xwX1o5zxk+HJk6VDCPAT7foNfDFy7VT01UETe0MgkwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCMqRfflc9wDweJPbGdyIzDax14LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hYzli YTdjYS0wNGRjLTQ5YTItYWU3OS00ZTZmNmIzNGU0ODgvZjIwOTUyNDctZjRkNC0z NWE3LWJjNDktM2ZkZjQ3MmMzZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWM5YmE3Y2EtMDRkYy00OWEyLWFl NzktNGU2ZjZiMzRlNDg4L2FjOWJhN2NhLTA0ZGMtNDlhMi1hZTc5LTRlNmY2YjM0 ZTQ4OC5jcmwwHwYDVR0jBBgwFoAUdwqi3iU4yVnSsvQGasfVER2E/iQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hYzliYTdjYS0wNGRjLTQ5YTItYWU3OS00ZTZm NmIzNGU0ODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL2mgAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACYXSpZVBJ+2aFfZSLanMtN3RSOBhBcpX0Xjeh2G1cpDMLB9DiRj 281o1o9wjrsNRNIjdhwQld3ZbNskyUWt9wN1cUWHIBT+ti4U7KdpsJhdeEqQx0KD g5Q7E9UKdO2QADEpUiGO/xLHHyhe+jI7KVj50QSTcncY+bouqCbqTk+0CFgeKuFX 3sjdah+Sobs2EGDYYy6bHhiSod0yxkCb3g3RYehUOpBv7eIJzKgK72S8lHFw6ywo PGUVjN4qTjDoHGgHANA3dynGiOiIMEbU6AOP4ILSyhohnzSCw0EYpJBvA9l9TxPS KSzS07HHA0c+25pMpn8aeYAlaSrKAVfpH6E= -----END CERTIFICATE-----Generated at Fri Apr 18 19:13:36 2025 by rpki-client