$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/39d37bab-e9cc-3fec-86ef-a7daf491525a.roa File: 39d37bab-e9cc-3fec-86ef-a7daf491525a.roa (raw, json) Hash identifier: J0kyeavERDmTLsRaDorUOf673NglJSt4dBL6k4nBJ5k= Subject key identifier: 0C:10:0F:06:80:A6:5E:56:1A:DA:DE:CF:92:92:27:D5:85:9F:EC:71 Certificate issuer: /CN=8de2686c-f2c7-4e46-bfb3-85a78f602984 Certificate serial: 010D0C9F43285849691E1FFF0B3425F548F03E00 Authority key identifier: 26:8A:F6:F1:2E:71:87:80:43:C2:38:B0:55:54:13:96:4B:65:B8:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/39d37bab-e9cc-3fec-86ef-a7daf491525a.roa Signing time: Fri 04 Apr 2025 04:34:24 +0000 ROA not before: Fri 04 Apr 2025 04:34:24 +0000 ROA not after: Thu 03 Jul 2025 04:34:24 +0000 asID: 14618 IP address blocks: 2602:f6fc::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:69:1e:1f:ff:0b:34:25:f5:48:f0:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8de2686c-f2c7-4e46-bfb3-85a78f602984 Validity Not Before: Apr 4 04:34:24 2025 GMT Not After : Jul 3 04:34:24 2025 GMT Subject: CN=3a722898-981e-4ecc-95cd-b8c1c09130b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cf:1a:dd:72:65:46:0a:1f:17:26:48:84:62: 9c:1d:7f:0f:7e:ce:a2:82:43:ad:fc:ae:76:b9:48: 13:75:cd:12:0f:7c:da:d9:45:d1:37:cb:2f:87:cd: 02:23:b3:e4:d8:71:a3:ae:8e:a7:dc:8c:2f:c2:fb: 66:7e:a4:19:a4:cb:d2:d9:91:bc:9c:fe:5d:63:01: bb:da:28:13:ce:06:32:86:0a:fe:9b:be:98:a7:54: 00:de:07:bc:dc:1f:d2:74:a3:51:4c:0f:63:5a:89: 27:14:81:ef:ec:9b:a2:b6:43:db:6d:cf:53:e1:75: 1e:96:38:09:e0:4b:fc:83:ac:fe:d7:f9:8d:a5:f5: d3:3e:7d:87:ed:46:bf:3a:bd:4f:8b:bf:e8:26:71: 48:50:25:6e:96:37:f1:6a:5f:b3:21:9d:ca:bd:2a: 74:6b:b9:51:38:f4:79:ec:14:5c:21:c8:90:cf:38: 98:45:26:72:2f:de:05:95:51:3b:41:eb:14:96:3a: 7c:34:20:32:ea:67:48:ea:d3:1d:41:67:31:3c:08: 02:e0:a7:8f:8f:28:f2:56:57:ef:4d:32:01:77:9b: 72:a1:c9:f1:89:7e:80:ba:7b:1c:ee:11:e3:9b:da: 3e:67:7d:5f:ce:a2:f9:43:d8:fd:fc:eb:55:96:9a: e5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:10:0F:06:80:A6:5E:56:1A:DA:DE:CF:92:92:27:D5:85:9F:EC:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/39d37bab-e9cc-3fec-86ef-a7daf491525a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.crl X509v3 Authority Key Identifier: keyid:26:8A:F6:F1:2E:71:87:80:43:C2:38:B0:55:54:13:96:4B:65:B8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984.cer sbgp-ipAddrBlock: critical IPv6: 2602:f6fc::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:44:21:aa:bf:7f:b2:18:03:3a:ae:c6:24:37:f3:e9:e8:e0: ad:5e:0b:d6:05:c8:46:ec:f5:fd:0a:04:73:26:74:66:81:18: e1:35:05:1f:9e:ed:33:07:69:78:1d:13:06:fc:f6:8d:0d:84: 81:5c:44:79:26:37:3c:33:93:eb:30:d0:7e:52:6f:be:10:c8: 0b:54:0e:14:ea:19:87:f6:94:e1:88:38:d3:c2:f2:21:d4:84: 9a:25:20:07:62:76:1c:4d:09:5d:58:fa:ce:be:ea:51:f9:fa: 2a:22:d5:2f:9e:79:0d:1f:f1:68:06:8a:91:50:cc:51:ed:24: 63:2f:0a:74:bc:8d:6d:5b:9d:8b:85:22:5d:e3:45:cc:8d:09: dd:34:4b:1f:6b:dd:3f:c2:17:76:4d:33:28:d8:1f:7e:7c:87: e7:07:55:44:0d:34:64:59:99:57:56:cb:0c:10:4b:47:f1:64: 00:fa:d6:ac:a2:9a:4b:29:62:54:73:31:e7:f0:ae:86:57:ca: 99:2d:f8:4a:64:aa:3e:90:ee:c8:34:03:dc:56:e2:f2:b7:0b: 08:62:d6:93:21:a5:65:bc:ef:ee:33:1d:65:6a:0e:db:f7:ce: a5:3d:77:a4:b4:b5:bc:b2:79:d9:51:eb:34:13:d5:dc:dc:2e: ea:a5:79:7e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElpHh//CzQl9UjwPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRlMjY4NmMtZjJjNy00ZTQ2LWJmYjMtODVhNzhmNjAy OTg0MB4XDTI1MDQwNDA0MzQyNFoXDTI1MDcwMzA0MzQyNFowLzEtMCsGA1UEAxMk M2E3MjI4OTgtOTgxZS00ZWNjLTk1Y2QtYjhjMWMwOTEzMGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs8a3XJlRgofFyZIhGKcHX8Pfs6igkOt/K52 uUgTdc0SD3za2UXRN8svh80CI7Pk2HGjro6n3IwvwvtmfqQZpMvS2ZG8nP5dYwG7 2igTzgYyhgr+m76Yp1QA3ge83B/SdKNRTA9jWoknFIHv7JuitkPbbc9T4XUeljgJ 4Ev8g6z+1/mNpfXTPn2H7Ua/Or1Pi7/oJnFIUCVuljfxal+zIZ3KvSp0a7lROPR5 7BRcIciQzziYRSZyL94FlVE7QesUljp8NCAy6mdI6tMdQWcxPAgC4KePjyjyVlfv TTIBd5tyocnxiX6Aunsc7hHjm9o+Z31fzqL5Q9j9/OtVlprlcQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAwQDwaApl5WGtrez5KSJ9WFn+xxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZGUy Njg2Yy1mMmM3LTRlNDYtYmZiMy04NWE3OGY2MDI5ODQvMzlkMzdiYWItZTljYy0z ZmVjLTg2ZWYtYTdkYWY0OTE1MjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGRlMjY4NmMtZjJjNy00ZTQ2LWJm YjMtODVhNzhmNjAyOTg0LzhkZTI2ODZjLWYyYzctNGU0Ni1iZmIzLTg1YTc4ZjYw Mjk4NC5jcmwwHwYDVR0jBBgwFoAUJor28S5xh4BDwjiwVVQTlktluAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZGUyNjg2Yy1mMmM3LTRlNDYtYmZiMy04NWE3 OGY2MDI5ODQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL2/AAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAmUQhqr9/shgDOq7GJDfz6ejgrV4L1gXIRuz1/QoEcyZ0ZoEY4TUF H57tMwdpeB0TBvz2jQ2EgVxEeSY3PDOT6zDQflJvvhDIC1QOFOoZh/aU4Yg408Ly IdSEmiUgB2J2HE0JXVj6zr7qUfn6KiLVL555DR/xaAaKkVDMUe0kYy8KdLyNbVud i4UiXeNFzI0J3TRLH2vdP8IXdk0zKNgffnyH5wdVRA00ZFmZV1bLDBBLR/FkAPrW rKKaSyliVHMx5/CuhlfKmS34SmSqPpDuyDQD3Fbi8rcLCGLWkyGlZbzv7jMdZWoO 2/fOpT13pLS1vLJ52VHrNBPV3Nwu6qV5fg== -----END CERTIFICATE-----Generated at Wed Apr 9 01:02:39 2025 by rpki-client