$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/d081b8cf-9f69-3201-9281-293c163a8a96.roa File: d081b8cf-9f69-3201-9281-293c163a8a96.roa (raw, json) Hash identifier: cneliz/a4Y4z1iSJgcOyvZd1/+4qRQJ5d/YhpW/nX5w= Subject key identifier: 8C:81:57:9C:9F:B5:1C:12:F5:05:8E:CE:A2:40:DD:CB:45:7D:EA:CB Certificate issuer: /CN=1d394508-6160-4e82-89e3-165fa2784b30 Certificate serial: 010D0C9F432858492CAE82F0CA86736C5B11B680 Authority key identifier: A7:07:57:CD:77:D3:59:F3:D3:90:A9:EB:AB:C5:B6:1D:F8:B9:28:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/d081b8cf-9f69-3201-9281-293c163a8a96.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 399214 IP address blocks: 2602:803:b000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:82:f0:ca:86:73:6c:5b:11:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d394508-6160-4e82-89e3-165fa2784b30 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=7722fc19-0556-4573-a96b-78cbfd13e4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1f:b2:aa:f1:e0:0d:95:64:de:81:85:2d:bd: 93:bc:c7:05:95:43:07:52:bd:3c:97:97:a9:1c:94: 3c:56:bf:18:bb:a4:b6:98:e0:f7:60:20:ef:a5:46: 63:12:ee:52:2a:b3:91:f7:ae:8d:74:68:3d:fb:f5: b8:74:af:45:4b:3b:f5:ee:6e:f7:e8:9a:9f:68:6e: 29:b2:40:38:1b:4e:42:34:44:52:54:ca:13:8e:0a: ae:3c:a1:65:20:37:97:94:3b:83:a3:da:ed:a2:a2: 45:f6:d3:1d:52:5b:f2:55:c4:8d:a8:61:15:ee:76: 9a:14:8b:c1:2d:5f:40:15:3c:b4:3d:31:4d:a0:f3: e9:8c:7a:65:56:6b:f6:bf:85:17:10:14:ea:e6:16: 93:0c:53:e6:9f:13:43:8d:c8:bc:f8:1d:75:02:86: b7:9e:9b:45:87:30:2f:be:f7:f8:8d:72:09:0a:ca: 71:e0:bb:83:a9:00:37:0d:82:c3:cb:bb:ad:92:ae: 43:92:d9:66:70:73:79:9a:67:4f:3f:c7:18:70:4b: 65:5a:3c:84:82:9b:77:28:8e:39:df:70:4d:66:32: 3f:ca:53:b5:c5:9b:8b:ba:92:fa:34:e5:50:ad:4d: 6f:e3:7e:c3:b9:67:f8:a6:c8:e0:53:9d:55:69:11: 17:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:81:57:9C:9F:B5:1C:12:F5:05:8E:CE:A2:40:DD:CB:45:7D:EA:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/d081b8cf-9f69-3201-9281-293c163a8a96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.crl X509v3 Authority Key Identifier: keyid:A7:07:57:CD:77:D3:59:F3:D3:90:A9:EB:AB:C5:B6:1D:F8:B9:28:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30.cer sbgp-ipAddrBlock: critical IPv6: 2602:803:b000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:ff:d3:a4:c3:e2:00:e0:9c:6b:a0:9c:3c:87:88:d0:bc:2f: c9:7d:aa:0d:2f:2d:fb:60:89:eb:dd:81:e7:70:fc:3b:47:de: bd:6e:7e:88:57:f0:14:53:ff:e3:19:74:ca:8d:66:fb:39:94: 5c:d1:28:62:f8:b6:bb:0c:8b:b3:e1:1d:05:65:9f:39:01:8d: 7b:95:b0:f6:2a:ac:c6:31:92:c2:c0:96:2f:fd:62:e2:96:2d: ba:a4:e2:c3:b5:88:17:d0:b1:7c:69:63:e3:63:24:95:c2:3f: 6f:07:b8:48:2f:42:97:c2:f2:d0:81:fd:62:fc:9c:69:e7:64: 1a:79:bd:38:9a:97:4d:67:14:e0:45:a9:c4:60:25:bf:13:07: 73:a6:38:5d:05:9f:93:3f:92:11:90:85:a8:8a:2e:57:32:f7: e8:1c:ca:0a:36:d1:1d:ba:2e:e6:e7:18:f3:3f:f2:a3:c7:3f: 45:c0:2e:10:d9:d2:72:6a:17:c1:c3:77:54:c9:62:f3:52:65: a2:29:a3:db:90:b3:93:1d:cf:d6:94:cd:2a:ad:2d:2c:66:8b: 7b:9c:f1:ed:6d:e7:13:fc:a4:dd:7e:a2:13:72:3c:51:10:61: e3:95:96:0d:75:f9:28:2a:42:c1:a3:8d:cb:2e:9f:ac:69:10: 89:c7:dc:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEksroLwyoZzbFsRtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQzOTQ1MDgtNjE2MC00ZTgyLTg5ZTMtMTY1ZmEyNzg0 YjMwMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NzcyMmZjMTktMDU1Ni00NTczLWE5NmItNzhjYmZkMTNlNGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx+yqvHgDZVk3oGFLb2TvMcFlUMHUr08l5ep HJQ8Vr8Yu6S2mOD3YCDvpUZjEu5SKrOR966NdGg9+/W4dK9FSzv17m736JqfaG4p skA4G05CNERSVMoTjgquPKFlIDeXlDuDo9rtoqJF9tMdUlvyVcSNqGEV7naaFIvB LV9AFTy0PTFNoPPpjHplVmv2v4UXEBTq5haTDFPmnxNDjci8+B11Aoa3nptFhzAv vvf4jXIJCspx4LuDqQA3DYLDy7utkq5DktlmcHN5mmdPP8cYcEtlWjyEgpt3KI45 33BNZjI/ylO1xZuLupL6NOVQrU1v437DuWf4psjgU51VaREXMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIyBV5yftRwS9QWOzqJA3ctFferLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDM5 NDUwOC02MTYwLTRlODItODllMy0xNjVmYTI3ODRiMzAvZDA4MWI4Y2YtOWY2OS0z MjAxLTkyODEtMjkzYzE2M2E4YTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQzOTQ1MDgtNjE2MC00ZTgyLTg5 ZTMtMTY1ZmEyNzg0YjMwLzFkMzk0NTA4LTYxNjAtNGU4Mi04OWUzLTE2NWZhMjc4 NGIzMC5jcmwwHwYDVR0jBBgwFoAUpwdXzXfTWfPTkKnrq8W2Hfi5KEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDM5NDUwOC02MTYwLTRlODItODllMy0xNjVm YTI3ODRiMzAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIA7AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJv/06TD4gDgnGugnDyHiNC8L8l9qg0vLftgievdgedw/DtH3r1u fohX8BRT/+MZdMqNZvs5lFzRKGL4trsMi7PhHQVlnzkBjXuVsPYqrMYxksLAli/9 YuKWLbqk4sO1iBfQsXxpY+NjJJXCP28HuEgvQpfC8tCB/WL8nGnnZBp5vTial01n FOBFqcRgJb8TB3OmOF0Fn5M/khGQhaiKLlcy9+gcygo20R26LubnGPM/8qPHP0XA LhDZ0nJqF8HDd1TJYvNSZaIpo9uQs5Mdz9aUzSqtLSxmi3uc8e1t5xP8pN1+ohNy PFEQYeOVlg11+SgqQsGjjcsun6xpEInH3LA= -----END CERTIFICATE-----Generated at Sun May 11 11:13:03 2025 by rpki-client