$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0cb38d74-458d-38cf-812d-f7d06a80bf74.roa File: 0cb38d74-458d-38cf-812d-f7d06a80bf74.roa (raw, json) Hash identifier: r+ustKidD3kFUrfLBeOPUlygT+l+NuGZxLM3WG9hiDY= Subject key identifier: 9D:63:AE:78:49:F5:1F:C9:55:B8:BA:FB:10:2D:49:2A:B2:79:55:E9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848E59BB78AF6FCF696BD683718 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0cb38d74-458d-38cf-812d-f7d06a80bf74.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 8075 IP address blocks: 2602:fd5e:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:b7:8a:f6:fc:f6:96:bd:68:37:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=08e2675f-3fa1-4155-a7f9-396be3a8c00b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:75:d3:78:2c:3c:b5:81:83:17:89:6d:74:cc: db:3e:ae:32:f7:89:11:34:c2:fe:79:d1:d3:3d:93: 9c:09:f7:e9:04:3c:86:e2:ea:c1:a1:f0:2c:9c:3d: 9e:bd:c3:da:8a:18:eb:6b:c9:d4:28:0b:50:40:9d: 48:36:ef:e5:ec:ce:63:24:db:52:44:0e:0c:ba:2a: 9c:a2:12:82:c8:31:19:c8:1b:e5:88:29:6b:4a:6f: f8:ee:e6:91:a6:f1:06:4c:40:b9:88:ce:a6:d1:27: ae:37:22:a2:a7:6c:b1:02:d0:58:7b:3a:8e:20:b9: dd:22:ca:b4:74:3b:f1:40:04:53:00:85:6b:53:16: de:b6:0f:57:5a:eb:87:de:55:55:e7:e0:97:29:af: 7d:a9:0b:89:af:29:79:f9:fe:cd:5a:26:cf:87:da: a8:2c:fb:fb:63:99:39:83:05:69:2c:2c:e2:7c:69: f6:67:c7:cd:16:e9:20:01:66:2e:0a:b0:25:a6:74: 5c:e1:4a:5b:fd:a6:ce:5d:e1:da:f0:50:69:07:01: e7:6c:0b:32:b6:6f:14:5e:8a:fd:62:d1:00:4e:10: 6f:c3:0d:fc:38:fa:8b:8c:b5:d6:ee:aa:7b:13:ce: 04:06:08:7b:60:32:f2:8c:a2:7c:d3:f9:9e:ee:9f: 40:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:63:AE:78:49:F5:1F:C9:55:B8:BA:FB:10:2D:49:2A:B2:79:55:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0cb38d74-458d-38cf-812d-f7d06a80bf74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd5e:5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:8d:30:9e:4d:a0:7f:08:11:9b:b0:f4:f5:b6:dd:bc:d3:b6: c0:21:0b:24:da:e1:e3:a0:b3:89:69:b6:27:e6:3f:49:b8:1f: 0f:2d:37:33:76:e3:1c:bd:e9:65:e8:e4:8f:bf:57:ce:ac:2e: ae:17:d0:a5:0a:36:88:4b:7d:88:54:e1:0c:aa:b4:aa:bb:14: 0e:7e:dd:3d:9f:fb:8d:d9:9e:0a:b5:17:d1:0a:46:32:1b:47: 8b:cc:04:11:68:b0:5a:9c:a7:66:9e:02:77:90:e8:54:aa:5d: 3d:34:6b:e9:b4:32:3b:db:8a:1f:1f:e5:84:69:d1:88:49:f4: c2:0e:be:6d:3f:59:77:e9:e5:bc:52:c4:cf:b2:ff:3e:c7:a6: 5a:bc:8f:cb:a2:0d:ee:8e:fb:ee:15:97:72:13:df:3a:71:9b: f4:14:c8:b2:d5:71:43:9e:b3:45:51:08:e8:6e:91:81:d4:87: 21:9f:be:d0:a0:35:80:c8:a9:e6:87:af:ac:94:7b:ea:d4:bc: b6:b6:0d:5e:78:89:b5:03:a7:ec:af:c6:e6:9e:75:5b:21:ea: 7a:99:fd:29:54:3a:2e:a4:25:06:8b:7a:b7:99:e2:a2:19:3e: 1e:f9:2f:2b:eb:e7:1b:a5:19:ea:37:94:31:6c:43:5f:96:d5: 74:85:13:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjlm7eK9vz2lr1oNxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk MDhlMjY3NWYtM2ZhMS00MTU1LWE3ZjktMzk2YmUzYThjMDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3XTeCw8tYGDF4ltdMzbPq4y94kRNML+edHT PZOcCffpBDyG4urBofAsnD2evcPaihjra8nUKAtQQJ1INu/l7M5jJNtSRA4Muiqc ohKCyDEZyBvliClrSm/47uaRpvEGTEC5iM6m0SeuNyKip2yxAtBYezqOILndIsq0 dDvxQARTAIVrUxbetg9XWuuH3lVV5+CXKa99qQuJryl5+f7NWibPh9qoLPv7Y5k5 gwVpLCzifGn2Z8fNFukgAWYuCrAlpnRc4Upb/abOXeHa8FBpBwHnbAsytm8UXor9 YtEAThBvww38OPqLjLXW7qp7E84EBgh7YDLyjKJ80/me7p9ADQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ1jrnhJ9R/JVbi6+xAtSSqyeVXpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMGNiMzhkNzQtNDU4ZC0z OGNmLTgxMmQtZjdkMDZhODBiZjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9XgAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ2NMJ5NoH8IEZuw9PW23bzTtsAhCyTa4eOgs4lptifmP0m4Hw8t NzN24xy96WXo5I+/V86sLq4X0KUKNohLfYhU4QyqtKq7FA5+3T2f+43Zngq1F9EK RjIbR4vMBBFosFqcp2aeAneQ6FSqXT00a+m0Mjvbih8f5YRp0YhJ9MIOvm0/WXfp 5bxSxM+y/z7Hplq8j8uiDe6O++4Vl3IT3zpxm/QUyLLVcUOes0VRCOhukYHUhyGf vtCgNYDIqeaHr6yUe+rUvLa2DV54ibUDp+yvxuaedVsh6nqZ/SlUOi6kJQaLereZ 4qIZPh75Lyvr5xulGeo3lDFsQ1+W1XSFE7g= -----END CERTIFICATE-----Generated at Tue Apr 8 23:36:32 2025 by rpki-client