$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/0a51f7a7-6093-350a-b89b-eadb921943f9.roa File: 0a51f7a7-6093-350a-b89b-eadb921943f9.roa (raw, json) Hash identifier: qMbkI0IXNOA8q7b1B80YJ4Wb5Rt1RYj14WJSDjKgzuo= Subject key identifier: 23:25:39:48:EB:9F:94:E5:DC:F1:07:13:6D:9C:F9:00:82:C7:C4:97 Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584924148971434245FAC5DC2C40 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/0a51f7a7-6093-350a-b89b-eadb921943f9.roa Signing time: Mon 10 Mar 2025 11:04:18 +0000 ROA not before: Mon 10 Mar 2025 11:04:18 +0000 ROA not after: Sun 08 Jun 2025 11:04:18 +0000 asID: 19637 IP address blocks: 2602:274:518::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:14:89:71:43:42:45:fa:c5:dc:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Mar 10 11:04:18 2025 GMT Not After : Jun 8 11:04:18 2025 GMT Subject: CN=a2d3472d-9656-4cf0-9642-f677dc01aff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:44:58:bf:02:47:44:8d:60:d8:58:cb:c7:21: 04:b5:50:58:8d:49:c1:7d:e7:f7:e0:71:fe:73:c2: 29:95:31:78:f7:3a:b8:6d:92:3b:ff:a7:29:32:7c: 11:4f:bf:72:86:34:be:92:98:eb:e4:53:2e:5e:94: 62:e4:9b:0b:69:48:60:ed:65:fe:e0:a9:da:a2:ed: 6d:ba:16:ae:94:60:a1:89:2e:ae:ed:56:99:5e:f0: 7c:ce:25:82:46:30:3a:b4:74:c6:cd:0a:f2:96:7e: 9a:e1:5f:be:b6:d1:c8:8c:42:0a:1b:ec:29:e2:76: ba:60:7b:bd:4a:72:fc:13:a5:65:f5:90:0e:7a:f9: 78:d4:42:3c:ca:32:02:56:01:91:0e:47:af:8c:f3: 6e:b5:f7:68:7a:91:5f:a8:c2:48:c5:4e:9d:d9:41: 3a:76:07:7a:18:6e:18:00:c9:66:90:7f:11:66:c7: 78:1f:11:0e:4f:8d:42:dc:11:18:3c:3d:b0:fd:d8: e1:a7:70:b8:9d:20:11:83:83:87:4a:d0:6e:eb:fe: ff:3e:18:e2:a4:c0:23:7f:15:e7:bf:fa:0e:c1:d9: a7:b6:8d:89:1c:a9:3a:0a:24:0d:68:fa:7a:27:d9: 8d:ee:68:b4:ab:5f:7f:0e:15:d8:06:67:81:1e:ac: 10:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:25:39:48:EB:9F:94:E5:DC:F1:07:13:6D:9C:F9:00:82:C7:C4:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/0a51f7a7-6093-350a-b89b-eadb921943f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv6: 2602:274:518::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:59:cc:91:3f:4a:56:5e:51:25:7e:62:3e:8d:06:f1:1d:bc: 77:80:66:66:c9:88:4b:9d:0c:4e:78:bd:43:cf:78:97:f5:a9: 99:d3:da:06:41:51:f5:26:0b:44:62:32:c6:30:03:12:e1:78: 64:9e:66:66:5a:d9:97:76:21:84:0d:39:f5:af:ed:75:e7:26: 11:e6:19:bc:13:d0:f5:ae:8c:cc:e3:34:0f:ad:33:f1:17:73: b6:4f:5a:39:69:fc:0e:43:ad:be:2f:71:1a:dc:8b:37:98:b4: 37:53:2f:f6:8b:ff:ae:20:47:1a:26:00:07:a0:7a:56:73:d7: 79:f9:5e:fd:c2:28:80:ef:5b:21:21:65:fc:0d:7f:14:b5:20: 54:ef:ac:fe:73:ea:b2:fe:37:bd:4c:fe:1f:76:1c:53:c1:30: 68:81:0d:d5:f3:fb:9b:92:59:ae:97:fd:25:87:5d:79:78:07: 2d:b2:a1:e0:e9:8c:2c:63:8f:22:dd:69:36:0b:82:3f:d2:6e: f1:2a:e1:9b:02:cf:ef:c4:1e:07:d7:5e:b6:bb:84:88:73:b6: fd:6a:dd:f3:e1:9a:77:d9:9d:68:3a:4f:d1:d1:02:71:42:0e: e1:cd:dd:71:7c:0e:20:2e:ee:45:71:8f:82:c4:ac:6d:b5:98: 30:dc:86:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkkFIlxQ0JF+sXcLEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI1MDMxMDExMDQxOFoXDTI1MDYwODExMDQxOFowLzEtMCsGA1UEAxMk YTJkMzQ3MmQtOTY1Ni00Y2YwLTk2NDItZjY3N2RjMDFhZmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0RYvwJHRI1g2FjLxyEEtVBYjUnBfef34HH+ c8IplTF49zq4bZI7/6cpMnwRT79yhjS+kpjr5FMuXpRi5JsLaUhg7WX+4Knaou1t uhaulGChiS6u7VaZXvB8ziWCRjA6tHTGzQryln6a4V++ttHIjEIKG+wp4na6YHu9 SnL8E6Vl9ZAOevl41EI8yjICVgGRDkevjPNutfdoepFfqMJIxU6d2UE6dgd6GG4Y AMlmkH8RZsd4HxEOT41C3BEYPD2w/djhp3C4nSARg4OHStBu6/7/PhjipMAjfxXn v/oOwdmnto2JHKk6CiQNaPp6J9mN7mi0q19/DhXYBmeBHqwQxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCMlOUjrn5Tl3PEHE22c+QCCx8SXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvMGE1MWY3YTctNjA5My0z NTBhLWI4OWItZWFkYjkyMTk0M2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICdAUY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI1ZzJE/SlZeUSV+Yj6NBvEdvHeAZmbJiEudDE54vUPPeJf1qZnT 2gZBUfUmC0RiMsYwAxLheGSeZmZa2Zd2IYQNOfWv7XXnJhHmGbwT0PWujMzjNA+t M/EXc7ZPWjlp/A5Drb4vcRrcizeYtDdTL/aL/64gRxomAAegelZz13n5Xv3CKIDv WyEhZfwNfxS1IFTvrP5z6rL+N71M/h92HFPBMGiBDdXz+5uSWa6X/SWHXXl4By2y oeDpjCxjjyLdaTYLgj/SbvEq4ZsCz+/EHgfXXra7hIhztv1q3fPhmnfZnWg6T9HR AnFCDuHN3XF8DiAu7kVxj4LErG21mDDchgs= -----END CERTIFICATE-----Generated at Sat Apr 5 10:02:10 2025 by rpki-client