$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/aa6edd1b-b21d-3723-b648-9690764ac2c6.roa File: aa6edd1b-b21d-3723-b648-9690764ac2c6.roa (raw, json) Hash identifier: yi2SJHYWw3UdSn6z760vo1MEHoi3SqPnQByBRYhndRs= Subject key identifier: A3:50:71:8B:EF:8F:3B:9A:4F:24:5B:94:12:DD:71:E1:95:D5:A5:DD Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F43285848EF616C1EF3F85760C41CBC80 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/aa6edd1b-b21d-3723-b648-9690764ac2c6.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 19637 IP address blocks: 2602:275:568::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:6c:1e:f3:f8:57:60:c4:1c:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=5c03989e-0184-4ce1-a4a6-7bb3364ee7c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e4:63:39:e6:a3:9d:54:dd:c5:44:75:9f:a2: 61:eb:cf:f4:d0:e8:82:d4:b7:29:19:5d:51:3d:8b: 0f:c8:4e:09:9e:21:5c:66:db:b8:b8:60:27:bf:8e: 05:f4:08:95:e8:99:7d:a6:b1:73:58:e5:92:d2:a4: 13:04:75:4e:1f:97:a2:df:c7:8d:c2:86:42:8d:83: 81:1f:c1:54:68:22:97:6f:ad:05:41:1a:ca:27:d9: 7c:a3:6f:6e:f0:44:6b:02:99:7b:1e:72:af:3a:db: a7:99:8c:85:76:f0:f6:47:46:bf:b0:a1:99:c7:4d: a1:ca:23:ec:e4:b1:63:78:0a:0a:6f:00:46:c4:b1: d5:52:8f:42:31:49:93:b6:f5:a8:f6:33:ae:31:b4: c4:e8:ed:af:c1:b6:b8:ac:a2:83:04:5f:12:7d:c0: 18:71:3c:53:ec:41:e4:a7:09:27:db:4b:68:dd:13: f2:c5:35:e1:61:cc:9d:c5:8f:7d:17:7d:99:12:18: bb:4f:23:ca:0c:0c:e6:43:d2:01:0a:5e:98:8a:1b: 44:81:c1:a1:e9:bb:95:cf:78:54:84:fa:8a:16:e2: 05:e6:d8:aa:d6:b2:41:f1:57:be:c7:93:7e:a7:d2: 23:0e:5d:55:60:91:61:5f:cb:34:a7:ef:e0:3d:78: 64:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:50:71:8B:EF:8F:3B:9A:4F:24:5B:94:12:DD:71:E1:95:D5:A5:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/aa6edd1b-b21d-3723-b648-9690764ac2c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv6: 2602:275:568::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:13:8d:3e:b1:fa:ac:8c:1f:4c:a7:b1:99:20:6a:a1:29:ff: 2b:e4:98:e4:a3:6f:02:fa:45:74:57:68:7c:86:c5:cf:7f:ad: 68:c9:b4:59:0d:81:29:c6:80:09:a3:8c:ca:2a:f5:f6:3a:09: 9d:d9:04:66:dd:b8:d9:84:da:6b:6e:1a:43:1e:df:88:4d:93: 1c:a6:b1:78:13:2f:b5:90:b2:17:6f:44:a1:45:47:b0:4b:fe: b5:c1:2a:aa:78:e8:36:18:8e:52:e3:b6:98:9f:60:4d:b6:b7: 35:ed:ae:9e:1d:eb:70:9b:58:5f:49:a8:a3:43:e7:67:d5:e9: 94:f4:12:42:3f:d4:6f:22:05:8b:87:ad:b5:78:74:0f:db:ea: f6:5d:cb:18:57:d1:ed:b2:46:e5:d2:0f:44:63:85:4f:bd:d6: 0d:ce:6f:8e:5f:f7:47:5b:fc:ef:2f:96:d5:ee:bd:5b:b4:1c: 05:30:59:e1:25:31:98:e2:82:01:27:69:4b:ad:1c:7c:d7:97: 20:bf:ef:9e:b2:e0:20:91:39:56:1b:6e:be:ec:f0:3c:f7:70: 42:97:f5:b2:30:b7:91:3b:0a:20:d7:0b:9a:b3:c3:c0:21:3a: 44:cb:5e:36:59:2d:e9:ac:09:d5:10:be:d7:26:9c:a3:d2:71: ce:0a:0d:1f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjvYWwe8/hXYMQcvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NWMwMzk4OWUtMDE4NC00Y2UxLWE0YTYtN2JiMzM2NGVlN2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwORjOeajnVTdxUR1n6Jh68/00OiC1LcpGV1R PYsPyE4JniFcZtu4uGAnv44F9AiV6Jl9prFzWOWS0qQTBHVOH5ei38eNwoZCjYOB H8FUaCKXb60FQRrKJ9l8o29u8ERrApl7HnKvOtunmYyFdvD2R0a/sKGZx02hyiPs 5LFjeAoKbwBGxLHVUo9CMUmTtvWo9jOuMbTE6O2vwba4rKKDBF8SfcAYcTxT7EHk pwkn20to3RPyxTXhYcydxY99F32ZEhi7TyPKDAzmQ9IBCl6YihtEgcGh6buVz3hU hPqKFuIF5tiq1rJB8Ve+x5N+p9IjDl1VYJFhX8s0p+/gPXhk1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKNQcYvvjzuaTyRblBLdceGV1aXdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvYWE2ZWRkMWItYjIxZC0z NzIzLWI2NDgtOTY5MDc2NGFjMmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICdQVo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJATjT6x+qyMH0ynsZkgaqEp/yvkmOSjbwL6RXRXaHyGxc9/rWjJ tFkNgSnGgAmjjMoq9fY6CZ3ZBGbduNmE2mtuGkMe34hNkxymsXgTL7WQshdvRKFF R7BL/rXBKqp46DYYjlLjtpifYE22tzXtrp4d63CbWF9JqKND52fV6ZT0EkI/1G8i BYuHrbV4dA/b6vZdyxhX0e2yRuXSD0RjhU+91g3Ob45f90db/O8vltXuvVu0HAUw WeElMZjiggEnaUutHHzXlyC/756y4CCROVYbbr7s8Dz3cEKX9bIwt5E7CiDXC5qz w8AhOkTLXjZZLemsCdUQvtcmnKPScc4KDR8= -----END CERTIFICATE-----Generated at Sat Apr 5 07:41:36 2025 by rpki-client