$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/f94d6a37-f85f-3ce3-9668-65bc8993f7a3.roa File: f94d6a37-f85f-3ce3-9668-65bc8993f7a3.roa (raw, json) Hash identifier: 8wQiCrwStj6dU2CwzqfFsNQlVCDMPWz6nskAwwoSjRY= Subject key identifier: 02:69:86:10:CD:BF:E4:54:80:3B:89:C4:9A:EE:2A:5F:CC:F7:85:EB Certificate issuer: /CN=1a767fb3-0911-435a-a3a4-189b82622157 Certificate serial: 010D0C9F43285848F9267F8111F55754AB75DB80 Authority key identifier: 31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/f94d6a37-f85f-3ce3-9668-65bc8993f7a3.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 400919 IP address blocks: 2602:817:2001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:7f:81:11:f5:57:54:ab:75:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a767fb3-0911-435a-a3a4-189b82622157 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=9052c01d-ccb9-4d21-abd0-52912b7b85b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:99:1c:f3:d0:87:38:ca:ca:09:04:e7:cc:cf: 4e:64:73:1f:ec:17:d0:5e:6e:cd:00:ab:d6:f5:e8: f0:fa:08:13:5b:13:13:95:de:14:42:c4:0f:e7:97: 0c:52:77:e5:0e:88:ea:74:b5:99:f1:87:0a:3e:9f: 21:24:a0:6e:ff:71:0d:1e:83:04:af:aa:20:44:a6: df:35:d1:a5:c8:35:18:51:66:ab:02:9a:04:01:a1: cd:0f:48:c5:17:e1:4e:7e:ff:4e:2e:ec:04:d6:b4: f2:23:22:1f:e2:bd:73:74:a3:07:7f:1a:88:51:62: 53:7c:7c:d6:19:4a:4a:df:6c:b3:1e:35:cb:96:fb: 2a:49:4f:ce:6c:96:57:e7:18:f3:48:b1:c7:69:40: c6:a9:b3:a1:70:0c:ef:ea:1a:8a:66:ac:27:df:ee: ef:e6:0f:6c:04:55:fe:c4:6a:ac:89:04:7d:35:6a: ed:a3:8f:1c:2f:49:61:ae:71:69:49:59:06:c9:9a: a6:e5:86:ac:90:be:03:18:71:ab:fa:5a:6f:8f:cd: 8e:26:e4:9c:c5:9f:56:6a:33:2d:f6:b9:bb:da:f3: 02:f4:0b:88:71:bf:11:3e:eb:ef:90:03:5c:dc:98: bd:59:36:af:00:3e:3b:49:78:53:e2:03:27:b4:1a: 74:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:69:86:10:CD:BF:E4:54:80:3B:89:C4:9A:EE:2A:5F:CC:F7:85:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/f94d6a37-f85f-3ce3-9668-65bc8993f7a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl X509v3 Authority Key Identifier: keyid:31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer sbgp-ipAddrBlock: critical IPv6: 2602:817:2001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:86:cc:22:a3:98:89:f2:68:66:ed:da:66:2b:35:5b:29:46: 7f:85:25:0d:44:9c:d9:a2:c4:56:d2:09:d9:2d:bf:f9:e4:76: 9a:af:54:b7:c2:e3:2b:05:74:c5:43:df:2b:fb:61:38:37:ff: a0:fc:89:88:63:8e:09:ec:f1:d5:5b:c3:d7:b4:28:06:8d:21: 37:85:b8:71:27:9f:e4:47:67:b9:06:a5:b6:12:fe:d6:6e:fd: f1:52:59:0b:b8:51:11:64:d8:30:4a:5b:01:24:f8:00:48:04: 97:25:5b:e8:79:2e:97:5d:29:2a:7b:4b:9b:7d:03:51:c4:bc: 8e:c0:3a:57:09:25:8a:c5:4d:44:51:ba:ee:13:ec:92:c8:23: 79:00:25:a1:b0:22:61:f2:5f:d7:16:73:40:2e:c8:ce:27:07: ca:72:d6:ae:c9:ff:1f:0c:d1:04:59:00:22:9f:0d:03:3c:bb: 59:45:8d:55:93:c1:fa:33:92:bc:1b:69:80:c0:41:ad:42:ec: 85:ee:18:b5:3c:8a:94:58:ba:b1:1e:a8:85:d2:cb:3b:b7:9d: b2:e9:c9:c4:11:c6:23:47:1c:3a:aa:86:e0:db:e9:4d:2e:65: 52:ce:19:59:8e:4f:60:84:68:55:66:16:e8:c5:ba:4d:c2:d5: 98:2d:2b:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Jn+BEfVXVKt124AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3NjdmYjMtMDkxMS00MzVhLWEzYTQtMTg5YjgyNjIy MTU3MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk OTA1MmMwMWQtY2NiOS00ZDIxLWFiZDAtNTI5MTJiN2I4NWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5kc89CHOMrKCQTnzM9OZHMf7BfQXm7NAKvW 9ejw+ggTWxMTld4UQsQP55cMUnflDojqdLWZ8YcKPp8hJKBu/3ENHoMEr6ogRKbf NdGlyDUYUWarApoEAaHND0jFF+FOfv9OLuwE1rTyIyIf4r1zdKMHfxqIUWJTfHzW GUpK32yzHjXLlvsqSU/ObJZX5xjzSLHHaUDGqbOhcAzv6hqKZqwn3+7v5g9sBFX+ xGqsiQR9NWrto48cL0lhrnFpSVkGyZqm5YaskL4DGHGr+lpvj82OJuScxZ9WajMt 9rm72vMC9AuIcb8RPuvvkANc3Ji9WTavAD47SXhT4gMntBp0WwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAJphhDNv+RUgDuJxJruKl/M94XrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xYTc2 N2ZiMy0wOTExLTQzNWEtYTNhNC0xODliODI2MjIxNTcvZjk0ZDZhMzctZjg1Zi0z Y2UzLTk2NjgtNjViYzg5OTNmN2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWE3NjdmYjMtMDkxMS00MzVhLWEz YTQtMTg5YjgyNjIyMTU3LzFhNzY3ZmIzLTA5MTEtNDM1YS1hM2E0LTE4OWI4MjYy MjE1Ny5jcmwwHwYDVR0jBBgwFoAUMZd8fKTs1HliGSxrDAQkrzTVdKEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xYTc2N2ZiMy0wOTExLTQzNWEtYTNhNC0xODli ODI2MjIxNTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFyAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGGGzCKjmInyaGbt2mYrNVspRn+FJQ1EnNmixFbSCdktv/nkdpqv VLfC4ysFdMVD3yv7YTg3/6D8iYhjjgns8dVbw9e0KAaNITeFuHEnn+RHZ7kGpbYS /tZu/fFSWQu4URFk2DBKWwEk+ABIBJclW+h5LpddKSp7S5t9A1HEvI7AOlcJJYrF TURRuu4T7JLII3kAJaGwImHyX9cWc0AuyM4nB8py1q7J/x8M0QRZACKfDQM8u1lF jVWTwfozkrwbaYDAQa1C7IXuGLU8ipRYurEeqIXSyzu3nbLpycQRxiNHHDqqhuDb 6U0uZVLOGVmOT2CEaFVmFujFuk3C1ZgtK64= -----END CERTIFICATE-----Generated at Sat May 10 20:45:23 2025 by rpki-client