$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/aefaebc1-2c19-3fb6-a4cc-28d0f4d042ff.roa File: aefaebc1-2c19-3fb6-a4cc-28d0f4d042ff.roa (raw, json) Hash identifier: bVxJBJ9KgPomNL+dDfENjR6BhCK09s5DdeHbj4dMglE= Subject key identifier: 8D:A9:7A:67:01:89:71:2A:A9:F7:AB:41:C5:FC:AB:53:AE:25:B4:BE Certificate issuer: /CN=37e69330-3024-406b-b60a-0d95e25f2334 Certificate serial: 010D0C9F4328584976A9913B8ED04DB9C07F3F80 Authority key identifier: 97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/aefaebc1-2c19-3fb6-a4cc-28d0f4d042ff.roa Signing time: Wed 09 Apr 2025 01:00:47 +0000 ROA not before: Wed 09 Apr 2025 01:00:47 +0000 ROA not after: Tue 08 Jul 2025 01:00:47 +0000 asID: 401390 IP address blocks: 2602:f7da:aa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:76:a9:91:3b:8e:d0:4d:b9:c0:7f:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37e69330-3024-406b-b60a-0d95e25f2334 Validity Not Before: Apr 9 01:00:47 2025 GMT Not After : Jul 8 01:00:47 2025 GMT Subject: CN=747507e5-884c-43a7-b267-ea65f7ed31a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:29:fb:1e:64:5e:a8:ae:20:f2:22:99:a6:8f: 9a:9e:35:9c:34:35:1d:a3:98:ea:03:91:d9:0a:b7: 69:dd:22:9d:d0:77:dc:d9:c8:c7:79:ee:18:f2:9f: f7:53:5e:d6:36:b1:16:90:af:3f:0d:93:f4:b8:21: 37:6f:37:0f:5e:c2:f7:56:ed:7e:23:45:5a:8d:f3: 7b:24:9b:82:94:f1:a2:48:a3:da:9e:7a:db:8b:54: 0b:9c:ca:77:fe:2e:f1:64:9c:20:03:64:79:b1:25: e7:cf:49:3d:2d:23:69:b3:2f:7f:65:42:0a:de:46: 56:67:f9:3b:cf:38:4a:c9:b0:7d:eb:22:f2:d0:77: b1:91:14:e7:44:39:e7:38:61:6e:a5:56:16:3d:92: dd:61:2f:cf:be:46:92:41:69:e6:99:e0:84:86:dc: bc:3d:49:21:a0:83:0c:5a:3e:37:0b:c1:2d:9d:f1: aa:c3:c0:a9:23:6c:ae:01:61:22:12:5b:15:f2:7f: 78:65:55:94:25:2f:62:08:22:95:d6:06:48:c3:9d: b8:10:c5:86:06:6c:bf:17:b6:45:44:44:00:c3:27: af:61:95:ed:c1:44:06:6b:42:58:95:85:1b:80:0a: 20:aa:4d:f9:3c:4b:78:e1:fd:b6:45:00:1e:d8:6a: 6c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A9:7A:67:01:89:71:2A:A9:F7:AB:41:C5:FC:AB:53:AE:25:B4:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/aefaebc1-2c19-3fb6-a4cc-28d0f4d042ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl X509v3 Authority Key Identifier: keyid:97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7da:aa::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:37:49:7f:97:d3:de:a9:95:73:fe:0b:88:f8:5e:c5:97:e3: 6f:46:77:56:35:22:67:08:92:06:2e:af:13:cb:30:53:5a:dd: b9:78:30:0f:65:4a:03:0c:74:4f:68:76:d3:f4:c0:2b:84:63: eb:a8:da:e1:6e:71:ef:53:e4:b0:5b:cc:c3:19:6a:6c:71:c3: a2:5e:18:28:fe:f1:6f:e1:a9:f9:e4:49:9e:72:09:54:4e:c2: 2e:bf:07:39:3a:6f:0c:3f:55:e7:cb:4d:b8:14:0d:aa:ce:9c: 57:89:2b:2b:54:a7:1d:c3:cc:a7:f0:26:79:59:b2:40:7e:27: 19:9b:a7:12:62:53:dc:8b:92:da:6a:0a:82:8c:80:0b:dd:f9: 12:8c:98:e4:e1:23:06:8d:be:13:d4:4f:e4:9f:c6:60:db:79: 29:7c:bd:c2:aa:23:dc:99:9c:e9:c1:c5:bf:c2:88:3e:cd:42: 66:e8:6e:11:46:ae:b3:82:e6:a7:86:0f:91:a5:09:06:ce:90: 54:2f:9e:9d:f5:f2:3a:ad:4b:65:ff:ec:04:c8:07:2b:d4:ce: 58:13:b9:a0:1c:15:0d:b4:43:34:ea:57:a0:b7:6e:1e:f9:0b: 93:60:c1:43:93:13:54:7a:a1:25:c9:85:b7:42:80:6e:3e:a1: 96:27:7a:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl2qZE7jtBNucB/P4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzdlNjkzMzAtMzAyNC00MDZiLWI2MGEtMGQ5NWUyNWYy MzM0MB4XDTI1MDQwOTAxMDA0N1oXDTI1MDcwODAxMDA0N1owLzEtMCsGA1UEAxMk NzQ3NTA3ZTUtODg0Yy00M2E3LWIyNjctZWE2NWY3ZWQzMWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyn7HmReqK4g8iKZpo+anjWcNDUdo5jqA5HZ Crdp3SKd0Hfc2cjHee4Y8p/3U17WNrEWkK8/DZP0uCE3bzcPXsL3Vu1+I0VajfN7 JJuClPGiSKPannrbi1QLnMp3/i7xZJwgA2R5sSXnz0k9LSNpsy9/ZUIK3kZWZ/k7 zzhKybB96yLy0HexkRTnRDnnOGFupVYWPZLdYS/PvkaSQWnmmeCEhty8PUkhoIMM Wj43C8EtnfGqw8CpI2yuAWEiElsV8n94ZVWUJS9iCCKV1gZIw524EMWGBmy/F7ZF REQAwyevYZXtwUQGa0JYlYUbgAogqk35PEt44f22RQAe2GpsSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI2pemcBiXEqqferQcX8q1OuJbS+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zN2U2 OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1ZTI1ZjIzMzQvYWVmYWViYzEtMmMxOS0z ZmI2LWE0Y2MtMjhkMGY0ZDA0MmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzdlNjkzMzAtMzAyNC00MDZiLWI2 MGEtMGQ5NWUyNWYyMzM0LzM3ZTY5MzMwLTMwMjQtNDA2Yi1iNjBhLTBkOTVlMjVm MjMzNC5jcmwwHwYDVR0jBBgwFoAUlxapq2aVPz8sQPwdM2OFp0XUZTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zN2U2OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1 ZTI1ZjIzMzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL32gCq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHI3SX+X096plXP+C4j4XsWX429Gd1Y1ImcIkgYurxPLMFNa3bl4 MA9lSgMMdE9odtP0wCuEY+uo2uFuce9T5LBbzMMZamxxw6JeGCj+8W/hqfnkSZ5y CVROwi6/Bzk6bww/VefLTbgUDarOnFeJKytUpx3DzKfwJnlZskB+JxmbpxJiU9yL ktpqCoKMgAvd+RKMmOThIwaNvhPUT+SfxmDbeSl8vcKqI9yZnOnBxb/CiD7NQmbo bhFGrrOC5qeGD5GlCQbOkFQvnp318jqtS2X/7ATIByvUzlgTuaAcFQ20QzTqV6C3 bh75C5NgwUOTE1R6oSXJhbdCgG4+oZYneqs= -----END CERTIFICATE-----Generated at Sat May 10 03:41:40 2025 by rpki-client