$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/1298d51a-f11e-30fd-9b81-309e6723fa54.roa File: 1298d51a-f11e-30fd-9b81-309e6723fa54.roa (raw, json) Hash identifier: FKfk9TV2SDYn3+ocPW9PaXsj0f7+4+8G+uTmmPIhBkc= Subject key identifier: 33:AC:C7:14:E1:93:80:8C:A8:C6:3F:24:92:82:B0:3D:15:E9:65:E7 Certificate issuer: /CN=63f043cf-2b37-4962-9d5b-bc179102509d Certificate serial: 010D0C9F432858499DBF1B4C3CE001F3271DE100 Authority key identifier: DF:97:12:3D:BE:3D:39:FF:38:2D:47:2A:3B:D6:64:56:81:93:BE:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/1298d51a-f11e-30fd-9b81-309e6723fa54.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 23506 IP address blocks: 2602:f704:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/63f043cf-2b37-4962-9d5b-bc179102509d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/63f043cf-2b37-4962-9d5b-bc179102509d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:1b:4c:3c:e0:01:f3:27:1d:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63f043cf-2b37-4962-9d5b-bc179102509d Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=1b801da0-f714-4c23-ad55-d21c94913567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:01:85:32:17:fc:00:13:c0:d0:f2:9b:af:17: dd:ba:9c:b8:98:12:b4:0d:5f:db:60:7b:64:2c:69: fb:3b:3e:04:b8:03:3a:ce:f8:c8:5c:90:7b:ad:d9: a7:28:7b:ae:2a:72:46:e7:33:35:5e:df:cb:90:b5: 95:15:be:78:36:f6:77:85:d1:76:2a:2a:92:41:ea: 70:f8:c5:f2:3e:ee:6e:5b:81:4a:01:18:b1:7e:a3: a0:83:ea:f7:52:86:9b:b3:cd:99:33:25:4a:9e:4c: 62:a4:14:ea:3a:bd:f9:86:2a:f3:00:85:dd:2e:98: ad:41:10:2e:d3:3e:5d:d7:7f:be:3b:55:56:9f:f2: de:af:13:13:77:50:39:8d:8c:76:ea:87:9c:42:04: f0:6a:56:3e:28:15:76:05:2c:02:bf:9c:70:b7:19: a5:bf:66:8c:26:ca:ca:82:e7:a8:23:01:4d:88:d6: de:63:82:bd:b9:8b:88:10:e6:50:34:61:63:0f:7d: 23:16:df:1f:cd:bc:77:bb:d4:8b:3c:d3:3d:cd:7e: fc:58:10:16:4a:40:79:30:a2:18:4f:27:58:5f:bd: e6:a3:8d:77:06:c2:00:b2:bb:f3:10:bd:4c:d3:9e: 20:a1:38:15:a1:c7:69:ab:55:04:db:5f:d1:27:dc: 60:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AC:C7:14:E1:93:80:8C:A8:C6:3F:24:92:82:B0:3D:15:E9:65:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/1298d51a-f11e-30fd-9b81-309e6723fa54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/63f043cf-2b37-4962-9d5b-bc179102509d.crl X509v3 Authority Key Identifier: keyid:DF:97:12:3D:BE:3D:39:FF:38:2D:47:2A:3B:D6:64:56:81:93:BE:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f704:400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ca:94:b1:c0:06:37:b0:c2:c0:22:cf:86:6c:20:5b:ab:98: 33:f2:db:c8:95:07:80:bb:b9:78:50:f2:b7:47:fa:2d:f6:43: 37:3a:23:aa:88:11:73:5a:6f:ee:df:0a:16:59:a4:0c:a4:39: c3:d5:96:4d:de:8e:02:81:b0:29:b0:14:55:ab:a0:64:d7:b8: 6b:7d:ef:c4:59:85:4f:dc:6c:ab:76:24:7f:9d:a4:78:79:da: 56:b0:4b:e1:72:8a:be:5b:43:60:f2:fa:bf:36:eb:f2:e4:7e: 33:a7:06:1f:d5:75:32:97:5e:c7:78:51:68:81:46:61:73:d7: ef:30:99:9b:bf:50:15:d8:5b:73:c7:23:6f:9b:a9:b0:21:77: 6f:35:89:33:b4:bb:72:19:1c:70:0e:96:74:ec:e8:0d:01:13: 82:51:8f:9e:db:40:ba:3c:40:e0:11:e6:99:6f:5f:52:f9:22: e0:2b:ec:ff:ed:93:a5:79:b0:a1:66:e6:dc:83:cd:35:db:c1: 39:3b:0f:3e:1b:99:99:0e:8b:be:c8:3d:65:b8:ec:ab:b6:08: 51:3a:36:01:28:8d:09:26:1c:b5:34:e4:e5:ca:aa:81:7a:fe: 37:35:a5:0e:4e:58:a1:62:6c:6c:55:c7:80:d9:3f:70:f9:c6: 21:35:b9:47 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmdvxtMPOAB8ycd4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjNmMDQzY2YtMmIzNy00OTYyLTlkNWItYmMxNzkxMDI1 MDlkMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MWI4MDFkYTAtZjcxNC00YzIzLWFkNTUtZDIxYzk0OTEzNTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwGFMhf8ABPA0PKbrxfdupy4mBK0DV/bYHtk LGn7Oz4EuAM6zvjIXJB7rdmnKHuuKnJG5zM1Xt/LkLWVFb54NvZ3hdF2KiqSQepw +MXyPu5uW4FKARixfqOgg+r3Uoabs82ZMyVKnkxipBTqOr35hirzAIXdLpitQRAu 0z5d13++O1VWn/LerxMTd1A5jYx26oecQgTwalY+KBV2BSwCv5xwtxmlv2aMJsrK gueoIwFNiNbeY4K9uYuIEOZQNGFjD30jFt8fzbx3u9SLPNM9zX78WBAWSkB5MKIY TydYX73mo413BsIAsrvzEL1M054goTgVocdpq1UE21/RJ9xgiwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDOsxxThk4CMqMY/JJKCsD0V6WXnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82M2Yw NDNjZi0yYjM3LTQ5NjItOWQ1Yi1iYzE3OTEwMjUwOWQvMTI5OGQ1MWEtZjExZS0z MGZkLTliODEtMzA5ZTY3MjNmYTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjNmMDQzY2YtMmIzNy00OTYyLTlk NWItYmMxNzkxMDI1MDlkLzYzZjA0M2NmLTJiMzctNDk2Mi05ZDViLWJjMTc5MTAy NTA5ZC5jcmwwHwYDVR0jBBgwFoAU35cSPb49Of84LUcqO9ZkVoGTvmcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82M2YwNDNjZi0yYjM3LTQ5NjItOWQ1Yi1iYzE3 OTEwMjUwOWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgL3BAQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGsqUscAGN7DCwCLPhmwgW6uYM/LbyJUHgLu5eFDyt0f6LfZDNzoj qogRc1pv7t8KFlmkDKQ5w9WWTd6OAoGwKbAUVaugZNe4a33vxFmFT9xsq3Ykf52k eHnaVrBL4XKKvltDYPL6vzbr8uR+M6cGH9V1Mpdex3hRaIFGYXPX7zCZm79QFdhb c8cjb5upsCF3bzWJM7S7chkccA6WdOzoDQETglGPnttAujxA4BHmmW9fUvki4Cvs /+2TpXmwoWbm3IPNNdvBOTsPPhuZmQ6Lvsg9Zbjsq7YIUTo2ASiNCSYctTTk5cqq gXr+NzWlDk5YoWJsbFXHgNk/cPnGITW5Rw== -----END CERTIFICATE-----Generated at Sat May 10 14:43:45 2025 by rpki-client