$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/4acf3816-9e0b-3a2a-8579-419b52356769.roa File: 4acf3816-9e0b-3a2a-8579-419b52356769.roa (raw, json) Hash identifier: ZHE4LAxe0BqjfE1caBDUul+DPbpCHjvf0h56PrW5ofg= Subject key identifier: 6F:CF:35:E3:19:95:6C:27:0F:FD:2B:02:B0:D7:EA:BE:CB:45:C8:33 Certificate issuer: /CN=63f043cf-2b37-4962-9d5b-bc179102509d Certificate serial: 010D0C9F43285849CD34C169C9C239981A7D9A00 Authority key identifier: DF:97:12:3D:BE:3D:39:FF:38:2D:47:2A:3B:D6:64:56:81:93:BE:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/4acf3816-9e0b-3a2a-8579-419b52356769.roa Signing time: Sat 10 May 2025 01:00:47 +0000 ROA not before: Sat 10 May 2025 01:00:47 +0000 ROA not after: Fri 08 Aug 2025 01:00:47 +0000 asID: 213413 IP address blocks: 2602:f704:810::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/63f043cf-2b37-4962-9d5b-bc179102509d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/63f043cf-2b37-4962-9d5b-bc179102509d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cd:34:c1:69:c9:c2:39:98:1a:7d:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63f043cf-2b37-4962-9d5b-bc179102509d Validity Not Before: May 10 01:00:47 2025 GMT Not After : Aug 8 01:00:47 2025 GMT Subject: CN=fa7d4550-2bca-4ab3-963d-a03e2d241b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:22:0c:ee:c0:ba:a8:bf:19:07:47:aa:b8:82: 38:e2:b8:d2:df:53:39:2d:ba:1e:d9:e0:b9:be:d6: 6e:96:cc:a3:26:f1:74:3b:6d:9a:e4:95:85:75:16: 77:5e:96:88:c7:64:40:40:ee:ec:17:e2:04:26:ba: 5b:f9:e6:21:ea:02:c2:8e:14:ad:a1:c2:6c:6f:1d: cd:7a:05:e3:b1:ce:02:31:72:ce:bf:79:cb:81:fd: e9:91:31:1a:65:30:eb:e8:d1:12:93:d2:d2:22:a1: 0c:a9:38:28:ca:98:8a:4f:74:08:76:c6:d3:45:82: 87:08:1b:c1:18:bb:31:78:2d:e3:e9:88:f5:dc:f6: 13:c6:94:7f:5d:fb:71:f5:91:3b:09:96:15:40:b6: c9:ee:f4:18:05:41:73:ca:e8:c9:e1:ac:80:a7:43: 39:24:4e:48:f3:7f:8f:3c:a6:bd:13:ce:1d:86:94: aa:89:5e:d0:81:1a:92:3a:84:7e:32:49:9e:83:22: a9:5c:a9:0d:a7:61:6d:64:9a:77:8f:49:3b:06:a7: c0:34:26:d6:4b:80:0b:d9:0f:fe:8f:93:60:0f:cd: a9:ba:41:2d:ec:07:9a:5b:7b:65:e4:6a:a9:05:bf: cf:ac:a0:c0:21:c5:b1:29:0f:16:c9:7f:94:82:32: 11:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:CF:35:E3:19:95:6C:27:0F:FD:2B:02:B0:D7:EA:BE:CB:45:C8:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/4acf3816-9e0b-3a2a-8579-419b52356769.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/63f043cf-2b37-4962-9d5b-bc179102509d.crl X509v3 Authority Key Identifier: keyid:DF:97:12:3D:BE:3D:39:FF:38:2D:47:2A:3B:D6:64:56:81:93:BE:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f704:810::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:dd:2a:3d:c5:b1:b0:72:0e:3c:c5:73:4e:b6:84:bd:67:3d: a9:72:ec:a0:46:ee:d0:dc:00:14:10:1b:52:1c:9d:56:22:ee: 62:94:f4:a4:2d:0d:03:bb:9a:06:15:4a:a2:11:b1:c1:82:23: 74:a4:53:31:09:66:c4:5a:88:93:9c:60:db:cc:93:70:e3:f4: 42:d7:91:03:0e:39:93:48:24:85:7b:a7:d9:f1:f6:b3:39:84: ea:86:71:9a:c5:e9:cc:b7:d5:de:57:ab:e7:9e:72:5a:07:b4: fe:d5:d4:ce:72:00:c6:67:95:92:09:d7:4c:ab:e7:55:85:43: ad:ff:fa:f6:71:09:b6:c0:d3:30:4c:fa:d4:10:21:03:af:a4: 7e:aa:e3:6c:91:01:4e:c3:e6:f6:72:05:d3:ab:a6:d4:eb:f8: 08:08:a2:0e:7c:ae:c1:89:9e:88:ec:dd:d3:df:16:48:95:b7: 27:4e:6b:77:73:b2:0a:e5:e9:ab:dd:ec:5f:65:cb:aa:91:46: 4e:f2:98:21:29:c5:ee:26:95:1f:cf:29:e6:2f:02:26:0a:d4: 02:af:d1:95:22:77:4d:a6:84:89:63:45:58:d7:40:36:6d:fe: 70:79:4b:f7:db:bb:33:cd:a9:49:05:25:cc:9d:28:13:9f:bf: 95:30:3d:2d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnNNMFpycI5mBp9mgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjNmMDQzY2YtMmIzNy00OTYyLTlkNWItYmMxNzkxMDI1 MDlkMB4XDTI1MDUxMDAxMDA0N1oXDTI1MDgwODAxMDA0N1owLzEtMCsGA1UEAxMk ZmE3ZDQ1NTAtMmJjYS00YWIzLTk2M2QtYTAzZTJkMjQxYjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCIM7sC6qL8ZB0equII44rjS31M5Lboe2eC5 vtZulsyjJvF0O22a5JWFdRZ3XpaIx2RAQO7sF+IEJrpb+eYh6gLCjhStocJsbx3N egXjsc4CMXLOv3nLgf3pkTEaZTDr6NESk9LSIqEMqTgoypiKT3QIdsbTRYKHCBvB GLsxeC3j6Yj13PYTxpR/Xftx9ZE7CZYVQLbJ7vQYBUFzyujJ4ayAp0M5JE5I83+P PKa9E84dhpSqiV7QgRqSOoR+MkmegyKpXKkNp2FtZJp3j0k7BqfANCbWS4AL2Q/+ j5NgD82pukEt7AeaW3tl5GqpBb/PrKDAIcWxKQ8WyX+UgjIRxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG/PNeMZlWwnD/0rArDX6r7LRcgzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82M2Yw NDNjZi0yYjM3LTQ5NjItOWQ1Yi1iYzE3OTEwMjUwOWQvNGFjZjM4MTYtOWUwYi0z YTJhLTg1NzktNDE5YjUyMzU2NzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjNmMDQzY2YtMmIzNy00OTYyLTlk NWItYmMxNzkxMDI1MDlkLzYzZjA0M2NmLTJiMzctNDk2Mi05ZDViLWJjMTc5MTAy NTA5ZC5jcmwwHwYDVR0jBBgwFoAU35cSPb49Of84LUcqO9ZkVoGTvmcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82M2YwNDNjZi0yYjM3LTQ5NjItOWQ1Yi1iYzE3 OTEwMjUwOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3BAgQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAADdKj3FsbByDjzFc062hL1nPaly7KBG7tDcABQQG1IcnVYi7mKU 9KQtDQO7mgYVSqIRscGCI3SkUzEJZsRaiJOcYNvMk3Dj9ELXkQMOOZNIJIV7p9nx 9rM5hOqGcZrF6cy31d5Xq+eecloHtP7V1M5yAMZnlZIJ10yr51WFQ63/+vZxCbbA 0zBM+tQQIQOvpH6q42yRAU7D5vZyBdOrptTr+AgIog58rsGJnojs3dPfFkiVtydO a3dzsgrl6avd7F9ly6qRRk7ymCEpxe4mlR/PKeYvAiYK1AKv0ZUid02mhIljRVjX QDZt/nB5S/fbuzPNqUkFJcydKBOfv5UwPS0= -----END CERTIFICATE-----Generated at Sun May 11 15:47:24 2025 by rpki-client