$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/4d1f008f-67a9-308d-9f82-30e56f078c23.roa File: 4d1f008f-67a9-308d-9f82-30e56f078c23.roa (raw, json) Hash identifier: IYpacZTUhKE8KsbQRn6t7IRprX2Mu6i0Ke9NXPP9I+c= Subject key identifier: 86:5D:54:2D:05:C3:28:94:17:C8:E8:98:E6:DE:02:3E:66:A1:93:B2 Certificate issuer: /CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7 Certificate serial: 010D0C9F43285848FD56BB7745A2397CE73E7F40 Authority key identifier: 8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/4d1f008f-67a9-308d-9f82-30e56f078c23.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 30690 IP address blocks: 2602:f99b:a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:bb:77:45:a2:39:7c:e7:3e:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=d386133c-b18a-497c-b20e-43c0564576a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:31:d5:e9:7f:be:5a:5c:03:f1:9d:7e:bd:b4: 50:5b:1f:be:2a:56:7c:49:5b:1a:4f:d8:84:19:c3: 3c:40:f1:62:ae:4c:a7:f3:35:30:be:15:4e:bb:46: ee:8d:ce:d2:0d:ee:73:ae:fe:a0:46:46:ad:e9:41: 0d:4b:04:91:26:17:f0:d7:37:0f:28:b7:7c:23:bc: 18:0a:df:4a:f7:41:6a:c3:ff:e4:9b:85:9d:e9:5d: 25:77:d6:c2:11:00:9d:bc:31:40:1e:8c:1e:cb:c9: 2a:42:7b:02:c8:e3:bd:66:ed:72:74:9e:ef:06:23: 2a:28:bf:7b:f5:32:33:be:26:aa:5d:b3:dd:9b:b4: 3b:5a:b8:d1:46:c1:0e:1a:7c:5b:fb:ca:76:2e:81: 8b:57:97:7e:a1:a1:35:b5:9d:1e:77:e5:5b:2d:4c: db:02:d5:c8:5e:8d:0a:17:c9:f2:86:e4:f0:49:99: ca:95:d5:82:61:58:2c:bf:b4:85:6b:96:e5:58:06: 05:6e:f0:c7:69:78:5f:19:1b:be:48:10:53:3f:97: 93:44:d0:bf:be:c4:57:24:b8:8e:77:b0:fd:99:42: b0:81:63:eb:15:64:35:6d:6f:18:79:fd:48:87:a0: f5:b8:83:1e:54:ff:db:58:dd:c1:1a:df:fe:b8:fc: e0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5D:54:2D:05:C3:28:94:17:C8:E8:98:E6:DE:02:3E:66:A1:93:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/4d1f008f-67a9-308d-9f82-30e56f078c23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl X509v3 Authority Key Identifier: keyid:8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer sbgp-ipAddrBlock: critical IPv6: 2602:f99b:a0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:e7:bc:82:62:d9:d2:6a:c7:df:03:ed:6d:62:e5:b3:24:26: cb:c7:f7:ee:df:85:94:81:da:b3:15:c2:dd:a6:fa:61:b6:82: 55:cf:f8:49:18:34:fb:dc:24:f4:37:41:73:f4:cb:2e:06:e2: 6d:9c:20:ad:cb:e0:e5:d9:4a:69:f1:71:91:10:69:93:ef:45: ec:b0:df:a1:44:59:e5:f8:1f:c6:83:72:ee:f1:5d:c4:34:c6: 50:43:e2:75:ca:28:4c:f5:5e:cc:a3:6b:81:c4:f1:04:07:5a: 67:8a:16:e7:3f:68:e0:50:1c:35:bc:1b:01:83:89:b8:ef:c9: e3:d8:00:5a:ea:95:70:fc:98:a1:68:0b:b7:16:ea:1e:c0:a1: a7:aa:85:b9:23:f8:30:db:40:2e:15:43:2d:3e:03:fb:92:a9: 94:56:33:00:db:a1:f6:c8:79:dd:b4:c2:59:9d:d8:9f:3c:e6: 71:1a:12:d2:ae:db:77:36:9b:b7:0e:41:a5:ca:e2:5f:3a:74: 95:58:27:4f:f0:c5:55:2b:8d:b0:bf:1d:5d:90:85:5a:f4:df: cd:6b:f6:04:c5:3d:25:47:43:3d:3a:32:cb:0d:7d:87:19:ee: bc:89:89:49:7a:9f:06:4f:68:34:6e:42:79:e1:f2:cc:df:a0: 0c:fb:b7:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj9Vrt3RaI5fOc+f0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM1ZmMyM2EtZTQyMi00YzYxLWEyNWEtYjczYjA5NjNi NmY3MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDM4NjEzM2MtYjE4YS00OTdjLWIyMGUtNDNjMDU2NDU3NmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzHV6X++WlwD8Z1+vbRQWx++KlZ8SVsaT9iE GcM8QPFirkyn8zUwvhVOu0bujc7SDe5zrv6gRkat6UENSwSRJhfw1zcPKLd8I7wY Ct9K90Fqw//km4Wd6V0ld9bCEQCdvDFAHowey8kqQnsCyOO9Zu1ydJ7vBiMqKL97 9TIzviaqXbPdm7Q7WrjRRsEOGnxb+8p2LoGLV5d+oaE1tZ0ed+VbLUzbAtXIXo0K F8nyhuTwSZnKldWCYVgsv7SFa5blWAYFbvDHaXhfGRu+SBBTP5eTRNC/vsRXJLiO d7D9mUKwgWPrFWQ1bW8Yef1Ih6D1uIMeVP/bWN3BGt/+uPzgfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIZdVC0FwyiUF8jomObeAj5moZOyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMzVm YzIzYS1lNDIyLTRjNjEtYTI1YS1iNzNiMDk2M2I2ZjcvNGQxZjAwOGYtNjdhOS0z MDhkLTlmODItMzBlNTZmMDc4YzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjM1ZmMyM2EtZTQyMi00YzYxLWEy NWEtYjczYjA5NjNiNmY3L2IzNWZjMjNhLWU0MjItNGM2MS1hMjVhLWI3M2IwOTYz YjZmNy5jcmwwHwYDVR0jBBgwFoAUjS9eZJw3d6zMTnUYB7+cZ2lqHf4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMzVmYzIzYS1lNDIyLTRjNjEtYTI1YS1iNzNi MDk2M2I2ZjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5mwCg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKvnvIJi2dJqx98D7W1i5bMkJsvH9+7fhZSB2rMVwt2m+mG2glXP +EkYNPvcJPQ3QXP0yy4G4m2cIK3L4OXZSmnxcZEQaZPvReyw36FEWeX4H8aDcu7x XcQ0xlBD4nXKKEz1Xsyja4HE8QQHWmeKFuc/aOBQHDW8GwGDibjvyePYAFrqlXD8 mKFoC7cW6h7Aoaeqhbkj+DDbQC4VQy0+A/uSqZRWMwDbofbIed20wlmd2J885nEa EtKu23c2m7cOQaXK4l86dJVYJ0/wxVUrjbC/HV2QhVr0381r9gTFPSVHQz06MssN fYcZ7ryJiUl6nwZPaDRuQnnh8szfoAz7t80= -----END CERTIFICATE-----Generated at Thu May 8 20:45:40 2025 by rpki-client