$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/85f2ee15-c93c-36b9-b51d-dba0e55b61b1.roa File: 85f2ee15-c93c-36b9-b51d-dba0e55b61b1.roa (raw, json) Hash identifier: F76xnUtvYgUjDUsqNReTvXpIpTdkKMs9kJrSXs/GE/s= Subject key identifier: 98:6B:C1:98:2B:F0:9D:29:70:79:44:64:71:86:88:BA:37:BD:B4:68 Certificate issuer: /CN=ab1101f4-a527-459b-8c16-d78b261e6de3 Certificate serial: 010D0C9F43285849BDDA22DA5E9654A4B0D2B480 Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/85f2ee15-c93c-36b9-b51d-dba0e55b61b1.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 16509 IP address blocks: 2602:277:d00::/47 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:22:da:5e:96:54:a4:b0:d2:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=e2f5be29-a330-44c2-8350-519238511567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:14:b3:11:2e:cb:bb:ec:17:da:de:a0:90:0b: 16:cd:c3:83:f0:70:a6:f2:d0:fb:39:bf:57:6a:74: fe:67:2d:b8:5b:fe:ea:a5:12:96:0d:06:67:ca:27: 63:9e:c9:99:4c:4a:69:b0:30:ca:19:59:4f:c6:d5: e0:c9:38:83:8a:24:6f:52:34:6f:69:69:f8:1c:10: 1e:3b:03:de:17:36:d1:03:29:26:1f:3f:2a:5a:70: 29:ef:ef:d8:88:e4:2a:d5:df:4f:bc:6f:b4:95:0d: de:24:10:07:27:77:7d:15:35:a0:77:34:cc:89:17: fd:93:19:3e:36:7d:cc:50:38:fd:68:3d:6c:19:37: fb:32:d3:d6:d3:1d:65:cb:d1:53:01:7a:92:65:e4: e4:2b:a7:8f:03:f0:ec:93:1b:a0:4c:55:fe:2e:6d: df:7e:d4:32:a8:ad:0f:ba:17:b6:61:5a:9e:fc:55: e2:fd:89:1a:d6:cf:0b:37:7b:0f:12:dc:de:0a:fb: a4:42:4b:2f:da:de:24:60:d5:71:74:93:30:a3:ac: 81:2b:a3:3b:8b:3d:c4:96:5a:5d:d7:83:15:54:11: c2:aa:d2:67:6d:c3:f1:f8:f5:2b:32:32:37:2a:e9: 90:ed:79:6b:4a:68:98:21:e5:a5:72:a5:39:96:89: f2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6B:C1:98:2B:F0:9D:29:70:79:44:64:71:86:88:BA:37:BD:B4:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/85f2ee15-c93c-36b9-b51d-dba0e55b61b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl X509v3 Authority Key Identifier: keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer sbgp-ipAddrBlock: critical IPv6: 2602:277:d00::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:e5:c6:8a:49:c5:bf:e6:dd:bc:ee:60:b7:aa:a8:5f:0b:0e: f0:4a:71:92:9e:9c:54:12:b3:df:d6:68:b1:5a:3f:1e:4a:c9: 68:9e:ae:50:46:de:c0:34:2d:78:2f:20:d7:94:53:a8:91:3c: 63:75:f9:b7:ad:68:c1:bd:a2:f9:c9:f1:63:a5:4b:1b:a1:32: b8:6f:e1:71:be:20:c7:d4:2a:dc:5d:79:a8:0b:e6:5f:ed:62: 2f:35:ba:c8:ec:4c:dc:b5:47:49:2b:b9:c2:cb:ef:64:74:fa: 77:84:7d:f8:0f:ad:f9:dc:69:52:1e:32:26:64:04:b1:89:e8: 1b:e4:eb:1a:e0:30:c3:1c:4d:cb:0c:60:4d:1a:db:72:70:eb: 40:2b:24:a9:9e:c3:00:b1:4a:e5:98:41:c0:55:93:4a:a0:76: 4b:2b:71:ca:0a:d4:c3:64:79:51:ad:bc:53:c9:8f:3c:c6:dc: eb:f0:62:86:07:3a:d0:5f:da:79:54:4e:9c:8a:31:ad:0c:d1: 59:2f:01:98:27:28:94:c4:20:25:1a:bb:1b:7b:21:10:6f:df: b6:24:a3:cc:85:83:71:f8:c1:e3:86:9a:42:f3:31:07:e4:b1: 3b:57:64:22:b5:49:64:dc:f4:4a:5d:92:55:f6:e6:a7:d7:13: 5e:2d:2c:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm92iLaXpZUpLDStIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxMTAxZjQtYTUyNy00NTliLThjMTYtZDc4YjI2MWU2 ZGUzMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ZTJmNWJlMjktYTMzMC00NGMyLTgzNTAtNTE5MjM4NTExNTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxSzES7Lu+wX2t6gkAsWzcOD8HCm8tD7Ob9X anT+Zy24W/7qpRKWDQZnyidjnsmZTEppsDDKGVlPxtXgyTiDiiRvUjRvaWn4HBAe OwPeFzbRAykmHz8qWnAp7+/YiOQq1d9PvG+0lQ3eJBAHJ3d9FTWgdzTMiRf9kxk+ Nn3MUDj9aD1sGTf7MtPW0x1ly9FTAXqSZeTkK6ePA/DskxugTFX+Lm3fftQyqK0P uhe2YVqe/FXi/Yka1s8LN3sPEtzeCvukQksv2t4kYNVxdJMwo6yBK6M7iz3Ellpd 14MVVBHCqtJnbcPx+PUrMjI3KumQ7XlrSmiYIeWlcqU5lonyHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJhrwZgr8J0pcHlEZHGGiLo3vbRoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjEx MDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhiMjYxZTZkZTMvODVmMmVlMTUtYzkzYy0z NmI5LWI1MWQtZGJhMGU1NWI2MWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxMTAxZjQtYTUyNy00NTliLThj MTYtZDc4YjI2MWU2ZGUzL2FiMTEwMWY0LWE1MjctNDU5Yi04YzE2LWQ3OGIyNjFl NmRlMy5jcmwwHwYDVR0jBBgwFoAUmZxX2Q4wTnTaeEpb0pxnHt56bjMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjExMDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhi MjYxZTZkZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgICdw0A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAInlxopJxb/m3bzuYLeqqF8LDvBKcZKenFQSs9/WaLFaPx5KyWie rlBG3sA0LXgvINeUU6iRPGN1+betaMG9ovnJ8WOlSxuhMrhv4XG+IMfUKtxdeagL 5l/tYi81usjsTNy1R0krucLL72R0+neEffgPrfncaVIeMiZkBLGJ6Bvk6xrgMMMc TcsMYE0a23Jw60ArJKmewwCxSuWYQcBVk0qgdksrccoK1MNkeVGtvFPJjzzG3Ovw YoYHOtBf2nlUTpyKMa0M0VkvAZgnKJTEICUauxt7IRBv37Yko8yFg3H4weOGmkLz MQfksTtXZCK1SWTc9EpdklX25qfXE14tLJ0= -----END CERTIFICATE-----Generated at Mon May 5 13:28:38 2025 by rpki-client