$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/04e7a50e-fdc0-3566-ac52-d12172993b6b.roa File: 04e7a50e-fdc0-3566-ac52-d12172993b6b.roa (raw, json) Hash identifier: IvVOVFBNKXkUO1Wha2J3wARJ65vsiryxzmLhbNK/Pr8= Subject key identifier: 0D:D8:6B:19:DF:EF:65:F0:31:AE:A0:40:0F:C1:73:18:21:8D:95:1E Certificate issuer: /CN=5e6c5242-5ff7-40a8-b144-1f151915227e Certificate serial: 010D0C9F432858491ED6DA89078C813404346140 Authority key identifier: BF:7E:0B:08:D0:1C:22:F8:E0:C5:D4:7E:63:D7:3B:56:D5:B8:D7:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/04e7a50e-fdc0-3566-ac52-d12172993b6b.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 8987 IP address blocks: 2602:fd3a:228::/45 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/5e6c5242-5ff7-40a8-b144-1f151915227e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/5e6c5242-5ff7-40a8-b144-1f151915227e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:da:89:07:8c:81:34:04:34:61:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e6c5242-5ff7-40a8-b144-1f151915227e Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=a20446e7-8440-40b4-be86-d2b6d93a9dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:34:1b:b8:00:c3:5c:21:b9:ee:11:4f:77:b6: 68:0d:6f:84:8a:e2:66:88:18:4b:77:70:f8:f9:70: a2:bd:75:52:95:46:26:39:e6:7e:74:d5:18:fb:2a: 0b:b5:fd:8d:a3:6f:eb:3d:93:be:50:2f:6a:01:db: 6a:b7:eb:56:3f:dd:50:82:fd:b6:e6:e5:a1:fc:d0: 11:0e:c9:3b:61:e1:63:36:91:24:bc:8d:31:99:5c: ed:50:6d:5b:58:8a:0e:45:d1:c3:4e:a9:c7:81:96: 6c:6f:2b:e0:63:9f:5b:11:c2:a3:6c:12:ff:dc:c3: 9b:af:e0:da:ea:55:0a:fe:04:45:bf:79:4a:28:e3: 8b:85:b0:80:2a:51:33:f6:30:c9:ac:02:ce:52:89: ef:a4:d1:a0:8d:ce:98:19:5f:ad:51:e1:16:56:c2: fe:8f:77:05:ea:09:52:22:39:62:d5:e5:be:53:c7: 04:40:b2:8e:c9:1d:3f:71:14:82:f9:fa:60:21:8d: d0:bf:86:18:2c:36:82:1d:83:53:22:47:92:45:5a: 26:4f:75:fd:6f:80:5a:37:05:dc:af:06:c3:0b:20: ec:57:73:65:ae:c5:5b:ab:97:06:03:b0:47:41:fd: a2:26:90:20:f9:d5:22:e8:3f:d6:21:88:1f:b2:51: 9a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D8:6B:19:DF:EF:65:F0:31:AE:A0:40:0F:C1:73:18:21:8D:95:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/04e7a50e-fdc0-3566-ac52-d12172993b6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/5e6c5242-5ff7-40a8-b144-1f151915227e.crl X509v3 Authority Key Identifier: keyid:BF:7E:0B:08:D0:1C:22:F8:E0:C5:D4:7E:63:D7:3B:56:D5:B8:D7:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd3a:228::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:95:3b:03:46:54:c0:f3:c7:8a:21:18:9e:28:40:00:55:97: 53:55:aa:e1:6b:7e:5b:02:da:f3:c0:95:d2:76:46:7c:8c:73: ab:83:e2:04:21:49:8c:80:2f:99:60:34:ee:c7:ac:bc:d9:1b: 66:29:d0:6e:dd:dd:a0:85:02:13:10:bc:89:5f:fa:bc:04:87: fc:2b:41:a6:80:59:7c:94:e8:fb:f7:a0:6d:ed:7f:d3:27:ea: 49:34:21:d0:60:b8:13:b9:ae:60:6e:b5:cb:80:aa:a2:0d:72: 61:a0:d5:cc:19:a6:bf:5b:78:39:5f:0d:61:ba:92:f2:24:3e: 00:f2:d2:79:e0:17:ec:77:3e:0c:bf:4c:ad:c7:c0:1d:92:1b: 01:a3:18:50:6f:c3:20:d9:2a:e4:5a:b3:f5:e8:ad:39:8e:15: 29:48:e1:04:05:40:20:83:53:d8:9e:ea:da:ae:bc:2f:3b:1f: ef:6d:1c:2c:fa:ad:67:7e:ea:36:a8:3c:93:9f:00:93:0e:35: 6d:93:df:04:9d:b3:62:b0:64:55:6c:e6:37:02:cd:0e:2a:e6: 02:4e:c8:3d:51:de:7d:ae:93:60:86:eb:45:6d:af:ef:b1:18: 77:af:ff:f0:3d:1b:7d:8f:ee:53:e5:29:72:32:23:dd:b5:07: 27:c0:97:1e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEke1tqJB4yBNAQ0YUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU2YzUyNDItNWZmNy00MGE4LWIxNDQtMWYxNTE5MTUy MjdlMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk YTIwNDQ2ZTctODQ0MC00MGI0LWJlODYtZDJiNmQ5M2E5ZGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzQbuADDXCG57hFPd7ZoDW+EiuJmiBhLd3D4 +XCivXVSlUYmOeZ+dNUY+yoLtf2No2/rPZO+UC9qAdtqt+tWP91Qgv225uWh/NAR Dsk7YeFjNpEkvI0xmVztUG1bWIoORdHDTqnHgZZsbyvgY59bEcKjbBL/3MObr+Da 6lUK/gRFv3lKKOOLhbCAKlEz9jDJrALOUonvpNGgjc6YGV+tUeEWVsL+j3cF6glS Ijli1eW+U8cEQLKOyR0/cRSC+fpgIY3Qv4YYLDaCHYNTIkeSRVomT3X9b4BaNwXc rwbDCyDsV3NlrsVbq5cGA7BHQf2iJpAg+dUi6D/WIYgfslGamQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA3Yaxnf72XwMa6gQA/BcxghjZUeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZTZj NTI0Mi01ZmY3LTQwYTgtYjE0NC0xZjE1MTkxNTIyN2UvMDRlN2E1MGUtZmRjMC0z NTY2LWFjNTItZDEyMTcyOTkzYjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWU2YzUyNDItNWZmNy00MGE4LWIx NDQtMWYxNTE5MTUyMjdlLzVlNmM1MjQyLTVmZjctNDBhOC1iMTQ0LTFmMTUxOTE1 MjI3ZS5jcmwwHwYDVR0jBBgwFoAUv34LCNAcIvjgxdR+Y9c7VtW41+EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZTZjNTI0Mi01ZmY3LTQwYTgtYjE0NC0xZjE1 MTkxNTIyN2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgL9OgIo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFKVOwNGVMDzx4ohGJ4oQABVl1NVquFrflsC2vPAldJ2RnyMc6uD 4gQhSYyAL5lgNO7HrLzZG2Yp0G7d3aCFAhMQvIlf+rwEh/wrQaaAWXyU6Pv3oG3t f9Mn6kk0IdBguBO5rmButcuAqqINcmGg1cwZpr9beDlfDWG6kvIkPgDy0nngF+x3 Pgy/TK3HwB2SGwGjGFBvwyDZKuRas/XorTmOFSlI4QQFQCCDU9ie6tquvC87H+9t HCz6rWd+6jaoPJOfAJMONW2T3wSds2KwZFVs5jcCzQ4q5gJOyD1R3n2uk2CG60Vt r++xGHev//A9G32P7lPlKXIyI921ByfAlx4= -----END CERTIFICATE-----Generated at Sat Apr 5 07:57:17 2025 by rpki-client