$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/352e0bf1-c858-31db-a4b1-a0641760c140.roa File: 352e0bf1-c858-31db-a4b1-a0641760c140.roa (raw, json) Hash identifier: ltToq85Fhj9kV0izagks6K64Xjav/CROviQuBQjrr3M= Subject key identifier: 1E:36:8B:F4:54:01:F8:03:DE:3A:9C:AB:9F:D6:B4:74:E4:EF:68:26 Certificate issuer: /CN=206290f3-53e1-4d17-8678-29dace17c006 Certificate serial: 010D0C9F43285848C6E63A428B9F6FE3F9E12780 Authority key identifier: B0:75:75:D3:B9:68:A2:49:EF:B9:77:E1:92:46:A5:46:97:EC:1B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/352e0bf1-c858-31db-a4b1-a0641760c140.roa Signing time: Wed 05 Feb 2025 02:00:39 +0000 ROA not before: Wed 05 Feb 2025 02:00:39 +0000 ROA not after: Tue 06 May 2025 01:00:39 +0000 asID: 33179 IP address blocks: 2602:fa21::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:e6:3a:42:8b:9f:6f:e3:f9:e1:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206290f3-53e1-4d17-8678-29dace17c006 Validity Not Before: Feb 5 02:00:39 2025 GMT Not After : May 6 01:00:39 2025 GMT Subject: CN=8c710973-2676-411c-adcf-5e758dc01daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ee:e9:d9:25:0d:62:61:f2:10:2f:7b:2f:7f: 1e:88:90:27:f6:43:f5:d0:ce:9f:f0:0c:ee:92:ea: fc:da:05:c8:d0:1d:4d:19:39:44:d4:f5:03:68:51: cc:c3:3e:8b:e0:ea:bf:3f:cc:fa:b2:26:13:c0:cd: 94:43:fb:6a:d7:06:35:66:d4:cc:87:6d:b3:39:3d: 3c:6e:dd:f2:78:fd:f0:aa:ad:57:ba:03:3f:89:9c: 1d:63:f3:b8:26:27:d4:aa:46:77:94:5a:94:5f:f0: ba:c1:10:24:f9:94:32:b6:40:02:a3:ac:d0:97:03: b5:29:51:de:a6:19:50:a4:1c:32:4f:c1:d3:16:6a: 46:e0:90:68:75:73:80:a3:70:cd:44:c5:9a:95:5c: ef:6b:40:18:cc:cb:9d:b9:fb:63:5e:1a:15:2e:2b: 82:cf:b4:cb:db:64:b8:ea:28:84:62:f8:e1:d0:d8: 2c:7a:cc:ee:46:9b:9a:0d:81:2c:e2:d0:51:d0:a6: 28:e7:d3:06:62:0e:74:31:45:bb:fe:4e:f3:01:2b: b5:1a:be:69:83:87:52:a4:25:a0:26:5c:d4:81:b1: 0d:99:e0:bc:b3:14:ee:a4:fb:99:32:55:6f:52:d3: d6:01:53:8e:30:6a:aa:d4:fa:31:e4:8b:3c:80:ed: e5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:36:8B:F4:54:01:F8:03:DE:3A:9C:AB:9F:D6:B4:74:E4:EF:68:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/352e0bf1-c858-31db-a4b1-a0641760c140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.crl X509v3 Authority Key Identifier: keyid:B0:75:75:D3:B9:68:A2:49:EF:B9:77:E1:92:46:A5:46:97:EC:1B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa21::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:e1:73:b6:8c:99:58:8c:96:07:9a:6c:1f:35:7c:a3:c9:8b: 54:87:6a:e6:80:ab:00:7e:54:68:1c:c7:d9:b9:c0:c3:1a:4c: 6c:ea:93:9f:a9:7f:1c:37:11:b0:94:e8:db:14:b6:67:ae:21: 70:7e:50:9b:c2:63:bb:7d:c6:57:b4:0d:28:58:f9:de:7a:03: 24:4e:4b:72:7b:c3:9b:8f:3e:ad:50:da:ad:b5:41:67:24:64: 93:b7:06:1a:e6:23:27:38:4a:1b:98:86:81:b0:cf:20:16:68: 6e:f7:f3:e8:98:3f:c8:51:8d:fc:63:d6:f7:1f:90:59:e8:63: d3:a0:58:3a:7e:9e:d3:55:69:7e:77:9c:e2:d6:20:5c:8d:67: c0:f4:06:36:6a:fb:bb:f2:79:d3:9d:b0:09:35:7c:73:71:d1: 4b:d5:bd:6b:a2:99:29:11:ee:eb:d5:44:ee:52:29:47:18:4f: 0a:21:d6:0a:26:bd:2a:80:99:8d:6e:8d:b6:a3:42:26:97:bf: 95:7d:28:8e:75:f6:51:88:95:50:f0:35:72:fd:ce:7c:27:92: e4:ab:5f:72:72:d3:c0:b6:08:b7:b6:6d:db:fa:58:92:ab:ca: 62:0e:fc:dc:93:df:90:6b:c9:30:eb:8e:af:f7:33:35:9a:95: b0:00:37:01 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjG5jpCi59v4/nhJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA2MjkwZjMtNTNlMS00ZDE3LTg2NzgtMjlkYWNlMTdj MDA2MB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk OGM3MTA5NzMtMjY3Ni00MTFjLWFkY2YtNWU3NThkYzAxZGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje7p2SUNYmHyEC97L38eiJAn9kP10M6f8Azu kur82gXI0B1NGTlE1PUDaFHMwz6L4Oq/P8z6siYTwM2UQ/tq1wY1ZtTMh22zOT08 bt3yeP3wqq1XugM/iZwdY/O4JifUqkZ3lFqUX/C6wRAk+ZQytkACo6zQlwO1KVHe phlQpBwyT8HTFmpG4JBodXOAo3DNRMWalVzva0AYzMuduftjXhoVLiuCz7TL22S4 6iiEYvjh0NgseszuRpuaDYEs4tBR0KYo59MGYg50MUW7/k7zASu1Gr5pg4dSpCWg JlzUgbENmeC8sxTupPuZMlVvUtPWAVOOMGqq1Pox5Is8gO3lTwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFB42i/RUAfgD3jqcq5/WtHTk72gmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yMDYy OTBmMy01M2UxLTRkMTctODY3OC0yOWRhY2UxN2MwMDYvMzUyZTBiZjEtYzg1OC0z MWRiLWE0YjEtYTA2NDE3NjBjMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjA2MjkwZjMtNTNlMS00ZDE3LTg2 NzgtMjlkYWNlMTdjMDA2LzIwNjI5MGYzLTUzZTEtNGQxNy04Njc4LTI5ZGFjZTE3 YzAwNi5jcmwwHwYDVR0jBBgwFoAUsHV107looknvuXfhkkalRpfsG/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yMDYyOTBmMy01M2UxLTRkMTctODY3OC0yOWRh Y2UxN2MwMDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6IQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAO+FztoyZWIyWB5psHzV8o8mLVIdq5oCrAH5UaBzH2bnAwxpMbOqT n6l/HDcRsJTo2xS2Z64hcH5Qm8Jju33GV7QNKFj53noDJE5LcnvDm48+rVDarbVB ZyRkk7cGGuYjJzhKG5iGgbDPIBZobvfz6Jg/yFGN/GPW9x+QWehj06BYOn6e01Vp fnec4tYgXI1nwPQGNmr7u/J5052wCTV8c3HRS9W9a6KZKRHu69VE7lIpRxhPCiHW Cia9KoCZjW6NtqNCJpe/lX0ojnX2UYiVUPA1cv3OfCeS5KtfcnLTwLYIt7Zt2/pY kqvKYg783JPfkGvJMOuOr/czNZqVsAA3AQ== -----END CERTIFICATE-----Generated at Wed Apr 9 12:43:48 2025 by rpki-client