$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/3c2c5667-b976-3e02-a7c5-5ce804eb5262.roa File: 3c2c5667-b976-3e02-a7c5-5ce804eb5262.roa (raw, json) Hash identifier: SR2cB9zixgOqNPPGsvxzRhCgOt0Khb5rqfBQ4N0X6Tw= Subject key identifier: 38:B5:3B:1D:EB:72:14:28:C5:22:98:B8:B0:FF:98:06:7D:1C:50:54 Certificate issuer: /CN=53f3af06-68ea-4591-9526-0c1fce331651 Certificate serial: 010D0C9F43285848DD3BAC89873E1C4EBD4DC080 Authority key identifier: 8A:FE:A7:10:44:F5:A9:14:8D:C7:0F:AC:74:09:68:60:5F:0D:7F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/3c2c5667-b976-3e02-a7c5-5ce804eb5262.roa Signing time: Thu 13 Feb 2025 02:00:40 +0000 ROA not before: Thu 13 Feb 2025 02:00:40 +0000 ROA not after: Wed 14 May 2025 01:00:40 +0000 asID: 395611 IP address blocks: 2602:fd53:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/53f3af06-68ea-4591-9526-0c1fce331651.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/53f3af06-68ea-4591-9526-0c1fce331651.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:dd:3b:ac:89:87:3e:1c:4e:bd:4d:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53f3af06-68ea-4591-9526-0c1fce331651 Validity Not Before: Feb 13 02:00:40 2025 GMT Not After : May 14 01:00:40 2025 GMT Subject: CN=f3fe5412-8892-48a7-98c9-b8e0fbc5de2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6a:8b:2b:5c:85:be:bc:54:f3:9c:2d:12:52: 02:83:92:7e:f9:7b:f6:b0:6c:c9:18:e3:13:f5:81: b7:61:04:de:47:78:9d:0e:a5:58:d7:c3:9b:21:1b: 8d:a6:38:9e:65:a7:c4:6c:68:b2:8c:32:ff:cd:b8: 97:50:2b:0a:23:86:5d:28:e7:a1:00:72:fa:80:b3: 6d:eb:3f:af:d9:cc:57:ae:97:d1:74:5d:7d:7e:27: bb:61:6d:10:6f:75:d1:52:2d:dc:07:13:f8:76:66: 32:b1:4d:de:70:0c:c5:81:11:ae:d2:61:57:4a:71: 8b:77:98:b4:98:6d:c6:74:90:8b:77:45:51:0d:cb: 2f:1b:46:7b:af:b6:2c:5a:46:1c:a9:8b:c1:09:9d: 1b:a3:aa:f5:34:5c:7d:91:b4:65:61:a1:8d:08:06: 44:53:6b:30:d0:2a:40:57:4f:83:43:ac:81:43:72: 8f:ef:8e:e4:8f:dc:c1:f6:43:a1:b9:81:5a:3d:75: b7:a7:92:2b:47:43:b8:52:dc:ba:10:51:7e:ef:72: c5:cc:26:17:41:fe:ad:82:69:54:7d:29:ce:c9:d1: b1:be:02:ec:85:93:22:aa:e5:83:47:d3:08:71:4e: 56:3a:34:03:9f:0c:c3:63:f9:58:ef:6f:4b:76:0f: b2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B5:3B:1D:EB:72:14:28:C5:22:98:B8:B0:FF:98:06:7D:1C:50:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/3c2c5667-b976-3e02-a7c5-5ce804eb5262.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/53f3af06-68ea-4591-9526-0c1fce331651.crl X509v3 Authority Key Identifier: keyid:8A:FE:A7:10:44:F5:A9:14:8D:C7:0F:AC:74:09:68:60:5F:0D:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd53:100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:80:d8:31:0a:9f:d2:8b:34:7a:de:dc:93:b5:ec:3f:b2:e8: fd:ae:9f:34:f2:55:6d:23:f8:e6:91:0a:37:d8:6f:93:94:b9: 69:09:5b:bd:85:7d:75:23:a3:24:5a:01:0c:ee:6b:6c:ed:58: 1c:f7:1d:12:38:05:d3:0a:a2:9c:ad:05:a8:1c:61:05:e2:69: b6:08:21:d9:b6:a3:e1:b4:8b:e6:44:6c:7d:e9:7a:ed:c0:c6: d0:0a:76:b4:91:4e:41:4d:1d:80:7f:62:31:dc:c5:01:d2:0f: 5c:3a:a7:21:c8:1e:50:46:7c:77:45:77:c4:6d:bc:88:19:95: fc:7e:43:e9:bd:ef:af:87:e4:d6:d1:7d:a6:a6:35:31:06:d1: 84:00:ba:2e:3f:7a:29:cb:72:56:52:19:c0:04:84:0e:26:8a: d5:38:3d:4f:e0:80:d9:b2:50:e5:41:03:37:7a:df:69:98:ef: 89:27:55:fa:41:9e:fa:51:d7:5e:b3:06:c6:96:f0:7c:50:bd: 39:8b:3d:09:f5:31:74:3a:8a:ce:b2:48:01:fc:c8:8c:dd:a2: 46:2b:4b:0c:c4:34:1b:79:d8:2a:cb:89:ad:a2:33:6c:b9:25: aa:3c:f5:42:68:a4:13:57:71:84:94:54:9e:2e:c6:7b:47:65: 4f:c4:2a:9c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjdO6yJhz4cTr1NwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNmM2FmMDYtNjhlYS00NTkxLTk1MjYtMGMxZmNlMzMx NjUxMB4XDTI1MDIxMzAyMDA0MFoXDTI1MDUxNDAxMDA0MFowLzEtMCsGA1UEAxMk ZjNmZTU0MTItODg5Mi00OGE3LTk4YzktYjhlMGZiYzVkZTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmqLK1yFvrxU85wtElICg5J++Xv2sGzJGOMT 9YG3YQTeR3idDqVY18ObIRuNpjieZafEbGiyjDL/zbiXUCsKI4ZdKOehAHL6gLNt 6z+v2cxXrpfRdF19fie7YW0Qb3XRUi3cBxP4dmYysU3ecAzFgRGu0mFXSnGLd5i0 mG3GdJCLd0VRDcsvG0Z7r7YsWkYcqYvBCZ0bo6r1NFx9kbRlYaGNCAZEU2sw0CpA V0+DQ6yBQ3KP747kj9zB9kOhuYFaPXW3p5IrR0O4Uty6EFF+73LFzCYXQf6tgmlU fSnOydGxvgLshZMiquWDR9MIcU5WOjQDnwzDY/lY729Ldg+yhwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDi1Ox3rchQoxSKYuLD/mAZ9HFBUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81M2Yz YWYwNi02OGVhLTQ1OTEtOTUyNi0wYzFmY2UzMzE2NTEvM2MyYzU2NjctYjk3Ni0z ZTAyLWE3YzUtNWNlODA0ZWI1MjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTNmM2FmMDYtNjhlYS00NTkxLTk1 MjYtMGMxZmNlMzMxNjUxLzUzZjNhZjA2LTY4ZWEtNDU5MS05NTI2LTBjMWZjZTMz MTY1MS5jcmwwHwYDVR0jBBgwFoAUiv6nEET1qRSNxw+sdAloYF8Nf9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81M2YzYWYwNi02OGVhLTQ1OTEtOTUyNi0wYzFm Y2UzMzE2NTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL9UwEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAiYDYMQqf0os0et7ck7XsP7Lo/a6fNPJVbSP45pEKN9hvk5S5aQlb vYV9dSOjJFoBDO5rbO1YHPcdEjgF0wqinK0FqBxhBeJptggh2baj4bSL5kRsfel6 7cDG0Ap2tJFOQU0dgH9iMdzFAdIPXDqnIcgeUEZ8d0V3xG28iBmV/H5D6b3vr4fk 1tF9pqY1MQbRhAC6Lj96KctyVlIZwASEDiaK1Tg9T+CA2bJQ5UEDN3rfaZjviSdV +kGe+lHXXrMGxpbwfFC9OYs9CfUxdDqKzrJIAfzIjN2iRitLDMQ0G3nYKsuJraIz bLklqjz1QmikE1dxhJRUni7Ge0dlT8QqnA== -----END CERTIFICATE-----Generated at Fri Apr 11 23:27:11 2025 by rpki-client