$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/78cfabc1-dd93-3772-a081-4ec46f93c960.roa File: 78cfabc1-dd93-3772-a081-4ec46f93c960.roa (raw, json) Hash identifier: JTYgNCzoNWvjIRIId11yPBJUV6sfTA+01R56C4GDlA8= Subject key identifier: 62:23:F6:41:7F:DE:76:AA:85:55:CE:F8:6E:72:1C:06:D7:36:2B:8C Certificate issuer: /CN=811bd2ac-c53d-40a6-bfa4-275c2241af63 Certificate serial: 010D0C9F4328584960541529E6446452FB1D5200 Authority key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/78cfabc1-dd93-3772-a081-4ec46f93c960.roa Signing time: Tue 01 Apr 2025 01:00:47 +0000 ROA not before: Tue 01 Apr 2025 01:00:47 +0000 ROA not after: Mon 30 Jun 2025 01:00:47 +0000 asID: 400597 IP address blocks: 2602:fb1b:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:54:15:29:e6:44:64:52:fb:1d:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63 Validity Not Before: Apr 1 01:00:47 2025 GMT Not After : Jun 30 01:00:47 2025 GMT Subject: CN=0dc77d28-e781-4c22-808c-28576af59629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0d:1d:bd:fa:00:77:e0:a3:d0:c2:84:cc:a0: 01:a9:f7:48:21:45:c7:24:b4:61:13:62:e0:b3:d2: 4d:40:54:e8:d4:c8:0c:f2:17:6a:9d:b4:fe:27:94: 6d:b5:1a:34:56:f3:36:47:e7:3e:9c:1e:b7:7b:a9: 00:6f:9c:bf:2c:f6:5d:24:bd:5d:ca:3b:a3:fc:0d: c8:e2:ba:93:2e:89:14:0e:9b:f5:b5:ca:7b:bd:89: 1c:34:f8:bf:e1:fd:e1:1f:73:ae:d8:c5:a7:a8:76: 51:fd:64:d9:d8:c4:ed:40:da:af:12:80:d5:2e:4c: 1a:e1:5f:7c:78:84:1f:97:b9:04:89:9a:de:7b:e1: 92:5e:36:43:8d:56:62:f4:50:c4:9d:62:6e:69:63: 79:a8:45:a5:8b:54:71:f9:dd:96:29:34:fb:5f:ae: 0a:f8:12:56:45:e3:4b:2f:99:7a:a4:79:9e:86:81: fa:c5:04:c2:35:ff:7d:64:f1:74:95:e2:81:a1:6c: 86:89:ec:da:4e:07:72:3d:27:81:43:7e:6e:93:c5: a3:70:ca:61:cb:b3:82:a8:cf:ef:ce:67:90:fc:04: cf:f3:49:5e:bc:aa:69:40:96:58:ba:74:14:3f:3c: cc:2e:d6:5e:b5:1e:6e:9c:3e:e3:1e:ec:05:b6:c5: 93:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:23:F6:41:7F:DE:76:AA:85:55:CE:F8:6E:72:1C:06:D7:36:2B:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/78cfabc1-dd93-3772-a081-4ec46f93c960.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl X509v3 Authority Key Identifier: keyid:2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb1b:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:64:d8:c7:e8:fc:82:fc:19:f8:50:e3:da:63:ea:f7:7f:8a: 60:72:22:c2:ab:aa:06:8e:64:a6:de:66:85:f6:d6:2c:13:c1: d2:97:e2:6a:fd:39:d5:2d:0f:3d:38:13:26:be:0a:bd:6c:1d: b1:42:c4:e9:e2:c3:ca:81:dd:c8:e7:6e:1b:25:54:18:8e:0b: 97:77:3c:c3:6e:3f:c3:cb:aa:13:3f:d2:21:51:7b:45:52:2a: 84:86:7b:89:56:f4:f7:d5:0b:13:17:d1:9e:53:c6:9d:c4:09: f7:b1:39:86:88:c4:c0:ca:72:62:31:21:4f:71:29:96:a3:a0: ce:48:f0:c0:89:ed:94:a5:73:71:b5:a5:95:1b:41:e3:3b:57: c5:fa:c0:7f:33:56:a8:84:79:c3:d7:7e:12:b8:c1:e4:4c:af: b4:91:dd:54:83:01:d9:c8:d9:39:2d:21:55:78:99:4b:67:9c: bf:4e:62:58:f9:ce:33:9e:f9:ca:a6:5c:32:5b:e3:8b:e9:ff: 63:a1:3b:88:70:f3:14:b6:fa:05:cd:49:ce:eb:63:13:4a:29: f9:05:45:25:ed:b6:91:a8:23:0e:53:b9:74:e1:f0:78:e3:04: 93:a4:43:bc:6b:49:01:8f:ec:6c:f7:63:26:1f:47:10:b7:f0: 35:ee:c6:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElgVBUp5kRkUvsdUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODExYmQyYWMtYzUzZC00MGE2LWJmYTQtMjc1YzIyNDFh ZjYzMB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk MGRjNzdkMjgtZTc4MS00YzIyLTgwOGMtMjg1NzZhZjU5NjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw0dvfoAd+Cj0MKEzKABqfdIIUXHJLRhE2Lg s9JNQFTo1MgM8hdqnbT+J5RttRo0VvM2R+c+nB63e6kAb5y/LPZdJL1dyjuj/A3I 4rqTLokUDpv1tcp7vYkcNPi/4f3hH3Ou2MWnqHZR/WTZ2MTtQNqvEoDVLkwa4V98 eIQfl7kEiZree+GSXjZDjVZi9FDEnWJuaWN5qEWli1Rx+d2WKTT7X64K+BJWReNL L5l6pHmehoH6xQTCNf99ZPF0leKBoWyGiezaTgdyPSeBQ35uk8WjcMphy7OCqM/v zmeQ/ATP80levKppQJZYunQUPzzMLtZetR5unD7jHuwFtsWTGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGIj9kF/3naqhVXO+G5yHAbXNiuMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84MTFi ZDJhYy1jNTNkLTQwYTYtYmZhNC0yNzVjMjI0MWFmNjMvNzhjZmFiYzEtZGQ5My0z NzcyLWEwODEtNGVjNDZmOTNjOTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODExYmQyYWMtYzUzZC00MGE2LWJm YTQtMjc1YzIyNDFhZjYzLzgxMWJkMmFjLWM1M2QtNDBhNi1iZmE0LTI3NWMyMjQx YWY2My5jcmwwHwYDVR0jBBgwFoAUL6VyaMN3iHmP21Xe0bvHxqiGXYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84MTFiZDJhYy1jNTNkLTQwYTYtYmZhNC0yNzVj MjI0MWFmNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7GwAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGFk2Mfo/IL8GfhQ49pj6vd/imByIsKrqgaOZKbeZoX21iwTwdKX 4mr9OdUtDz04Eya+Cr1sHbFCxOniw8qB3cjnbhslVBiOC5d3PMNuP8PLqhM/0iFR e0VSKoSGe4lW9PfVCxMX0Z5Txp3ECfexOYaIxMDKcmIxIU9xKZajoM5I8MCJ7ZSl c3G1pZUbQeM7V8X6wH8zVqiEecPXfhK4weRMr7SR3VSDAdnI2TktIVV4mUtnnL9O Ylj5zjOe+cqmXDJb44vp/2OhO4hw8xS2+gXNSc7rYxNKKfkFRSXttpGoIw5TuXTh 8HjjBJOkQ7xrSQGP7Gz3YyYfRxC38DXuxmA= -----END CERTIFICATE-----Generated at Sat Apr 19 00:45:51 2025 by rpki-client