$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/240e11cb-53e0-3e1f-9781-a822e0d35c8d.roa File: 240e11cb-53e0-3e1f-9781-a822e0d35c8d.roa (raw, json) Hash identifier: dtWTBKE2hEFnBg9pJCFfK2liX2R7DqR68ICA+T/j37w= Subject key identifier: 9A:93:CB:60:70:FA:16:35:01:34:BB:4F:41:1F:BD:24:DC:24:25:8B Certificate issuer: /CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Certificate serial: 010D0C9F432858491C0C2605590939B03DAA4700 Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/240e11cb-53e0-3e1f-9781-a822e0d35c8d.roa Signing time: Fri 07 Mar 2025 14:00:52 +0000 ROA not before: Fri 07 Mar 2025 14:00:52 +0000 ROA not after: Thu 05 Jun 2025 13:00:52 +0000 asID: 4186 IP address blocks: 2602:fbdc:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1c:0c:26:05:59:09:39:b0:3d:aa:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Validity Not Before: Mar 7 14:00:52 2025 GMT Not After : Jun 5 13:00:52 2025 GMT Subject: CN=22c2805c-4082-404f-973a-74c5aaf87d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ec:1d:12:09:ee:72:97:4a:37:38:bc:99:53: dd:cc:93:5e:65:ad:ef:40:9d:9e:cf:ee:3a:44:5f: db:ae:66:e9:2a:4b:2b:89:78:cc:50:de:da:24:50: 63:76:29:93:cf:0f:88:b2:68:ea:bc:a2:1d:72:40: 11:07:8c:e0:9d:fa:34:87:a8:5e:b9:cb:69:13:97: 77:31:0c:bf:4b:e1:c0:8d:2b:d4:f4:cf:f4:e9:ef: 50:fb:ad:8f:f9:a6:ab:b3:f5:41:08:5b:3b:46:fe: 4f:0b:86:43:59:b2:9c:2f:39:d3:b9:b6:ad:7a:cb: ae:e5:64:a5:fb:89:c6:c3:cc:0a:65:77:5f:43:6b: ca:30:1d:21:3b:b2:ac:80:aa:f9:b9:74:a2:ad:25: 52:5b:0f:d8:95:9a:fe:4a:84:4c:3c:33:01:bb:bd: 11:3b:6d:fb:3e:37:d0:3a:e7:03:56:4b:60:59:b4: 72:9c:91:8c:47:55:b1:bd:b3:31:1b:43:03:18:6f: 1f:d5:b9:30:f5:ab:a7:db:49:ca:aa:33:86:dd:d1: 14:97:4e:71:ac:64:5f:0a:4e:82:af:6e:bc:72:c9: a8:ff:52:3c:1f:54:43:71:22:5b:d1:21:a2:db:e3: 73:92:84:c5:13:52:5d:3e:af:47:9c:5f:70:bb:27: da:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:93:CB:60:70:FA:16:35:01:34:BB:4F:41:1F:BD:24:DC:24:25:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/240e11cb-53e0-3e1f-9781-a822e0d35c8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl X509v3 Authority Key Identifier: keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbdc:6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:db:1c:0b:8e:87:e6:b1:99:ad:c9:78:e8:6e:12:db:c2:d0: 96:9e:eb:7c:b2:61:06:fa:d5:1f:94:41:d8:23:10:36:ac:f1: b1:f0:8f:79:1b:aa:97:2f:23:45:83:d0:12:61:cb:d8:55:57: bd:01:3d:ed:0b:77:01:53:59:26:11:c9:eb:86:0e:3a:45:3b: dc:d7:e3:ea:ab:a5:0c:74:9d:c4:fa:35:87:a0:2c:94:48:9c: 53:1f:6c:de:39:09:14:bf:a2:97:93:60:2c:61:51:15:01:7b: 6f:4e:a8:90:d7:3f:ac:a2:fb:31:bd:a8:64:e3:cb:72:84:e0: 1c:45:d8:c6:04:73:26:7a:86:d8:b0:00:78:c2:27:39:b2:3f: 4d:35:46:72:dc:f4:9b:0c:2c:e0:1d:48:4a:1c:1c:95:f4:1d: 24:24:f7:38:0d:3b:f6:25:3a:84:0e:f0:10:df:e5:23:04:f5: d3:11:40:80:6b:e4:f6:fc:1c:5b:2c:56:c9:72:99:f2:8f:98: be:e5:6a:8e:4c:b4:4f:ef:37:44:e8:58:e8:b7:61:e9:23:b1: 60:8f:a7:1a:c4:68:89:98:eb:de:7d:3d:3d:7d:cf:54:a0:7f: 97:2c:35:ef:56:8d:32:c1:c7:a3:52:cf:89:35:c7:a7:9e:32: 93:15:73:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkcDCYFWQk5sD2qRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh ZGQwMB4XDTI1MDMwNzE0MDA1MloXDTI1MDYwNTEzMDA1MlowLzEtMCsGA1UEAxMk MjJjMjgwNWMtNDA4Mi00MDRmLTk3M2EtNzRjNWFhZjg3ZDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOwdEgnucpdKNzi8mVPdzJNeZa3vQJ2ez+46 RF/brmbpKksriXjMUN7aJFBjdimTzw+IsmjqvKIdckARB4zgnfo0h6heuctpE5d3 MQy/S+HAjSvU9M/06e9Q+62P+aars/VBCFs7Rv5PC4ZDWbKcLznTubatesuu5WSl +4nGw8wKZXdfQ2vKMB0hO7KsgKr5uXSirSVSWw/YlZr+SoRMPDMBu70RO237PjfQ OucDVktgWbRynJGMR1WxvbMxG0MDGG8f1bkw9aun20nKqjOG3dEUl05xrGRfCk6C r268csmo/1I8H1RDcSJb0SGi2+NzkoTFE1JdPq9HnF9wuyfahwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJqTy2Bw+hY1ATS7T0EfvSTcJCWLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvMjQwZTExY2ItNTNlMC0z ZTFmLTk3ODEtYTgyMmUwZDM1YzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4 NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2 YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73AAG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABzbHAuOh+axma3JeOhuEtvC0Jae63yyYQb61R+UQdgjEDas8bHw j3kbqpcvI0WD0BJhy9hVV70BPe0LdwFTWSYRyeuGDjpFO9zX4+qrpQx0ncT6NYeg LJRInFMfbN45CRS/opeTYCxhURUBe29OqJDXP6yi+zG9qGTjy3KE4BxF2MYEcyZ6 htiwAHjCJzmyP001RnLc9JsMLOAdSEocHJX0HSQk9zgNO/YlOoQO8BDf5SME9dMR QIBr5Pb8HFssVslymfKPmL7lao5MtE/vN0ToWOi3YekjsWCPpxrEaImY6959PT19 z1Sgf5csNe9WjTLBx6NSz4k1x6eeMpMVc5c= -----END CERTIFICATE-----Generated at Sat Apr 5 06:28:48 2025 by rpki-client