$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/43c7ebb2-a87f-3df2-9be6-3e20b0838390.roa File: 43c7ebb2-a87f-3df2-9be6-3e20b0838390.roa (raw, json) Hash identifier: GV1Uh4Ld21aSjCGFaMgfD89Dd60YPJ00tHJIMyw+xyY= Subject key identifier: 09:F7:E6:A0:06:77:9B:7F:52:B0:49:E7:90:0A:46:41:CB:7A:19:E8 Certificate issuer: /CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Certificate serial: 010D0C9F432858491C0C26292C84DB984DDB7500 Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/43c7ebb2-a87f-3df2-9be6-3e20b0838390.roa Signing time: Fri 07 Mar 2025 14:00:52 +0000 ROA not before: Fri 07 Mar 2025 14:00:52 +0000 ROA not after: Thu 05 Jun 2025 13:00:52 +0000 asID: 4473 IP address blocks: 2602:fbdc:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1c:0c:26:29:2c:84:db:98:4d:db:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Validity Not Before: Mar 7 14:00:52 2025 GMT Not After : Jun 5 13:00:52 2025 GMT Subject: CN=b6b66393-2253-47b6-91d5-da428378f907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e8:88:18:fa:ea:9c:5a:e3:61:d5:13:d7:19: 69:2e:07:df:05:31:58:37:c2:91:1f:55:de:78:a1: 07:a4:18:fc:23:54:6a:d7:28:3d:e5:de:8c:aa:5e: 88:7f:fd:9a:55:ae:70:aa:ba:b4:59:00:cd:f2:6b: ef:7e:89:47:d9:2e:eb:44:d3:64:c5:e1:61:ef:84: c9:2a:b0:60:f1:7e:e3:35:75:64:d8:03:b6:89:c3: 5a:62:86:cb:71:19:e7:59:ed:f8:0e:39:ff:f0:7f: f0:f0:63:43:f7:6a:2f:44:4d:e6:e5:fd:56:e3:b9: ce:79:02:5b:d2:02:53:f5:24:14:cb:63:c8:0d:80: 9e:4a:1f:5b:29:37:fe:d4:f3:c1:f6:e6:32:19:e9: 05:26:2e:b1:86:33:93:16:7f:58:35:28:08:04:ee: 29:06:0d:62:a7:f8:1a:da:76:50:96:91:74:49:c3: a1:15:43:60:b1:d5:74:ee:aa:ed:52:61:c2:2a:b4: 9d:80:de:2f:c1:c5:55:3b:c8:e5:a4:e5:0c:0a:b3: 52:f0:ad:aa:a5:f7:a9:75:1d:e0:54:5e:bd:62:c5: 52:f9:92:20:d0:e3:57:95:f7:07:93:ae:18:8d:bd: 8a:93:ef:41:7a:69:ff:9f:91:58:17:bb:3a:28:c9: 9f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F7:E6:A0:06:77:9B:7F:52:B0:49:E7:90:0A:46:41:CB:7A:19:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/43c7ebb2-a87f-3df2-9be6-3e20b0838390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl X509v3 Authority Key Identifier: keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbdc:10::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:cc:03:01:39:35:ad:4f:01:2b:35:d0:1d:1c:b4:bf:dd:e3: 1b:7b:a0:1a:8a:13:07:1b:a9:28:d8:33:ba:42:53:38:1c:45: 79:fa:eb:5d:8e:d7:37:d0:e3:3e:b3:78:fe:5f:c4:29:78:ad: df:64:dc:7e:0e:25:4b:ec:ff:6d:31:63:e8:a8:f2:b1:5e:d5: b1:d6:e6:25:84:d9:45:85:6d:a6:8e:96:fe:3a:b9:01:ad:4c: 9d:42:d2:ec:de:78:35:2f:28:35:cd:04:5f:26:fe:c4:0d:8c: 48:9f:4c:c4:3a:c6:e2:97:8a:84:34:d3:35:1c:eb:e3:e9:fb: 21:67:07:bf:2b:1f:77:61:b5:fa:b3:88:3e:bb:25:8d:5c:1c: d8:68:50:dc:97:c2:bb:66:57:cd:3f:68:5e:56:88:90:64:c1: 13:99:5e:85:40:5b:82:1d:a5:a6:6b:36:b6:c0:0f:db:be:1c: 90:a3:0b:09:27:6c:ea:96:71:f7:7a:65:70:7e:30:b2:1b:5b: 3c:97:58:36:97:0e:fd:9f:b8:da:1c:9f:4b:70:23:5f:8a:18: c3:b9:48:de:01:e7:52:eb:e6:b0:71:e0:b7:bb:e2:13:54:f7: d7:1f:65:48:24:a7:eb:66:92:a3:28:74:a3:fe:12:95:99:08: da:55:e2:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkcDCYpLITbmE3bdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh ZGQwMB4XDTI1MDMwNzE0MDA1MloXDTI1MDYwNTEzMDA1MlowLzEtMCsGA1UEAxMk YjZiNjYzOTMtMjI1My00N2I2LTkxZDUtZGE0MjgzNzhmOTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuiIGPrqnFrjYdUT1xlpLgffBTFYN8KRH1Xe eKEHpBj8I1Rq1yg95d6Mql6If/2aVa5wqrq0WQDN8mvvfolH2S7rRNNkxeFh74TJ KrBg8X7jNXVk2AO2icNaYobLcRnnWe34Djn/8H/w8GND92ovRE3m5f1W47nOeQJb 0gJT9SQUy2PIDYCeSh9bKTf+1PPB9uYyGekFJi6xhjOTFn9YNSgIBO4pBg1ip/ga 2nZQlpF0ScOhFUNgsdV07qrtUmHCKrSdgN4vwcVVO8jlpOUMCrNS8K2qpfepdR3g VF69YsVS+ZIg0ONXlfcHk64Yjb2Kk+9Bemn/n5FYF7s6KMmfYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAn35qAGd5t/UrBJ55AKRkHLehnoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvNDNjN2ViYjItYTg3Zi0z ZGYyLTliZTYtM2UyMGIwODM4MzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4 NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2 YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73AAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGHMAwE5Na1PASs10B0ctL/d4xt7oBqKEwcbqSjYM7pCUzgcRXn6 612O1zfQ4z6zeP5fxCl4rd9k3H4OJUvs/20xY+io8rFe1bHW5iWE2UWFbaaOlv46 uQGtTJ1C0uzeeDUvKDXNBF8m/sQNjEifTMQ6xuKXioQ00zUc6+Pp+yFnB78rH3dh tfqziD67JY1cHNhoUNyXwrtmV80/aF5WiJBkwROZXoVAW4IdpaZrNrbAD9u+HJCj CwknbOqWcfd6ZXB+MLIbWzyXWDaXDv2fuNocn0twI1+KGMO5SN4B51Lr5rBx4Le7 4hNU99cfZUgkp+tmkqModKP+EpWZCNpV4v4= -----END CERTIFICATE-----Generated at Sun Apr 6 11:49:14 2025 by rpki-client