$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/a99aac20-52c3-35c6-b3fd-8b4b1f78e48d.roa File: a99aac20-52c3-35c6-b3fd-8b4b1f78e48d.roa (raw, json) Hash identifier: rq/BmjVCb7E7sVGoCyaItNgms/fVAocJ9tZsZK1eT/4= Subject key identifier: EF:CC:2A:DF:F9:00:96:FF:B4:55:9E:32:D4:7F:E0:AE:6E:F0:57:25 Certificate issuer: /CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Certificate serial: 010D0C9F432858491AA6ADBE6CB35369C89832E0 Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/a99aac20-52c3-35c6-b3fd-8b4b1f78e48d.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 3423 IP address blocks: 2602:fbdc:85::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:ad:be:6c:b3:53:69:c8:98:32:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=c325c3b8-093c-4021-a6ff-cfadecc93e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:36:c5:a1:4a:0a:7b:81:be:43:70:9c:18:a2: 41:2f:b0:11:61:ad:f2:c9:a9:12:74:70:f1:89:ea: 2c:c7:58:d8:5e:80:3d:2a:21:81:45:e5:30:8a:eb: 1e:07:ec:04:9c:8b:1b:97:17:5e:b7:48:99:9d:09: a4:ae:86:73:21:00:f3:0c:1a:fb:95:f0:96:95:de: 60:b5:c5:16:6c:5e:fb:eb:59:3a:ff:8e:4c:89:89: 5f:dd:7d:3e:76:50:52:23:7e:50:57:10:25:59:4d: 03:19:25:fa:b9:37:2c:00:21:b9:eb:09:ad:2f:50: f5:ef:90:b8:b5:15:6e:9b:55:e0:7b:09:1e:2a:57: 64:db:95:ec:0c:4b:c6:ee:44:20:ca:3b:ac:84:2e: 48:7a:2f:89:e7:2a:d7:c9:83:c8:16:ac:42:2d:19: 08:a2:58:0f:e1:6e:a0:d8:b6:02:e4:78:8f:c2:02: 6f:07:1b:9a:61:36:8f:e7:50:ea:12:20:c4:7b:11: 17:fd:66:5d:25:b8:1e:4f:ee:7c:60:e3:78:47:26: 0f:29:ff:e5:20:e2:42:d7:83:08:91:15:85:7a:62: c1:7e:5b:ed:1d:8b:80:c0:60:ad:f9:66:a5:a5:4b: 3b:87:10:31:07:a7:27:74:5c:38:4a:36:c0:d7:39: d0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CC:2A:DF:F9:00:96:FF:B4:55:9E:32:D4:7F:E0:AE:6E:F0:57:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/a99aac20-52c3-35c6-b3fd-8b4b1f78e48d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl X509v3 Authority Key Identifier: keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbdc:85::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:f8:83:5e:98:c2:f7:2f:85:07:85:a0:54:da:23:53:82:5b: 93:82:f1:6c:5d:36:e9:ac:d7:f6:5b:d5:34:c9:64:27:b2:1d: 49:f0:8a:d7:46:27:9b:92:70:a7:ee:69:da:32:74:47:e6:97: 7e:dd:b1:51:a2:58:72:fd:f0:f2:b3:92:0e:9d:4c:5c:42:84: 0e:49:7a:d0:68:eb:63:09:8b:35:e6:87:44:62:79:85:f9:0b: 81:69:7b:8b:53:e4:c9:20:08:0d:83:15:79:3c:1e:b6:5b:65: 5f:ba:b7:e5:b6:8c:ae:aa:a9:1d:02:24:6e:67:a9:bb:93:63: d7:2f:37:0a:79:15:fe:51:3e:34:d1:1e:4c:c5:ad:4e:75:71: 8d:88:8c:f0:e4:f9:a9:f0:b4:40:71:0f:61:4d:b2:eb:68:42: 32:53:d8:77:2b:10:36:ac:05:e1:4e:59:36:91:44:9e:62:b3: 3f:3b:31:03:f7:36:d9:c2:c1:f0:c4:e6:2a:bb:99:44:e0:84: bc:fb:5e:f4:0b:3e:2d:8f:b7:11:89:f2:a9:4c:ec:2d:47:61: 7d:60:27:56:01:df:32:f5:35:ac:74:38:2c:15:98:fb:a7:ed: 56:72:26:ab:90:f5:27:5a:a8:e0:27:9b:13:a6:5d:3b:a5:92: 0e:95:74:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkapq2+bLNTaciYMuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh ZGQwMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk YzMyNWMzYjgtMDkzYy00MDIxLWE2ZmYtY2ZhZGVjYzkzZTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TbFoUoKe4G+Q3CcGKJBL7ARYa3yyakSdHDx ieosx1jYXoA9KiGBReUwiuseB+wEnIsblxdet0iZnQmkroZzIQDzDBr7lfCWld5g tcUWbF7761k6/45MiYlf3X0+dlBSI35QVxAlWU0DGSX6uTcsACG56wmtL1D175C4 tRVum1XgewkeKldk25XsDEvG7kQgyjushC5Iei+J5yrXyYPIFqxCLRkIolgP4W6g 2LYC5HiPwgJvBxuaYTaP51DqEiDEexEX/WZdJbgeT+58YON4RyYPKf/lIOJC14MI kRWFemLBflvtHYuAwGCt+WalpUs7hxAxB6cndFw4SjbA1znQUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO/MKt/5AJb/tFWeMtR/4K5u8FclMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvYTk5YWFjMjAtNTJjMy0z NWM2LWIzZmQtOGI0YjFmNzhlNDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4 NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2 YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73ACF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACX4g16YwvcvhQeFoFTaI1OCW5OC8WxdNums1/Zb1TTJZCeyHUnw itdGJ5uScKfuadoydEfml37dsVGiWHL98PKzkg6dTFxChA5JetBo62MJizXmh0Ri eYX5C4Fpe4tT5MkgCA2DFXk8HrZbZV+6t+W2jK6qqR0CJG5nqbuTY9cvNwp5Ff5R PjTRHkzFrU51cY2IjPDk+anwtEBxD2FNsutoQjJT2HcrEDasBeFOWTaRRJ5isz87 MQP3NtnCwfDE5iq7mUTghLz7XvQLPi2PtxGJ8qlM7C1HYX1gJ1YB3zL1Nax0OCwV mPun7VZyJquQ9SdaqOAnmxOmXTulkg6VdLA= -----END CERTIFICATE-----Generated at Wed Apr 9 17:07:37 2025 by rpki-client