$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/f920aa5a-1977-33fa-9434-afde31a0d21c.roa File: f920aa5a-1977-33fa-9434-afde31a0d21c.roa (raw, json) Hash identifier: 1Evz3e+Fg3j87Kzf1ERaRzw1kYKSWK0W2yBDxMWFHGk= Subject key identifier: FD:F7:17:B8:25:AB:18:4F:77:16:1B:B3:17:34:BB:F4:AD:5E:DA:D5 Certificate issuer: /CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Certificate serial: 010D0C9F432858491C0C26573CA92AE2511F1D80 Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/f920aa5a-1977-33fa-9434-afde31a0d21c.roa Signing time: Fri 07 Mar 2025 14:00:52 +0000 ROA not before: Fri 07 Mar 2025 14:00:52 +0000 ROA not after: Thu 05 Jun 2025 13:00:52 +0000 asID: 4186 IP address blocks: 2602:fbdc:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1c:0c:26:57:3c:a9:2a:e2:51:1f:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Validity Not Before: Mar 7 14:00:52 2025 GMT Not After : Jun 5 13:00:52 2025 GMT Subject: CN=d652acff-a399-4437-84ab-1e609a67213c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9e:70:35:f8:e5:51:53:6c:02:74:04:a5:c2: 26:96:bd:22:a3:e1:e1:40:c5:08:39:7d:11:7e:0c: 15:d1:36:19:9f:5d:28:9a:22:86:f9:70:8e:47:37: 78:fb:87:72:cb:93:30:cb:d9:f3:15:5f:a8:8d:26: 62:74:1a:4a:f7:05:15:56:35:a9:bc:ac:43:f3:4f: 97:cd:94:5d:ad:60:5e:97:76:c8:9f:af:db:98:32: 14:fa:e5:7a:ab:0d:63:c0:6b:6e:99:ab:f7:7a:ad: 8a:71:5a:8a:f0:5d:5a:8d:55:93:2b:7f:c7:7e:f9: 12:33:9b:bd:d2:9f:7e:63:c8:a1:b7:63:77:fb:9c: c0:0c:1e:7e:64:19:65:d0:80:55:8c:0f:80:3b:2e: 03:d8:ed:00:8d:61:4b:61:ac:51:52:01:42:73:e7: ed:ce:e1:a7:0f:21:9d:6b:cd:3c:fc:e3:d5:9d:bd: ee:c5:5f:66:fe:ec:66:ef:0b:51:05:9f:05:ca:83: c2:ea:80:c5:1c:8b:50:7a:e9:52:28:15:68:28:b9: d4:78:38:40:04:12:98:cf:db:47:12:dd:58:e2:e1: 5a:38:88:6a:7d:e3:e6:e8:2c:40:79:85:27:17:47: db:d5:0d:02:77:3c:f2:40:7c:4c:34:17:52:3a:6e: f4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F7:17:B8:25:AB:18:4F:77:16:1B:B3:17:34:BB:F4:AD:5E:DA:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/f920aa5a-1977-33fa-9434-afde31a0d21c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl X509v3 Authority Key Identifier: keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbdc:12::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:8f:ff:a1:1a:13:8c:73:4d:68:69:01:38:32:dc:21:d4:11: 7b:95:f2:ea:99:6a:af:70:fd:89:0a:c5:f3:58:a1:57:e8:ac: da:f0:9a:6b:13:c7:f1:9e:c0:11:2e:d7:d8:39:c0:14:99:98: 0a:e1:94:90:c0:a7:10:9c:f7:db:ec:ae:a9:ff:56:58:0c:26: d4:45:3b:f8:f3:99:e5:e6:ce:a8:99:ea:b4:06:35:fc:cc:42: f5:98:e5:8b:de:50:6d:fc:63:c3:0b:f0:d1:19:e0:9f:9d:d9: 4b:6a:27:03:be:e7:89:5b:0c:bb:f2:cc:9c:02:1f:51:f3:62: b8:ed:1d:9d:8c:59:50:d0:47:02:ea:f5:93:fd:1c:b7:ab:91: a1:a2:d9:f7:b2:07:7b:73:74:8f:a4:7c:00:ea:3c:5b:c5:a1: de:cd:99:bb:56:4a:d0:38:da:15:60:ff:bb:bf:53:02:19:5b: 12:57:9d:0f:de:a9:2c:4c:1c:14:a8:ee:e5:c1:ff:f9:cc:6d: 29:9a:81:c3:49:4d:ac:e1:1a:fc:a5:d9:5c:12:bb:7c:15:e0: b7:e5:46:3b:9a:2a:fb:fe:f7:82:2b:e6:32:23:68:af:a1:bd: f7:fd:77:9d:db:bf:ee:39:f8:46:7c:de:d6:b5:15:ad:e5:26: 5e:2d:48:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkcDCZXPKkq4lEfHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh ZGQwMB4XDTI1MDMwNzE0MDA1MloXDTI1MDYwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDY1MmFjZmYtYTM5OS00NDM3LTg0YWItMWU2MDlhNjcyMTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7J5wNfjlUVNsAnQEpcImlr0io+HhQMUIOX0R fgwV0TYZn10omiKG+XCORzd4+4dyy5Mwy9nzFV+ojSZidBpK9wUVVjWpvKxD80+X zZRdrWBel3bIn6/bmDIU+uV6qw1jwGtumav3eq2KcVqK8F1ajVWTK3/HfvkSM5u9 0p9+Y8iht2N3+5zADB5+ZBll0IBVjA+AOy4D2O0AjWFLYaxRUgFCc+ftzuGnDyGd a808/OPVnb3uxV9m/uxm7wtRBZ8FyoPC6oDFHItQeulSKBVoKLnUeDhABBKYz9tH Et1Y4uFaOIhqfePm6CxAeYUnF0fb1Q0CdzzyQHxMNBdSOm70dwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP33F7glqxhPdxYbsxc0u/StXtrVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvZjkyMGFhNWEtMTk3Ny0z M2ZhLTk0MzQtYWZkZTMxYTBkMjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4 NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2 YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73AAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI+P/6EaE4xzTWhpATgy3CHUEXuV8uqZaq9w/YkKxfNYoVforNrw mmsTx/GewBEu19g5wBSZmArhlJDApxCc99vsrqn/VlgMJtRFO/jzmeXmzqiZ6rQG NfzMQvWY5YveUG38Y8ML8NEZ4J+d2UtqJwO+54lbDLvyzJwCH1HzYrjtHZ2MWVDQ RwLq9ZP9HLerkaGi2feyB3tzdI+kfADqPFvFod7NmbtWStA42hVg/7u/UwIZWxJX nQ/eqSxMHBSo7uXB//nMbSmagcNJTazhGvyl2VwSu3wV4LflRjuaKvv+94Ir5jIj aK+hvff9d53bv+45+EZ83ta1Fa3lJl4tSFQ= -----END CERTIFICATE-----Generated at Sat Apr 5 03:05:45 2025 by rpki-client