$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/0324a99b-635c-375e-af56-954f8fd6c9c6.roa File: 0324a99b-635c-375e-af56-954f8fd6c9c6.roa (raw, json) Hash identifier: NrOHF/cYZ6bo8Gwl3VKIqEw/WrBDfsH+jDWG9RbZ0LU= Subject key identifier: 69:B4:B3:46:AF:D1:A2:86:C2:6D:F6:57:DD:38:C2:24:12:CC:E1:EB Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Certificate serial: 010D0C9F4328584953C44BA66F4D4AB83C3C6660 Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/0324a99b-635c-375e-af56-954f8fd6c9c6.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 62467 IP address blocks: 2602:fc05:ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:4b:a6:6f:4d:4a:b8:3c:3c:66:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=5190e66d-ce72-46ae-8808-5fc96132f0cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4c:79:0a:b4:15:d3:e3:25:09:39:1d:f4:ae: 40:99:fb:42:2b:68:49:8f:45:e4:ff:b9:ba:7f:c6: 88:ae:88:ce:33:b2:20:f8:f6:a6:22:0a:5c:a5:a3: aa:60:2e:59:5a:0d:7c:78:d7:4f:8a:df:78:0f:23: 7b:ea:02:bc:df:10:74:a5:60:b8:fc:57:a5:fb:f5: 0d:57:1f:73:8c:a4:f0:17:43:6c:00:2d:90:e9:67: 5a:38:f6:d0:19:9e:b1:9d:35:2a:f5:f8:18:7f:ee: d9:4f:59:83:f8:bb:1c:66:ed:88:3b:66:a5:87:a7: 32:cb:c8:c5:a7:ba:d6:e0:8d:83:72:ca:90:4d:5a: e8:e9:d1:53:4d:5e:98:71:da:36:44:85:50:9d:98: 20:33:77:d9:de:ff:cb:12:8b:1a:a9:ce:6a:33:f9: a4:88:29:8b:2f:ed:c8:35:f5:03:53:03:35:93:6b: 1c:66:87:31:3c:40:4b:d6:54:fe:4b:dd:e7:d7:50: 73:40:64:46:db:8e:68:5d:19:c4:a8:eb:86:4d:ee: 43:73:3d:2a:a4:3b:3b:78:c5:55:51:ee:87:90:c2: 5a:81:3b:6d:b5:1c:21:ca:ba:a5:8a:2a:1a:06:c8: 18:ca:42:99:b4:56:94:c4:2d:1e:b4:2c:ce:37:49: c0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B4:B3:46:AF:D1:A2:86:C2:6D:F6:57:DD:38:C2:24:12:CC:E1:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/0324a99b-635c-375e-af56-954f8fd6c9c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl X509v3 Authority Key Identifier: keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc05:ff::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:78:4f:95:07:41:ce:06:48:6c:93:7e:04:cd:91:e1:14:e6: 69:ed:4f:11:7d:24:54:c8:6d:bf:70:3b:80:c1:4f:25:da:45: 3f:e7:c3:43:37:46:3f:80:0c:fc:94:fc:5c:2b:36:85:02:0a: af:29:af:16:94:71:4f:97:94:c9:31:72:da:78:d4:73:aa:4c: 75:1d:ae:83:f5:e1:d3:e4:04:af:68:65:f4:c6:1a:02:0a:64: eb:21:c4:88:23:f6:fc:b7:b0:02:6f:bf:a5:17:ea:2c:44:41: b6:2e:9c:c9:6b:e1:0e:a3:2d:0e:71:a5:5b:84:18:4b:be:09: 9c:c1:e2:c3:9c:96:bb:e5:ef:06:42:ac:aa:c3:2c:8f:8b:c7: c9:e9:8b:42:92:95:56:2f:65:aa:b5:52:82:39:64:46:cc:75: 77:f8:77:79:9a:76:49:42:20:c8:f8:ee:d9:d1:54:cc:2c:a4: bc:5a:a3:88:70:16:61:ae:3d:32:ff:6d:6d:7b:a0:46:03:1a: bf:b8:4f:1d:cb:bb:a9:c6:34:2f:4b:08:e6:e0:ba:c0:3c:8d: 7b:bb:91:4e:b3:8a:3f:14:f0:e1:f9:87:dc:c4:23:3d:5a:18: cf:eb:d4:e5:33:4b:07:16:f4:b0:38:5d:55:db:7f:b8:11:5a: 63:0b:99:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElTxEumb01KuDw8ZmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkzM2FmNzAtZmFlNC00NGM2LTllNDItMmI5ZWRhM2Mx ZTBlMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk NTE5MGU2NmQtY2U3Mi00NmFlLTg4MDgtNWZjOTYxMzJmMGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkx5CrQV0+MlCTkd9K5AmftCK2hJj0Xk/7m6 f8aIrojOM7Ig+PamIgpcpaOqYC5ZWg18eNdPit94DyN76gK83xB0pWC4/Fel+/UN Vx9zjKTwF0NsAC2Q6WdaOPbQGZ6xnTUq9fgYf+7ZT1mD+LscZu2IO2alh6cyy8jF p7rW4I2DcsqQTVro6dFTTV6Ycdo2RIVQnZggM3fZ3v/LEosaqc5qM/mkiCmLL+3I NfUDUwM1k2scZocxPEBL1lT+S93n11BzQGRG245oXRnEqOuGTe5Dcz0qpDs7eMVV Ue6HkMJagTtttRwhyrqliioaBsgYykKZtFaUxC0etCzON0nALQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGm0s0av0aKGwm32V904wiQSzOHrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OTMz YWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjllZGEzYzFlMGUvMDMyNGE5OWItNjM1Yy0z NzVlLWFmNTYtOTU0ZjhmZDZjOWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTkzM2FmNzAtZmFlNC00NGM2LTll NDItMmI5ZWRhM2MxZTBlLzU5MzNhZjcwLWZhZTQtNDRjNi05ZTQyLTJiOWVkYTNj MWUwZS5jcmwwHwYDVR0jBBgwFoAUX0piry7HhCrgxdrmtpTYiRdP1RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OTMzYWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjll ZGEzYzFlMGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8BQD/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHl4T5UHQc4GSGyTfgTNkeEU5mntTxF9JFTIbb9wO4DBTyXaRT/n w0M3Rj+ADPyU/FwrNoUCCq8prxaUcU+XlMkxctp41HOqTHUdroP14dPkBK9oZfTG GgIKZOshxIgj9vy3sAJvv6UX6ixEQbYunMlr4Q6jLQ5xpVuEGEu+CZzB4sOclrvl 7wZCrKrDLI+Lx8npi0KSlVYvZaq1UoI5ZEbMdXf4d3madklCIMj47tnRVMwspLxa o4hwFmGuPTL/bW17oEYDGr+4Tx3Lu6nGNC9LCObgusA8jXu7kU6zij8U8OH5h9zE Iz1aGM/r1OUzSwcW9LA4XVXbf7gRWmMLmbE= -----END CERTIFICATE-----Generated at Sat Apr 12 19:51:18 2025 by rpki-client