$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/b96d661d-151e-3e40-92d8-32407e1e3c9a.roa File: b96d661d-151e-3e40-92d8-32407e1e3c9a.roa (raw, json) Hash identifier: 8SCd0NW/hut5j0Gjbznq46DUoR+JX1Z//WL8hbnVIyM= Subject key identifier: 32:88:9D:3F:15:51:EF:FC:AD:92:18:88:CD:A3:FB:74:29:54:E8:14 Certificate issuer: /CN=380e678f-a53e-4fa7-8c2f-15f6fca7c8f9 Certificate serial: 010D0C9F43285848B6261E4DFB643895C66214C0 Authority key identifier: 71:E2:18:12:C7:06:61:45:DF:F7:A1:DA:01:23:23:5A:5C:02:E9:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/b96d661d-151e-3e40-92d8-32407e1e3c9a.roa Signing time: Thu 30 Jan 2025 02:00:40 +0000 ROA not before: Thu 30 Jan 2025 02:00:40 +0000 ROA not after: Wed 30 Apr 2025 01:00:40 +0000 asID: 53616 IP address blocks: 2602:fa67::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:26:1e:4d:fb:64:38:95:c6:62:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=380e678f-a53e-4fa7-8c2f-15f6fca7c8f9 Validity Not Before: Jan 30 02:00:40 2025 GMT Not After : Apr 30 01:00:40 2025 GMT Subject: CN=45d548ce-eb3c-45fb-bb58-e43e0dd8b9b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2f:2d:5b:57:b3:ef:b8:4f:e1:7b:ad:2a:b8: 38:fb:a3:96:de:5c:e8:b6:91:a5:1c:ff:6a:b2:17: 6a:b2:89:6b:7d:b8:53:9d:7d:99:dd:29:21:b2:d0: ce:02:21:b4:f4:58:36:0e:69:e6:b7:21:a8:fd:52: f6:bc:40:5f:cc:e6:01:4f:bd:f5:de:c8:aa:a1:4f: 73:88:51:48:9e:4f:bb:93:70:62:c7:c6:ee:b6:ba: 63:1f:d9:3b:45:32:90:5d:96:37:cd:7a:86:ef:10: 6a:35:cc:b5:dd:f2:a6:64:93:3b:1e:55:e3:be:f2: 3e:a2:e8:3f:a9:f2:77:0e:a7:f1:b2:16:d1:42:8c: 6e:3e:69:e1:7c:fb:75:23:e1:18:11:7c:76:0c:05: 2d:ff:fd:0b:cf:8c:f8:da:86:c1:68:8b:fc:30:e7: 47:c0:53:38:d3:42:9c:1f:c8:e9:8f:60:8d:58:a6: e1:f1:45:aa:9c:35:ac:15:f3:69:a4:2d:53:ec:4d: 32:c3:36:3c:0e:4e:9e:c0:bb:56:89:3e:ec:56:44: 5a:d6:a6:ec:82:70:42:d0:59:5e:a3:1d:21:a8:26: 5d:1e:ac:74:98:36:5a:97:2a:f9:1a:17:65:b8:50: 9e:9d:c5:1c:12:de:17:9e:92:35:de:80:89:bb:23: a0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:88:9D:3F:15:51:EF:FC:AD:92:18:88:CD:A3:FB:74:29:54:E8:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/b96d661d-151e-3e40-92d8-32407e1e3c9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.crl X509v3 Authority Key Identifier: keyid:71:E2:18:12:C7:06:61:45:DF:F7:A1:DA:01:23:23:5A:5C:02:E9:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa67::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:22:da:89:01:2e:46:93:01:7d:44:51:d7:8d:ee:4f:6c:e8: cb:f3:f2:f1:d1:1d:a2:f8:09:e5:58:13:72:b9:64:79:49:f6: 89:40:6d:8f:8a:34:bb:ea:06:e7:5e:b8:72:78:e3:51:86:b1: 0b:27:fb:a5:c6:25:03:46:69:57:ce:17:2e:33:8c:0f:e9:72: 3c:12:f3:a7:ee:f2:c7:b3:fb:fe:34:c2:a0:00:b4:83:c6:4b: 25:d2:d1:c9:4d:8e:35:ad:b3:d2:85:b9:bf:bb:97:a4:ac:0a: 92:2a:d5:c6:bb:c7:82:72:05:41:37:67:bf:ff:1b:f9:98:93: 5a:1e:ae:0b:8d:6b:a1:ba:8f:6b:57:6f:cc:b6:60:45:4a:ab: 6b:b6:26:83:11:e1:a9:40:83:8f:17:fa:e8:6d:1f:73:2d:6f: de:f0:1e:35:d8:d5:0d:db:a5:f0:bf:d3:65:39:8b:63:62:74: 01:0e:b5:e7:92:a5:00:6e:33:6a:f7:42:e7:b6:90:65:6c:d6: 78:fe:96:5e:a1:f2:d4:0d:5d:a8:2d:60:d7:cd:9e:81:9e:0c: 37:b0:98:bd:8b:ba:90:f0:6b:7a:2a:82:5b:1b:70:20:dc:d5: 6d:85:ce:54:a0:63:3f:5f:f1:29:f1:9e:50:d9:cf:5e:71:19: 2d:bc:9c:78 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEi2Jh5N+2Q4lcZiFMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzgwZTY3OGYtYTUzZS00ZmE3LThjMmYtMTVmNmZjYTdj OGY5MB4XDTI1MDEzMDAyMDA0MFoXDTI1MDQzMDAxMDA0MFowLzEtMCsGA1UEAxMk NDVkNTQ4Y2UtZWIzYy00NWZiLWJiNTgtZTQzZTBkZDhiOWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi8tW1ez77hP4XutKrg4+6OW3lzotpGlHP9q shdqsolrfbhTnX2Z3SkhstDOAiG09Fg2DmnmtyGo/VL2vEBfzOYBT7313siqoU9z iFFInk+7k3Bix8butrpjH9k7RTKQXZY3zXqG7xBqNcy13fKmZJM7HlXjvvI+oug/ qfJ3DqfxshbRQoxuPmnhfPt1I+EYEXx2DAUt//0Lz4z42obBaIv8MOdHwFM400Kc H8jpj2CNWKbh8UWqnDWsFfNppC1T7E0ywzY8Dk6ewLtWiT7sVkRa1qbsgnBC0Fle ox0hqCZdHqx0mDZalyr5GhdluFCencUcEt4XnpI13oCJuyOgDwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDKInT8VUe/8rZIYiM2j+3QpVOgUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zODBl Njc4Zi1hNTNlLTRmYTctOGMyZi0xNWY2ZmNhN2M4ZjkvYjk2ZDY2MWQtMTUxZS0z ZTQwLTkyZDgtMzI0MDdlMWUzYzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzgwZTY3OGYtYTUzZS00ZmE3LThj MmYtMTVmNmZjYTdjOGY5LzM4MGU2NzhmLWE1M2UtNGZhNy04YzJmLTE1ZjZmY2E3 YzhmOS5jcmwwHwYDVR0jBBgwFoAUceIYEscGYUXf96HaASMjWlwC6WUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zODBlNjc4Zi1hNTNlLTRmYTctOGMyZi0xNWY2 ZmNhN2M4ZjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL6ZwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAwiLaiQEuRpMBfURR143uT2zoy/Py8dEdovgJ5VgTcrlkeUn2iUBt j4o0u+oG5164cnjjUYaxCyf7pcYlA0ZpV84XLjOMD+lyPBLzp+7yx7P7/jTCoAC0 g8ZLJdLRyU2ONa2z0oW5v7uXpKwKkirVxrvHgnIFQTdnv/8b+ZiTWh6uC41robqP a1dvzLZgRUqra7YmgxHhqUCDjxf66G0fcy1v3vAeNdjVDdul8L/TZTmLY2J0AQ61 55KlAG4zavdC57aQZWzWeP6WXqHy1A1dqC1g182egZ4MN7CYvYu6kPBreiqCWxtw INzVbYXOVKBjP1/xKfGeUNnPXnEZLbyceA== -----END CERTIFICATE-----Generated at Sat Apr 5 12:11:40 2025 by rpki-client