$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/742a4fb2-7087-3c58-ad85-45fa34801e33.roa File: 742a4fb2-7087-3c58-ad85-45fa34801e33.roa (raw, json) Hash identifier: 1/+IXbloMiD9422NJMxwKQ/pjWKhTu/jmpQf+LJIvPE= Subject key identifier: B3:42:49:77:22:62:3F:05:A5:2B:46:64:88:92:75:33:CC:15:E3:8B Certificate issuer: /CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc Certificate serial: 010D0C9F43285848EFC6C84B15E36CF8B2FAA080 Authority key identifier: 10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/742a4fb2-7087-3c58-ad85-45fa34801e33.roa Signing time: Wed 19 Feb 2025 17:25:36 +0000 ROA not before: Wed 19 Feb 2025 17:25:36 +0000 ROA not after: Tue 20 May 2025 16:25:36 +0000 asID: 399970 IP address blocks: 2602:fc3b:800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:c6:c8:4b:15:e3:6c:f8:b2:fa:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc Validity Not Before: Feb 19 17:25:36 2025 GMT Not After : May 20 16:25:36 2025 GMT Subject: CN=004494e2-d112-4280-bee5-faabc65534ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5b:14:62:fd:6b:49:d6:25:4d:fc:43:66:02: 94:9b:53:26:8c:d3:e0:34:77:f8:0a:f0:29:9a:24: ae:51:38:52:87:8c:d0:12:98:71:73:aa:39:02:bf: 16:e6:0c:7b:ca:99:5b:ea:8f:85:24:7b:73:f6:ba: cd:51:2d:95:de:0f:16:4a:ed:eb:bb:6a:ab:c7:78: e6:19:47:1f:f2:1f:7b:c5:73:1d:fb:b0:5f:b5:3a: 9c:de:1a:b4:ef:11:59:47:9f:3f:e2:a7:d9:b4:55: da:30:85:a5:5f:d9:84:bc:50:3b:da:b5:76:66:3f: 74:83:33:67:ea:20:39:84:9d:68:f5:f9:1f:7f:53: 28:d2:d0:b3:6e:fb:66:d4:cf:96:00:23:d1:62:68: 76:f8:e4:df:36:f8:8b:da:a8:50:96:e6:63:18:74: 47:4f:78:ca:04:5a:5e:ab:94:93:b0:83:e5:30:4e: 93:17:89:0a:3e:70:56:7e:66:8b:49:06:a2:dd:37: a8:30:0f:15:c9:c8:f6:8b:47:51:dc:46:7d:e6:d2: f2:d2:1d:ea:88:14:13:77:b9:37:2a:73:80:fe:7e: 15:a2:17:4a:2e:64:e7:45:e6:03:fb:f6:6b:8e:b7: 38:ba:7c:e6:b7:ff:fc:1a:2e:df:44:74:f6:aa:9d: 99:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:42:49:77:22:62:3F:05:A5:2B:46:64:88:92:75:33:CC:15:E3:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/742a4fb2-7087-3c58-ad85-45fa34801e33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl X509v3 Authority Key Identifier: keyid:10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:f9:98:0c:a4:b8:f2:ce:62:87:87:1a:a1:21:1d:f7:7c:fb: df:ea:66:ff:eb:bc:61:9c:e1:8a:dd:37:24:a6:b0:d0:d5:81: 31:a0:52:cb:c0:fd:ce:d1:79:86:e8:1c:bb:13:1d:97:9d:34: 32:66:95:99:b2:28:e7:6a:7d:5d:e1:d6:46:46:71:16:01:b5: 3c:cc:f4:83:18:24:93:17:fb:0e:8d:2e:c5:6c:12:e1:40:9f: 3b:25:4f:a9:ae:df:23:c1:a3:ad:8f:27:bb:a8:00:6b:d2:95: c5:1c:77:2b:09:d8:c6:db:b1:4c:c5:14:bb:e3:d7:af:48:68: e6:c7:8c:64:87:08:05:3e:f3:2c:ce:44:51:83:cc:ec:7f:1d: 6c:f2:b2:09:ce:88:e8:8f:1e:e1:fb:ff:36:1e:90:b9:7b:72: 28:2a:85:4a:b5:53:8e:52:e3:92:fc:06:d5:5d:d4:11:89:93: f3:5c:4a:e1:49:13:5e:e9:0b:75:84:97:d1:1c:72:9c:fe:52: 78:e6:d4:cf:1c:15:77:84:c2:95:80:50:df:7f:5f:5c:ab:48: 27:1e:26:c7:3b:0d:60:74:8b:54:45:7f:dc:7e:4d:08:da:dc: b4:51:a4:30:2b:fd:89:27:5a:06:b4:75:07:e6:86:6d:98:7f: 08:c6:01:63 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjvxshLFeNs+LL6oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2EzMDk1YzUtZmI2YS00NDAwLWJiNzQtYjU1ZWZmMjA3 M2JjMB4XDTI1MDIxOTE3MjUzNloXDTI1MDUyMDE2MjUzNlowLzEtMCsGA1UEAxMk MDA0NDk0ZTItZDExMi00MjgwLWJlZTUtZmFhYmM2NTUzNGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VsUYv1rSdYlTfxDZgKUm1MmjNPgNHf4CvAp miSuUThSh4zQEphxc6o5Ar8W5gx7yplb6o+FJHtz9rrNUS2V3g8WSu3ru2qrx3jm GUcf8h97xXMd+7BftTqc3hq07xFZR58/4qfZtFXaMIWlX9mEvFA72rV2Zj90gzNn 6iA5hJ1o9fkff1Mo0tCzbvtm1M+WACPRYmh2+OTfNviL2qhQluZjGHRHT3jKBFpe q5STsIPlME6TF4kKPnBWfmaLSQai3TeoMA8Vycj2i0dR3EZ95tLy0h3qiBQTd7k3 KnOA/n4VohdKLmTnReYD+/Zrjrc4unzmt//8Gi7fRHT2qp2ZwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLNCSXciYj8FpStGZIiSdTPMFeOLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zYTMw OTVjNS1mYjZhLTQ0MDAtYmI3NC1iNTVlZmYyMDczYmMvNzQyYTRmYjItNzA4Ny0z YzU4LWFkODUtNDVmYTM0ODAxZTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2EzMDk1YzUtZmI2YS00NDAwLWJi NzQtYjU1ZWZmMjA3M2JjLzNhMzA5NWM1LWZiNmEtNDQwMC1iYjc0LWI1NWVmZjIw NzNiYy5jcmwwHwYDVR0jBBgwFoAUEKDh9Rb7dXUfndOPAC3OFb53TqIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zYTMwOTVjNS1mYjZhLTQ0MDAtYmI3NC1iNTVl ZmYyMDczYmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG/5mAykuPLOYoeHGqEhHfd8+9/qZv/rvGGc4YrdNySmsNDVgTGg UsvA/c7ReYboHLsTHZedNDJmlZmyKOdqfV3h1kZGcRYBtTzM9IMYJJMX+w6NLsVs EuFAnzslT6mu3yPBo62PJ7uoAGvSlcUcdysJ2MbbsUzFFLvj169IaObHjGSHCAU+ 8yzORFGDzOx/HWzysgnOiOiPHuH7/zYekLl7cigqhUq1U45S45L8BtVd1BGJk/Nc SuFJE17pC3WEl9Eccpz+Unjm1M8cFXeEwpWAUN9/X1yrSCceJsc7DWB0i1RFf9x+ TQja3LRRpDAr/YknWga0dQfmhm2YfwjGAWM= -----END CERTIFICATE-----Generated at Sat Apr 5 13:15:16 2025 by rpki-client