$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/84fa4180-d8a7-3721-a5ba-a7fb3e215fba.roa File: 84fa4180-d8a7-3721-a5ba-a7fb3e215fba.roa (raw, json) Hash identifier: pkJjgrLhTEs5yaOf10JZb1Pe1Oi3lcd72aHCZHHVkws= Subject key identifier: 99:C3:0A:F0:0F:D9:A7:40:F7:40:E7:AB:D2:6F:19:34:0D:E7:CD:E4 Certificate issuer: /CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc Certificate serial: 010D0C9F43285848EFC6EBDF764DDBBAF1566BC0 Authority key identifier: 10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/84fa4180-d8a7-3721-a5ba-a7fb3e215fba.roa Signing time: Wed 19 Feb 2025 17:25:53 +0000 ROA not before: Wed 19 Feb 2025 17:25:53 +0000 ROA not after: Tue 20 May 2025 16:25:53 +0000 asID: 399970 IP address blocks: 2602:fc3b:900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:c6:eb:df:76:4d:db:ba:f1:56:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc Validity Not Before: Feb 19 17:25:53 2025 GMT Not After : May 20 16:25:53 2025 GMT Subject: CN=3c52e55f-2c52-4318-bc57-9b74ed6f0825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9b:ef:6f:60:21:d1:81:f7:7b:ba:e5:84:53: 0c:2f:d2:a5:4d:03:74:26:f8:ca:e3:87:03:7d:2b: f2:e5:b3:87:5e:de:20:08:12:55:7d:b1:01:e9:4c: a3:87:64:07:39:5f:84:f9:40:db:44:93:70:fc:2d: 77:2d:b5:93:01:85:ff:ab:a3:07:19:d5:b4:52:6e: 55:4e:4f:c3:42:87:b6:84:29:7a:e7:bf:af:56:bc: fa:ee:ba:88:87:56:ac:26:12:b2:50:04:40:0b:9f: a8:26:8d:94:75:7b:53:49:f8:0d:ef:90:f6:f6:26: 4b:54:bb:a9:8f:51:ee:b8:c1:84:bb:9a:ba:a0:32: a1:e4:37:e1:05:39:5f:20:67:6f:9f:47:00:93:d9: 48:ac:4d:45:1f:79:9a:86:2d:7e:a0:c7:9c:a1:6f: 31:e2:c1:8a:b1:23:51:22:7a:ff:36:7a:f9:77:06: 41:8f:d1:c0:ea:27:ae:ca:98:5a:83:33:95:89:e0: 4f:63:a8:22:dd:f3:d1:6c:64:6e:be:2c:f0:ed:fc: bf:1a:c3:20:68:76:c5:75:3a:98:0a:b3:b7:00:87: b6:a2:f9:11:04:70:bf:b4:ad:c7:bb:c5:0d:f9:91: 11:8d:28:14:77:7f:ad:f0:29:be:81:57:c5:a3:c9: 3f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C3:0A:F0:0F:D9:A7:40:F7:40:E7:AB:D2:6F:19:34:0D:E7:CD:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/84fa4180-d8a7-3721-a5ba-a7fb3e215fba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl X509v3 Authority Key Identifier: keyid:10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:900::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:e8:c0:b3:7c:1c:78:e2:07:da:94:c0:3f:04:c9:03:80:6d: 19:74:57:ea:4d:d1:d0:74:fa:01:e4:aa:91:58:7b:d7:85:e0: fd:a1:f9:77:2c:7e:92:89:81:c8:e3:8e:32:9e:d5:2e:f5:01: 3b:f2:f4:47:d5:5d:fb:df:40:6b:38:f2:0e:a9:4d:24:93:7f: f3:cf:0b:0d:19:ec:6b:bd:95:0a:fb:cd:fc:bb:7f:74:67:b6: 64:95:33:cf:4f:ec:cf:c2:93:6c:0c:0a:a1:5d:b0:2b:10:01: 3a:a9:5b:f0:d2:c3:7b:3c:4f:7a:17:6e:3b:d5:43:60:24:ca: ba:05:15:65:c5:b8:72:dd:b5:62:ab:29:7e:5d:79:2f:f1:9a: c3:a3:79:86:44:bb:84:20:49:61:b0:ad:7c:d8:da:69:32:b1: d5:a9:52:03:2f:02:a3:3f:58:2a:25:70:59:45:12:1c:79:08: ef:9d:3b:9f:01:80:4a:40:21:9a:54:9b:56:ca:40:36:c4:77: 52:86:b9:ca:1b:9a:8c:a5:b4:61:bf:a8:92:a0:70:56:74:fe: ad:26:35:59:47:c4:69:f5:32:d2:b0:df:16:92:38:ae:ae:72: 06:17:7b:ec:63:f3:bd:9f:2f:29:be:06:cf:dc:f9:27:23:b5: d0:51:70:a9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjvxuvfdk3buvFWa8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2EzMDk1YzUtZmI2YS00NDAwLWJiNzQtYjU1ZWZmMjA3 M2JjMB4XDTI1MDIxOTE3MjU1M1oXDTI1MDUyMDE2MjU1M1owLzEtMCsGA1UEAxMk M2M1MmU1NWYtMmM1Mi00MzE4LWJjNTctOWI3NGVkNmYwODI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5vvb2Ah0YH3e7rlhFMML9KlTQN0JvjK44cD fSvy5bOHXt4gCBJVfbEB6Uyjh2QHOV+E+UDbRJNw/C13LbWTAYX/q6MHGdW0Um5V Tk/DQoe2hCl657+vVrz67rqIh1asJhKyUARAC5+oJo2UdXtTSfgN75D29iZLVLup j1HuuMGEu5q6oDKh5DfhBTlfIGdvn0cAk9lIrE1FH3mahi1+oMecoW8x4sGKsSNR Inr/Nnr5dwZBj9HA6ieuyphagzOVieBPY6gi3fPRbGRuvizw7fy/GsMgaHbFdTqY CrO3AIe2ovkRBHC/tK3Hu8UN+ZERjSgUd3+t8Cm+gVfFo8k/HQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJnDCvAP2adA90Dnq9JvGTQN583kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zYTMw OTVjNS1mYjZhLTQ0MDAtYmI3NC1iNTVlZmYyMDczYmMvODRmYTQxODAtZDhhNy0z NzIxLWE1YmEtYTdmYjNlMjE1ZmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2EzMDk1YzUtZmI2YS00NDAwLWJi NzQtYjU1ZWZmMjA3M2JjLzNhMzA5NWM1LWZiNmEtNDQwMC1iYjc0LWI1NWVmZjIw NzNiYy5jcmwwHwYDVR0jBBgwFoAUEKDh9Rb7dXUfndOPAC3OFb53TqIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zYTMwOTVjNS1mYjZhLTQ0MDAtYmI3NC1iNTVl ZmYyMDczYmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwkA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA/owLN8HHjiB9qUwD8EyQOAbRl0V+pN0dB0+gHkqpFYe9eF4P2h +XcsfpKJgcjjjjKe1S71ATvy9EfVXfvfQGs48g6pTSSTf/PPCw0Z7Gu9lQr7zfy7 f3RntmSVM89P7M/Ck2wMCqFdsCsQATqpW/DSw3s8T3oXbjvVQ2AkyroFFWXFuHLd tWKrKX5deS/xmsOjeYZEu4QgSWGwrXzY2mkysdWpUgMvAqM/WColcFlFEhx5CO+d O58BgEpAIZpUm1bKQDbEd1KGucobmoyltGG/qJKgcFZ0/q0mNVlHxGn1MtKw3xaS OK6ucgYXe+xj872fLym+Bs/c+ScjtdBRcKk= -----END CERTIFICATE-----Generated at Sat Apr 5 13:02:28 2025 by rpki-client