$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/887f2db4-03a1-3c43-9dc9-f521c9685ace.roa File: 887f2db4-03a1-3c43-9dc9-f521c9685ace.roa (raw, json) Hash identifier: iDAA1DVhl6hmvH40dFUNAEA5jOchSYAQRHfffQLs3+8= Subject key identifier: 85:62:C0:CE:20:2D:1C:A5:88:D2:5F:87:C0:02:72:08:EB:7C:82:06 Certificate issuer: /CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc Certificate serial: 010D0C9F43285848E26802BF4D10FF93B620AF00 Authority key identifier: 10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/887f2db4-03a1-3c43-9dc9-f521c9685ace.roa Signing time: Fri 14 Feb 2025 22:29:09 +0000 ROA not before: Fri 14 Feb 2025 22:29:09 +0000 ROA not after: Thu 15 May 2025 21:29:09 +0000 asID: 399970 IP address blocks: 2602:fc3b::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:68:02:bf:4d:10:ff:93:b6:20:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc Validity Not Before: Feb 14 22:29:09 2025 GMT Not After : May 15 21:29:09 2025 GMT Subject: CN=25fe105f-1f0f-4332-bc72-bb2e287e89e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:08:f7:d3:68:c2:fd:57:a4:b1:23:53:98:05: 80:f0:14:e2:e7:0d:4d:b8:5a:ac:e7:9c:1c:75:39: 6a:36:f9:07:b6:64:49:4d:c4:ac:26:f6:bc:e1:b8: 8b:c5:49:e1:59:2f:b7:00:62:46:9d:8a:fe:81:92: 46:70:2f:b8:6a:15:ba:49:ae:47:c9:05:3b:cd:17: 2f:d3:9e:34:6c:71:9b:a4:e4:83:63:cb:a2:c1:86: 49:37:0d:61:a8:dd:34:d6:41:85:00:d7:df:0c:06: 4b:5f:cd:33:f6:97:63:cf:48:8f:66:b8:15:6e:4e: 16:3b:c8:65:59:3f:9c:c1:b2:6e:fd:90:d0:4a:8b: 0d:31:a5:bd:93:7b:b7:45:bb:85:22:f7:89:3f:56: 86:9d:8d:e4:82:aa:19:e3:7c:14:ac:8e:38:d7:62: e5:60:9a:4b:39:23:a0:9d:5f:46:36:c9:8e:3c:5e: 81:46:52:ea:79:13:54:0a:70:04:31:b5:b4:d1:f7: f7:63:42:21:af:3b:57:c8:23:a4:5b:39:b6:c1:26: f2:b5:30:18:73:6a:e8:4c:09:2f:4f:bd:ef:31:28: c0:82:62:ef:1d:84:2c:a8:c5:86:65:01:f8:56:5f: 1b:c3:b5:86:b9:88:b5:8e:55:53:a4:ab:28:78:7c: e0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:62:C0:CE:20:2D:1C:A5:88:D2:5F:87:C0:02:72:08:EB:7C:82:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/887f2db4-03a1-3c43-9dc9-f521c9685ace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl X509v3 Authority Key Identifier: keyid:10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:d7:52:e0:ea:7c:23:b6:a4:5f:47:c6:4d:87:57:f0:c6:74: 40:42:f6:b2:b5:26:64:f7:d8:45:dd:29:dc:91:81:4e:1c:60: d0:57:52:5d:a1:7e:81:3c:3c:af:e1:68:6e:18:b4:3c:fb:a1: 9f:72:ff:f8:43:68:1a:aa:2b:01:63:fe:18:7d:fc:c1:0c:b8: 25:43:8f:95:d5:c4:9f:94:75:02:b9:1d:36:af:f7:20:48:7c: 3d:68:d7:7a:52:b1:6b:31:4e:45:24:e0:04:d2:bf:2e:aa:8b: c5:b4:d2:f3:f6:9c:27:ea:b9:46:f5:d2:11:24:3b:c0:e6:a0: 19:a7:8b:02:4f:85:ed:58:55:c3:10:40:e6:6b:ce:4d:3f:34: 63:c6:f5:94:e9:29:c3:63:7a:a1:2a:2e:cd:31:16:e2:72:83: b9:58:d3:92:1f:24:61:4e:2a:4e:6b:1b:5f:20:4f:2a:32:9c: bc:d8:43:e5:0c:97:e0:aa:a8:be:36:ed:e0:06:98:51:b5:20: 5b:0a:fc:cc:61:e7:22:49:e6:1f:1b:4a:57:25:bd:74:0f:e9: d8:ba:d4:cf:ca:f2:d3:5b:c6:63:ef:78:b3:5b:bb:3d:99:65: c6:23:96:31:18:c1:e9:81:a4:75:1d:59:47:36:7a:4f:e6:12: 64:6d:b9:d9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjiaAK/TRD/k7YgrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2EzMDk1YzUtZmI2YS00NDAwLWJiNzQtYjU1ZWZmMjA3 M2JjMB4XDTI1MDIxNDIyMjkwOVoXDTI1MDUxNTIxMjkwOVowLzEtMCsGA1UEAxMk MjVmZTEwNWYtMWYwZi00MzMyLWJjNzItYmIyZTI4N2U4OWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwj302jC/VeksSNTmAWA8BTi5w1NuFqs55wc dTlqNvkHtmRJTcSsJva84biLxUnhWS+3AGJGnYr+gZJGcC+4ahW6Sa5HyQU7zRcv 0540bHGbpOSDY8uiwYZJNw1hqN001kGFANffDAZLX80z9pdjz0iPZrgVbk4WO8hl WT+cwbJu/ZDQSosNMaW9k3u3RbuFIveJP1aGnY3kgqoZ43wUrI4412LlYJpLOSOg nV9GNsmOPF6BRlLqeRNUCnAEMbW00ff3Y0IhrztXyCOkWzm2wSbytTAYc2roTAkv T73vMSjAgmLvHYQsqMWGZQH4Vl8bw7WGuYi1jlVTpKsoeHzgRQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIViwM4gLRyliNJfh8ACcgjrfIIGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zYTMw OTVjNS1mYjZhLTQ0MDAtYmI3NC1iNTVlZmYyMDczYmMvODg3ZjJkYjQtMDNhMS0z YzQzLTlkYzktZjUyMWM5Njg1YWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2EzMDk1YzUtZmI2YS00NDAwLWJi NzQtYjU1ZWZmMjA3M2JjLzNhMzA5NWM1LWZiNmEtNDQwMC1iYjc0LWI1NWVmZjIw NzNiYy5jcmwwHwYDVR0jBBgwFoAUEKDh9Rb7dXUfndOPAC3OFb53TqIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zYTMwOTVjNS1mYjZhLTQ0MDAtYmI3NC1iNTVl ZmYyMDczYmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8OwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAH9dS4Op8I7akX0fGTYdX8MZ0QEL2srUmZPfYRd0p3JGBThxg0FdS XaF+gTw8r+Fobhi0PPuhn3L/+ENoGqorAWP+GH38wQy4JUOPldXEn5R1ArkdNq/3 IEh8PWjXelKxazFORSTgBNK/LqqLxbTS8/acJ+q5RvXSESQ7wOagGaeLAk+F7VhV wxBA5mvOTT80Y8b1lOkpw2N6oSouzTEW4nKDuVjTkh8kYU4qTmsbXyBPKjKcvNhD 5QyX4Kqovjbt4AaYUbUgWwr8zGHnIknmHxtKVyW9dA/p2LrUz8ry01vGY+94s1u7 PZllxiOWMRjB6YGkdR1ZRzZ6T+YSZG252Q== -----END CERTIFICATE-----Generated at Sat Apr 5 13:03:30 2025 by rpki-client