$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/61f182e6-6c95-3439-a414-c5b9385c6d35.roa File: 61f182e6-6c95-3439-a414-c5b9385c6d35.roa (raw, json) Hash identifier: Gk4AW/2bCtJaX15K0QgPjSTWYLqNe62xwz+omfiXpGw= Subject key identifier: B3:BB:64:C8:06:E6:C1:7D:11:50:F4:2E:8B:0E:3B:09:14:A4:AA:F6 Certificate issuer: /CN=72be6912-a48b-441b-9ee6-94aa6da03275 Certificate serial: 010D0C9F432858496861FC0951E75D5207524580 Authority key identifier: A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/61f182e6-6c95-3439-a414-c5b9385c6d35.roa Signing time: Thu 03 Apr 2025 22:15:19 +0000 ROA not before: Thu 03 Apr 2025 22:15:19 +0000 ROA not after: Wed 02 Jul 2025 22:15:19 +0000 asID: 26042 IP address blocks: 2602:fa42:300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:61:fc:09:51:e7:5d:52:07:52:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72be6912-a48b-441b-9ee6-94aa6da03275 Validity Not Before: Apr 3 22:15:19 2025 GMT Not After : Jul 2 22:15:19 2025 GMT Subject: CN=85d042ee-cac7-46da-8f0c-de26389029cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:53:06:4e:68:f8:f2:7f:d2:4c:17:c5:8e:86: 07:dd:67:0d:33:7d:a2:7c:63:d0:f8:25:1e:14:60: 85:b1:56:71:59:b0:0e:e3:0f:4f:6f:a2:e2:81:f1: 20:8f:3a:ce:7c:90:34:d6:1c:3a:98:99:a0:0e:5a: a1:cd:23:19:c7:f5:ff:a7:16:84:ad:7d:68:b5:3c: 4a:ff:60:a3:80:65:7b:a0:9d:52:d2:ab:86:7d:51: 0a:06:fa:80:f1:69:24:2e:ce:29:e8:d2:60:4d:19: 79:9f:d9:ed:6b:e2:36:09:f6:93:65:93:4a:dd:01: 30:a4:ca:97:fa:a2:14:37:23:f7:ba:6f:7b:d8:1b: 5e:f4:2e:44:2d:37:af:f1:9f:c8:f2:8d:7c:2e:d3: 90:ca:d7:ed:43:8f:4e:c3:25:b3:b5:7f:06:fd:0c: 0f:3d:ec:c0:bb:01:f1:4b:28:a1:1c:5c:de:e9:f1: 47:1d:31:d0:58:05:3a:4b:fe:64:bf:5a:9d:40:d1: 90:6d:98:2f:93:da:e4:5b:5f:22:78:f9:ac:e0:49: 72:d2:73:b7:0b:ab:11:92:1f:67:0e:5b:a0:ad:66: 4b:53:dc:2d:6a:fa:53:10:b9:f2:02:e3:33:89:e3: 44:ae:9a:0a:3f:3b:58:d6:81:a9:9d:ad:43:f0:53: bf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:BB:64:C8:06:E6:C1:7D:11:50:F4:2E:8B:0E:3B:09:14:A4:AA:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/61f182e6-6c95-3439-a414-c5b9385c6d35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl X509v3 Authority Key Identifier: keyid:A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa42:300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:21:be:70:2f:9d:ff:5f:61:6b:19:50:67:38:cc:df:0c:5f: b4:22:5d:bd:fa:5a:89:4d:87:c6:5a:dd:e0:f7:60:07:a8:68: 47:c3:6d:4a:93:5a:74:dc:d9:8e:0c:8d:b7:38:ad:ff:fd:82: 5d:65:81:7e:c2:2e:84:d1:eb:93:0d:5c:bf:9a:92:05:cb:77: 4c:9b:7c:75:6b:15:66:78:41:7f:7d:35:ca:85:11:0e:f5:a2: f4:4e:39:64:7e:e0:b0:70:cc:12:42:6d:7d:aa:b5:92:a6:94: 6e:5e:af:d0:88:1a:45:13:42:7c:55:79:eb:ae:10:4b:76:44: f7:4e:d9:96:60:25:72:1e:bd:b0:2d:dc:87:36:7a:a9:67:1a: bc:6d:db:29:d2:e9:85:21:e6:84:eb:5a:03:f8:3e:d2:4b:f8: 42:9f:e6:48:72:7a:3b:a0:f5:33:23:72:e6:22:02:ed:8f:fd: 8b:27:08:53:7f:fe:b5:01:13:0e:f7:a6:53:66:03:3d:b1:aa: b4:b3:0e:0b:6c:d1:e3:2c:34:0e:b0:a3:50:5d:1b:4f:d9:81: 05:e0:fa:cc:ae:27:29:ea:ff:23:2f:95:f5:7e:8a:f9:ae:2b: d8:05:9c:b1:7f:e8:e6:35:cf:a4:fe:04:55:72:24:1b:0b:26: 15:22:ed:a8 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEloYfwJUeddUgdSRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzJiZTY5MTItYTQ4Yi00NDFiLTllZTYtOTRhYTZkYTAz Mjc1MB4XDTI1MDQwMzIyMTUxOVoXDTI1MDcwMjIyMTUxOVowLzEtMCsGA1UEAxMk ODVkMDQyZWUtY2FjNy00NmRhLThmMGMtZGUyNjM4OTAyOWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFMGTmj48n/STBfFjoYH3WcNM32ifGPQ+CUe FGCFsVZxWbAO4w9Pb6LigfEgjzrOfJA01hw6mJmgDlqhzSMZx/X/pxaErX1otTxK /2CjgGV7oJ1S0quGfVEKBvqA8WkkLs4p6NJgTRl5n9nta+I2CfaTZZNK3QEwpMqX +qIUNyP3um972Bte9C5ELTev8Z/I8o18LtOQytftQ49OwyWztX8G/QwPPezAuwHx SyihHFze6fFHHTHQWAU6S/5kv1qdQNGQbZgvk9rkW18iePms4Ely0nO3C6sRkh9n DlugrWZLU9wtavpTELnyAuMzieNErpoKPztY1oGpna1D8FO/bQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLO7ZMgG5sF9EVD0LosOOwkUpKr2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83MmJl NjkxMi1hNDhiLTQ0MWItOWVlNi05NGFhNmRhMDMyNzUvNjFmMTgyZTYtNmM5NS0z NDM5LWE0MTQtYzViOTM4NWM2ZDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzJiZTY5MTItYTQ4Yi00NDFiLTll ZTYtOTRhYTZkYTAzMjc1LzcyYmU2OTEyLWE0OGItNDQxYi05ZWU2LTk0YWE2ZGEw MzI3NS5jcmwwHwYDVR0jBBgwFoAUoU1WbC8yzneHx9LMOrMYtGeb/IUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83MmJlNjkxMi1hNDhiLTQ0MWItOWVlNi05NGFh NmRhMDMyNzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6QgMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFSG+cC+d/19haxlQZzjM3wxftCJdvfpaiU2Hxlrd4PdgB6hoR8Nt SpNadNzZjgyNtzit//2CXWWBfsIuhNHrkw1cv5qSBct3TJt8dWsVZnhBf301yoUR DvWi9E45ZH7gsHDMEkJtfaq1kqaUbl6v0IgaRRNCfFV5664QS3ZE907ZlmAlch69 sC3chzZ6qWcavG3bKdLphSHmhOtaA/g+0kv4Qp/mSHJ6O6D1MyNy5iIC7Y/9iycI U3/+tQETDvemU2YDPbGqtLMOC2zR4yw0DrCjUF0bT9mBBeD6zK4nKer/Iy+V9X6K +a4r2AWcsX/o5jXPpP4EVXIkGwsmFSLtqA== -----END CERTIFICATE-----Generated at Sat Apr 5 12:21:28 2025 by rpki-client