$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/659d0660-b0b0-3169-bd78-adee92b4de2d.roa File: 659d0660-b0b0-3169-bd78-adee92b4de2d.roa (raw, json) Hash identifier: Nq0YuP2i77t1D+7o4tJYOcfY9QdmXwZ5OHA7ydMgRGc= Subject key identifier: D1:8D:FF:7D:47:11:1E:AE:75:D0:AD:73:16:4A:B3:4E:8F:1E:A9:39 Certificate issuer: /CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Certificate serial: 010D0C9F43285848BBBB80A4D26B3F324C49A900 Authority key identifier: 2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/659d0660-b0b0-3169-bd78-adee92b4de2d.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 16509 IP address blocks: 2602:814:b008::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:80:a4:d2:6b:3f:32:4c:49:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=6618f3b0-adef-407f-a326-9c603ae37ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2f:ce:78:5f:c1:36:a3:2f:fe:d6:61:20:ae: 83:31:68:df:be:7c:1e:55:48:92:d9:e0:96:d7:73: 41:8a:ae:b8:88:12:2b:d7:7f:40:68:94:87:3c:fb: c1:04:59:58:ac:e4:6b:2f:73:1d:f2:48:8f:7e:65: 18:45:38:4d:ce:2f:e4:c5:88:12:f0:a6:66:c8:be: 74:9c:00:23:ce:77:00:17:83:59:3d:ab:8b:6c:a7: 62:6e:de:5b:1b:1c:ca:0c:77:f8:48:e1:3a:e0:57: 5d:d7:c5:6c:5f:a0:d1:de:b5:c4:b3:a6:8a:ab:03: 51:0e:b1:59:6b:6d:c3:6b:ae:7a:1c:86:06:2f:f8: 33:3e:19:d2:54:c5:5e:99:24:f7:8a:52:a2:69:3c: b4:1e:c9:b4:0c:5d:6b:54:15:d2:17:f8:39:08:40: 96:d4:97:c5:f8:9a:bb:0f:04:cd:45:02:48:e2:56: 48:95:2d:3d:ed:ac:09:15:a9:9e:e4:f6:cd:07:f5: ec:82:5c:44:f8:38:7a:a7:7f:2f:bd:10:4b:3d:82: 8e:5f:75:21:68:e1:bf:16:d8:dd:0f:9c:46:15:06: fe:70:07:81:4a:93:55:e9:fd:3d:40:56:2f:de:b9: e5:ca:86:30:23:ed:28:dd:6e:bb:5d:2c:84:30:6f: 8a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8D:FF:7D:47:11:1E:AE:75:D0:AD:73:16:4A:B3:4E:8F:1E:A9:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/659d0660-b0b0-3169-bd78-adee92b4de2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl X509v3 Authority Key Identifier: keyid:2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer sbgp-ipAddrBlock: critical IPv6: 2602:814:b008::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:4b:87:4f:e7:f9:c1:2e:29:ea:d3:17:77:e8:3b:89:25:de: e1:8b:21:f5:21:b9:75:e2:c3:55:b3:92:b4:7c:6d:35:44:9d: 34:88:ad:73:44:bc:e5:95:b7:a0:7a:66:55:2f:09:c4:b8:49: ab:48:ef:0b:d3:3f:cb:da:fe:f0:07:ef:69:8c:ad:e4:c2:1a: d0:f8:ce:c8:1c:50:53:fa:4d:4d:b4:ea:17:50:92:10:bc:e8: f3:93:45:35:07:3f:4d:52:cb:74:be:58:6e:3a:40:b9:16:90: dc:6d:33:8a:15:08:1d:af:7d:4a:fb:e9:b2:fd:a7:ab:64:38: 59:bf:93:24:d4:31:22:0a:8f:01:ff:bb:d5:e0:b9:71:a4:92: 63:ca:18:3f:3e:ee:29:20:cf:53:74:3d:db:48:f1:e9:de:c2: f0:69:7c:d7:6a:64:ce:37:07:76:2d:74:db:d5:b3:1c:00:8b: d3:76:69:a4:e4:24:84:08:ba:97:5e:2d:b2:e3:43:5c:04:c6: 2c:e3:ec:9c:d0:72:62:d6:e1:2e:de:ae:42:7a:8f:83:0c:b6: ae:62:d5:1a:25:3b:85:24:70:47:01:a7:4d:7e:e2:84:57:6b: b1:00:57:34:79:66:c3:9b:28:3a:03:e1:93:92:f2:96:21:12: 60:97:ad:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEi7u4Ck0ms/MkxJqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBmYThlM2YtNjdlOS00ZThmLTlkMTgtNjIxMWRkNjEz MDczMB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk NjYxOGYzYjAtYWRlZi00MDdmLWEzMjYtOWM2MDNhZTM3ZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty/OeF/BNqMv/tZhIK6DMWjfvnweVUiS2eCW 13NBiq64iBIr139AaJSHPPvBBFlYrORrL3Md8kiPfmUYRThNzi/kxYgS8KZmyL50 nAAjzncAF4NZPauLbKdibt5bGxzKDHf4SOE64Fdd18VsX6DR3rXEs6aKqwNRDrFZ a23Da656HIYGL/gzPhnSVMVemST3ilKiaTy0Hsm0DF1rVBXSF/g5CECW1JfF+Jq7 DwTNRQJI4lZIlS097awJFame5PbNB/XsglxE+Dh6p38vvRBLPYKOX3UhaOG/Ftjd D5xGFQb+cAeBSpNV6f09QFYv3rnlyoYwI+0o3W67XSyEMG+KzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNGN/31HER6uddCtcxZKs06PHqk5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZh OGUzZi02N2U5LTRlOGYtOWQxOC02MjExZGQ2MTMwNzMvNjU5ZDA2NjAtYjBiMC0z MTY5LWJkNzgtYWRlZTkyYjRkZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBmYThlM2YtNjdlOS00ZThmLTlk MTgtNjIxMWRkNjEzMDczL2QwZmE4ZTNmLTY3ZTktNGU4Zi05ZDE4LTYyMTFkZDYx MzA3My5jcmwwHwYDVR0jBBgwFoAUK7RjzmcAGdo63rw75WI23btNwp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZhOGUzZi02N2U5LTRlOGYtOWQxOC02MjEx ZGQ2MTMwNzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFLAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD5Lh0/n+cEuKerTF3foO4kl3uGLIfUhuXXiw1WzkrR8bTVEnTSI rXNEvOWVt6B6ZlUvCcS4SatI7wvTP8va/vAH72mMreTCGtD4zsgcUFP6TU206hdQ khC86POTRTUHP01Sy3S+WG46QLkWkNxtM4oVCB2vfUr76bL9p6tkOFm/kyTUMSIK jwH/u9XguXGkkmPKGD8+7ikgz1N0PdtI8enewvBpfNdqZM43B3YtdNvVsxwAi9N2 aaTkJIQIupdeLbLjQ1wExizj7JzQcmLW4S7erkJ6j4MMtq5i1RolO4UkcEcBp01+ 4oRXa7EAVzR5ZsObKDoD4ZOS8pYhEmCXrWs= -----END CERTIFICATE-----Generated at Fri Mar 14 09:31:20 2025 by rpki-client