$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/3d7cf9ed-a044-32ff-8cec-e0066d17c0f0.roa File: 3d7cf9ed-a044-32ff-8cec-e0066d17c0f0.roa (raw, json) Hash identifier: jQZSxR1IZMxF1VTO4ebQc6+Jn3Fs6qLYwc2zv+1KgSY= Subject key identifier: AC:5B:9D:07:69:CE:2A:F8:EE:E9:05:61:28:93:D0:0E:86:BA:BF:2A Certificate issuer: /CN=8c1e504b-f881-4524-a98f-2a623e4a476d Certificate serial: 010D0C9F43285848DEA11F099CE480E6CEC5AB80 Authority key identifier: B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/3d7cf9ed-a044-32ff-8cec-e0066d17c0f0.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 396952 IP address blocks: 2602:fec2::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:1f:09:9c:e4:80:e6:ce:c5:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1e504b-f881-4524-a98f-2a623e4a476d Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=93d336cc-5ce0-4e70-b2f0-4eb2ecb7470f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0f:6c:cd:ba:1d:06:50:85:d8:25:77:cd:ae: 19:b3:f0:6d:da:92:69:5e:3b:76:be:b1:01:3e:b3: 89:79:01:cf:3e:61:2f:64:47:66:50:2e:69:0f:86: 3f:24:a1:9e:b0:a7:54:31:6f:c7:6e:7f:8d:f3:07: 67:90:c3:d7:c0:3a:7f:fd:98:a6:30:f7:be:b8:2f: db:7f:52:df:47:d9:62:5a:59:3c:e5:d5:5e:17:c2: 61:ac:90:14:af:64:fc:f1:7c:57:ac:21:ca:92:f3: fe:66:f2:ca:1c:b0:4a:99:b3:2c:14:ec:ef:86:6c: 53:e9:35:3c:47:4b:b5:8f:c2:c4:4b:b4:98:4c:eb: 84:5c:40:1f:50:be:43:56:08:62:24:42:14:ed:f2: e3:ce:1e:c2:66:dc:f8:26:5c:0c:00:ba:12:4f:bd: 13:bb:8c:8b:24:ce:54:f8:16:7d:fa:89:03:d3:f7: 44:53:16:62:35:89:4c:d7:44:1e:2f:c8:9f:72:2c: 9b:40:c9:5e:f3:56:c9:73:64:6f:f7:e4:59:ce:c2: 89:ef:f7:e3:14:a2:f6:8f:dc:3e:40:1b:0c:ba:18: a4:4f:89:ea:86:da:fe:d3:ef:c6:0c:e3:0c:17:4f: 35:b9:24:d9:05:1e:d8:c7:ed:5c:b2:17:d6:6b:9b: 3c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5B:9D:07:69:CE:2A:F8:EE:E9:05:61:28:93:D0:0E:86:BA:BF:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/3d7cf9ed-a044-32ff-8cec-e0066d17c0f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl X509v3 Authority Key Identifier: keyid:B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer sbgp-ipAddrBlock: critical IPv6: 2602:fec2::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:2d:43:6d:8e:0d:70:9a:6a:70:61:c0:9c:a1:55:ef:86:15: c9:01:d7:da:26:aa:b0:ed:c6:71:4d:4e:ae:ba:fe:11:a4:bb: c6:57:d5:a8:ec:58:ae:16:93:b8:f0:2b:3d:51:70:86:8f:f6: d3:6b:cf:07:54:41:3f:0b:38:a7:24:2c:64:b3:2e:e4:a8:66: 16:5c:16:64:0f:8f:1e:6c:44:16:45:be:b4:bf:41:79:3d:69: 7d:89:36:86:88:75:70:41:ad:c4:a1:c1:34:17:80:b9:fd:f6: f1:e1:a4:77:82:68:d5:0d:0a:51:6a:75:9d:9b:60:3d:9a:fd: 86:58:c3:11:c1:3f:87:99:1f:ab:4b:42:34:cc:39:31:ed:6c: 52:f8:3f:9f:ae:80:2f:20:9e:6c:bc:99:a4:ec:da:9c:85:3d: 16:5c:29:10:1a:20:e4:8a:61:ae:45:aa:14:d3:67:38:f0:62: 55:7e:b7:64:b7:e0:7a:d2:6c:42:9e:27:3a:d0:04:72:17:81: 6d:88:a3:86:41:34:c4:98:5d:d7:07:6a:bb:1e:8e:62:13:d5: 16:72:75:c4:fb:78:f0:d3:e7:f7:4e:03:ab:25:73:c5:47:39: ed:ae:94:0b:a5:2b:16:96:70:e2:c8:af:01:ba:df:ae:ed:5d: bb:8b:4e:49 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjeoR8JnOSA5s7Fq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZTUwNGItZjg4MS00NTI0LWE5OGYtMmE2MjNlNGE0 NzZkMB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk OTNkMzM2Y2MtNWNlMC00ZTcwLWIyZjAtNGViMmVjYjc0NzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw9szbodBlCF2CV3za4Zs/Bt2pJpXjt2vrEB PrOJeQHPPmEvZEdmUC5pD4Y/JKGesKdUMW/Hbn+N8wdnkMPXwDp//ZimMPe+uC/b f1LfR9liWlk85dVeF8JhrJAUr2T88XxXrCHKkvP+ZvLKHLBKmbMsFOzvhmxT6TU8 R0u1j8LES7SYTOuEXEAfUL5DVghiJEIU7fLjzh7CZtz4JlwMALoST70Tu4yLJM5U +BZ9+okD0/dEUxZiNYlM10QeL8ifciybQMle81bJc2Rv9+RZzsKJ7/fjFKL2j9w+ QBsMuhikT4nqhtr+0+/GDOMMF081uSTZBR7Yx+1cshfWa5s89QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKxbnQdpzir47ukFYSiT0A6Gur8qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YzFl NTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYyM2U0YTQ3NmQvM2Q3Y2Y5ZWQtYTA0NC0z MmZmLThjZWMtZTAwNjZkMTdjMGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGMxZTUwNGItZjg4MS00NTI0LWE5 OGYtMmE2MjNlNGE0NzZkLzhjMWU1MDRiLWY4ODEtNDUyNC1hOThmLTJhNjIzZTRh NDc2ZC5jcmwwHwYDVR0jBBgwFoAUuQRCw8+VQmCHza4q1ILHTtwYGN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YzFlNTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYy M2U0YTQ3NmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL+wjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCXLUNtjg1wmmpwYcCcoVXvhhXJAdfaJqqw7cZxTU6uuv4RpLvGV9Wo 7FiuFpO48Cs9UXCGj/bTa88HVEE/CzinJCxksy7kqGYWXBZkD48ebEQWRb60v0F5 PWl9iTaGiHVwQa3EocE0F4C5/fbx4aR3gmjVDQpRanWdm2A9mv2GWMMRwT+HmR+r S0I0zDkx7WxS+D+froAvIJ5svJmk7NqchT0WXCkQGiDkimGuRaoU02c48GJVfrdk t+B60mxCnic60ARyF4FtiKOGQTTEmF3XB2q7Ho5iE9UWcnXE+3jw0+f3TgOrJXPF RzntrpQLpSsWlnDiyK8But+u7V27i05J -----END CERTIFICATE-----Generated at Sat Apr 12 14:49:51 2025 by rpki-client