$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/c3a7c5d9-c810-3d85-b785-499af7c6f2e3.roa File: c3a7c5d9-c810-3d85-b785-499af7c6f2e3.roa (raw, json) Hash identifier: L9vV98ifgf+BsdfrUzViKvOiTIybrLIbVLEFaFELU6o= Subject key identifier: DC:AE:0D:A4:25:9E:EE:D5:5C:EA:93:53:8F:56:B9:27:4F:7D:B2:3E Certificate issuer: /CN=0059f687-be1d-4396-97d0-dbe0841392ac Certificate serial: 010D0C9F4328584925B3A9CA271EE371CD39D500 Authority key identifier: 91:5A:27:BD:FD:4F:FA:BA:5C:37:F9:84:46:9D:C8:D9:14:7A:CE:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/c3a7c5d9-c810-3d85-b785-499af7c6f2e3.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 23121 IP address blocks: 2602:f913:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/0059f687-be1d-4396-97d0-dbe0841392ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/0059f687-be1d-4396-97d0-dbe0841392ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:a9:ca:27:1e:e3:71:cd:39:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0059f687-be1d-4396-97d0-dbe0841392ac Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=0e7e88ce-cd00-4cc7-ae5d-65860a7df392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:47:c1:7a:ca:66:34:8d:66:02:3b:36:89:d7: 07:62:a2:1e:a8:48:38:cf:82:a3:70:d9:ac:1a:d3: c1:23:86:a4:93:79:10:ba:c9:7f:37:50:c1:89:b5: 51:36:e4:0c:6b:c9:e5:12:fa:70:b4:c1:5c:39:9a: 22:5c:a9:f4:55:a0:ba:87:06:c6:aa:bd:2a:a7:9a: 03:3e:65:ed:97:83:bc:e8:2c:0c:13:51:30:67:e4: d5:97:8b:ab:0c:31:d0:e0:ed:8f:c7:f0:6b:ec:ae: 41:f6:b1:b6:f1:93:7c:3f:9f:0e:e1:2d:24:f4:fa: 37:5e:99:bc:32:88:59:f3:2c:4c:5d:1b:aa:02:c4: ab:28:f0:99:75:a4:d9:3a:15:7c:3c:1e:b5:c5:71: dd:45:93:35:33:f9:55:03:04:3a:eb:5e:1f:84:2c: ac:cf:7c:72:ab:0d:30:a7:9a:15:54:21:e8:6f:e4: 78:8f:5f:d3:43:57:14:36:49:46:b5:ff:1f:e0:6f: 37:c3:49:e8:a3:b9:80:5d:c0:d5:44:16:51:af:cb: e1:25:dd:76:86:e4:f1:c5:a9:c5:90:e0:6c:c2:15: 85:2b:dc:49:16:4e:a3:91:33:ab:c3:62:1a:de:8d: 98:72:d6:fd:fe:1f:6e:90:f0:26:39:57:52:56:40: ce:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AE:0D:A4:25:9E:EE:D5:5C:EA:93:53:8F:56:B9:27:4F:7D:B2:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/c3a7c5d9-c810-3d85-b785-499af7c6f2e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/0059f687-be1d-4396-97d0-dbe0841392ac.crl X509v3 Authority Key Identifier: keyid:91:5A:27:BD:FD:4F:FA:BA:5C:37:F9:84:46:9D:C8:D9:14:7A:CE:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac.cer sbgp-ipAddrBlock: critical IPv6: 2602:f913:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:e4:5e:02:e6:f3:46:af:91:ec:6c:39:0c:36:c3:bf:20:af: 1c:cf:86:30:40:da:e9:95:e2:d6:c4:a4:cf:f4:a8:73:89:cf: 1b:68:67:f9:88:37:fe:97:85:58:87:5c:4e:75:52:b6:37:93: f2:75:ee:89:e5:b4:f0:12:ca:04:d7:7b:c2:ba:0e:df:8d:8d: 41:1b:69:93:73:bc:8d:12:be:2e:bc:56:ac:7c:7e:aa:81:a0: 9d:4e:51:0f:4f:47:5c:e0:3d:39:fb:55:48:13:01:79:44:37: 0f:d1:5d:ae:94:64:66:49:50:7c:c8:e3:1d:ec:3e:f4:6b:a9: 5a:97:e9:ea:96:0b:e2:d7:43:68:9a:ed:e9:74:0d:83:ae:75: 6d:1f:78:2f:57:de:87:43:e1:22:b2:70:77:0a:02:96:70:86: ff:cc:72:de:84:32:68:eb:8a:1b:c8:c7:9d:72:1a:9c:03:e5: 25:16:4f:71:53:d5:7d:bb:32:d1:24:86:67:14:c3:e4:90:cc: 0a:ee:61:46:32:43:ed:47:e1:75:71:fc:15:d6:42:7e:c1:a2: a7:74:32:40:b2:8f:5b:7b:a0:dc:a9:01:d7:0c:34:20:aa:27: 74:0f:0d:e3:d4:3f:58:8f:75:c5:ff:03:9f:08:67:1f:04:13: 95:16:d4:e9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkls6nKJx7jcc051QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA1OWY2ODctYmUxZC00Mzk2LTk3ZDAtZGJlMDg0MTM5 MmFjMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk MGU3ZTg4Y2UtY2QwMC00Y2M3LWFlNWQtNjU4NjBhN2RmMzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0fBespmNI1mAjs2idcHYqIeqEg4z4KjcNms GtPBI4akk3kQusl/N1DBibVRNuQMa8nlEvpwtMFcOZoiXKn0VaC6hwbGqr0qp5oD PmXtl4O86CwME1EwZ+TVl4urDDHQ4O2Px/Br7K5B9rG28ZN8P58O4S0k9Po3Xpm8 MohZ8yxMXRuqAsSrKPCZdaTZOhV8PB61xXHdRZM1M/lVAwQ6614fhCysz3xyqw0w p5oVVCHob+R4j1/TQ1cUNklGtf8f4G83w0noo7mAXcDVRBZRr8vhJd12huTxxanF kOBswhWFK9xJFk6jkTOrw2Ia3o2Yctb9/h9ukPAmOVdSVkDOrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNyuDaQlnu7VXOqTU49WuSdPfbI+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wMDU5 ZjY4Ny1iZTFkLTQzOTYtOTdkMC1kYmUwODQxMzkyYWMvYzNhN2M1ZDktYzgxMC0z ZDg1LWI3ODUtNDk5YWY3YzZmMmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDA1OWY2ODctYmUxZC00Mzk2LTk3 ZDAtZGJlMDg0MTM5MmFjLzAwNTlmNjg3LWJlMWQtNDM5Ni05N2QwLWRiZTA4NDEz OTJhYy5jcmwwHwYDVR0jBBgwFoAUkVonvf1P+rpcN/mERp3I2RR6zoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wMDU5ZjY4Ny1iZTFkLTQzOTYtOTdkMC1kYmUw ODQxMzkyYWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5EwAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABHkXgLm80avkexsOQw2w78grxzPhjBA2umV4tbEpM/0qHOJzxto Z/mIN/6XhViHXE51UrY3k/J17onltPASygTXe8K6Dt+NjUEbaZNzvI0Svi68Vqx8 fqqBoJ1OUQ9PR1zgPTn7VUgTAXlENw/RXa6UZGZJUHzI4x3sPvRrqVqX6eqWC+LX Q2ia7el0DYOudW0feC9X3odD4SKycHcKApZwhv/Mct6EMmjrihvIx51yGpwD5SUW T3FT1X27MtEkhmcUw+SQzAruYUYyQ+1H4XVx/BXWQn7Boqd0MkCyj1t7oNypAdcM NCCqJ3QPDePUP1iPdcX/A58IZx8EE5UW1Ok= -----END CERTIFICATE-----Generated at Sun Apr 6 04:40:10 2025 by rpki-client