$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/60d1100e-3de1-311b-b5e5-9cee1401282d.roa File: 60d1100e-3de1-311b-b5e5-9cee1401282d.roa (raw, json) Hash identifier: B3ka6dQt8FpfrEcF2E9FnvC1cBO81IOw6k2gjxW1C2Y= Subject key identifier: 7A:CC:30:6E:FA:F0:84:3F:71:0C:4B:34:8F:70:16:E3:6B:BE:86:2F Certificate issuer: /CN=3b0b4e45-c916-48be-ae0d-b57b80a30cdc Certificate serial: 010D0C9F43285848F4F692DBCB13E8160BB0BD40 Authority key identifier: CD:F0:0E:4B:F1:FB:B5:39:ED:3F:7A:94:3C:D7:4A:2B:C2:0E:F7:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/60d1100e-3de1-311b-b5e5-9cee1401282d.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 399612 IP address blocks: 2602:fc7a::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:92:db:cb:13:e8:16:0b:b0:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b0b4e45-c916-48be-ae0d-b57b80a30cdc Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=d0c24cb9-4e8f-4a0e-9536-0e4d6eedfe0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3d:f8:66:42:e0:19:1e:f0:b6:e5:e8:71:31: 6f:24:93:49:c9:d6:f3:d7:cb:ba:f9:ea:92:62:b0: f9:32:00:62:fc:79:90:e5:5d:69:44:7d:8d:45:50: 45:8d:28:9c:61:d0:57:60:a4:c4:d7:94:2b:59:fa: 5d:20:79:6b:c9:53:dd:a3:75:18:10:71:f8:f1:ee: cb:8c:24:b1:b3:58:96:bf:15:01:9d:a2:c5:ab:a0: 1d:1c:f9:e9:66:f5:d8:f0:81:4c:1c:a9:5f:42:80: cc:ac:75:6d:e4:ee:81:ef:b5:be:5d:39:c2:e2:1d: 28:e0:c0:06:4b:70:2e:35:ca:09:0d:19:13:7b:2f: 31:d5:51:b9:51:91:52:63:b3:61:c8:e0:5a:70:66: 6e:78:f2:a7:a6:cd:da:a8:2d:09:a1:16:a7:7a:91: 27:b0:e6:00:6a:c7:c9:18:bf:2f:69:7c:69:aa:5c: b3:d1:37:2d:3c:09:25:fa:90:04:c9:37:c8:5e:5e: 4e:37:f5:c9:fa:7f:7b:2d:84:24:7b:c0:25:72:96: a4:ab:7d:d1:5a:35:0a:1c:7a:63:79:1d:3e:84:37: cc:01:c0:2c:95:ee:76:fa:cc:d6:e9:92:48:ab:62: 00:f4:a2:e7:7a:6d:2b:01:c7:a4:7c:6b:0c:19:04: e8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:CC:30:6E:FA:F0:84:3F:71:0C:4B:34:8F:70:16:E3:6B:BE:86:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/60d1100e-3de1-311b-b5e5-9cee1401282d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.crl X509v3 Authority Key Identifier: keyid:CD:F0:0E:4B:F1:FB:B5:39:ED:3F:7A:94:3C:D7:4A:2B:C2:0E:F7:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc7a::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:a0:a2:a6:ac:e0:b0:04:bb:00:a3:c0:54:ce:1e:34:0b:d4: 37:c2:9e:be:1e:34:2e:a9:8f:47:ec:39:0e:94:d5:e5:eb:4e: e5:1e:26:92:43:01:de:13:87:eb:81:ef:17:21:ab:0e:f9:97: 89:80:5b:90:51:72:44:50:99:6e:01:fe:d5:82:9b:9f:e3:70: 95:a5:28:c5:4b:5e:89:b1:b5:08:1b:bf:83:8b:0c:c9:4e:93: 6a:7f:8b:70:b9:97:b8:83:62:46:d4:7a:ed:22:1e:b3:fb:f8: 02:b7:a8:14:f5:8b:52:ba:d6:7f:5e:39:98:cc:2a:5a:ba:d1: 1e:31:3a:ca:d9:e0:a7:26:6d:d4:59:f0:ac:c5:29:5a:d2:ca: f8:e8:55:b9:64:f9:73:8d:22:78:42:4d:f8:95:73:46:f4:65: 74:a4:47:e3:46:fa:31:55:09:54:e3:10:02:99:c7:49:ae:0a: c2:5a:6f:03:8b:2c:2c:20:0f:47:66:2e:e5:80:41:a9:78:68: b3:fd:c9:5b:ce:5e:64:ed:e9:aa:ca:e4:2f:7f:ad:8c:a0:eb: 06:80:6c:65:c0:f7:fa:4c:c6:39:5c:7a:93:ac:31:3c:61:b6: 0e:83:9b:b9:68:66:d7:1b:25:e7:52:0c:4c:e8:23:25:dc:ce: 01:5b:2c:05 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEj09pLbyxPoFguwvUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2IwYjRlNDUtYzkxNi00OGJlLWFlMGQtYjU3YjgwYTMw Y2RjMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZDBjMjRjYjktNGU4Zi00YTBlLTk1MzYtMGU0ZDZlZWRmZTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj34ZkLgGR7wtuXocTFvJJNJydbz18u6+eqS YrD5MgBi/HmQ5V1pRH2NRVBFjSicYdBXYKTE15QrWfpdIHlryVPdo3UYEHH48e7L jCSxs1iWvxUBnaLFq6AdHPnpZvXY8IFMHKlfQoDMrHVt5O6B77W+XTnC4h0o4MAG S3AuNcoJDRkTey8x1VG5UZFSY7NhyOBacGZuePKnps3aqC0JoRanepEnsOYAasfJ GL8vaXxpqlyz0TctPAkl+pAEyTfIXl5ON/XJ+n97LYQke8Alcpakq33RWjUKHHpj eR0+hDfMAcAsle52+szW6ZJIq2IA9KLnem0rAcekfGsMGQTowQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHrMMG768IQ/cQxLNI9wFuNrvoYvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYjBi NGU0NS1jOTE2LTQ4YmUtYWUwZC1iNTdiODBhMzBjZGMvNjBkMTEwMGUtM2RlMS0z MTFiLWI1ZTUtOWNlZTE0MDEyODJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2IwYjRlNDUtYzkxNi00OGJlLWFl MGQtYjU3YjgwYTMwY2RjLzNiMGI0ZTQ1LWM5MTYtNDhiZS1hZTBkLWI1N2I4MGEz MGNkYy5jcmwwHwYDVR0jBBgwFoAUzfAOS/H7tTntP3qUPNdKK8IO9xYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYjBiNGU0NS1jOTE2LTQ4YmUtYWUwZC1iNTdi ODBhMzBjZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8egAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATKCipqzgsAS7AKPAVM4eNAvUN8Kevh40LqmPR+w5DpTV5etO5R4m kkMB3hOH64HvFyGrDvmXiYBbkFFyRFCZbgH+1YKbn+NwlaUoxUteibG1CBu/g4sM yU6Tan+LcLmXuINiRtR67SIes/v4AreoFPWLUrrWf145mMwqWrrRHjE6ytngpyZt 1FnwrMUpWtLK+OhVuWT5c40ieEJN+JVzRvRldKRH40b6MVUJVOMQApnHSa4Kwlpv A4ssLCAPR2Yu5YBBqXhos/3JW85eZO3pqsrkL3+tjKDrBoBsZcD3+kzGOVx6k6wx PGG2DoObuWhm1xsl51IMTOgjJdzOAVssBQ== -----END CERTIFICATE-----Generated at Fri Apr 11 21:37:25 2025 by rpki-client