$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/0c04d91a-7fcf-3647-a3dc-bcedb63d6b05.roa File: 0c04d91a-7fcf-3647-a3dc-bcedb63d6b05.roa (raw, json) Hash identifier: 2mjZ/7gqDKU09mGSFmG8Bh5sZBA5QC5ADcjHqkZYfmg= Subject key identifier: 9A:A8:A6:EF:10:5D:1E:BF:99:CB:46:A1:A9:AF:AF:C4:42:5A:18:20 Certificate issuer: /CN=5b959ce4-3ae9-4721-8444-22b2e7161104 Certificate serial: 010D0C9F4328584949FE8E458D4591127654C900 Authority key identifier: F7:04:0B:E9:9B:F2:56:71:7F:ED:45:FE:D5:1E:7E:0A:FC:8F:D5:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/0c04d91a-7fcf-3647-a3dc-bcedb63d6b05.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 32109 IP address blocks: 2602:ff0e::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/5b959ce4-3ae9-4721-8444-22b2e7161104.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/5b959ce4-3ae9-4721-8444-22b2e7161104.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:8e:45:8d:45:91:12:76:54:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b959ce4-3ae9-4721-8444-22b2e7161104 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=e6d97e2b-d586-4bdc-822d-435b6a5c97be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9d:7d:15:bc:f2:60:de:ba:4a:2e:b8:b0:d4: af:16:c1:59:3d:3b:ed:f0:fd:48:e1:94:9a:f0:80: 66:ad:a5:fe:c8:13:f6:a5:bd:29:04:6f:43:51:41: 6b:b1:63:03:15:c8:dc:56:c7:55:ca:60:99:7a:86: 27:23:ac:66:31:23:2b:75:04:1c:e4:8a:e1:67:ae: f1:38:96:72:7b:99:bd:c9:e5:a8:65:05:ce:86:1c: c2:12:e9:ac:f3:4b:3e:43:30:bb:0c:9d:dd:42:4a: 9e:36:8b:7f:1c:29:50:da:47:29:53:4b:46:61:2d: 3a:99:6e:53:91:24:b6:0f:68:a0:27:4f:7f:1a:b7: c1:ba:71:45:f1:a8:27:76:4a:a0:ef:42:ec:0a:37: 71:20:81:39:99:85:86:8b:f6:24:2e:f1:b1:8a:87: 11:2a:20:66:13:7d:82:bc:0d:b2:72:b8:29:77:2a: 2f:e1:3c:d6:6e:72:17:6d:30:cc:d7:c5:d7:23:63: d0:ac:10:a5:68:a5:b4:6e:c3:83:ed:7c:df:e6:fc: 3a:33:b1:ed:be:bf:9e:b3:af:37:59:76:5f:2b:11: fe:96:1a:fd:cd:60:62:90:67:01:89:6b:21:e5:fd: 9e:60:ac:a0:06:81:1d:97:42:76:aa:ee:8f:2e:80: 55:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A8:A6:EF:10:5D:1E:BF:99:CB:46:A1:A9:AF:AF:C4:42:5A:18:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/0c04d91a-7fcf-3647-a3dc-bcedb63d6b05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/5b959ce4-3ae9-4721-8444-22b2e7161104.crl X509v3 Authority Key Identifier: keyid:F7:04:0B:E9:9B:F2:56:71:7F:ED:45:FE:D5:1E:7E:0A:FC:8F:D5:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104.cer sbgp-ipAddrBlock: critical IPv6: 2602:ff0e::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:18:6f:f4:2f:30:02:16:f6:2d:78:e2:45:2a:92:51:df:bd: c7:66:f1:be:34:60:4f:df:72:ea:fa:f1:87:e5:1a:17:bc:31: 33:d7:64:e0:ec:fa:47:9a:01:55:77:66:a4:37:72:c2:94:a8: f5:3d:7e:e9:96:a1:54:98:ef:f9:40:ca:ff:0a:54:58:61:75: 66:84:e7:c1:1a:94:47:cc:bb:de:b7:56:89:c2:ae:0b:02:27: 06:87:eb:b8:ec:05:e6:bd:67:19:0c:89:1f:6b:07:d5:20:12: d8:98:d9:06:91:a8:c7:7f:2b:74:c5:ca:65:d8:0f:23:85:76: ec:b1:cd:9e:24:f6:a6:14:d3:32:d8:78:b0:5f:17:6d:11:28: 25:48:11:ef:8a:bc:54:e4:9b:a8:ae:a9:cc:9b:80:8d:d7:82: 80:1c:93:0e:43:72:1b:eb:74:0f:b3:6f:5b:1d:0f:aa:f7:26: 4f:de:59:23:d3:b8:7d:72:89:4f:6f:20:fc:6d:c7:33:ed:4c: d9:1b:a8:c5:33:ed:e1:c4:15:01:20:b0:29:df:1d:e2:c8:ea: db:41:a9:07:cb:f8:77:9d:3b:d8:e2:a8:b2:d5:c9:c9:6a:ca: 92:0e:84:90:a4:8c:89:42:55:cf:67:e0:7b:48:bd:af:2d:41: c4:ed:8a:92 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElJ/o5FjUWREnZUyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI5NTljZTQtM2FlOS00NzIxLTg0NDQtMjJiMmU3MTYx MTA0MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk ZTZkOTdlMmItZDU4Ni00YmRjLTgyMmQtNDM1YjZhNWM5N2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ19FbzyYN66Si64sNSvFsFZPTvt8P1I4ZSa 8IBmraX+yBP2pb0pBG9DUUFrsWMDFcjcVsdVymCZeoYnI6xmMSMrdQQc5IrhZ67x OJZye5m9yeWoZQXOhhzCEums80s+QzC7DJ3dQkqeNot/HClQ2kcpU0tGYS06mW5T kSS2D2igJ09/GrfBunFF8agndkqg70LsCjdxIIE5mYWGi/YkLvGxiocRKiBmE32C vA2ycrgpdyov4TzWbnIXbTDM18XXI2PQrBClaKW0bsOD7Xzf5vw6M7Htvr+es683 WXZfKxH+lhr9zWBikGcBiWsh5f2eYKygBoEdl0J2qu6PLoBV+QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJqopu8QXR6/mctGoamvr8RCWhggMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81Yjk1 OWNlNC0zYWU5LTQ3MjEtODQ0NC0yMmIyZTcxNjExMDQvMGMwNGQ5MWEtN2ZjZi0z NjQ3LWEzZGMtYmNlZGI2M2Q2YjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWI5NTljZTQtM2FlOS00NzIxLTg0 NDQtMjJiMmU3MTYxMTA0LzViOTU5Y2U0LTNhZTktNDcyMS04NDQ0LTIyYjJlNzE2 MTEwNC5jcmwwHwYDVR0jBBgwFoAU9wQL6ZvyVnF/7UX+1R5+CvyP1aMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81Yjk1OWNlNC0zYWU5LTQ3MjEtODQ0NC0yMmIy ZTcxNjExMDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL/DgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAjRhv9C8wAhb2LXjiRSqSUd+9x2bxvjRgT99y6vrxh+UaF7wxM9dk 4Oz6R5oBVXdmpDdywpSo9T1+6ZahVJjv+UDK/wpUWGF1ZoTnwRqUR8y73rdWicKu CwInBofruOwF5r1nGQyJH2sH1SAS2JjZBpGox38rdMXKZdgPI4V27LHNniT2phTT Mth4sF8XbREoJUgR74q8VOSbqK6pzJuAjdeCgByTDkNyG+t0D7NvWx0PqvcmT95Z I9O4fXKJT28g/G3HM+1M2RuoxTPt4cQVASCwKd8d4sjq20GpB8v4d5072OKostXJ yWrKkg6EkKSMiUJVz2fge0i9ry1BxO2Kkg== -----END CERTIFICATE-----Generated at Sat Apr 12 15:03:25 2025 by rpki-client