$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/3b441d0f-b671-3c6e-bc0d-05c5ba1e24ca.roa File: 3b441d0f-b671-3c6e-bc0d-05c5ba1e24ca.roa (raw, json) Hash identifier: UcGT0ndgRRUNLzfaeyVFhq8qxPvhzvDv2SmS59tWRCM= Subject key identifier: 21:C4:F1:8E:51:77:91:9A:7F:2C:DF:FF:76:8A:02:43:09:20:E0:3A Certificate issuer: /CN=5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8 Certificate serial: 010D0C9F432858491CE326724AB324807101D900 Authority key identifier: B3:72:04:BD:57:C2:41:F9:3B:8D:BA:5B:61:B2:CB:86:A7:3F:29:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/3b441d0f-b671-3c6e-bc0d-05c5ba1e24ca.roa Signing time: Fri 07 Mar 2025 21:14:08 +0000 ROA not before: Fri 07 Mar 2025 21:14:08 +0000 ROA not after: Thu 05 Jun 2025 20:14:08 +0000 asID: 33083 IP address blocks: 2602:ff65:b22::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1c:e3:26:72:4a:b3:24:80:71:01:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8 Validity Not Before: Mar 7 21:14:08 2025 GMT Not After : Jun 5 20:14:08 2025 GMT Subject: CN=d7d0aee6-de1c-416f-b730-1e61e77116a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b5:1d:85:98:3e:ee:3a:14:79:48:79:d1:7e: 24:59:fd:1c:16:64:0a:5e:39:4f:3f:c4:e6:a2:e5: 67:dc:aa:27:b4:08:30:98:3c:59:ac:75:da:0d:2e: 2c:40:94:3d:75:95:4f:40:32:69:55:47:8d:28:06: 62:87:e3:86:c0:0d:47:18:5f:29:57:1c:8c:8b:a7: 43:bc:36:2c:e8:a1:56:e2:3f:96:d9:10:25:1a:1c: 83:47:9d:b8:b0:54:94:4b:f9:4a:98:89:df:2f:ba: 85:5c:1f:df:57:ca:81:7a:24:ba:c0:42:65:51:0f: 94:3a:00:20:ab:1d:5d:8d:97:4d:2f:32:32:4b:57: ae:3e:9a:da:5d:b6:26:6f:e8:5f:c3:13:03:c1:6e: ab:d2:5f:e3:5b:a3:56:79:c0:88:38:bd:42:a7:7f: 3f:c7:7a:4e:a0:08:53:95:62:52:c5:db:f1:07:49: 2d:d4:73:5c:b9:48:03:7c:33:cd:43:35:af:69:a2: 56:b3:4b:c3:d3:74:30:03:e0:7f:b6:2c:0c:c2:8c: 71:f9:fd:35:97:27:ba:db:a4:9c:dd:70:eb:52:9e: 28:9c:9d:86:53:da:dd:86:8b:f3:97:08:91:05:8a: e6:35:99:b1:b7:d3:52:b0:15:2b:c6:1b:67:19:33: 3d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C4:F1:8E:51:77:91:9A:7F:2C:DF:FF:76:8A:02:43:09:20:E0:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/3b441d0f-b671-3c6e-bc0d-05c5ba1e24ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.crl X509v3 Authority Key Identifier: keyid:B3:72:04:BD:57:C2:41:F9:3B:8D:BA:5B:61:B2:CB:86:A7:3F:29:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.cer sbgp-ipAddrBlock: critical IPv6: 2602:ff65:b22::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:a9:23:01:82:ec:67:86:9f:dc:fb:42:02:99:a9:bc:82:dd: 68:d3:53:af:1e:97:c7:50:a4:9a:a4:f9:bf:ba:49:ec:ed:75: 75:5a:99:8b:d6:45:1e:b4:6a:d2:54:2d:08:ca:e2:29:fb:ab: ad:8e:ee:9c:53:24:ad:87:22:cc:2a:84:e3:21:b7:f0:b9:e7: 26:f3:f1:3a:b1:35:0a:ad:c1:02:c9:1f:a2:4a:b4:98:a9:f0: ef:64:38:5e:e6:9f:47:1c:4a:c8:4d:12:5f:c1:81:3c:0d:b5: ab:73:1f:f2:e5:63:8d:3b:e1:35:9c:b6:83:59:37:6c:21:ba: 62:b4:c3:a8:a2:6f:ce:b3:8d:e4:6e:d5:c4:39:0a:de:14:6b: c2:fb:9b:4b:7b:63:33:4f:53:89:6a:98:71:5a:95:72:c5:d0: 9c:28:55:db:4d:42:b3:35:68:30:a6:6a:a0:e9:7d:02:06:5a: 9c:5c:29:1b:7d:74:f0:e9:36:38:8e:27:51:37:35:c4:50:c1: ad:43:6e:12:b9:94:28:78:cf:d5:05:ae:24:52:b2:76:c3:6d: cd:50:9d:74:9c:c3:6c:80:31:2d:eb:b5:d2:d1:5d:f7:ad:7a: e2:66:8f:f4:a5:ee:46:72:60:fe:1e:63:36:d5:ea:5c:8b:ea: 24:2f:a2:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkc4yZySrMkgHEB2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM0OTQ0YzQtMDQ1Ni00YzNjLTliYTctOTBlM2JjYmU0 N2I4MB4XDTI1MDMwNzIxMTQwOFoXDTI1MDYwNTIwMTQwOFowLzEtMCsGA1UEAxMk ZDdkMGFlZTYtZGUxYy00MTZmLWI3MzAtMWU2MWU3NzExNmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17UdhZg+7joUeUh50X4kWf0cFmQKXjlPP8Tm ouVn3KontAgwmDxZrHXaDS4sQJQ9dZVPQDJpVUeNKAZih+OGwA1HGF8pVxyMi6dD vDYs6KFW4j+W2RAlGhyDR524sFSUS/lKmInfL7qFXB/fV8qBeiS6wEJlUQ+UOgAg qx1djZdNLzIyS1euPpraXbYmb+hfwxMDwW6r0l/jW6NWecCIOL1Cp38/x3pOoAhT lWJSxdvxB0kt1HNcuUgDfDPNQzWvaaJWs0vD03QwA+B/tiwMwoxx+f01lye626Sc 3XDrUp4onJ2GU9rdhovzlwiRBYrmNZmxt9NSsBUrxhtnGTM91wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCHE8Y5Rd5Gafyzf/3aKAkMJIOA6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81YzQ5 NDRjNC0wNDU2LTRjM2MtOWJhNy05MGUzYmNiZTQ3YjgvM2I0NDFkMGYtYjY3MS0z YzZlLWJjMGQtMDVjNWJhMWUyNGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWM0OTQ0YzQtMDQ1Ni00YzNjLTli YTctOTBlM2JjYmU0N2I4LzVjNDk0NGM0LTA0NTYtNGMzYy05YmE3LTkwZTNiY2Jl NDdiOC5jcmwwHwYDVR0jBBgwFoAUs3IEvVfCQfk7jbpbYbLLhqc/KTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81YzQ5NDRjNC0wNDU2LTRjM2MtOWJhNy05MGUz YmNiZTQ3YjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL/ZQsi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEupIwGC7GeGn9z7QgKZqbyC3WjTU68el8dQpJqk+b+6SeztdXVa mYvWRR60atJULQjK4in7q62O7pxTJK2HIswqhOMht/C55ybz8TqxNQqtwQLJH6JK tJip8O9kOF7mn0ccSshNEl/BgTwNtatzH/LlY4074TWctoNZN2whumK0w6iib86z jeRu1cQ5Ct4Ua8L7m0t7YzNPU4lqmHFalXLF0JwoVdtNQrM1aDCmaqDpfQIGWpxc KRt9dPDpNjiOJ1E3NcRQwa1DbhK5lCh4z9UFriRSsnbDbc1QnXScw2yAMS3rtdLR XfeteuJmj/Sl7kZyYP4eYzbV6lyL6iQvovk= -----END CERTIFICATE-----Generated at Fri Apr 11 21:37:00 2025 by rpki-client