$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/3be9c053-770e-31e3-93e1-7b7b5a308e4d.roa File: 3be9c053-770e-31e3-93e1-7b7b5a308e4d.roa (raw, json) Hash identifier: 5rBS+B+g8z9fgyQp8736J6BlPfTNQ0yUFRgdBiYaTgs= Subject key identifier: 8D:E0:C7:08:A6:20:F3:BF:7D:55:C3:88:2B:D5:A6:83:71:78:A1:50 Certificate issuer: /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Certificate serial: 010D0C9F4328584917DC382A03513BED7C1755C0 Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/3be9c053-770e-31e3-93e1-7b7b5a308e4d.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 1218 IP address blocks: 2602:fdaa:80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:38:2a:03:51:3b:ed:7c:17:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=e9df374c-8dc4-41b0-8f5e-fd792205c506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d1:0f:10:d1:1a:e1:8c:42:f6:81:a1:fd:d7: d4:ee:9c:48:43:52:19:fd:ce:0c:36:11:4e:b5:b8: 49:da:0f:c5:ab:c8:64:4f:22:69:cf:e6:47:03:db: 91:28:5c:ef:20:e1:cf:83:f8:25:93:21:9b:37:b7: 8f:78:7b:3e:dc:4d:43:38:e1:51:9e:a1:15:ed:dd: ed:5c:21:f5:f3:b6:c1:c8:e2:9f:c9:cd:7f:85:cd: 87:9d:98:6d:e7:05:f5:7e:ea:b3:51:59:3d:8d:86: 28:e9:34:81:dc:34:c4:b1:d2:91:36:20:14:b3:eb: e8:a1:00:1c:59:33:9b:a9:5e:65:2c:1c:5c:58:ad: 16:e7:21:9d:af:04:c0:f6:af:30:2b:97:dc:44:5a: c2:06:6f:4d:83:76:b9:d5:47:5a:24:29:f3:51:fd: 3f:5b:ad:9b:b1:13:0e:88:08:2b:e0:5c:00:4c:ea: 63:b8:1b:9f:a7:d8:96:00:ad:77:7d:e2:01:cf:58: 61:a3:53:3f:26:a6:21:35:a7:94:3a:48:ec:7d:49: a1:0b:05:53:00:20:9d:20:f4:bc:d1:8e:9a:5a:cf: 3e:93:8a:18:b8:c8:c2:7b:fc:b0:12:32:4f:69:3a: 25:5f:50:83:c9:18:8e:2c:7a:36:61:44:d6:61:d9: 4a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E0:C7:08:A6:20:F3:BF:7D:55:C3:88:2B:D5:A6:83:71:78:A1:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/3be9c053-770e-31e3-93e1-7b7b5a308e4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl X509v3 Authority Key Identifier: keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer sbgp-ipAddrBlock: critical IPv6: 2602:fdaa:80::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:af:58:f8:a2:6b:9b:ff:f1:b4:f7:93:75:25:bc:2b:9b:e6: 2e:47:d5:ad:83:ab:67:b8:3e:92:1e:af:a0:69:90:b3:87:63: e7:6d:47:22:93:6c:85:32:1d:4e:54:65:a5:8a:f8:f7:80:60: 85:b9:59:36:d0:bb:83:92:6c:9d:83:d9:8f:df:ed:8e:d1:7f: bf:02:13:07:37:f1:48:d0:42:1a:2c:88:b2:0a:ef:77:d6:64: a5:a3:bc:6a:75:a7:1f:ab:e8:2b:87:2d:63:7e:fb:3c:a0:ed: 1f:b8:f0:48:a2:e1:42:2b:40:49:32:67:ca:09:77:c8:2f:f0: 2a:30:e5:f0:8e:91:0e:7d:24:df:da:ae:f4:97:1e:0c:88:ff: 95:9b:4b:44:d4:d7:5b:47:01:21:b0:78:b5:8d:ba:f6:9e:26: 0b:37:78:02:78:9b:86:24:bb:9f:b8:48:a0:28:80:ea:f4:a0: 62:2c:6e:7d:a6:d5:71:8a:e6:d7:22:3d:5f:63:95:bf:20:62: d3:d1:34:b1:21:bc:bb:ee:1a:4f:29:a0:77:d1:2d:ca:e6:93: ef:76:ae:84:6b:4b:d0:18:91:e5:52:66:64:80:75:fc:2f:b9: f6:e0:60:55:39:f5:46:1c:de:83:34:eb:69:fa:b3:56:7d:9a: 3b:ee:91:2d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkX3DgqA1E77XwXVcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMx ZDQxMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZTlkZjM3NGMtOGRjNC00MWIwLThmNWUtZmQ3OTIyMDVjNTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9EPENEa4YxC9oGh/dfU7pxIQ1IZ/c4MNhFO tbhJ2g/Fq8hkTyJpz+ZHA9uRKFzvIOHPg/glkyGbN7ePeHs+3E1DOOFRnqEV7d3t XCH187bByOKfyc1/hc2HnZht5wX1fuqzUVk9jYYo6TSB3DTEsdKRNiAUs+vooQAc WTObqV5lLBxcWK0W5yGdrwTA9q8wK5fcRFrCBm9Ng3a51UdaJCnzUf0/W62bsRMO iAgr4FwATOpjuBufp9iWAK13feIBz1hho1M/JqYhNaeUOkjsfUmhCwVTACCdIPS8 0Y6aWs8+k4oYuMjCe/ywEjJPaTolX1CDyRiOLHo2YUTWYdlKKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI3gxwimIPO/fVXDiCvVpoNxeKFQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2 ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvM2JlOWMwNTMtNzcwZS0z MWUzLTkzZTEtN2I3YjVhMzA4ZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWQwNmVkNjYtOWZkZC00MDQ4LTg2 NDUtZTMzZThjZWMxZDQxLzlkMDZlZDY2LTlmZGQtNDA0OC04NjQ1LWUzM2U4Y2Vj MWQ0MS5jcmwwHwYDVR0jBBgwFoAUAkRNXm0Knu393PU01zFjuct6wgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNl OGNlYzFkNDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9qgCA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHKvWPiia5v/8bT3k3UlvCub5i5H1a2Dq2e4PpIer6BpkLOHY+dt RyKTbIUyHU5UZaWK+PeAYIW5WTbQu4OSbJ2D2Y/f7Y7Rf78CEwc38UjQQhosiLIK 73fWZKWjvGp1px+r6CuHLWN++zyg7R+48Eii4UIrQEkyZ8oJd8gv8Cow5fCOkQ59 JN/arvSXHgyI/5WbS0TU11tHASGweLWNuvaeJgs3eAJ4m4Yku5+4SKAogOr0oGIs bn2m1XGK5tciPV9jlb8gYtPRNLEhvLvuGk8poHfRLcrmk+92roRrS9AYkeVSZmSA dfwvufbgYFU59UYc3oM062n6s1Z9mjvukS0= -----END CERTIFICATE-----Generated at Fri Mar 14 11:01:20 2025 by rpki-client