$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/a59d57c6-927b-323c-bddc-a10e78a34ec8.roa File: a59d57c6-927b-323c-bddc-a10e78a34ec8.roa (raw, json) Hash identifier: XydwED9KSOLohWUjeL/e3IE1z5jTqfZLb60+A51VAvk= Subject key identifier: 49:9B:9B:13:9C:F0:E5:C6:6A:26:8B:3B:8F:DA:2E:D4:13:36:B1:B7 Certificate issuer: /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Certificate serial: 010D0C9F43285848E0065507B8C331553240F700 Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/a59d57c6-927b-323c-bddc-a10e78a34ec8.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 27385 IP address blocks: 2602:fdaa:c3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:55:07:b8:c3:31:55:32:40:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=a19892d1-0ef1-4025-bbb3-397c5c2f4d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1f:95:60:8d:0b:56:ae:de:09:c1:0f:32:c2: 49:2f:5c:63:9d:a7:73:71:f8:5d:ca:10:d8:70:ba: 95:82:2b:26:c8:ff:29:b2:17:a5:b4:7a:c9:e1:61: 17:13:ea:d6:e2:b3:51:d2:a8:87:e3:58:e8:4e:c8: 66:f7:98:f7:0f:17:55:83:3d:8a:83:dd:ad:c8:7b: 4e:97:fb:1d:3a:89:0b:95:00:82:39:59:9d:e2:5e: 20:72:26:bb:0b:02:15:b2:61:9a:20:ee:cd:4e:00: 9d:97:cc:45:50:c1:4c:d9:5d:1f:bd:a1:eb:24:ed: 87:27:62:6e:61:06:38:22:31:2c:7b:ea:ee:4c:ae: c3:3f:ea:33:1e:0e:13:38:b6:81:06:b7:72:f2:54: 1b:50:85:25:35:40:aa:07:9a:a0:e4:dd:e9:43:d9: 9b:30:12:63:19:48:1a:d9:bc:7b:cf:3b:7a:6b:59: 48:9f:14:2c:c4:ed:fe:f7:d0:ba:ac:75:3d:f3:96: b7:29:cf:8a:ba:be:b7:56:37:7b:09:15:dd:28:76: 05:7b:3b:26:ce:31:23:3b:73:6f:61:3d:d0:ef:f8: 38:2e:c9:7e:9d:2b:27:65:70:91:b6:51:3a:dd:99: 1b:5b:1a:31:ed:31:7b:01:a9:91:ac:77:90:ed:b0: 26:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9B:9B:13:9C:F0:E5:C6:6A:26:8B:3B:8F:DA:2E:D4:13:36:B1:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/a59d57c6-927b-323c-bddc-a10e78a34ec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl X509v3 Authority Key Identifier: keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer sbgp-ipAddrBlock: critical IPv6: 2602:fdaa:c3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:38:0c:37:43:84:75:dd:ed:93:4c:3a:8e:7a:12:ee:33:90: bd:4c:9e:59:91:0f:c7:67:93:ba:3a:fa:10:79:45:cc:b6:4b: 8d:da:c4:7a:0d:cd:61:56:bc:13:24:84:62:d2:b5:f6:0a:7a: 99:a5:68:2b:ce:3e:69:43:f1:a4:a0:0a:8a:35:48:09:cb:d0: 6e:28:8c:bb:80:32:e4:8b:92:96:8f:36:19:3d:a0:16:85:0f: 00:8c:cf:fd:b4:3b:af:15:aa:db:bd:8c:3b:31:1f:1b:2f:cf: 6d:2c:c9:68:03:51:55:0f:f0:85:8c:9b:fa:b3:88:98:b3:4c: 96:70:dc:b7:a4:ad:1a:2f:28:d8:80:a9:81:97:3f:cd:b8:b9: 63:a8:a9:d7:04:53:b1:da:d5:e8:6e:85:cb:e4:4d:3d:42:d7: 30:b4:9a:fa:61:e1:c1:c8:62:10:3d:3f:f9:7a:cf:0d:4d:63: ad:fd:3d:e1:bf:08:ee:2c:c0:1d:47:ac:7a:91:5b:92:a4:a8: 17:d7:13:e8:66:ae:7b:70:89:b1:cc:8e:52:a8:f5:e3:44:22: 2e:7e:25:0a:ec:b0:be:38:21:31:6c:ba:57:db:8c:ff:67:03: b1:62:54:08:61:f1:02:b8:9f:4a:f7:28:de:34:06:79:40:bf: ad:b5:15:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjgBlUHuMMxVTJA9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMx ZDQxMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk YTE5ODkyZDEtMGVmMS00MDI1LWJiYjMtMzk3YzVjMmY0ZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB+VYI0LVq7eCcEPMsJJL1xjnadzcfhdyhDY cLqVgismyP8psheltHrJ4WEXE+rW4rNR0qiH41joTshm95j3DxdVgz2Kg92tyHtO l/sdOokLlQCCOVmd4l4gcia7CwIVsmGaIO7NTgCdl8xFUMFM2V0fvaHrJO2HJ2Ju YQY4IjEse+ruTK7DP+ozHg4TOLaBBrdy8lQbUIUlNUCqB5qg5N3pQ9mbMBJjGUga 2bx7zzt6a1lInxQsxO3+99C6rHU985a3Kc+Kur63Vjd7CRXdKHYFezsmzjEjO3Nv YT3Q7/g4Lsl+nSsnZXCRtlE63ZkbWxox7TF7AamRrHeQ7bAmYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEmbmxOc8OXGaiaLO4/aLtQTNrG3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2 ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvYTU5ZDU3YzYtOTI3Yi0z MjNjLWJkZGMtYTEwZTc4YTM0ZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWQwNmVkNjYtOWZkZC00MDQ4LTg2 NDUtZTMzZThjZWMxZDQxLzlkMDZlZDY2LTlmZGQtNDA0OC04NjQ1LWUzM2U4Y2Vj MWQ0MS5jcmwwHwYDVR0jBBgwFoAUAkRNXm0Knu393PU01zFjuct6wgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNl OGNlYzFkNDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9qgDD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD44DDdDhHXd7ZNMOo56Eu4zkL1MnlmRD8dnk7o6+hB5Rcy2S43a xHoNzWFWvBMkhGLStfYKepmlaCvOPmlD8aSgCoo1SAnL0G4ojLuAMuSLkpaPNhk9 oBaFDwCMz/20O68Vqtu9jDsxHxsvz20syWgDUVUP8IWMm/qziJizTJZw3LekrRov KNiAqYGXP824uWOoqdcEU7Ha1ehuhcvkTT1C1zC0mvph4cHIYhA9P/l6zw1NY639 PeG/CO4swB1HrHqRW5KkqBfXE+hmrntwibHMjlKo9eNEIi5+JQrssL44ITFsulfb jP9nA7FiVAhh8QK4n0r3KN40BnlAv621FSA= -----END CERTIFICATE-----Generated at Tue Apr 8 12:23:31 2025 by rpki-client