$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/52102c79-0532-30f1-a1ae-b231118ab700.roa File: 52102c79-0532-30f1-a1ae-b231118ab700.roa (raw, json) Hash identifier: TyDuvt4k/9PJu8fpHf3RGVBhPtmLmVAGxNnBWWYuNWQ= Subject key identifier: 4C:68:1E:2A:EF:1B:3B:BC:F5:18:B7:EC:0C:76:C8:B5:8D:61:E4:4C Certificate issuer: /CN=dd62a733-0e13-4012-8294-fce655e4a41a Certificate serial: 010D0C9F43285848D7A64DE16A7DA9A1EFAECB00 Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/52102c79-0532-30f1-a1ae-b231118ab700.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 51082 IP address blocks: 2602:fd92:150::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:4d:e1:6a:7d:a9:a1:ef:ae:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=a23d3e83-4b67-485e-8480-873b30d1dcef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:da:ee:11:07:02:8f:dd:5b:5d:d7:a9:25:63: e2:15:8e:b7:88:e1:10:97:34:1e:60:48:87:3d:37: 1f:17:bb:6c:2e:4c:89:ae:77:66:90:63:c0:a5:2d: 9e:c8:08:db:9c:61:85:f7:99:99:84:93:46:d8:26: 66:38:36:0d:c5:57:81:54:bb:90:31:45:88:79:cc: 20:27:2e:ba:6e:1d:41:00:66:29:70:d9:45:27:fe: a9:dc:3f:d1:64:84:9e:96:2e:11:8c:1f:66:ed:5c: f7:ca:93:1c:9f:21:f5:8e:78:b2:d3:58:c7:e4:cf: e8:66:b9:4f:e0:e2:eb:cb:a8:f7:2b:f6:6f:a5:f8: 7e:91:56:4b:0a:3e:22:a9:fa:e7:f7:cc:1f:c9:84: 45:c6:2a:93:93:ec:02:a1:6c:0a:0a:7f:2b:ca:04: 22:82:70:e7:26:ac:2f:45:2c:e9:0d:64:30:00:29: bd:d4:62:0c:c7:c8:bf:50:ea:fa:01:b5:1d:fc:b1: e7:19:ee:d1:b2:92:d8:64:0c:ae:a7:6a:83:48:5e: 74:56:ca:92:fd:08:37:af:f0:b1:0f:45:4f:85:30: e5:a3:dc:f0:9a:48:03:43:0d:55:3f:5e:35:95:3b: 42:0d:cf:88:bf:32:f5:ad:d3:13:04:dc:e1:d8:62: a7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:68:1E:2A:EF:1B:3B:BC:F5:18:B7:EC:0C:76:C8:B5:8D:61:E4:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/52102c79-0532-30f1-a1ae-b231118ab700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl X509v3 Authority Key Identifier: keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd92:150::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:13:dc:e9:5b:21:8f:de:b3:dd:d3:2b:22:02:d0:6b:0b:ed: 20:5c:57:cd:f3:51:c7:e4:c2:e6:94:bc:f9:a1:13:aa:9e:e8: b6:2f:7f:69:25:55:72:f3:60:02:51:f6:81:f4:9c:a5:fa:1d: 14:91:04:a3:d8:29:6d:92:c0:13:f2:4c:8c:d2:9a:0b:9b:df: 4d:97:27:26:c7:39:92:f7:32:d5:70:05:2b:b4:99:95:e1:ba: 6c:8f:8b:12:83:f9:5d:13:8b:c7:61:38:7d:70:67:47:cc:0e: 5e:9f:ec:67:8b:e8:82:18:7e:fd:dc:79:00:c3:3c:11:e9:bd: 5d:00:20:97:11:dc:c0:f6:e8:86:87:99:fc:98:79:b9:a8:95: ef:35:5c:88:e6:35:b9:66:70:5b:7c:d6:23:a8:72:54:5e:52: 25:af:b6:13:7b:f6:9f:19:d8:92:40:1c:98:6d:12:fc:20:53: f8:e5:ba:ed:91:32:6d:ff:9f:dc:4f:58:c0:a4:0b:db:2f:57: d2:c1:1d:fb:e9:03:09:86:1b:c2:2c:56:4c:fa:b9:2c:cb:3c: 81:54:7a:48:e1:0c:e2:6a:26:65:5c:2c:91:04:c7:3b:71:9e: ac:e7:42:47:e0:18:dd:93:44:cb:68:3f:41:53:57:3c:d2:6b: 81:f3:ad:a5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjXpk3han2poe+uywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ2MmE3MzMtMGUxMy00MDEyLTgyOTQtZmNlNjU1ZTRh NDFhMB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk YTIzZDNlODMtNGI2Ny00ODVlLTg0ODAtODczYjMwZDFkY2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9ruEQcCj91bXdepJWPiFY63iOEQlzQeYEiH PTcfF7tsLkyJrndmkGPApS2eyAjbnGGF95mZhJNG2CZmODYNxVeBVLuQMUWIecwg Jy66bh1BAGYpcNlFJ/6p3D/RZISeli4RjB9m7Vz3ypMcnyH1jniy01jH5M/oZrlP 4OLry6j3K/Zvpfh+kVZLCj4iqfrn98wfyYRFxiqTk+wCoWwKCn8rygQignDnJqwv RSzpDWQwACm91GIMx8i/UOr6AbUd/LHnGe7RspLYZAyup2qDSF50VsqS/Qg3r/Cx D0VPhTDlo9zwmkgDQw1VP141lTtCDc+IvzL1rdMTBNzh2GKnsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFExoHirvGzu89Ri37Ax2yLWNYeRMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDYy YTczMy0wZTEzLTQwMTItODI5NC1mY2U2NTVlNGE0MWEvNTIxMDJjNzktMDUzMi0z MGYxLWExYWUtYjIzMTExOGFiNzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2MmE3MzMtMGUxMy00MDEyLTgy OTQtZmNlNjU1ZTRhNDFhL2RkNjJhNzMzLTBlMTMtNDAxMi04Mjk0LWZjZTY1NWU0 YTQxYS5jcmwwHwYDVR0jBBgwFoAUkRNYtHaun6GwfpONvDcsq5c9dt8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDYyYTczMy0wZTEzLTQwMTItODI5NC1mY2U2 NTVlNGE0MWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL9kgFQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAM4T3OlbIY/es93TKyIC0GsL7SBcV83zUcfkwuaUvPmhE6qe6LYv f2klVXLzYAJR9oH0nKX6HRSRBKPYKW2SwBPyTIzSmgub302XJybHOZL3MtVwBSu0 mZXhumyPixKD+V0Ti8dhOH1wZ0fMDl6f7GeL6IIYfv3ceQDDPBHpvV0AIJcR3MD2 6IaHmfyYebmole81XIjmNblmcFt81iOoclReUiWvthN79p8Z2JJAHJhtEvwgU/jl uu2RMm3/n9xPWMCkC9svV9LBHfvpAwmGG8IsVkz6uSzLPIFUekjhDOJqJmVcLJEE xztxnqznQkfgGN2TRMtoP0FTVzzSa4HzraU= -----END CERTIFICATE-----Generated at Sun Apr 6 08:35:04 2025 by rpki-client