$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/58fddb6b-b796-3bae-8ee4-8c51280d31a4.roa File: 58fddb6b-b796-3bae-8ee4-8c51280d31a4.roa (raw, json) Hash identifier: 6KqyZTzCvtFW7rxeFqKqJAvzT6qcsg3pzy0vottOa6k= Subject key identifier: D8:B8:78:4E:6C:48:17:D4:83:88:FB:7E:E5:E5:DA:0F:42:A4:16:00 Certificate issuer: /CN=be69e7ae-469d-400e-8f2e-4ebfc1be0098 Certificate serial: 010D0C9F43285848FD56CEE965775119AC229680 Authority key identifier: 10:44:A2:7F:5D:CB:7B:01:1A:9B:6D:EB:6D:47:3E:9F:B6:51:A5:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/58fddb6b-b796-3bae-8ee4-8c51280d31a4.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 399935 IP address blocks: 2602:f99d::/40 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:ce:e9:65:77:51:19:ac:22:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be69e7ae-469d-400e-8f2e-4ebfc1be0098 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=422e7970-0cca-4aa4-aaad-c1b8570099d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5f:02:94:39:5f:83:5c:ef:02:34:49:4f:12: 50:a1:59:6a:95:1e:08:24:ab:06:7f:a4:bc:05:dd: eb:0c:35:5c:78:4a:0a:a1:7d:83:ff:19:57:44:1c: ad:e6:19:48:a8:9e:a3:e8:dc:12:cf:16:4a:87:00: 5e:a5:e4:55:8d:a1:83:ff:de:6a:c1:67:85:d0:b8: a2:b8:f6:a3:52:25:85:90:5a:16:6e:12:a0:ca:a5: 4f:8f:db:8e:3b:c6:67:5e:2e:20:05:66:92:ea:d9: d9:8c:67:39:64:bd:8f:2f:59:ae:77:11:a9:d9:55: 37:4e:27:3d:fa:8d:06:4d:13:7c:f6:f6:20:e1:e5: 27:8d:4c:9f:4d:a1:21:86:58:78:d6:29:27:92:49: e3:b5:eb:f3:dd:03:d7:e0:fc:f2:b8:79:f1:85:c0: 7b:72:fc:1f:fb:74:0a:f6:5f:ed:32:5b:4b:04:4a: 7a:00:6a:de:bf:73:ed:03:ba:ca:b0:96:d4:a9:38: c3:7e:30:74:59:40:8a:8b:2d:95:0f:bd:a5:9e:d0: 86:b7:23:f6:59:af:39:c0:6f:4b:58:8e:bf:16:cb: 3c:4d:d8:ba:33:33:96:4f:27:3a:a9:74:ab:c8:d2: fc:1d:86:cf:c6:19:4c:8f:fb:35:84:1d:26:08:8a: 00:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B8:78:4E:6C:48:17:D4:83:88:FB:7E:E5:E5:DA:0F:42:A4:16:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/58fddb6b-b796-3bae-8ee4-8c51280d31a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.crl X509v3 Authority Key Identifier: keyid:10:44:A2:7F:5D:CB:7B:01:1A:9B:6D:EB:6D:47:3E:9F:B6:51:A5:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer sbgp-ipAddrBlock: critical IPv6: 2602:f99d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:17:18:62:fb:98:e9:a7:1a:e9:7d:ff:ef:8c:6d:e6:3d:61: 19:27:09:3b:c0:04:0e:68:13:7a:ab:ca:0f:67:c7:b1:f1:5a: 8f:a8:9b:c1:02:cf:e7:e3:11:65:90:23:82:b6:b8:04:98:85: 81:cd:e9:8e:c3:d3:95:a3:38:04:39:ac:8b:6d:00:25:5a:01: af:55:01:ed:f2:df:16:2a:36:f1:ef:49:2d:5b:62:69:63:4e: 0f:c9:06:2a:cf:97:2a:04:6c:8c:be:15:fa:58:f5:4c:f9:6b: 19:7b:6e:ef:72:62:a1:3d:d0:86:c6:af:9f:02:f3:2b:80:9d: 60:59:4a:96:5b:00:94:38:be:68:8b:ab:05:bf:5b:79:a9:d2: 47:e8:d3:b4:0e:43:89:06:6e:8e:03:41:94:0d:0e:f7:88:3c: ce:8a:ab:a5:89:6e:46:29:4c:68:ef:a7:0c:16:0c:f7:8e:21: 55:d6:72:1f:e1:d9:eb:25:09:b7:bd:de:c5:5c:7c:a4:2c:bb: da:cf:eb:db:fa:bd:80:9b:f6:72:29:b9:fe:be:1e:b1:d0:82: e4:e9:45:3e:3a:45:cf:09:51:30:6d:63:25:04:6f:ce:ae:c7: a8:88:58:65:4b:42:37:bb:15:75:e5:d3:12:dc:9e:cb:1e:12: a0:7c:3f:63 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEj9Vs7pZXdRGawiloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU2OWU3YWUtNDY5ZC00MDBlLThmMmUtNGViZmMxYmUw MDk4MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk NDIyZTc5NzAtMGNjYS00YWE0LWFhYWQtYzFiODU3MDA5OWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF8ClDlfg1zvAjRJTxJQoVlqlR4IJKsGf6S8 Bd3rDDVceEoKoX2D/xlXRByt5hlIqJ6j6NwSzxZKhwBepeRVjaGD/95qwWeF0Lii uPajUiWFkFoWbhKgyqVPj9uOO8ZnXi4gBWaS6tnZjGc5ZL2PL1mudxGp2VU3Tic9 +o0GTRN89vYg4eUnjUyfTaEhhlh41iknkknjtevz3QPX4PzyuHnxhcB7cvwf+3QK 9l/tMltLBEp6AGrev3PtA7rKsJbUqTjDfjB0WUCKiy2VD72lntCGtyP2Wa85wG9L WI6/Fss8Tdi6MzOWTyc6qXSryNL8HYbPxhlMj/s1hB0mCIoAHwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNi4eE5sSBfUg4j7fuXl2g9CpBYAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iZTY5 ZTdhZS00NjlkLTQwMGUtOGYyZS00ZWJmYzFiZTAwOTgvNThmZGRiNmItYjc5Ni0z YmFlLThlZTQtOGM1MTI4MGQzMWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmU2OWU3YWUtNDY5ZC00MDBlLThm MmUtNGViZmMxYmUwMDk4L2JlNjllN2FlLTQ2OWQtNDAwZS04ZjJlLTRlYmZjMWJl MDA5OC5jcmwwHwYDVR0jBBgwFoAUEESif13LewEam23rbUc+n7ZRpYQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iZTY5ZTdhZS00NjlkLTQwMGUtOGYyZS00ZWJm YzFiZTAwOTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5nQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEACBcYYvuY6aca6X3/74xt5j1hGScJO8AEDmgTeqvKD2fHsfFaj6ib wQLP5+MRZZAjgra4BJiFgc3pjsPTlaM4BDmsi20AJVoBr1UB7fLfFio28e9JLVti aWNOD8kGKs+XKgRsjL4V+lj1TPlrGXtu73JioT3QhsavnwLzK4CdYFlKllsAlDi+ aIurBb9beanSR+jTtA5DiQZujgNBlA0O94g8zoqrpYluRilMaO+nDBYM944hVdZy H+HZ6yUJt73exVx8pCy72s/r2/q9gJv2cim5/r4esdCC5OlFPjpFzwlRMG1jJQRv zq7HqIhYZUtCN7sVdeXTEtyeyx4SoHw/Yw== -----END CERTIFICATE-----Generated at Sat Apr 5 00:35:11 2025 by rpki-client