$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/0e25b380-ccb0-3d0c-868a-62da7a67518c.roa File: 0e25b380-ccb0-3d0c-868a-62da7a67518c.roa (raw, json) Hash identifier: kH8y7VmWUTV0u+7n3nWYWr1CAC+0h3KJwFxoT5SVis0= Subject key identifier: B9:0F:FB:66:8A:34:BF:56:87:07:68:EF:97:78:A4:2D:8B:CC:07:1B Certificate issuer: /CN=6528c9ac-3735-430d-99f2-7ac01944d688 Certificate serial: 010D0C9F432858493243E23503B5783B85DB9F40 Authority key identifier: 64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/0e25b380-ccb0-3d0c-868a-62da7a67518c.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 54696 IP address blocks: 2602:fa9e::/36 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:e2:35:03:b5:78:3b:85:db:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6528c9ac-3735-430d-99f2-7ac01944d688 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=f397c3a7-5d92-4161-b56a-305d880c359f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b0:b1:18:da:65:90:ae:43:b3:7f:2e:44:f5: 86:93:ac:5b:9f:39:c3:69:8e:32:ac:1b:93:90:3a: fa:ed:4c:13:0f:e8:d2:0d:dc:c3:44:7b:94:a3:37: c9:e4:45:9e:0a:bc:42:9f:1e:6c:0b:fb:01:9d:ce: 63:bb:76:c4:ab:fb:3c:25:c8:58:dd:0f:64:3a:ff: 6f:cd:f2:d9:ab:e0:b0:32:29:16:ac:26:7c:15:24: b0:1a:18:55:be:91:de:70:a7:9c:81:81:1f:1b:35: 9e:92:70:b8:b2:a0:05:9a:d4:aa:01:ec:32:4a:e9: a0:79:c9:b5:ba:7f:22:f1:26:63:ea:6a:f8:6e:f2: 10:c6:bd:4a:70:a6:1b:b3:99:64:de:e4:b0:f6:27: 9d:6c:8f:c3:dd:bf:44:91:61:cc:f3:0f:01:d4:a1: 3e:60:42:0d:ce:1e:cc:d9:82:53:a4:fa:5a:1c:1f: a0:1a:ff:84:20:70:a3:03:6d:a4:66:63:bb:06:63: 25:d4:22:08:dd:11:75:aa:70:4b:af:37:40:d4:00: d3:ae:c3:a6:05:5c:8b:64:74:c7:ba:d4:af:b8:e9: e3:ed:13:9f:76:db:b7:f3:fc:d3:96:b1:9d:3d:d8: 2a:5e:6e:e5:42:87:aa:b3:3e:9a:f4:9b:62:6c:a2: a9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0F:FB:66:8A:34:BF:56:87:07:68:EF:97:78:A4:2D:8B:CC:07:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/0e25b380-ccb0-3d0c-868a-62da7a67518c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl X509v3 Authority Key Identifier: keyid:64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa9e::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:50:56:d2:6d:81:08:5d:9e:24:d9:0d:bd:fc:1e:8a:a8:ab: c6:30:59:48:be:65:c4:ff:64:d6:30:30:85:75:82:ad:1d:34: d2:80:5b:8e:d3:26:ca:08:5d:f9:c0:72:50:e9:e8:3d:eb:20: 16:bb:1e:58:af:88:de:ad:58:8c:a9:5e:0d:4e:88:cd:a5:2c: b3:8b:59:a2:ba:81:35:1e:ee:96:a0:e3:7a:06:5b:7d:fa:23: 75:65:24:fc:87:45:f7:69:94:17:1b:f6:e9:3f:43:60:3d:69: c5:da:9f:d0:4a:79:41:3d:b3:f8:80:48:b8:91:0c:b7:14:14: 89:31:c7:ef:da:6d:0d:cd:e7:73:d8:14:06:2d:5f:79:38:0d: cb:a8:16:3f:ae:08:cd:15:43:d6:79:ae:48:84:22:cb:ac:42: 76:8a:b5:74:c3:7c:72:4a:1a:8f:69:1e:32:b8:71:63:a4:ab: fc:2a:c0:58:f0:1c:90:9b:e6:2d:4e:ae:5e:6c:57:ce:24:90: e4:c3:34:41:e1:0e:ea:0b:43:fb:ee:c3:ce:fb:6f:fe:fc:f2: 95:4d:38:38:56:ff:0f:72:dd:8d:45:03:ad:1b:3c:15:83:e5: d2:26:03:69:8d:63:68:e8:c3:9f:d1:b7:b8:99:5e:02:62:21: 53:28:71:ec -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkyQ+I1A7V4O4Xbn0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjUyOGM5YWMtMzczNS00MzBkLTk5ZjItN2FjMDE5NDRk Njg4MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk ZjM5N2MzYTctNWQ5Mi00MTYxLWI1NmEtMzA1ZDg4MGMzNTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLCxGNplkK5Ds38uRPWGk6xbnznDaY4yrBuT kDr67UwTD+jSDdzDRHuUozfJ5EWeCrxCnx5sC/sBnc5ju3bEq/s8JchY3Q9kOv9v zfLZq+CwMikWrCZ8FSSwGhhVvpHecKecgYEfGzWeknC4sqAFmtSqAewySumgecm1 un8i8SZj6mr4bvIQxr1KcKYbs5lk3uSw9iedbI/D3b9EkWHM8w8B1KE+YEINzh7M 2YJTpPpaHB+gGv+EIHCjA22kZmO7BmMl1CII3RF1qnBLrzdA1ADTrsOmBVyLZHTH utSvuOnj7ROfdtu38/zTlrGdPdgqXm7lQoeqsz6a9JtibKKpswIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLkP+2aKNL9Whwdo75d4pC2LzAcbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NTI4 YzlhYy0zNzM1LTQzMGQtOTlmMi03YWMwMTk0NGQ2ODgvMGUyNWIzODAtY2NiMC0z ZDBjLTg2OGEtNjJkYTdhNjc1MThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjUyOGM5YWMtMzczNS00MzBkLTk5 ZjItN2FjMDE5NDRkNjg4LzY1MjhjOWFjLTM3MzUtNDMwZC05OWYyLTdhYzAxOTQ0 ZDY4OC5jcmwwHwYDVR0jBBgwFoAUZHlQlsmkDTSGRr0dZCAN23yduvgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NTI4YzlhYy0zNzM1LTQzMGQtOTlmMi03YWMw MTk0NGQ2ODguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL6ngAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANlBW0m2BCF2eJNkNvfweiqirxjBZSL5lxP9k1jAwhXWCrR000oBb jtMmyghd+cByUOnoPesgFrseWK+I3q1YjKleDU6IzaUss4tZorqBNR7ulqDjegZb ffojdWUk/IdF92mUFxv26T9DYD1pxdqf0Ep5QT2z+IBIuJEMtxQUiTHH79ptDc3n c9gUBi1feTgNy6gWP64IzRVD1nmuSIQiy6xCdoq1dMN8ckoaj2keMrhxY6Sr/CrA WPAckJvmLU6uXmxXziSQ5MM0QeEO6gtD++7Dzvtv/vzylU04OFb/D3LdjUUDrRs8 FYPl0iYDaY1jaOjDn9G3uJleAmIhUyhx7A== -----END CERTIFICATE-----Generated at Fri Apr 11 23:22:33 2025 by rpki-client