$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/5a332d9b-62ef-39aa-909f-d101b26e69f6.roa File: 5a332d9b-62ef-39aa-909f-d101b26e69f6.roa (raw, json) Hash identifier: K2Yd9iyJlNQrl05wjYJwU9vPDK1N10ytJgm5AC8IT+8= Subject key identifier: C0:12:A6:FB:A5:DD:6D:C5:2B:24:20:49:DB:76:67:61:B9:75:E3:25 Certificate issuer: /CN=dd3e6032-a6af-4662-8b07-848eeecc3995 Certificate serial: 010D0C9F43285849393E7BFD423BA33065D9EA20 Authority key identifier: 67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/5a332d9b-62ef-39aa-909f-d101b26e69f6.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 46824 IP address blocks: 2602:faa9::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:7b:fd:42:3b:a3:30:65:d9:ea:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd3e6032-a6af-4662-8b07-848eeecc3995 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=3298f65f-a21d-4c5d-8204-0630802a8a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:97:4e:9d:87:74:c3:c2:76:0a:5d:5c:98:f3: fd:a1:bb:9d:c9:56:a2:ad:42:96:8c:e3:7d:25:4f: 67:c2:4e:7e:51:f1:60:ef:bf:fb:da:d1:2a:ff:de: 8a:be:2b:6f:73:a3:e8:d6:bc:13:9c:7d:4d:a8:a3: c3:49:aa:ce:81:98:2e:7a:41:cb:1c:37:85:4f:75: d3:3a:c2:ec:40:d6:ce:0f:c6:d6:0c:14:7c:0a:f8: 7c:24:ff:97:29:4c:7a:b0:c0:7f:c0:43:8c:3c:f1: 32:41:fb:a4:e5:dd:09:fb:26:91:e6:f8:91:79:f6: 5e:ab:4b:87:cc:ef:73:91:ee:28:02:6b:33:25:c0: c1:de:49:99:68:26:0e:6f:4a:1b:b9:00:4e:17:fb: 59:9a:a4:86:f9:a0:57:db:22:8e:b0:80:70:93:f1: e2:15:bd:62:b4:04:1f:1f:a4:8c:5c:93:5d:23:fb: f3:81:a0:c3:d7:c8:24:f8:bf:2a:d4:6a:c5:78:1f: fd:f2:e9:ed:f5:65:50:a1:3d:fb:4e:75:51:a0:0f: fa:90:4d:2f:9e:c3:25:af:53:01:34:b1:7f:6b:0e: c2:25:e2:b1:a9:ce:c1:1e:aa:6a:ee:f9:e6:bf:d8: de:4b:d4:67:7b:69:f7:15:65:e6:99:8b:19:a8:e4: 95:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:12:A6:FB:A5:DD:6D:C5:2B:24:20:49:DB:76:67:61:B9:75:E3:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/5a332d9b-62ef-39aa-909f-d101b26e69f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl X509v3 Authority Key Identifier: keyid:67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer sbgp-ipAddrBlock: critical IPv6: 2602:faa9::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:d3:23:4c:18:a6:6e:b2:35:cd:25:63:8d:b2:49:05:c8:7b: b2:7f:7c:93:ce:ab:e5:1b:7a:6a:da:8a:99:e8:a8:e6:11:c7: e8:62:d1:7f:8c:5d:6d:7d:7d:ef:51:b3:0f:cf:8c:b9:13:cb: dd:38:90:d8:bc:ef:f3:1b:93:df:1a:ca:22:b1:3c:fe:7f:a9: 8f:76:1a:b1:c9:de:20:15:1f:55:49:f0:05:7f:4c:70:cb:31: f8:f4:d4:6f:4e:6c:a2:fa:55:95:22:22:a3:a0:be:30:af:17: 76:bc:6e:81:93:a9:4e:12:9f:24:52:0e:2a:c6:88:5f:54:14: 3f:0f:2c:e5:fd:28:8f:3c:96:dd:62:1c:b4:5d:32:b5:9b:6f: 80:07:ae:d7:df:02:e1:9c:a6:79:00:aa:6f:d3:40:7b:a7:45: 17:3e:7f:25:ae:e9:2f:5f:d2:8d:92:4a:a5:e5:bc:16:6c:78: 9e:10:76:06:25:62:37:ef:a3:cd:cb:2a:67:eb:95:75:be:ee: 09:4a:66:59:e2:b3:b4:73:4c:0f:de:e5:87:de:2a:8a:fb:dc: 6e:8c:dd:5a:f1:ac:6d:e1:fe:4c:b6:e0:6e:0a:93:35:ea:09: 52:79:2d:36:81:42:2f:ad:59:69:b4:9b:b3:e9:c7:33:60:ea: 27:fd:6d:65 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEk5Pnv9QjujMGXZ6iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQzZTYwMzItYTZhZi00NjYyLThiMDctODQ4ZWVlY2Mz OTk1MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk MzI5OGY2NWYtYTIxZC00YzVkLTgyMDQtMDYzMDgwMmE4YTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipdOnYd0w8J2Cl1cmPP9obudyVairUKWjON9 JU9nwk5+UfFg77/72tEq/96Kvitvc6Po1rwTnH1NqKPDSarOgZguekHLHDeFT3XT OsLsQNbOD8bWDBR8Cvh8JP+XKUx6sMB/wEOMPPEyQfuk5d0J+yaR5viRefZeq0uH zO9zke4oAmszJcDB3kmZaCYOb0obuQBOF/tZmqSG+aBX2yKOsIBwk/HiFb1itAQf H6SMXJNdI/vzgaDD18gk+L8q1GrFeB/98unt9WVQoT37TnVRoA/6kE0vnsMlr1MB NLF/aw7CJeKxqc7BHqpq7vnmv9jeS9Rne2n3FWXmmYsZqOSVvwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMASpvul3W3FKyQgSdt2Z2G5deMlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZDNl NjAzMi1hNmFmLTQ2NjItOGIwNy04NDhlZWVjYzM5OTUvNWEzMzJkOWItNjJlZi0z OWFhLTkwOWYtZDEwMWIyNmU2OWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGQzZTYwMzItYTZhZi00NjYyLThi MDctODQ4ZWVlY2MzOTk1L2RkM2U2MDMyLWE2YWYtNDY2Mi04YjA3LTg0OGVlZWNj Mzk5NS5jcmwwHwYDVR0jBBgwFoAUZwW65gzm7LpptisX60L/L29OAi0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZDNlNjAzMi1hNmFmLTQ2NjItOGIwNy04NDhl ZWVjYzM5OTUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL6qTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBu0yNMGKZusjXNJWONskkFyHuyf3yTzqvlG3pq2oqZ6KjmEcfoYtF/ jF1tfX3vUbMPz4y5E8vdOJDYvO/zG5PfGsoisTz+f6mPdhqxyd4gFR9VSfAFf0xw yzH49NRvTmyi+lWVIiKjoL4wrxd2vG6Bk6lOEp8kUg4qxohfVBQ/Dyzl/SiPPJbd Yhy0XTK1m2+AB67X3wLhnKZ5AKpv00B7p0UXPn8lrukvX9KNkkql5bwWbHieEHYG JWI376PNyypn65V1vu4JSmZZ4rO0c0wP3uWH3iqK+9xujN1a8axt4f5MtuBuCpM1 6glSeS02gUIvrVlptJuz6cczYOon/W1l -----END CERTIFICATE-----Generated at Sat Apr 12 00:46:29 2025 by rpki-client