$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/6e06309a-d58c-33ca-b65a-43e58fba7f1d.roa File: 6e06309a-d58c-33ca-b65a-43e58fba7f1d.roa (raw, json) Hash identifier: CjhPWY87DEqpoidgZ36xdCPsF6moFy5R+imCdpW5kBw= Subject key identifier: 58:E3:11:5B:A0:10:A5:0F:90:64:8D:6B:BD:AE:F1:DF:D8:60:DF:DF Certificate issuer: /CN=2b52814e-343c-46a0-bf89-2e9064856503 Certificate serial: 010D0C9F4328584937D937CE0855AD7887ED7DC0 Authority key identifier: E9:D4:70:BA:21:90:EE:D7:2F:D9:DF:95:C7:26:7F:3A:F6:2F:28:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/6e06309a-d58c-33ca-b65a-43e58fba7f1d.roa Signing time: Mon 17 Mar 2025 13:00:52 +0000 ROA not before: Mon 17 Mar 2025 13:00:52 +0000 ROA not after: Sun 15 Jun 2025 13:00:52 +0000 asID: 393410 IP address blocks: 2602:f871::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:37:d9:37:ce:08:55:ad:78:87:ed:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b52814e-343c-46a0-bf89-2e9064856503 Validity Not Before: Mar 17 13:00:52 2025 GMT Not After : Jun 15 13:00:52 2025 GMT Subject: CN=6b8d38f2-65e4-4ed1-bb10-3152f1aa09b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:27:c8:8a:22:5e:13:f5:8a:9a:5c:3c:c9:b7: 3c:22:2d:1d:f4:ff:10:de:0b:1e:47:af:cf:fc:4c: 1c:45:a9:ef:c6:98:e7:92:a9:58:11:a5:4c:75:bf: 30:2a:66:a5:c7:e1:63:4a:02:8e:c6:76:50:b6:74: f2:2d:29:c3:e4:bb:9d:96:98:d0:1f:54:f9:83:6b: fa:96:60:a0:7e:e2:28:bd:b1:22:f3:a9:df:ba:e8: c0:ff:c6:63:be:95:6a:eb:c3:d0:5f:be:fb:45:4e: 00:c9:1f:d2:91:5e:e3:1b:a1:98:c5:12:bf:72:61: cb:af:fa:96:ef:c4:bb:cd:08:3c:ba:fb:02:58:ab: 3c:3b:21:c8:e9:f2:57:2d:ff:43:9d:34:2b:de:9e: 13:bc:cc:7e:3b:27:4d:b1:7f:fa:4a:53:93:3c:9d: db:36:e9:94:27:57:2e:cb:fc:6a:c4:5a:5e:92:39: dd:01:f5:2f:a1:ac:32:18:14:86:f1:e1:0b:90:ed: 88:bd:87:d3:59:f4:ef:ba:ce:cd:20:b1:a5:32:9e: 3f:e4:0f:83:a0:9e:04:34:52:21:91:61:08:d7:c1: ee:94:58:76:35:ca:ea:b5:c2:ce:68:73:db:9f:36: e1:1f:d2:d0:9f:0b:63:92:68:8b:d4:53:c6:69:2c: c5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E3:11:5B:A0:10:A5:0F:90:64:8D:6B:BD:AE:F1:DF:D8:60:DF:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/6e06309a-d58c-33ca-b65a-43e58fba7f1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.crl X509v3 Authority Key Identifier: keyid:E9:D4:70:BA:21:90:EE:D7:2F:D9:DF:95:C7:26:7F:3A:F6:2F:28:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer sbgp-ipAddrBlock: critical IPv6: 2602:f871::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:bc:e3:78:cd:5b:c6:a9:d1:f4:6c:1c:ff:8d:46:7b:30:5b: 3a:7d:07:d3:7c:5c:5c:7e:4b:9b:fd:bb:0f:10:b1:bf:41:ec: 22:25:83:1c:d0:f4:24:16:ae:fd:ec:42:77:73:e3:94:55:b1: 22:b9:43:bd:53:9b:8c:eb:e2:5f:77:73:f6:5a:32:d9:01:19: 4b:a9:fb:08:37:0d:4f:23:97:4e:2c:fa:0a:a2:20:56:6c:5a: 9d:1d:de:ce:ff:e4:ef:95:91:1a:46:8e:3a:c4:08:c7:27:7c: 3d:d2:cc:90:4e:70:42:46:f7:d8:cf:17:bc:30:e5:8d:35:cc: 52:70:77:52:dd:37:0b:b6:2e:46:4b:b2:3c:e1:12:bf:98:bb: b2:bf:fb:f6:fc:85:5b:30:fc:cc:89:eb:1a:7a:f6:a5:b1:7d: ab:31:4e:b5:29:90:6b:b1:4d:7f:bd:94:f9:d1:bd:8e:8f:06: 2e:c5:e9:91:80:f1:4a:94:13:5b:30:f4:18:a4:db:0b:20:8a: 05:37:ee:41:b5:8b:e7:44:80:fc:c8:ae:26:dc:b9:ea:d6:f4: 6e:9e:93:20:5c:6f:bd:bd:cf:d1:c1:16:58:28:e8:2f:3e:90: 77:17:3d:92:8c:31:ab:6e:82:02:76:40:a6:05:32:d2:7b:4b: 0b:1f:59:71 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEk32TfOCFWteIftfcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI1MjgxNGUtMzQzYy00NmEwLWJmODktMmU5MDY0ODU2 NTAzMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk NmI4ZDM4ZjItNjVlNC00ZWQxLWJiMTAtMzE1MmYxYWEwOWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSfIiiJeE/WKmlw8ybc8Ii0d9P8Q3gseR6/P /EwcRanvxpjnkqlYEaVMdb8wKmalx+FjSgKOxnZQtnTyLSnD5LudlpjQH1T5g2v6 lmCgfuIovbEi86nfuujA/8ZjvpVq68PQX777RU4AyR/SkV7jG6GYxRK/cmHLr/qW 78S7zQg8uvsCWKs8OyHI6fJXLf9DnTQr3p4TvMx+OydNsX/6SlOTPJ3bNumUJ1cu y/xqxFpekjndAfUvoawyGBSG8eELkO2IvYfTWfTvus7NILGlMp4/5A+DoJ4ENFIh kWEI18HulFh2NcrqtcLOaHPbnzbhH9LQnwtjkmiL1FPGaSzF/QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFjjEVugEKUPkGSNa72u8d/YYN/fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYjUy ODE0ZS0zNDNjLTQ2YTAtYmY4OS0yZTkwNjQ4NTY1MDMvNmUwNjMwOWEtZDU4Yy0z M2NhLWI2NWEtNDNlNThmYmE3ZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmI1MjgxNGUtMzQzYy00NmEwLWJm ODktMmU5MDY0ODU2NTAzLzJiNTI4MTRlLTM0M2MtNDZhMC1iZjg5LTJlOTA2NDg1 NjUwMy5jcmwwHwYDVR0jBBgwFoAU6dRwuiGQ7tcv2d+VxyZ/OvYvKE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYjUyODE0ZS0zNDNjLTQ2YTAtYmY4OS0yZTkw NjQ4NTY1MDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4cQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAlbzjeM1bxqnR9Gwc/41GezBbOn0H03xcXH5Lm/27DxCxv0HsIiWD HND0JBau/exCd3PjlFWxIrlDvVObjOviX3dz9loy2QEZS6n7CDcNTyOXTiz6CqIg VmxanR3ezv/k75WRGkaOOsQIxyd8PdLMkE5wQkb32M8XvDDljTXMUnB3Ut03C7Yu RkuyPOESv5i7sr/79vyFWzD8zInrGnr2pbF9qzFOtSmQa7FNf72U+dG9jo8GLsXp kYDxSpQTWzD0GKTbCyCKBTfuQbWL50SA/MiuJty56tb0bp6TIFxvvb3P0cEWWCjo Lz6Qdxc9kowxq26CAnZApgUy0ntLCx9ZcQ== -----END CERTIFICATE-----Generated at Fri Apr 11 21:40:26 2025 by rpki-client