$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/6b6268d5-fa87-328c-a85d-709618c03c5b.roa File: 6b6268d5-fa87-328c-a85d-709618c03c5b.roa (raw, json) Hash identifier: b0MBK2ZtI7Wxqb0MgJMkDdBs7fcEffGDXxEZLX21xRY= Subject key identifier: 93:14:79:6F:85:8F:EC:25:25:10:E5:88:AC:E3:A1:AD:7B:EC:76:48 Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F432858496CE458DE2D6D4AB8CE9CFA80 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/6b6268d5-fa87-328c-a85d-709618c03c5b.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 23428 IP address blocks: 2602:fb68:900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:58:de:2d:6d:4a:b8:ce:9c:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=342f9eed-6c0a-4d54-8659-d16626e003e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b1:81:b2:35:cc:77:a3:a7:68:a6:c2:5b:c2: 94:b9:7e:1e:d9:c8:34:4f:a9:04:45:45:cb:4b:c6: 6a:ce:b9:7d:07:81:b4:ed:94:e2:67:c2:3e:46:63: 31:2c:30:03:ce:44:eb:13:c7:7b:71:5f:7f:39:2d: 18:72:7b:75:09:7e:31:7d:70:22:45:6e:1b:f8:b5: 1a:ba:c9:89:8b:7b:7c:e2:a4:e3:21:c7:82:83:4b: 60:46:1a:d4:f9:4b:03:db:98:22:6e:3c:ce:b3:c4: f7:01:b2:01:46:fd:b0:c1:a5:66:80:fd:6a:12:22: a1:6c:f3:4a:6e:1f:f1:5c:f1:9c:d4:a2:c8:7f:cc: 9a:14:64:af:fb:bb:d9:5c:b3:9a:07:b2:cb:33:85: 7d:ae:ac:84:a1:fe:05:be:06:87:b3:85:9b:bf:a5: b8:66:91:4a:0d:0f:22:94:63:fc:35:0f:33:c7:f9: 0a:92:66:2f:af:7f:94:12:c2:28:cb:2f:a3:84:f2: 01:57:6f:ae:98:b2:61:0f:69:87:3f:df:69:80:84: dd:a7:5a:f9:12:cb:9a:57:6e:d0:41:8d:bf:23:cc: 76:11:8e:ec:7c:99:ec:d3:ab:a4:ec:37:9b:21:e5: 04:a6:2d:c7:3a:eb:14:7e:f1:11:43:f3:0f:d8:a0: 9c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:14:79:6F:85:8F:EC:25:25:10:E5:88:AC:E3:A1:AD:7B:EC:76:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/6b6268d5-fa87-328c-a85d-709618c03c5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb68:900::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:13:6a:02:55:b9:db:a6:a2:6b:75:89:e3:00:b2:2f:75:c1: 83:d3:ee:e4:dd:0e:53:35:9a:e1:c8:ad:f5:93:4a:08:e0:13: 2d:97:48:95:6b:0c:d1:d0:bf:26:ad:09:25:db:a2:fe:76:e3: 8f:e8:35:6d:36:b2:f3:da:71:54:00:df:97:b7:c0:30:1a:17: bd:cb:8b:3e:16:ec:9a:2e:8e:50:27:19:b2:74:7a:56:54:fe: 3d:75:89:82:85:37:c0:f6:7e:42:b7:96:87:88:c3:fc:5f:36: b5:6f:f5:dd:69:55:9a:31:3b:c1:ad:c7:b6:de:93:72:5b:29: ab:66:f7:65:ce:16:44:2a:82:9b:61:f3:6c:9e:f8:1e:7c:62: 0a:00:a0:7b:f7:77:1d:c7:8f:b2:6e:e9:83:a7:3e:fe:c4:15: f7:27:54:a9:34:ec:99:39:f4:c7:b3:91:cd:55:97:81:33:f4: 08:fa:6f:9b:b2:99:ac:be:91:6e:4a:ca:5b:c6:2b:62:1f:6c: 0c:cd:df:f2:4b:53:4a:5a:3a:cb:09:e5:b7:32:42:68:94:4c: 4f:91:c9:8c:e5:e7:bd:d1:6e:6e:7d:87:5b:4c:d3:e4:04:c2: f0:2a:cb:35:24:2e:14:8f:6a:67:44:25:0b:a2:8e:e9:7f:8e: 36:24:66:7f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEls5FjeLW1KuM6c+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk MzQyZjllZWQtNmMwYS00ZDU0LTg2NTktZDE2NjI2ZTAwM2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17GBsjXMd6OnaKbCW8KUuX4e2cg0T6kERUXL S8Zqzrl9B4G07ZTiZ8I+RmMxLDADzkTrE8d7cV9/OS0Ycnt1CX4xfXAiRW4b+LUa usmJi3t84qTjIceCg0tgRhrU+UsD25gibjzOs8T3AbIBRv2wwaVmgP1qEiKhbPNK bh/xXPGc1KLIf8yaFGSv+7vZXLOaB7LLM4V9rqyEof4FvgaHs4Wbv6W4ZpFKDQ8i lGP8NQ8zx/kKkmYvr3+UEsIoyy+jhPIBV2+umLJhD2mHP99pgITdp1r5EsuaV27Q QY2/I8x2EY7sfJns06uk7DebIeUEpi3HOusUfvERQ/MP2KCczQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJMUeW+Fj+wlJRDliKzjoa177HZIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvNmI2MjY4ZDUtZmE4Ny0z MjhjLWE4NWQtNzA5NjE4YzAzYzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7aAkA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACwTagJVudumomt1ieMAsi91wYPT7uTdDlM1muHIrfWTSgjgEy2X SJVrDNHQvyatCSXbov5244/oNW02svPacVQA35e3wDAaF73Liz4W7JoujlAnGbJ0 elZU/j11iYKFN8D2fkK3loeIw/xfNrVv9d1pVZoxO8Gtx7bek3JbKatm92XOFkQq gpth82ye+B58YgoAoHv3dx3Hj7Ju6YOnPv7EFfcnVKk07Jk59Mezkc1Vl4Ez9Aj6 b5uymay+kW5KylvGK2IfbAzN3/JLU0paOssJ5bcyQmiUTE+RyYzl573Rbm59h1tM 0+QEwvAqyzUkLhSPamdEJQuijul/jjYkZn8= -----END CERTIFICATE-----Generated at Sat Apr 12 10:11:31 2025 by rpki-client