$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/05894b00-1ab7-3370-99a2-efa2acc65d9a.roa File: 05894b00-1ab7-3370-99a2-efa2acc65d9a.roa (raw, json) Hash identifier: 1Ea7/A+dhdf8EDBlB9Jyb1keqWQHgYm9e5CWKlIRlJM= Subject key identifier: B0:E3:D6:F5:09:B0:3E:83:74:25:96:F4:DF:A4:50:2F:74:09:AC:A1 Certificate issuer: /CN=f488b7b9-ef6e-4097-9207-940bc62289f1 Certificate serial: 010D0C9F432858492CB21840FCA43D3E8846A5C0 Authority key identifier: 3F:1C:54:0C:DB:5C:0E:65:DD:06:B6:DD:60:58:94:38:63:C4:05:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/05894b00-1ab7-3370-99a2-efa2acc65d9a.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 53889 IP address blocks: 2602:f984::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/f488b7b9-ef6e-4097-9207-940bc62289f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/f488b7b9-ef6e-4097-9207-940bc62289f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:18:40:fc:a4:3d:3e:88:46:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f488b7b9-ef6e-4097-9207-940bc62289f1 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=4fd7b40e-9fd6-45da-b03f-f174be6e6caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6e:78:7e:90:3c:c8:9c:a0:30:82:91:ef:1b: 08:e4:b2:ce:35:be:4c:80:f5:de:d8:45:d4:65:0f: 80:46:e6:b0:9b:5d:bd:c4:3f:87:7b:04:ff:93:f9: 7a:9e:53:0d:30:e1:25:15:50:38:5b:7d:fb:e4:06: e4:65:b1:f0:17:42:8d:e9:28:f4:41:f8:24:db:88: 50:be:b7:06:b4:cc:fe:bc:b0:69:7f:f6:dc:b9:4b: a2:f1:0b:08:be:f6:39:e8:5e:80:88:b3:be:d5:fe: 44:ed:ce:ef:fd:62:2b:60:15:c5:8b:2e:0b:96:c4: de:72:5d:ad:44:7f:9d:dc:97:83:ed:00:b2:2a:6a: 3a:77:69:67:a9:6d:98:7b:c1:ae:f7:7c:c7:e5:f2: 65:3c:ba:ad:39:f0:18:7b:d2:eb:25:ff:ce:23:f6: ef:bc:4b:cd:53:ca:b2:12:e2:38:6a:ff:6b:b8:46: f0:76:a5:d7:c2:de:5d:d1:a5:04:2a:41:d5:aa:f3: 89:33:22:e2:25:da:26:a4:d3:57:00:a2:00:9a:b1: 97:e8:6f:09:0d:b6:a8:cd:51:f1:ca:1a:c9:f8:c1: 95:40:02:31:24:ef:83:ec:9f:73:63:14:bf:a4:ea: cc:eb:f0:43:fa:c1:f7:80:27:b6:2d:1c:11:8f:45: 13:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E3:D6:F5:09:B0:3E:83:74:25:96:F4:DF:A4:50:2F:74:09:AC:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/05894b00-1ab7-3370-99a2-efa2acc65d9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/f488b7b9-ef6e-4097-9207-940bc62289f1.crl X509v3 Authority Key Identifier: keyid:3F:1C:54:0C:DB:5C:0E:65:DD:06:B6:DD:60:58:94:38:63:C4:05:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1.cer sbgp-ipAddrBlock: critical IPv6: 2602:f984::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:3b:43:b8:10:b6:c0:90:fb:0e:1f:2e:37:fc:65:3e:b4:52: 67:06:f6:54:68:a5:a7:6e:27:af:f0:38:72:a7:8f:14:aa:64: 56:0f:28:10:21:40:4b:d9:4f:65:88:1d:83:3a:e8:35:ef:51: ef:1d:01:43:88:ba:fe:f4:f0:7c:df:57:6a:e6:53:21:f5:c8: 87:92:52:fc:43:d9:b6:91:31:86:ab:82:60:27:20:7f:7d:17: 33:21:5d:2a:e1:f5:01:88:8f:05:92:82:d8:76:ce:30:d8:cb: 6c:26:1d:aa:05:d3:3c:3e:b5:c1:58:3e:56:c2:36:81:72:df: d7:01:ce:59:f3:90:e9:76:87:3f:3e:d2:cf:5b:83:19:68:7f: 53:2f:70:a9:03:65:67:43:f3:19:d5:cc:8c:96:d6:22:e7:1f: f7:1e:f3:11:03:8d:c6:4f:8a:80:0b:9f:de:13:4b:e3:24:b2: f5:b7:44:90:e2:ff:48:40:d3:ba:fb:14:58:d2:76:00:66:22: df:da:da:8a:6c:5a:53:87:5f:d7:8a:f6:3b:b0:4f:4d:d0:2e: 59:ec:31:dd:a3:ff:72:5a:37:aa:7f:2e:91:c7:ab:f0:06:1c: 2f:02:01:fd:4c:ca:b3:db:05:75:b5:fe:52:60:e9:39:bf:f5: 8d:ed:f6:1a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEksshhA/KQ9PohGpcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ4OGI3YjktZWY2ZS00MDk3LTkyMDctOTQwYmM2MjI4 OWYxMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NGZkN2I0MGUtOWZkNi00NWRhLWIwM2YtZjE3NGJlNmU2Y2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgm54fpA8yJygMIKR7xsI5LLONb5MgPXe2EXU ZQ+ARuawm129xD+HewT/k/l6nlMNMOElFVA4W3375AbkZbHwF0KN6Sj0Qfgk24hQ vrcGtMz+vLBpf/bcuUui8QsIvvY56F6AiLO+1f5E7c7v/WIrYBXFiy4LlsTecl2t RH+d3JeD7QCyKmo6d2lnqW2Ye8Gu93zH5fJlPLqtOfAYe9LrJf/OI/bvvEvNU8qy EuI4av9ruEbwdqXXwt5d0aUEKkHVqvOJMyLiJdompNNXAKIAmrGX6G8JDbaozVHx yhrJ+MGVQAIxJO+D7J9zYxS/pOrM6/BD+sH3gCe2LRwRj0UTnQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLDj1vUJsD6DdCWW9N+kUC90CayhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNDg4 YjdiOS1lZjZlLTQwOTctOTIwNy05NDBiYzYyMjg5ZjEvMDU4OTRiMDAtMWFiNy0z MzcwLTk5YTItZWZhMmFjYzY1ZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjQ4OGI3YjktZWY2ZS00MDk3LTky MDctOTQwYmM2MjI4OWYxL2Y0ODhiN2I5LWVmNmUtNDA5Ny05MjA3LTk0MGJjNjIy ODlmMS5jcmwwHwYDVR0jBBgwFoAUPxxUDNtcDmXdBrbdYFiUOGPEBQ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mNDg4YjdiOS1lZjZlLTQwOTctOTIwNy05NDBi YzYyMjg5ZjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL5hAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAIjtDuBC2wJD7Dh8uN/xlPrRSZwb2VGilp24nr/A4cqePFKpkVg8o ECFAS9lPZYgdgzroNe9R7x0BQ4i6/vTwfN9XauZTIfXIh5JS/EPZtpExhquCYCcg f30XMyFdKuH1AYiPBZKC2HbOMNjLbCYdqgXTPD61wVg+VsI2gXLf1wHOWfOQ6XaH Pz7Sz1uDGWh/Uy9wqQNlZ0PzGdXMjJbWIucf9x7zEQONxk+KgAuf3hNL4ySy9bdE kOL/SEDTuvsUWNJ2AGYi39raimxaU4df14r2O7BPTdAuWewx3aP/clo3qn8ukcer 8AYcLwIB/UzKs9sFdbX+UmDpOb/1je32Gg== -----END CERTIFICATE-----Generated at Sat Apr 5 10:02:04 2025 by rpki-client