$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/6aaf0b5d-0ce4-34be-91b8-468066365036.roa File: 6aaf0b5d-0ce4-34be-91b8-468066365036.roa (raw, json) Hash identifier: a6MzcfamPyWi0DN4WqG+rYyadOdwmHsr8+xLuVRHDgw= Subject key identifier: 3E:DA:33:03:B3:6D:D5:2A:8A:A5:D1:BA:FF:88:16:3E:CE:97:4C:F3 Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F4328584950F965386664C914542F3F80 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/6aaf0b5d-0ce4-34be-91b8-468066365036.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 46432 IP address blocks: 2602:fe59:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:65:38:66:64:c9:14:54:2f:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=db3c6783-e11e-437b-b325-fb0d4252b321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:61:27:d3:c0:79:5d:ce:f1:33:b9:26:73:2b: 2d:65:68:cd:c1:ff:8d:be:61:57:39:20:c0:65:03: ec:f6:cd:2e:4b:3a:b3:06:ec:16:bd:fd:86:32:d4: 3f:fe:76:8d:92:17:7d:f7:67:af:fd:f5:fe:1b:ae: 9a:80:05:cb:cb:d9:47:62:66:51:97:dd:77:d5:35: 54:c0:be:3e:e2:6b:69:7e:ae:65:a1:e6:21:03:03: c6:ce:64:ba:2e:46:61:56:b6:c0:ef:3d:9b:f4:bf: 99:9e:73:7c:e6:c9:d5:cc:68:2f:f9:36:2c:42:9b: 4b:74:48:ad:0e:42:79:65:b6:74:22:6d:eb:ba:05: 7e:f4:f6:fc:d9:94:f4:ec:92:33:be:18:d5:1d:a1: 03:cb:75:dc:f5:26:e7:13:b6:ed:f3:85:ed:5b:c2: a0:95:6f:12:06:eb:3f:7b:6c:f8:2e:16:2d:13:2f: 86:78:56:30:6a:f3:da:11:51:81:9d:fd:5b:e6:bf: 5d:57:69:d8:51:bd:f5:6f:02:1c:4c:c1:b3:a0:b2: 2a:61:68:5e:d3:b7:96:06:2a:4c:fe:5a:e1:83:49: d8:2b:ab:fb:05:55:e0:d9:8b:52:8b:87:a4:21:fa: 85:e1:f5:1f:c9:f9:a9:00:ac:9d:82:93:cb:38:f0: 42:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DA:33:03:B3:6D:D5:2A:8A:A5:D1:BA:FF:88:16:3E:CE:97:4C:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/6aaf0b5d-0ce4-34be-91b8-468066365036.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv6: 2602:fe59:10::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:79:43:2e:e2:24:83:7b:56:50:74:33:85:1b:75:91:62:f4: 76:5d:c3:f6:1e:bc:d1:ee:ed:f6:82:5f:e4:10:aa:04:09:6f: 50:fe:6f:8b:dc:a7:2e:6a:11:2d:55:67:05:0c:38:f2:3a:da: c3:71:7a:23:59:6a:08:58:60:78:dd:81:15:d1:2e:04:c6:8b: d6:24:5e:88:91:98:8c:6f:bf:21:fa:2f:d0:ca:cc:c1:df:cd: 39:0a:bf:f5:67:41:79:9b:b1:8f:0d:c0:b0:af:ab:fd:dd:37: ea:01:a4:4e:85:7c:a9:68:d5:10:f9:77:ce:4e:be:d3:58:13: a1:80:b3:bf:31:76:7c:c5:8b:b9:a0:7e:58:4a:28:60:6b:42: 17:33:d0:03:13:4c:d8:63:c3:a1:1e:49:41:c1:06:0b:36:6e: 39:7b:b0:6d:6d:b9:f9:b5:fd:6d:e6:5d:79:11:86:9b:e0:cb: 4c:4a:b4:1e:18:8f:97:9d:fe:dc:db:fc:e2:84:03:ad:92:70: 7c:0f:7a:15:13:fe:80:34:3b:1c:a1:be:62:4e:a3:38:eb:4e: 12:31:8d:0d:70:ab:e2:71:33:42:7d:2c:53:e0:0a:5f:b3:eb: 03:9e:a5:9e:a7:5e:f6:fe:e5:68:41:fb:6b:20:e7:20:7a:39: 1b:4f:23:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElQ+WU4ZmTJFFQvP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk ZGIzYzY3ODMtZTExZS00MzdiLWIzMjUtZmIwZDQyNTJiMzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGEn08B5Xc7xM7kmcystZWjNwf+NvmFXOSDA ZQPs9s0uSzqzBuwWvf2GMtQ//naNkhd992ev/fX+G66agAXLy9lHYmZRl9131TVU wL4+4mtpfq5loeYhAwPGzmS6LkZhVrbA7z2b9L+ZnnN85snVzGgv+TYsQptLdEit DkJ5ZbZ0Im3rugV+9Pb82ZT07JIzvhjVHaEDy3Xc9SbnE7bt84XtW8KglW8SBus/ e2z4LhYtEy+GeFYwavPaEVGBnf1b5r9dV2nYUb31bwIcTMGzoLIqYWhe07eWBipM /lrhg0nYK6v7BVXg2YtSi4ekIfqF4fUfyfmpAKydgpPLOPBC4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD7aMwOzbdUqiqXRuv+IFj7Ol0zzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvNmFhZjBiNWQtMGNlNC0z NGJlLTkxYjgtNDY4MDY2MzY1MDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL+WQAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACZ5Qy7iJIN7VlB0M4UbdZFi9HZdw/YevNHu7faCX+QQqgQJb1D+ b4vcpy5qES1VZwUMOPI62sNxeiNZaghYYHjdgRXRLgTGi9YkXoiRmIxvvyH6L9DK zMHfzTkKv/VnQXmbsY8NwLCvq/3dN+oBpE6FfKlo1RD5d85OvtNYE6GAs78xdnzF i7mgflhKKGBrQhcz0AMTTNhjw6EeSUHBBgs2bjl7sG1tufm1/W3mXXkRhpvgy0xK tB4Yj5ed/tzb/OKEA62ScHwPehUT/oA0OxyhvmJOozjrThIxjQ1wq+JxM0J9LFPg Cl+z6wOepZ6nXvb+5WhB+2sg5yB6ORtPI5M= -----END CERTIFICATE-----Generated at Tue Apr 29 11:29:17 2025 by rpki-client