$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a7244564-9404-3b6d-a87c-23f016c7e4c6.roa File: a7244564-9404-3b6d-a87c-23f016c7e4c6.roa (raw, json) Hash identifier: X9xHnapyPu8B7DtoDj4SBrju+95tXvmGRam6DyaqMc0= Subject key identifier: 12:AA:A0:2C:00:84:57:19:12:EF:AA:96:A9:97:80:FE:8A:08:83:6E Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F4328584950F9655C264B336F30B0F440 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a7244564-9404-3b6d-a87c-23f016c7e4c6.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 46432 IP address blocks: 2602:fe59:30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:65:5c:26:4b:33:6f:30:b0:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=f5ec2b2b-8bce-4ae2-b5af-596857473548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:30:50:33:c0:25:61:be:71:5c:41:1e:97:7d: 5e:f3:d0:d3:08:03:1f:ce:67:52:c5:79:51:82:38: fa:2f:34:19:2c:f3:2c:e2:51:9e:55:6f:ef:4f:13: eb:4d:67:2b:31:59:e0:69:5c:28:26:6a:c2:f3:0a: ca:a3:97:24:7f:1c:a0:db:6b:69:8c:66:41:d8:60: f0:cd:06:bb:78:36:86:e2:60:e1:d9:cb:2a:00:42: 94:34:d0:7c:7a:c6:b9:a8:40:ad:f6:60:3f:30:6e: be:bb:b7:82:46:88:6b:71:54:ab:44:f8:d5:43:8e: ee:ac:ae:66:8f:d0:b7:ff:f5:64:0a:7b:7d:4e:e9: 98:3d:2d:b1:58:20:83:92:f4:44:5e:ec:c0:34:5d: be:33:15:7d:1c:97:d3:d5:a1:91:26:cc:b4:f1:11: 7e:af:77:a0:25:1a:f0:8a:87:f0:39:8c:42:5c:92: 08:a3:fd:83:eb:09:6c:db:4c:1d:f0:1d:e2:67:e7: 34:3e:23:c6:39:72:31:59:cc:4c:9d:fc:d5:38:bc: e7:00:dc:da:bd:9b:ad:e3:72:15:69:74:73:9d:18: 9c:28:dd:ab:77:40:62:77:86:2d:ba:68:99:8b:44: 9b:dc:a3:1e:bc:61:40:50:21:0e:34:96:8a:8d:9c: 5b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AA:A0:2C:00:84:57:19:12:EF:AA:96:A9:97:80:FE:8A:08:83:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a7244564-9404-3b6d-a87c-23f016c7e4c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv6: 2602:fe59:30::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:b3:0a:06:30:91:10:59:3d:89:95:37:d2:22:0d:d6:6b:32: 53:6a:50:d6:28:54:9b:da:e2:04:aa:5f:6f:83:53:3e:cc:aa: 53:1d:f3:a2:65:bd:63:9c:52:34:4d:89:86:5a:bf:3c:6d:4d: 94:d5:62:dc:4e:12:90:49:85:40:19:1b:d0:fc:44:f6:1b:c1: 27:42:26:7a:21:0a:af:7b:81:36:1e:58:80:a8:ce:d9:ee:a4: dc:b7:ad:1f:de:39:6e:b6:27:94:66:11:30:fc:29:f7:1f:08: 35:f2:ed:ee:8e:6d:ed:ca:15:9e:fa:08:19:e4:fb:38:c2:0d: 9b:f8:a7:97:d3:75:d8:27:08:f8:58:6b:e8:e7:fc:eb:c0:83: 25:dc:a3:e0:3c:37:8c:e4:d6:8c:e9:5b:2d:33:91:68:43:7e: b8:e5:b6:f2:a2:23:67:f5:ac:da:2c:af:67:e0:96:67:66:40: fe:07:21:a5:2b:86:80:29:b1:13:df:9e:99:03:c0:2c:58:02: a9:c3:26:ed:c2:93:c0:79:f4:6f:d2:b2:e2:90:a7:df:45:bd: c8:fc:d9:d7:c8:4e:6a:41:f2:44:54:18:3b:cd:38:cd:51:d4: e8:ec:5e:7c:f9:4c:e3:57:27:9f:5b:69:73:ea:23:ef:29:52: 30:5a:2d:bb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElQ+WVcJkszbzCw9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk ZjVlYzJiMmItOGJjZS00YWUyLWI1YWYtNTk2ODU3NDczNTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTBQM8AlYb5xXEEel31e89DTCAMfzmdSxXlR gjj6LzQZLPMs4lGeVW/vTxPrTWcrMVngaVwoJmrC8wrKo5ckfxyg22tpjGZB2GDw zQa7eDaG4mDh2csqAEKUNNB8esa5qECt9mA/MG6+u7eCRohrcVSrRPjVQ47urK5m j9C3//VkCnt9TumYPS2xWCCDkvREXuzANF2+MxV9HJfT1aGRJsy08RF+r3egJRrw iofwOYxCXJIIo/2D6wls20wd8B3iZ+c0PiPGOXIxWcxMnfzVOLznANzavZut43IV aXRznRicKN2rd0Bid4YtumiZi0Sb3KMevGFAUCEONJaKjZxbzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBKqoCwAhFcZEu+qlqmXgP6KCINuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvYTcyNDQ1NjQtOTQwNC0z YjZkLWE4N2MtMjNmMDE2YzdlNGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL+WQAw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADezCgYwkRBZPYmVN9IiDdZrMlNqUNYoVJva4gSqX2+DUz7MqlMd 86JlvWOcUjRNiYZavzxtTZTVYtxOEpBJhUAZG9D8RPYbwSdCJnohCq97gTYeWICo ztnupNy3rR/eOW62J5RmETD8KfcfCDXy7e6Obe3KFZ76CBnk+zjCDZv4p5fTddgn CPhYa+jn/OvAgyXco+A8N4zk1ozpWy0zkWhDfrjltvKiI2f1rNosr2fglmdmQP4H IaUrhoApsRPfnpkDwCxYAqnDJu3Ck8B59G/SsuKQp99Fvcj82dfITmpB8kRUGDvN OM1R1OjsXnz5TONXJ59baXPqI+8pUjBaLbs= -----END CERTIFICATE-----Generated at Tue Apr 29 09:26:35 2025 by rpki-client