$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/dfa13ca2-8a87-3b38-9706-132ae3f66301.roa File: dfa13ca2-8a87-3b38-9706-132ae3f66301.roa (raw, json) Hash identifier: LvLfV9l5nFEqdgUfihIMhS1ARW3TK3ABh0MrFNZ59M8= Subject key identifier: F5:42:85:89:44:A4:E1:42:2A:A7:6D:FE:00:AA:4B:E4:CD:06:4B:54 Certificate issuer: /CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Certificate serial: 010D0C9F43285849F9DFD249EFBC8010AA01D380 Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/dfa13ca2-8a87-3b38-9706-132ae3f66301.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 3423 IP address blocks: 2602:fbdc:89::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:d2:49:ef:bc:80:10:aa:01:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=033577ac-8c67-4084-b3ec-e7d996f71f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:78:9a:8e:02:2a:f5:02:0f:04:46:77:66:94: 05:98:c0:79:52:a5:6a:04:15:13:78:6c:16:79:20: 08:33:d6:3d:35:b0:fc:c9:66:6a:11:aa:a0:06:21: 42:c7:51:70:bc:b8:73:8e:c8:00:70:fa:f3:84:ad: ea:eb:a5:0e:aa:1c:bb:f6:7f:02:52:06:71:65:4d: d4:a7:02:02:90:fb:21:d2:10:e8:67:26:cb:3b:a9: 7f:32:72:c1:ce:50:54:8c:d9:b8:fc:71:04:a4:9e: ab:ca:70:10:29:45:8e:84:07:f9:60:f4:4e:79:2a: 98:47:de:86:5a:4c:f5:03:6a:7d:2c:51:0d:b6:45: ee:f6:f5:f4:62:9d:2a:cb:c5:73:7e:e3:43:e7:33: be:5e:0d:4f:ee:4c:3c:3d:61:d9:e5:58:68:53:37: 17:9e:56:ed:06:47:79:b9:99:74:b0:3f:4e:45:79: be:cf:63:37:a1:bc:29:43:dc:26:c4:cd:39:50:5a: b7:b2:5c:db:9c:81:a0:e3:28:b4:5a:43:22:28:47: 14:8a:1d:6a:ee:d4:fe:bd:36:29:d5:f6:f5:e4:66: a7:d7:f6:ac:39:ab:88:ba:69:d3:83:81:28:e3:82: 30:04:ab:3b:c8:e8:f6:6c:1f:f6:c0:ea:69:07:cc: 5f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:42:85:89:44:A4:E1:42:2A:A7:6D:FE:00:AA:4B:E4:CD:06:4B:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/dfa13ca2-8a87-3b38-9706-132ae3f66301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl X509v3 Authority Key Identifier: keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbdc:89::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:70:8b:15:c5:9e:b6:1f:ca:f9:e4:16:ba:d2:d0:21:c3:43: 07:e2:05:40:d2:d4:38:e5:7f:8a:9e:fb:5c:a8:61:fb:d2:20: 72:dc:bb:06:62:52:bc:2f:b2:7b:62:78:d5:73:b4:45:49:f7: a1:37:c7:a8:c4:b0:fd:40:32:45:9a:fa:dd:a4:7a:af:69:be: 31:07:8b:6b:0a:1d:0c:86:3a:25:1d:d0:0c:ef:66:8b:5b:5d: 30:a8:cb:96:c3:8a:e4:5c:4c:5c:37:e3:f9:f5:13:e4:3b:a9: bf:7e:64:ac:54:f5:c3:09:c0:cb:4c:61:25:71:67:2b:15:bf: 1a:bd:27:41:85:42:c3:90:2d:ce:fd:81:bb:c1:14:b1:3e:57: ec:62:0f:94:c7:97:a6:65:94:a7:19:68:6f:ca:df:54:f3:e0: 8a:25:8c:97:2c:8b:3d:26:73:67:1e:7e:9b:fa:31:35:03:93: 09:d2:95:c4:65:14:2c:c3:b9:26:e2:41:c1:1f:b8:fe:1c:d4: 16:ad:0c:f0:23:19:0a:dc:c5:8b:6d:56:92:c6:08:99:72:11: 4b:c8:8c:89:94:08:40:a7:92:bf:f0:a4:66:0e:e0:b1:45:73: 39:c1:94:30:47:bf:41:b6:63:7a:6a:bd:f9:60:66:07:87:21: 93:d0:36:af -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn539JJ77yAEKoB04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh ZGQwMB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk MDMzNTc3YWMtOGM2Ny00MDg0LWIzZWMtZTdkOTk2ZjcxZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHiajgIq9QIPBEZ3ZpQFmMB5UqVqBBUTeGwW eSAIM9Y9NbD8yWZqEaqgBiFCx1FwvLhzjsgAcPrzhK3q66UOqhy79n8CUgZxZU3U pwICkPsh0hDoZybLO6l/MnLBzlBUjNm4/HEEpJ6rynAQKUWOhAf5YPROeSqYR96G Wkz1A2p9LFENtkXu9vX0Yp0qy8VzfuND5zO+Xg1P7kw8PWHZ5VhoUzcXnlbtBkd5 uZl0sD9ORXm+z2M3obwpQ9wmxM05UFq3slzbnIGg4yi0WkMiKEcUih1q7tT+vTYp 1fb15Gan1/asOauIumnTg4Eo44IwBKs7yOj2bB/2wOppB8xfPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPVChYlEpOFCKqdt/gCqS+TNBktUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvZGZhMTNjYTItOGE4Ny0z YjM4LTk3MDYtMTMyYWUzZjY2MzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4 NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2 YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73ACJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEtwixXFnrYfyvnkFrrS0CHDQwfiBUDS1Djlf4qe+1yoYfvSIHLc uwZiUrwvsntieNVztEVJ96E3x6jEsP1AMkWa+t2keq9pvjEHi2sKHQyGOiUd0Azv ZotbXTCoy5bDiuRcTFw34/n1E+Q7qb9+ZKxU9cMJwMtMYSVxZysVvxq9J0GFQsOQ Lc79gbvBFLE+V+xiD5THl6ZllKcZaG/K31Tz4IoljJcsiz0mc2cefpv6MTUDkwnS lcRlFCzDuSbiQcEfuP4c1BatDPAjGQrcxYttVpLGCJlyEUvIjImUCECnkr/wpGYO 4LFFcznBlDBHv0G2Y3pqvflgZgeHIZPQNq8= -----END CERTIFICATE-----Generated at Tue Jun 17 07:15:46 2025 by rpki-client