$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/2879a075-4779-38e7-a71e-76910345c230.roa File: 2879a075-4779-38e7-a71e-76910345c230.roa (raw, json) Hash identifier: M4+bTG99Tko7zkoBQRCQo+gAuQsZR0Tx09YLyh1YmYw= Subject key identifier: 21:43:CD:A0:2D:3F:39:9E:24:13:00:7A:2A:31:CB:E7:B7:63:C2:4A Certificate issuer: /CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3 Certificate serial: 010D0C9F432858490CB170D59E55A38FF7BE7E20 Authority key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/2879a075-4779-38e7-a71e-76910345c230.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 16509 IP address blocks: 2602:f961::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:70:d5:9e:55:a3:8f:f7:be:7e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=b5b3d28a-22bf-44ad-814a-16a4d37cb255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:28:1a:72:61:58:17:f9:2e:f9:7c:72:75:63: ea:b3:96:e5:75:e0:46:f7:94:1e:b9:e9:7d:c1:60: e6:ac:9d:c0:99:c3:50:e9:b5:d8:f5:eb:4a:48:d5: ba:88:f7:39:6c:dd:7d:36:ed:ee:2f:e7:f3:36:39: 0e:05:2c:a3:e2:47:54:be:0c:2e:ff:0e:4a:61:5d: 74:61:41:65:ec:53:50:9f:12:28:ec:b8:86:38:51: d5:36:e4:63:26:34:e3:fc:e0:25:7e:33:75:a4:21: 42:a4:31:4f:94:9b:ba:91:c1:b8:e6:92:63:36:87: 70:c7:96:dd:6e:56:51:5d:1f:37:87:4d:40:fa:b6: 08:98:1d:61:fa:f1:59:7a:f5:9b:35:97:d2:c0:1c: 91:9b:06:34:d4:a6:34:3f:97:3a:7f:c8:a5:1e:fa: 88:2e:d4:dd:28:5f:89:b2:fb:60:13:83:6f:d8:bc: 6f:d6:10:75:3a:0d:84:74:bc:a8:82:22:f3:e4:69: a5:9f:77:a2:47:8f:6e:71:0e:50:a9:7a:f4:3d:55: fe:aa:bd:dc:61:b5:a0:8f:b8:ba:6f:1f:41:5b:f1: 51:1b:77:59:eb:1b:9a:f4:d6:88:8e:ac:b4:38:07: 91:77:84:db:a9:90:18:ca:6e:69:d1:bf:9b:07:f6: 62:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:43:CD:A0:2D:3F:39:9E:24:13:00:7A:2A:31:CB:E7:B7:63:C2:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/2879a075-4779-38e7-a71e-76910345c230.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl X509v3 Authority Key Identifier: keyid:92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f961::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:e9:5b:03:a6:3a:7d:ed:b1:46:67:ed:9b:68:33:42:87:4f: a1:ee:58:96:37:ed:d5:7b:f2:7f:b4:06:d2:55:86:86:f1:95: 89:82:e8:3f:fb:e5:41:4c:b5:1b:a6:05:59:23:3e:49:3a:d9: d0:5c:a2:07:79:4d:98:f5:5d:7f:40:50:47:bb:9b:1a:45:0b: d4:f0:20:9d:9f:e7:86:24:94:a6:4e:95:bc:e7:f2:fd:3d:f7: c3:50:71:13:54:e4:39:83:51:91:c2:3c:3c:c1:f9:58:72:3b: 28:c4:75:e7:ba:9d:06:32:ea:c1:c3:cb:96:e5:3a:eb:e7:a1: 1b:c3:23:eb:49:66:46:12:d0:ae:d7:0c:f8:eb:6e:52:ff:d2: 28:2c:ed:87:9d:06:c7:10:6b:b5:9d:18:6d:75:38:1b:ac:6c: 54:96:fa:b3:5e:bf:c5:82:12:46:c1:93:21:90:57:3c:b1:bc: 72:9e:54:76:e0:e7:51:83:ae:aa:da:cf:6a:35:50:b2:45:82: fc:ed:ad:06:7b:91:e6:8a:3f:2e:28:91:17:a2:5f:95:91:ff: 71:6e:e9:37:d8:96:39:86:dc:f3:09:ed:f6:2d:bb:69:9c:5b: fb:12:f2:f4:15:b3:fb:ad:29:0e:2d:fb:16:28:f0:3e:25:10: 66:e3:37:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkMsXDVnlWjj/e+fiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkYjQ1ZGItOGM5Mi00YjYxLWEzZDUtZjViYmI5OTNi ZGMzMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk YjViM2QyOGEtMjJiZi00NGFkLTgxNGEtMTZhNGQzN2NiMjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7igacmFYF/ku+XxydWPqs5bldeBG95Qeuel9 wWDmrJ3AmcNQ6bXY9etKSNW6iPc5bN19Nu3uL+fzNjkOBSyj4kdUvgwu/w5KYV10 YUFl7FNQnxIo7LiGOFHVNuRjJjTj/OAlfjN1pCFCpDFPlJu6kcG45pJjNodwx5bd blZRXR83h01A+rYImB1h+vFZevWbNZfSwByRmwY01KY0P5c6f8ilHvqILtTdKF+J svtgE4Nv2Lxv1hB1Og2EdLyogiLz5Gmln3eiR49ucQ5QqXr0PVX+qr3cYbWgj7i6 bx9BW/FRG3dZ6xua9NaIjqy0OAeRd4TbqZAYym5p0b+bB/ZiXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCFDzaAtPzmeJBMAeioxy+e3Y8JKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNWRi NDVkYi04YzkyLTRiNjEtYTNkNS1mNWJiYjk5M2JkYzMvMjg3OWEwNzUtNDc3OS0z OGU3LWE3MWUtNzY5MTAzNDVjMjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjVkYjQ1ZGItOGM5Mi00YjYxLWEz ZDUtZjViYmI5OTNiZGMzL2I1ZGI0NWRiLThjOTItNGI2MS1hM2Q1LWY1YmJiOTkz YmRjMy5jcmwwHwYDVR0jBBgwFoAUkn3XcB+0+u5+Zl1mjwwJi7KTpGAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNWRiNDVkYi04YzkyLTRiNjEtYTNkNS1mNWJi Yjk5M2JkYzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5YQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA3pWwOmOn3tsUZn7ZtoM0KHT6HuWJY37dV78n+0BtJVhobxlYmC 6D/75UFMtRumBVkjPkk62dBcogd5TZj1XX9AUEe7mxpFC9TwIJ2f54YklKZOlbzn 8v0998NQcRNU5DmDUZHCPDzB+VhyOyjEdee6nQYy6sHDy5blOuvnoRvDI+tJZkYS 0K7XDPjrblL/0igs7YedBscQa7WdGG11OBusbFSW+rNev8WCEkbBkyGQVzyxvHKe VHbg51GDrqraz2o1ULJFgvztrQZ7keaKPy4okReiX5WR/3Fu6TfYljmG3PMJ7fYt u2mcW/sS8vQVs/utKQ4t+xYo8D4lEGbjN1w= -----END CERTIFICATE-----Generated at Sat Apr 26 15:58:40 2025 by rpki-client