$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/b8428946-1e88-3bc3-9f06-263a19c73513.roa File: b8428946-1e88-3bc3-9f06-263a19c73513.roa (raw, json) Hash identifier: Rn3E9Q/jDAn+X/toHTY+R/KSmDz2CKVMfzQbucPcNnk= Subject key identifier: B8:D6:10:7C:61:E6:85:76:77:DD:AC:37:98:5A:AA:65:19:BC:7E:A7 Certificate issuer: /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Certificate serial: 010D0C9F43285849A61F4897F3CAEF0920EF3800 Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/b8428946-1e88-3bc3-9f06-263a19c73513.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 206018 IP address blocks: 2602:fc09:f70::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:48:97:f3:ca:ef:09:20:ef:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=c677e8d5-8837-4586-a646-7c32068c3945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dd:5b:eb:45:b5:fc:61:f4:b8:cb:dd:4b:8e: a3:00:5e:68:f2:a5:92:07:1d:1c:da:ef:57:32:ef: b4:67:5f:d8:5d:42:6e:3c:04:e0:37:f0:80:1b:76: c0:c8:46:96:23:f9:90:98:9d:1c:ca:1e:7b:4f:76: 7f:c6:f9:2e:43:71:99:c4:c1:28:69:3b:7c:b8:e0: d9:34:6a:79:74:3c:b6:f6:f5:4b:e5:3f:f2:b3:74: 7b:c3:76:ce:e6:7d:44:23:ff:bf:d1:da:5f:b9:68: 66:7e:5a:cb:2e:a0:71:02:72:97:1f:04:51:2b:f6: 23:59:6d:db:8a:c4:0b:a5:07:43:f5:f6:32:97:8f: af:9c:64:e5:00:8a:30:46:27:f4:d1:86:32:7d:4f: 82:d9:78:08:fb:20:a4:6c:ed:9a:67:2d:bb:92:98: 10:17:3b:7a:c4:33:c9:c2:d5:62:8d:e9:50:bd:6b: 66:2a:33:87:1b:4c:6c:d3:b1:c2:2b:11:4b:b3:4f: 85:52:19:3d:f8:14:b5:6b:d3:e9:e9:ce:30:c3:c1: ae:d8:f3:46:84:10:05:69:42:75:c5:ce:1b:ce:89: 5d:f7:29:c1:98:b5:7a:ec:82:99:09:81:12:ed:d3: 58:b5:19:b9:84:c2:3b:66:0c:54:0d:bb:aa:26:1c: bb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D6:10:7C:61:E6:85:76:77:DD:AC:37:98:5A:AA:65:19:BC:7E:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/b8428946-1e88-3bc3-9f06-263a19c73513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl X509v3 Authority Key Identifier: keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc09:f70::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:be:f2:ed:f9:32:7a:cd:30:70:d7:29:4d:97:45:76:cd:65: 26:cf:39:57:fb:da:49:44:66:8b:fc:eb:67:aa:d1:51:5e:83: a3:fd:45:b1:37:7f:25:a5:72:2a:28:63:b7:fb:dd:dc:32:98: df:ad:ab:3d:ac:6e:fb:6a:73:b6:03:75:3b:65:8c:5d:27:f2: 3b:4a:1f:b4:8f:2b:53:4f:d2:80:88:1c:82:08:b2:49:b7:fc: bf:27:1a:c5:b2:42:e7:82:4e:1f:d4:c3:47:38:cb:e7:12:84: 63:1e:b1:4d:f3:3b:09:c9:1b:ce:85:bb:d1:09:1c:05:92:98: 53:33:72:6b:0a:3c:d3:ec:6c:54:bc:9c:3d:db:dc:7f:4d:7a: 83:b4:33:41:c1:d8:10:65:59:a6:ed:26:f6:99:7a:8d:9c:58: cd:78:7e:88:8c:ca:86:ce:42:91:5e:3e:da:6b:29:64:18:e0: 10:3d:eb:c7:13:b3:98:07:ee:c6:95:b0:af:f6:a3:e9:c0:f9: c5:c5:d7:01:bb:ab:25:1c:4b:a4:c6:fa:15:5a:98:7b:32:3b: d0:ba:ed:23:cb:b3:2e:b8:b0:ca:e5:8a:ca:6a:0f:e6:a7:b7: 11:9e:db:51:fd:74:6d:46:f1:c5:d1:38:95:47:83:f8:f3:8d: bb:15:45:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmmH0iX88rvCSDvOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlN2I5NmQtMGFhNS00MDJhLWIyZmUtMzM3ZDdjMjA3 ZWVlMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk YzY3N2U4ZDUtODgzNy00NTg2LWE2NDYtN2MzMjA2OGMzOTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0d1b60W1/GH0uMvdS46jAF5o8qWSBx0c2u9X Mu+0Z1/YXUJuPATgN/CAG3bAyEaWI/mQmJ0cyh57T3Z/xvkuQ3GZxMEoaTt8uODZ NGp5dDy29vVL5T/ys3R7w3bO5n1EI/+/0dpfuWhmflrLLqBxAnKXHwRRK/YjWW3b isQLpQdD9fYyl4+vnGTlAIowRif00YYyfU+C2XgI+yCkbO2aZy27kpgQFzt6xDPJ wtVijelQvWtmKjOHG0xs07HCKxFLs0+FUhk9+BS1a9Pp6c4ww8Gu2PNGhBAFaUJ1 xc4bzold9ynBmLV67IKZCYES7dNYtRm5hMI7ZgxUDbuqJhy7XQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLjWEHxh5oV2d92sN5haqmUZvH6nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3 Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdkN2MyMDdlZWUvYjg0Mjg5NDYtMWU4OC0z YmMzLTlmMDYtMjYzYTE5YzczNTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlN2I5NmQtMGFhNS00MDJhLWIy ZmUtMzM3ZDdjMjA3ZWVlLzUyZTdiOTZkLTBhYTUtNDAyYS1iMmZlLTMzN2Q3YzIw N2VlZS5jcmwwHwYDVR0jBBgwFoAUm2pshpw0IMSPY6IRpANBGtJdnzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdk N2MyMDdlZWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL8CQ9w MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC++8u35MnrNMHDXKU2XRXbNZSbPOVf72klEZov862eq0VFeg6P9 RbE3fyWlciooY7f73dwymN+tqz2sbvtqc7YDdTtljF0n8jtKH7SPK1NP0oCIHIII skm3/L8nGsWyQueCTh/Uw0c4y+cShGMesU3zOwnJG86Fu9EJHAWSmFMzcmsKPNPs bFS8nD3b3H9NeoO0M0HB2BBlWabtJvaZeo2cWM14foiMyobOQpFePtprKWQY4BA9 68cTs5gH7saVsK/2o+nA+cXF1wG7qyUcS6TG+hVamHsyO9C67SPLsy64sMrlispq D+antxGe21H9dG1G8cXROJVHg/jzjbsVRb0= -----END CERTIFICATE-----Generated at Fri May 2 12:06:03 2025 by rpki-client