$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/5a6c99b5-0f9c-330e-91eb-b2bddf673fa3.roa File: 5a6c99b5-0f9c-330e-91eb-b2bddf673fa3.roa (raw, json) Hash identifier: Di1O+4ZieWkuvHNlyfagocGlZ/VZK4GZNW4Zn6NOfSg= Subject key identifier: 48:42:FD:C7:A1:D1:EE:11:61:A1:76:7A:7C:B5:8E:35:EA:FB:C6:07 Certificate issuer: /CN=c057d9a7-8f3f-4c97-9503-e2a936c27c7b Certificate serial: 010D0C9F432858491ED6E119903C08EEAA096480 Authority key identifier: 5F:FC:6F:16:2F:93:08:ED:CA:F2:1D:62:E6:3C:59:3D:85:58:13:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/5a6c99b5-0f9c-330e-91eb-b2bddf673fa3.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 3653 IP address blocks: 2602:fc2d::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:e1:19:90:3c:08:ee:aa:09:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c057d9a7-8f3f-4c97-9503-e2a936c27c7b Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=5c62b421-7965-45c0-900c-394cd7507a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5e:bf:1a:e0:ae:64:1a:e7:cf:83:9e:32:ac: 27:b4:6f:f4:bb:14:da:2b:e6:e5:a3:32:04:cc:5d: 26:59:b9:c9:10:f2:dd:79:5f:eb:ab:4e:30:f8:65: 25:42:49:ec:bb:53:43:ec:f6:cb:c6:75:ba:86:04: be:c1:1c:9f:78:ef:0f:e8:17:8c:ad:bb:1b:b2:22: 8f:39:94:4e:ad:34:01:04:cf:84:d6:02:0f:9f:91: 64:a8:ee:49:47:35:c8:06:e0:f5:03:f3:37:5a:81: 0a:eb:55:8e:2c:97:2f:2d:a3:ee:fa:c3:a3:0d:3e: 08:cb:ec:43:bc:50:82:58:e9:0f:ca:11:02:eb:87: 92:d4:d8:6d:02:39:40:65:66:ee:4e:42:23:2b:86: 8d:ff:ba:38:9b:55:50:53:3b:d4:28:2b:ea:03:b3: 27:e2:04:be:cd:32:c8:5a:d1:67:30:e6:18:26:c3: c7:dd:4e:e2:2d:82:57:08:4f:9a:e9:31:17:86:62: 4b:04:91:e1:dd:7c:99:fa:29:c5:6c:da:8a:dd:0e: 9d:7d:e6:b6:ac:0c:05:57:5b:ad:86:34:84:bd:1e: b0:57:1b:80:20:49:80:76:0b:5f:8a:2c:ae:f4:44: d0:e9:d0:a0:70:71:52:d4:61:fa:94:f5:04:2e:3d: 89:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:42:FD:C7:A1:D1:EE:11:61:A1:76:7A:7C:B5:8E:35:EA:FB:C6:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/5a6c99b5-0f9c-330e-91eb-b2bddf673fa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl X509v3 Authority Key Identifier: keyid:5F:FC:6F:16:2F:93:08:ED:CA:F2:1D:62:E6:3C:59:3D:85:58:13:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc2d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:07:b8:55:42:56:1a:1e:5a:48:7f:12:07:5f:f5:70:6f:52: bd:32:11:b0:b7:dc:81:5b:04:bb:42:2e:5f:6a:58:d1:5c:1e: 58:80:ba:0e:2d:11:e0:9b:5e:a2:9c:f3:e6:1c:18:aa:28:7c: 46:0a:22:b1:18:10:de:54:19:54:45:d0:05:2b:47:89:23:87: a9:bf:bc:95:17:19:7b:af:a1:86:4a:5b:ed:72:55:27:61:0d: 9e:ef:e2:b6:5b:66:af:05:5d:de:3b:18:b4:05:9e:8e:80:d5: b2:82:bf:1a:82:32:91:1a:45:7c:e3:1f:7f:7e:33:86:2c:33: b1:f7:57:29:89:ab:01:3b:69:07:98:7d:60:10:99:e3:09:f6: 36:d0:9c:56:af:ea:e1:53:7f:eb:0d:6e:ff:f0:a2:af:9f:ae: 20:bb:f2:22:de:6c:68:59:b5:bc:cf:88:91:db:0e:70:f8:bf: b6:79:bf:6f:c3:a2:6c:96:c8:dc:ae:4c:c2:57:db:d1:70:c4: 1b:fa:66:71:29:61:f8:ee:b6:97:d0:bd:f6:ed:8e:d1:9d:56: b9:d0:b4:af:84:36:ca:d4:fc:a8:f8:38:1a:22:f1:57:8b:90: 5f:22:44:c7:40:bc:8f:19:cf:d2:8a:76:8c:e7:56:71:57:52: 67:44:05:66 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEke1uEZkDwI7qoJZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA1N2Q5YTctOGYzZi00Yzk3LTk1MDMtZTJhOTM2YzI3 YzdiMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk NWM2MmI0MjEtNzk2NS00NWMwLTkwMGMtMzk0Y2Q3NTA3YTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl16/GuCuZBrnz4OeMqwntG/0uxTaK+blozIE zF0mWbnJEPLdeV/rq04w+GUlQknsu1ND7PbLxnW6hgS+wRyfeO8P6BeMrbsbsiKP OZROrTQBBM+E1gIPn5FkqO5JRzXIBuD1A/M3WoEK61WOLJcvLaPu+sOjDT4Iy+xD vFCCWOkPyhEC64eS1NhtAjlAZWbuTkIjK4aN/7o4m1VQUzvUKCvqA7Mn4gS+zTLI WtFnMOYYJsPH3U7iLYJXCE+a6TEXhmJLBJHh3XyZ+inFbNqK3Q6dfea2rAwFV1ut hjSEvR6wVxuAIEmAdgtfiiyu9ETQ6dCgcHFS1GH6lPUELj2JkQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEhC/ceh0e4RYaF2eny1jjXq+8YHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDU3 ZDlhNy04ZjNmLTRjOTctOTUwMy1lMmE5MzZjMjdjN2IvNWE2Yzk5YjUtMGY5Yy0z MzBlLTkxZWItYjJiZGRmNjczZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzA1N2Q5YTctOGYzZi00Yzk3LTk1 MDMtZTJhOTM2YzI3YzdiL2MwNTdkOWE3LThmM2YtNGM5Ny05NTAzLWUyYTkzNmMy N2M3Yi5jcmwwHwYDVR0jBBgwFoAUX/xvFi+TCO3K8h1i5jxZPYVYE2QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDU3ZDlhNy04ZjNmLTRjOTctOTUwMy1lMmE5 MzZjMjdjN2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8LQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcQe4VUJWGh5aSH8SB1/1cG9SvTIRsLfcgVsEu0IuX2pY0VweWIC6 Di0R4Jteopzz5hwYqih8RgoisRgQ3lQZVEXQBStHiSOHqb+8lRcZe6+hhkpb7XJV J2ENnu/itltmrwVd3jsYtAWejoDVsoK/GoIykRpFfOMff34zhiwzsfdXKYmrATtp B5h9YBCZ4wn2NtCcVq/q4VN/6w1u//Cir5+uILvyIt5saFm1vM+IkdsOcPi/tnm/ b8OibJbI3K5Mwlfb0XDEG/pmcSlh+O62l9C99u2O0Z1WudC0r4Q2ytT8qPg4GiLx V4uQXyJEx0C8jxnP0op2jOdWcVdSZ0QFZg== -----END CERTIFICATE-----Generated at Tue Apr 29 23:27:52 2025 by rpki-client