$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/f8908e78-f05a-376c-96cc-e41fc7925ad0.roa File: f8908e78-f05a-376c-96cc-e41fc7925ad0.roa (raw, json) Hash identifier: G0GztDmWk5USHk3gv4QVnUkQXaeAhEZe/Tf+bopzBeg= Subject key identifier: 92:0C:9C:29:8C:6A:E0:E6:1E:0A:27:1F:B7:C6:3C:26:04:50:45:A8 Certificate issuer: /CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080 Certificate serial: 010D0C9F4328584940394DBA069DE78033E6BB00 Authority key identifier: 33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/f8908e78-f05a-376c-96cc-e41fc7925ad0.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 64289 IP address blocks: 2602:2ea::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:4d:ba:06:9d:e7:80:33:e6:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=3253f850-fb6f-4eea-b604-9645911405e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e1:fd:2b:3e:61:8b:fa:58:39:e0:bb:9b:51: 2f:e6:05:80:e3:3d:c1:bf:0d:62:4e:7c:27:52:05: 71:e8:41:7f:71:b0:1b:d1:3a:7e:29:e2:86:e7:52: 53:61:01:e5:36:d9:28:b7:9b:66:ee:1e:35:60:43: bd:83:f0:ff:36:69:91:87:31:73:96:0c:3c:b6:af: f0:ee:91:ab:20:ed:c4:b2:62:27:5c:a9:83:93:08: 0a:2b:41:2a:5e:6b:2b:bc:ed:56:79:1b:d2:bb:fb: f8:38:bc:b4:eb:8d:54:01:da:b0:8f:90:a5:9e:4d: d0:18:c4:5e:ad:14:52:85:63:f8:d7:9c:01:1a:9f: ee:95:13:1a:cc:6e:d4:79:32:27:6a:01:a5:e6:75: ad:38:32:24:c1:01:50:da:51:d3:ef:29:f9:c5:50: 1d:1b:a9:74:29:fd:97:17:42:1b:2f:a7:10:d6:6f: ef:52:e3:9c:fd:ce:76:08:d1:17:08:11:42:13:1f: 0f:3c:99:bb:7c:d4:30:02:da:be:ab:a3:b6:a2:c3: 82:43:e9:68:aa:dd:21:e9:fe:88:e1:26:79:c8:b8: fa:86:a2:dd:73:15:e1:44:43:fa:4b:d7:3c:e1:8f: 12:35:cc:c7:25:60:1c:a3:0f:81:1b:13:e4:1c:e7: 71:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:0C:9C:29:8C:6A:E0:E6:1E:0A:27:1F:B7:C6:3C:26:04:50:45:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/f8908e78-f05a-376c-96cc-e41fc7925ad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl X509v3 Authority Key Identifier: keyid:33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer sbgp-ipAddrBlock: critical IPv6: 2602:2ea::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:5f:e8:11:e9:44:21:ab:4c:1b:54:a7:b4:f7:2c:85:7e:7e: 79:d7:82:23:b7:b0:47:1e:1d:b7:3f:1f:20:ea:fc:88:20:b0: 45:29:b7:f8:77:50:3d:2a:4d:7e:70:05:44:1a:65:1c:de:3c: 87:16:0f:9a:b2:ef:a6:6b:13:eb:2b:ab:77:ad:2b:1a:12:8e: e3:fc:06:f8:bd:36:ba:a4:e1:6d:59:c1:f2:22:86:eb:53:50: 84:c1:f6:61:eb:e6:80:99:14:24:ff:0c:6e:6b:7b:e6:66:d6: 7b:2b:f1:fe:25:11:2c:50:e4:33:ed:71:23:4e:49:ca:3d:2e: c0:73:7c:5f:f8:70:de:30:83:8b:f9:36:b6:2a:f0:3f:3f:3e: 22:d9:d7:de:05:3d:d7:a3:63:1e:28:a4:56:48:fc:e7:81:ec: a1:ed:69:4b:f6:bd:90:c1:60:5f:d0:0f:af:5b:56:ac:6c:80: c3:7d:f0:43:53:fd:a3:72:a8:9f:44:b6:ca:0a:cc:f4:d4:d3: 19:42:ee:5b:72:1c:a2:98:9d:0c:12:fd:46:75:83:73:6c:27: 17:78:3a:16:ca:a6:b6:36:7b:8d:19:08:bf:de:1b:ae:52:b2: 6c:98:a2:52:8f:a4:ef:51:44:b6:52:33:b3:08:ec:85:69:81: 1c:b5:7e:78 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOU26Bp3ngDPmuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIzYmMwN2QtNTRjNi00MTVmLTlkYzEtYzFhMjA5ZjJk MDgwMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk MzI1M2Y4NTAtZmI2Zi00ZWVhLWI2MDQtOTY0NTkxMTQwNWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuH9Kz5hi/pYOeC7m1Ev5gWA4z3Bvw1iTnwn UgVx6EF/cbAb0Tp+KeKG51JTYQHlNtkot5tm7h41YEO9g/D/NmmRhzFzlgw8tq/w 7pGrIO3EsmInXKmDkwgKK0EqXmsrvO1WeRvSu/v4OLy0641UAdqwj5Clnk3QGMRe rRRShWP415wBGp/ulRMazG7UeTInagGl5nWtODIkwQFQ2lHT7yn5xVAdG6l0Kf2X F0IbL6cQ1m/vUuOc/c52CNEXCBFCEx8PPJm7fNQwAtq+q6O2osOCQ+loqt0h6f6I 4SZ5yLj6hqLdcxXhREP6S9c84Y8SNczHJWAcow+BGxPkHOdxuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJIMnCmMauDmHgonH7fGPCYEUEWoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMjNi YzA3ZC01NGM2LTQxNWYtOWRjMS1jMWEyMDlmMmQwODAvZjg5MDhlNzgtZjA1YS0z NzZjLTk2Y2MtZTQxZmM3OTI1YWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTIzYmMwN2QtNTRjNi00MTVmLTlk YzEtYzFhMjA5ZjJkMDgwL2EyM2JjMDdkLTU0YzYtNDE1Zi05ZGMxLWMxYTIwOWYy ZDA4MC5jcmwwHwYDVR0jBBgwFoAUMw3RU/41EgfdV4opG2vmF9scWPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMjNiYzA3ZC01NGM2LTQxNWYtOWRjMS1jMWEy MDlmMmQwODAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgIC6gAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADpf6BHpRCGrTBtUp7T3LIV+fnnXgiO3sEceHbc/HyDq/IggsEUp t/h3UD0qTX5wBUQaZRzePIcWD5qy76ZrE+srq3etKxoSjuP8Bvi9Nrqk4W1ZwfIi hutTUITB9mHr5oCZFCT/DG5re+Zm1nsr8f4lESxQ5DPtcSNOSco9LsBzfF/4cN4w g4v5NrYq8D8/PiLZ194FPdejYx4opFZI/OeB7KHtaUv2vZDBYF/QD69bVqxsgMN9 8ENT/aNyqJ9EtsoKzPTU0xlC7ltyHKKYnQwS/UZ1g3NsJxd4OhbKprY2e40ZCL/e G65SsmyYolKPpO9RRLZSM7MI7IVpgRy1fng= -----END CERTIFICATE-----Generated at Sun Apr 27 12:07:48 2025 by rpki-client