$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/85f2ea3c-4e52-3222-94c6-afd6e810592b.roa File: 85f2ea3c-4e52-3222-94c6-afd6e810592b.roa (raw, json) Hash identifier: XpHurLnKutzfx3ErNULly/u+3fmDt+bWf4m2PB72/Ks= Subject key identifier: E2:1A:E8:EA:E9:6C:AB:65:0B:A7:43:4E:AC:51:AA:1F:18:20:C1:CF Certificate issuer: /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d Certificate serial: 010D0C9F4328584950F96983BF0926B67D9D9AC0 Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/85f2ea3c-4e52-3222-94c6-afd6e810592b.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 16509 IP address blocks: 2602:fa28::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:69:83:bf:09:26:b6:7d:9d:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=3c9b0b3b-1ac7-4843-bfe7-ad01d261231e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4e:9a:05:eb:ac:60:51:a0:d1:24:07:e6:96: d9:0d:e0:86:16:7e:82:d7:fd:06:ff:ed:0c:be:e0: 29:5c:90:a1:12:ad:22:c2:cc:95:4f:a9:5a:1f:5a: 17:29:38:e9:c6:f3:9c:22:2a:9c:6c:c9:8f:5a:e9: c5:8d:a9:10:13:72:00:34:5f:1c:17:16:ff:4d:21: f4:d0:ff:ab:81:bb:51:90:d2:1d:af:3f:00:76:9d: c2:74:e8:0f:6f:dd:9e:26:e0:bf:90:f4:2d:bf:95: 82:12:68:96:0a:1c:24:2b:39:4a:33:c2:52:43:99: fe:1d:f7:d0:9a:b7:e4:2f:4c:bd:9b:3c:d9:7d:ce: 3f:44:45:16:c8:ff:7d:24:4e:98:fc:1f:4a:f9:9c: ba:f4:b0:5e:96:d0:24:81:d1:73:db:95:c3:a2:8f: c0:8f:7a:33:b2:b9:b8:97:eb:f5:3c:76:e4:a8:8d: f7:34:c4:51:fb:41:70:72:73:4a:71:e6:c6:dd:b2: 93:98:ac:b6:cc:1e:1e:e4:7a:01:be:45:e0:7a:c3: 37:95:78:8d:74:1e:a4:1a:d4:73:3c:a1:0d:8f:18: 07:4d:4b:94:b5:0c:82:72:ca:2a:99:ae:32:1f:11: 0f:25:d9:04:f2:93:fb:e2:c6:0f:a9:14:2b:5c:5d: e6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1A:E8:EA:E9:6C:AB:65:0B:A7:43:4E:AC:51:AA:1F:18:20:C1:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/85f2ea3c-4e52-3222-94c6-afd6e810592b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl X509v3 Authority Key Identifier: keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa28::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:ed:69:30:14:a7:c4:e5:14:4f:8c:45:78:35:c1:51:2a:54: 4e:4d:85:84:b4:aa:34:44:b4:29:83:a5:ba:bc:8e:4f:71:e8: 7f:61:c8:5c:b1:3a:f6:5a:20:e5:5f:cb:19:c4:57:88:b5:e7: 1b:fc:d7:d5:c7:29:79:eb:c9:9e:33:1e:9b:ee:08:d9:31:5e: 04:66:e4:d2:a8:09:5c:f0:45:cb:39:18:12:d8:d9:c7:17:22: 5a:bc:c5:25:fb:d2:55:b9:ff:28:6a:36:d2:a2:0c:45:24:91: 80:e1:2a:19:3b:ce:00:77:a1:4a:66:60:25:4e:7d:e5:e8:45: c9:97:fb:a2:0a:15:70:1c:66:4b:ca:70:20:ba:27:b9:0b:4e: cf:25:b6:88:69:8d:e7:fc:e7:d7:11:43:39:19:0d:2f:58:f5: dc:3d:fb:ee:bb:08:5f:87:df:93:6d:8c:17:da:61:ad:27:b3: 12:49:d1:d4:e5:9d:73:a5:d6:42:bc:0e:b1:f8:9f:4b:97:57: ab:ba:4e:7b:ed:aa:02:79:6b:74:fd:10:36:10:5d:97:be:83: 86:74:9f:29:78:47:ca:15:50:36:a8:e5:d5:1e:85:41:18:47: 47:98:89:fd:4e:50:09:73:b6:3e:c3:c4:eb:da:55:0e:5b:33: db:0a:33:a0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElQ+WmDvwkmtn2dmsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM2MzBmODItMTY5Yy00YjAzLWFkNDItYWE2ZjViNzFk OTFkMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk M2M5YjBiM2ItMWFjNy00ODQzLWJmZTctYWQwMWQyNjEyMzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp06aBeusYFGg0SQH5pbZDeCGFn6C1/0G/+0M vuApXJChEq0iwsyVT6laH1oXKTjpxvOcIiqcbMmPWunFjakQE3IANF8cFxb/TSH0 0P+rgbtRkNIdrz8Adp3CdOgPb92eJuC/kPQtv5WCEmiWChwkKzlKM8JSQ5n+HffQ mrfkL0y9mzzZfc4/REUWyP99JE6Y/B9K+Zy69LBeltAkgdFz25XDoo/Aj3ozsrm4 l+v1PHbkqI33NMRR+0FwcnNKcebG3bKTmKy2zB4e5HoBvkXgesM3lXiNdB6kGtRz PKENjxgHTUuUtQyCcsoqma4yHxEPJdkE8pP74sYPqRQrXF3mFwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOIa6OrpbKtlC6dDTqxRqh8YIMHPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzYz MGY4Mi0xNjljLTRiMDMtYWQ0Mi1hYTZmNWI3MWQ5MWQvODVmMmVhM2MtNGU1Mi0z MjIyLTk0YzYtYWZkNmU4MTA1OTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTM2MzBmODItMTY5Yy00YjAzLWFk NDItYWE2ZjViNzFkOTFkL2EzNjMwZjgyLTE2OWMtNGIwMy1hZDQyLWFhNmY1Yjcx ZDkxZC5jcmwwHwYDVR0jBBgwFoAUjLsSDojg5BDceZoRzF7g6sFADkYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzYzMGY4Mi0xNjljLTRiMDMtYWQ0Mi1hYTZm NWI3MWQ5MWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6KAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAaO1pMBSnxOUUT4xFeDXBUSpUTk2FhLSqNES0KYOluryOT3Hof2HI XLE69log5V/LGcRXiLXnG/zX1ccpeevJnjMem+4I2TFeBGbk0qgJXPBFyzkYEtjZ xxciWrzFJfvSVbn/KGo20qIMRSSRgOEqGTvOAHehSmZgJU595ehFyZf7ogoVcBxm S8pwILonuQtOzyW2iGmN5/zn1xFDORkNL1j13D377rsIX4ffk22MF9phrSezEknR 1OWdc6XWQrwOsfifS5dXq7pOe+2qAnlrdP0QNhBdl76DhnSfKXhHyhVQNqjl1R6F QRhHR5iJ/U5QCXO2PsPE69pVDlsz2wozoA== -----END CERTIFICATE-----Generated at Sat Apr 26 15:52:47 2025 by rpki-client