$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/8c677012-77d5-3579-a76a-b2ec649d5fec.roa File: 8c677012-77d5-3579-a76a-b2ec649d5fec.roa (raw, json) Hash identifier: cZ2dWXFPJfYQ+OgHYjmf2uGQVZKjb2sIHVoWHDVsBQw= Subject key identifier: 89:6C:D4:08:97:D2:78:11:7A:AA:C2:FB:6F:31:BF:2D:39:41:4A:0E Certificate issuer: /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d Certificate serial: 010D0C9F4328584953C41871EE1B8E520E2D3380 Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/8c677012-77d5-3579-a76a-b2ec649d5fec.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 14618 IP address blocks: 2602:fa28:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:18:71:ee:1b:8e:52:0e:2d:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=f579ae0f-f2f1-4a57-954b-8bbc296a8b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:78:07:83:c4:65:3c:8d:29:9a:09:41:94:85: a2:33:ae:b5:ae:01:bc:d9:58:14:24:3c:3e:30:3a: 57:95:46:65:99:73:ba:54:6d:83:88:4d:34:b7:6d: cb:49:6b:f7:fc:0f:76:e0:bc:a0:dd:69:f0:b7:ff: 46:4f:76:15:50:3c:e3:89:e6:cf:26:4d:9c:06:5c: 95:3f:6f:06:21:5c:81:74:e0:d9:cd:6a:b4:7e:11: be:a4:a5:3a:5d:a5:62:18:16:07:97:2c:8a:c3:ee: f5:88:85:d5:a5:36:1b:45:e8:87:9e:60:82:9f:1f: 9f:b8:e9:f0:47:cf:3e:5c:89:ea:b1:36:25:ad:71: 03:36:7d:05:2f:ad:82:79:cf:d5:f4:90:0d:15:79: aa:eb:3b:a6:af:db:9a:c1:be:62:a6:54:08:54:4a: 6b:83:a8:85:73:58:19:15:8b:a1:6e:f8:77:a9:43: d1:8b:5f:f3:ab:5d:d4:2d:1c:a3:89:ee:ac:4c:c4: 33:b5:b3:e3:b4:6b:63:c0:14:32:0b:16:5b:dc:ad: bd:d0:cc:17:ec:11:47:a2:e2:c7:17:a3:d3:d6:c1: 87:fd:49:f1:e4:bb:a1:4c:bb:e8:12:99:25:f3:56: d9:df:a7:54:c2:3a:ab:6a:d7:1f:17:81:e4:41:08: 53:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6C:D4:08:97:D2:78:11:7A:AA:C2:FB:6F:31:BF:2D:39:41:4A:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/8c677012-77d5-3579-a76a-b2ec649d5fec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl X509v3 Authority Key Identifier: keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa28:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:b5:88:4a:1c:ea:53:e9:9a:6d:1a:3a:fc:86:6d:42:5c:63: 75:e2:34:78:27:7b:94:d2:72:ba:de:14:62:f1:ff:a6:bf:83: 31:43:28:d7:4d:54:f4:06:a7:f7:f4:69:65:b8:68:84:e1:27: 7e:37:43:4c:7c:80:fc:e7:18:61:8f:1f:e4:c1:33:90:74:f4: c3:58:5b:0d:bc:55:44:58:39:b1:93:7b:ec:7c:51:b8:cf:75: be:8c:35:04:5a:c8:0f:96:c2:f9:a0:37:bd:33:a0:88:a3:0e: 35:7e:36:8b:5e:03:16:4f:26:e2:f9:bd:65:55:ce:fe:c1:f4: c7:6e:bb:24:6f:86:af:c3:20:96:e8:2c:b7:9e:e4:3f:f5:13: 34:f4:19:e9:60:7f:aa:fd:a4:3e:52:38:d1:ae:bc:e9:ae:a6: 73:c0:6a:0f:42:28:ca:bf:a0:e9:02:d2:21:54:a3:06:5b:c2: 90:08:83:ca:9b:0a:6b:21:9b:ec:e8:83:8e:cd:d6:27:95:d8: e4:19:81:25:d4:8c:3f:5f:1e:ee:7b:d2:c5:9f:17:47:9e:b9: 26:55:04:82:03:5a:f3:d2:6b:8e:ed:da:31:49:bc:c0:77:cf: a6:94:8b:6c:fb:35:3a:5a:72:83:ec:c7:16:78:d6:fc:80:29: ff:b9:c1:9c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElTxBhx7huOUg4tM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM2MzBmODItMTY5Yy00YjAzLWFkNDItYWE2ZjViNzFk OTFkMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjU3OWFlMGYtZjJmMS00YTU3LTk1NGItOGJiYzI5NmE4YjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XgHg8RlPI0pmglBlIWiM661rgG82VgUJDw+ MDpXlUZlmXO6VG2DiE00t23LSWv3/A924Lyg3Wnwt/9GT3YVUDzjiebPJk2cBlyV P28GIVyBdODZzWq0fhG+pKU6XaViGBYHlyyKw+71iIXVpTYbReiHnmCCnx+fuOnw R88+XInqsTYlrXEDNn0FL62Cec/V9JANFXmq6zumr9uawb5iplQIVEprg6iFc1gZ FYuhbvh3qUPRi1/zq13ULRyjie6sTMQztbPjtGtjwBQyCxZb3K290MwX7BFHouLH F6PT1sGH/Unx5LuhTLvoEpkl81bZ36dUwjqratcfF4HkQQhTOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIls1AiX0ngReqrC+28xvy05QUoOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzYz MGY4Mi0xNjljLTRiMDMtYWQ0Mi1hYTZmNWI3MWQ5MWQvOGM2NzcwMTItNzdkNS0z NTc5LWE3NmEtYjJlYzY0OWQ1ZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTM2MzBmODItMTY5Yy00YjAzLWFk NDItYWE2ZjViNzFkOTFkL2EzNjMwZjgyLTE2OWMtNGIwMy1hZDQyLWFhNmY1Yjcx ZDkxZC5jcmwwHwYDVR0jBBgwFoAUjLsSDojg5BDceZoRzF7g6sFADkYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzYzMGY4Mi0xNjljLTRiMDMtYWQ0Mi1hYTZm NWI3MWQ5MWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6KAAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEi1iEoc6lPpmm0aOvyGbUJcY3XiNHgne5TScrreFGLx/6a/gzFD KNdNVPQGp/f0aWW4aIThJ343Q0x8gPznGGGPH+TBM5B09MNYWw28VURYObGTe+x8 UbjPdb6MNQRayA+WwvmgN70zoIijDjV+NoteAxZPJuL5vWVVzv7B9MduuyRvhq/D IJboLLee5D/1EzT0Gelgf6r9pD5SONGuvOmupnPAag9CKMq/oOkC0iFUowZbwpAI g8qbCmshm+zog47N1ieV2OQZgSXUjD9fHu570sWfF0eeuSZVBIIDWvPSa47t2jFJ vMB3z6aUi2z7NTpacoPsxxZ41vyAKf+5wZw= -----END CERTIFICATE-----Generated at Sat Apr 26 13:15:49 2025 by rpki-client