$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/a50faf7e-80ed-3540-8863-2e3533723c21.roa File: a50faf7e-80ed-3540-8863-2e3533723c21.roa (raw, json) Hash identifier: Z+YdoijW0Z7uQbTmKabLlKK+f/UUn532UPiYVmGaXTY= Subject key identifier: 1A:1D:8B:FC:D8:13:35:BD:53:C7:61:00:3C:06:73:22:E5:3A:05:1A Certificate issuer: /CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Certificate serial: 010D0C9F432858499AF48166C8995B33430A3E80 Authority key identifier: 2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/a50faf7e-80ed-3540-8863-2e3533723c21.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 3356 IP address blocks: 2602:814:b000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:81:66:c8:99:5b:33:43:0a:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=81976d00-6747-4f55-a61e-09e0b693c492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:30:ef:93:86:27:f3:02:44:e1:1f:37:28:10: c0:72:b6:07:34:66:81:04:aa:eb:d9:42:dd:5f:36: 5c:71:b1:69:4f:54:50:94:57:ae:aa:4b:9c:32:5d: 7b:cf:6e:47:87:32:44:e6:83:b5:5a:d7:89:75:ed: 2d:20:47:67:42:e8:89:41:12:40:b6:cc:6b:1c:77: 67:be:b0:e2:51:31:22:76:12:2e:f5:70:7c:fa:1a: 3e:ef:d2:65:5a:45:c7:10:55:e4:fd:52:7d:4d:a9: 51:66:b0:d1:de:fe:8a:b1:9f:c9:eb:b4:01:7a:0c: 2d:ce:29:b2:61:91:90:c9:33:9e:f0:4c:7a:62:4a: 6f:46:cb:87:25:9c:e2:ca:ed:b0:4a:53:47:94:dc: 88:07:69:e5:6d:ce:9c:25:fd:7e:5a:5c:dd:3d:2f: c3:32:84:f8:c3:14:0c:e5:71:6f:6c:75:5f:14:a1: 22:6b:cf:ab:ea:d7:2f:3b:29:9c:01:7b:85:a1:09: 64:1a:37:32:5f:e3:64:00:b1:c7:44:28:6b:e0:8e: c1:d3:8a:68:42:83:45:fe:22:1c:ca:1c:ce:b3:72: 15:e0:c0:55:cd:43:be:bf:32:9e:65:73:dc:b9:22: 40:6c:95:6f:d1:04:ab:55:06:c1:30:ea:78:cc:d0: 66:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1D:8B:FC:D8:13:35:BD:53:C7:61:00:3C:06:73:22:E5:3A:05:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/a50faf7e-80ed-3540-8863-2e3533723c21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl X509v3 Authority Key Identifier: keyid:2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer sbgp-ipAddrBlock: critical IPv6: 2602:814:b000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:88:33:5f:5b:56:71:52:f2:f1:ca:f2:fa:b5:36:78:e9:c9: 40:bd:dc:9e:7e:34:6b:7f:40:07:89:79:3a:64:3a:da:ca:67: 5f:37:06:c0:9b:74:8b:df:62:f7:ef:17:a7:36:1e:bd:2c:e4: ba:44:3e:01:57:d9:57:4e:b7:b8:eb:5f:76:7b:2a:62:2a:eb: 7b:3c:ae:d6:ba:9e:ff:fa:78:73:cf:df:80:b1:88:b9:9c:c3: c6:60:11:60:03:ab:15:a1:f7:33:0f:76:62:8a:f7:5c:29:24: c9:fd:08:dd:53:7a:da:c5:9e:2d:45:25:1d:06:3f:fd:d2:31: d6:21:e9:a1:7e:68:af:90:a7:01:56:21:e8:05:5a:cb:a0:23: a5:43:50:a7:cc:24:7f:d1:a0:09:9e:c1:ad:48:7a:5e:9b:a2: a8:26:eb:9c:5f:13:f3:19:ba:9f:c4:7c:f3:eb:8f:d3:7c:bd: 98:46:48:be:d8:8a:41:12:a2:fd:8f:35:cd:a0:fe:92:8d:bf: a0:1e:10:b6:e9:44:3e:fc:e4:cf:96:16:30:2a:05:0b:02:d1: 84:c4:07:50:39:70:31:6e:32:94:ac:55:90:06:a0:85:6a:ff: c8:8e:77:2e:ca:ce:ef:1e:fa:24:ce:fc:e8:14:77:31:04:bf: ca:12:e4:e2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEma9IFmyJlbM0MKPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBmYThlM2YtNjdlOS00ZThmLTlkMTgtNjIxMWRkNjEz MDczMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ODE5NzZkMDAtNjc0Ny00ZjU1LWE2MWUtMDllMGI2OTNjNDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDDvk4Yn8wJE4R83KBDAcrYHNGaBBKrr2ULd XzZccbFpT1RQlFeuqkucMl17z25HhzJE5oO1WteJde0tIEdnQuiJQRJAtsxrHHdn vrDiUTEidhIu9XB8+ho+79JlWkXHEFXk/VJ9TalRZrDR3v6KsZ/J67QBegwtzimy YZGQyTOe8Ex6YkpvRsuHJZziyu2wSlNHlNyIB2nlbc6cJf1+WlzdPS/DMoT4wxQM 5XFvbHVfFKEia8+r6tcvOymcAXuFoQlkGjcyX+NkALHHRChr4I7B04poQoNF/iIc yhzOs3IV4MBVzUO+vzKeZXPcuSJAbJVv0QSrVQbBMOp4zNBmpQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBodi/zYEzW9U8dhADwGcyLlOgUaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZh OGUzZi02N2U5LTRlOGYtOWQxOC02MjExZGQ2MTMwNzMvYTUwZmFmN2UtODBlZC0z NTQwLTg4NjMtMmUzNTMzNzIzYzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBmYThlM2YtNjdlOS00ZThmLTlk MTgtNjIxMWRkNjEzMDczL2QwZmE4ZTNmLTY3ZTktNGU4Zi05ZDE4LTYyMTFkZDYx MzA3My5jcmwwHwYDVR0jBBgwFoAUK7RjzmcAGdo63rw75WI23btNwp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZhOGUzZi02N2U5LTRlOGYtOWQxOC02MjEx ZGQ2MTMwNzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIFLAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGGIM19bVnFS8vHK8vq1NnjpyUC93J5+NGt/QAeJeTpkOtrKZ183 BsCbdIvfYvfvF6c2Hr0s5LpEPgFX2VdOt7jrX3Z7KmIq63s8rta6nv/6eHPP34Cx iLmcw8ZgEWADqxWh9zMPdmKK91wpJMn9CN1TetrFni1FJR0GP/3SMdYh6aF+aK+Q pwFWIegFWsugI6VDUKfMJH/RoAmewa1Iel6boqgm65xfE/MZup/EfPPrj9N8vZhG SL7YikESov2PNc2g/pKNv6AeELbpRD785M+WFjAqBQsC0YTEB1A5cDFuMpSsVZAG oIVq/8iOdy7Kzu8e+iTO/OgUdzEEv8oS5OI= -----END CERTIFICATE-----Generated at Sat Apr 26 19:20:52 2025 by rpki-client