$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/668a0aeb-328b-3b87-9b83-66ab809813fb.roa File: 668a0aeb-328b-3b87-9b83-66ab809813fb.roa (raw, json) Hash identifier: /R75b2ye2MGEWip21BIEigUWdq+027yUKE+c8VlMncQ= Subject key identifier: 42:BB:1F:B2:AD:2D:70:27:8A:7E:59:BB:ED:C6:FC:F0:0A:FF:CD:A3 Certificate issuer: /CN=a2b2ccef-7c30-4a40-90ca-ce1703a22a1d Certificate serial: 010D0C9F432858493AA3E2D02FC4B5B2CA1E0A90 Authority key identifier: 6F:F3:A5:0D:A3:51:FB:B5:47:EB:8B:B8:3C:68:4F:B0:5C:64:1C:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/668a0aeb-328b-3b87-9b83-66ab809813fb.roa Signing time: Tue 18 Mar 2025 13:00:50 +0000 ROA not before: Tue 18 Mar 2025 13:00:50 +0000 ROA not after: Mon 16 Jun 2025 13:00:50 +0000 asID: 401385 IP address blocks: 2602:f8d4::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3a:a3:e2:d0:2f:c4:b5:b2:ca:1e:0a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2b2ccef-7c30-4a40-90ca-ce1703a22a1d Validity Not Before: Mar 18 13:00:50 2025 GMT Not After : Jun 16 13:00:50 2025 GMT Subject: CN=78adce6b-9e20-4917-8e96-4d83dab039d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:54:7b:eb:44:ce:d4:8d:46:9a:7e:4f:bc:24: 01:3c:c7:f5:a4:70:4c:e3:13:1e:d0:bd:71:bc:f4: 28:75:08:64:a2:3c:fb:95:13:bf:8f:59:33:ed:1c: 3f:90:7d:0b:71:25:cc:ac:1d:f8:58:db:56:8c:a6: 4f:b1:42:63:52:63:60:70:4b:80:d8:3e:74:6e:08: ca:9f:70:f6:2b:fe:86:39:2c:32:c3:08:19:a3:39: e6:2b:56:18:06:7b:eb:1c:a4:f3:ad:15:fe:47:45: 3e:40:ef:41:a3:e9:ff:9b:bd:77:e3:7c:24:b3:0e: 56:9b:1d:30:92:e3:01:e5:7a:96:59:08:d5:93:cb: 5a:7d:9a:8f:bc:4c:ed:b6:26:2e:87:1e:29:3c:66: 8d:24:3a:30:93:7e:cc:a8:8e:39:f0:bf:a9:a9:07: e8:09:f7:ab:d3:c6:30:b2:96:31:57:23:7e:52:b7: 13:6b:18:50:d9:db:10:5d:78:71:a6:b8:20:a6:29: da:ff:3e:3d:e0:72:32:aa:06:cf:cf:e4:ee:44:1b: 81:ab:86:a9:95:be:d4:c8:e5:9d:ef:aa:b6:87:52: 64:14:59:52:79:f9:0b:d5:e2:0f:59:36:10:03:93: a1:87:c2:1d:97:88:89:3a:95:11:15:8c:8c:ad:9f: 7e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BB:1F:B2:AD:2D:70:27:8A:7E:59:BB:ED:C6:FC:F0:0A:FF:CD:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/668a0aeb-328b-3b87-9b83-66ab809813fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.crl X509v3 Authority Key Identifier: keyid:6F:F3:A5:0D:A3:51:FB:B5:47:EB:8B:B8:3C:68:4F:B0:5C:64:1C:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f8d4::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:fc:bc:64:e5:e1:41:dd:05:17:39:77:45:b5:64:09:11:92: 12:0c:14:ef:ee:67:e7:43:88:6f:86:87:76:00:e7:f4:6e:59: 39:d2:df:10:a9:43:d8:e9:9e:6a:78:03:89:b4:0b:49:c2:5d: d3:34:0e:73:dc:5b:a3:21:90:4e:cd:fa:aa:9f:55:61:5a:c7: cc:b8:8c:a5:cc:86:cb:b1:24:81:b0:89:14:94:cf:01:fb:a1: 73:b1:71:b4:84:c5:ac:1b:41:3e:59:e0:c9:25:14:db:a3:95: b9:66:e4:09:dc:65:70:3b:4d:65:58:d4:02:ea:db:17:c5:6d: 07:88:e0:c3:84:cd:03:8a:3b:6a:27:c7:a8:ad:c0:6e:84:b9: 08:8f:02:53:4a:03:dd:17:ad:f8:30:e3:01:09:ef:27:3e:5a: ec:c0:76:b2:86:fd:55:aa:83:68:e3:cc:1e:99:a9:b9:6b:34: bf:90:7f:5a:d3:4e:0a:fd:ca:d1:75:0b:c7:01:cb:59:65:b8: a4:bb:68:b2:70:56:65:fb:1b:df:fd:55:c1:d6:03:85:ba:c6: e5:6e:1d:f1:7a:70:79:28:98:ca:12:eb:1a:d3:e1:17:c9:30: 95:94:ee:ff:b7:94:1d:6e:28:ec:97:cf:b1:c7:15:44:19:c6: 3b:6a:bd:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk6o+LQL8S1ssoeCpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJiMmNjZWYtN2MzMC00YTQwLTkwY2EtY2UxNzAzYTIy YTFkMB4XDTI1MDMxODEzMDA1MFoXDTI1MDYxNjEzMDA1MFowLzEtMCsGA1UEAxMk NzhhZGNlNmItOWUyMC00OTE3LThlOTYtNGQ4M2RhYjAzOWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1R760TO1I1Gmn5PvCQBPMf1pHBM4xMe0L1x vPQodQhkojz7lRO/j1kz7Rw/kH0LcSXMrB34WNtWjKZPsUJjUmNgcEuA2D50bgjK n3D2K/6GOSwywwgZoznmK1YYBnvrHKTzrRX+R0U+QO9Bo+n/m71343wksw5Wmx0w kuMB5XqWWQjVk8tafZqPvEzttiYuhx4pPGaNJDowk37MqI458L+pqQfoCfer08Yw spYxVyN+UrcTaxhQ2dsQXXhxprggpina/z494HIyqgbPz+TuRBuBq4aplb7UyOWd 76q2h1JkFFlSefkL1eIPWTYQA5Ohh8Idl4iJOpURFYyMrZ9+gwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEK7H7KtLXAnin5Zu+3G/PAK/82jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hMmIy Y2NlZi03YzMwLTRhNDAtOTBjYS1jZTE3MDNhMjJhMWQvNjY4YTBhZWItMzI4Yi0z Yjg3LTliODMtNjZhYjgwOTgxM2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTJiMmNjZWYtN2MzMC00YTQwLTkw Y2EtY2UxNzAzYTIyYTFkL2EyYjJjY2VmLTdjMzAtNGE0MC05MGNhLWNlMTcwM2Ey MmExZC5jcmwwHwYDVR0jBBgwFoAUb/OlDaNR+7VH64u4PGhPsFxkHBUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hMmIyY2NlZi03YzMwLTRhNDAtOTBjYS1jZTE3 MDNhMjJhMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL41AAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACz8vGTl4UHdBRc5d0W1ZAkRkhIMFO/uZ+dDiG+Gh3YA5/RuWTnS 3xCpQ9jpnmp4A4m0C0nCXdM0DnPcW6MhkE7N+qqfVWFax8y4jKXMhsuxJIGwiRSU zwH7oXOxcbSExawbQT5Z4MklFNujlblm5AncZXA7TWVY1ALq2xfFbQeI4MOEzQOK O2onx6itwG6EuQiPAlNKA90Xrfgw4wEJ7yc+WuzAdrKG/VWqg2jjzB6ZqblrNL+Q f1rTTgr9ytF1C8cBy1lluKS7aLJwVmX7G9/9VcHWA4W6xuVuHfF6cHkomMoS6xrT 4RfJMJWU7v+3lB1uKOyXz7HHFUQZxjtqvTk= -----END CERTIFICATE-----Generated at Mon Apr 28 12:58:16 2025 by rpki-client