$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/52e1bd1c-544b-3a83-b8fa-98ab93b65f53.roa File: 52e1bd1c-544b-3a83-b8fa-98ab93b65f53.roa (raw, json) Hash identifier: tPmx1b3j8Ky1si0PoBXvFsIueOjOUhUml4iqtHzU4cU= Subject key identifier: 72:76:FA:42:36:E7:A6:15:E5:8F:A9:C9:59:71:52:F2:6D:1D:72:A3 Certificate issuer: /CN=9ababe4f-43a3-4db9-8e35-b85a7e592168 Certificate serial: 010D0C9F432858494303EF694FD732982E981680 Authority key identifier: 23:5E:2D:51:36:B3:25:5E:9F:20:37:D6:36:11:40:2A:4A:0F:E4:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/52e1bd1c-544b-3a83-b8fa-98ab93b65f53.roa Signing time: Fri 21 Mar 2025 13:00:50 +0000 ROA not before: Fri 21 Mar 2025 13:00:50 +0000 ROA not after: Thu 19 Jun 2025 13:00:50 +0000 asID: 26801 IP address blocks: 2602:fddd::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/9ababe4f-43a3-4db9-8e35-b85a7e592168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/9ababe4f-43a3-4db9-8e35-b85a7e592168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:03:ef:69:4f:d7:32:98:2e:98:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ababe4f-43a3-4db9-8e35-b85a7e592168 Validity Not Before: Mar 21 13:00:50 2025 GMT Not After : Jun 19 13:00:50 2025 GMT Subject: CN=cbaf2b34-a97b-44ba-8bf5-01bb0e5464fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e4:b7:08:34:e9:5d:f7:b5:f7:47:5a:c1:fc: 00:55:82:96:d6:f9:da:63:b6:a7:cc:be:82:7e:77: 10:43:9a:7c:47:2a:c1:09:b1:15:27:7f:94:03:19: d6:8b:55:ea:02:fd:29:e6:af:52:72:4f:18:12:66: df:aa:0a:ce:e7:74:43:85:6f:55:a6:db:66:23:04: f3:8c:2f:b4:bb:66:a6:f3:4a:6d:cd:1b:cb:1d:81: 06:ec:c4:48:cf:74:1c:ed:34:f2:cb:e8:59:ee:e7: aa:a4:86:b8:30:7b:28:23:ba:63:41:a7:1b:92:2b: 1d:ef:fa:df:eb:77:60:b9:50:e3:41:6d:17:ee:35: 6f:05:a5:6b:56:a0:96:40:85:21:48:9a:27:f1:76: 34:7f:aa:44:b7:b7:6b:ad:c7:f9:fb:4f:b4:43:79: 73:9f:96:ab:2c:35:b3:91:06:6f:8d:02:c1:97:7b: 94:7e:80:5d:28:8f:b9:ca:3b:05:9f:97:39:e9:a1: 00:03:de:8d:22:01:f2:fd:e6:d9:3e:ae:5b:a0:bf: f5:72:63:be:36:b8:e4:b4:2d:4c:a9:cc:91:c2:c7: e2:6c:df:93:1f:d7:e2:00:6a:79:01:b0:a1:59:56: e7:fa:96:78:8c:f0:60:75:f5:d1:ad:f7:e3:81:6d: 9a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:76:FA:42:36:E7:A6:15:E5:8F:A9:C9:59:71:52:F2:6D:1D:72:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/52e1bd1c-544b-3a83-b8fa-98ab93b65f53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/9ababe4f-43a3-4db9-8e35-b85a7e592168.crl X509v3 Authority Key Identifier: keyid:23:5E:2D:51:36:B3:25:5E:9F:20:37:D6:36:11:40:2A:4A:0F:E4:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168.cer sbgp-ipAddrBlock: critical IPv6: 2602:fddd::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:fd:7d:11:17:68:ad:66:91:9d:4f:68:df:1f:55:30:35:96: ec:47:cc:01:df:99:1d:bf:74:45:f3:de:6d:40:c5:01:01:a1: 49:26:b7:5a:73:24:15:25:3f:f8:1f:55:f1:3d:4b:ef:f2:c3: 9b:0f:ae:7e:cf:ba:44:b8:98:2b:32:67:c9:92:ab:4f:3e:85: 37:2c:b7:54:01:c0:ba:d8:37:86:3a:b5:39:43:e8:31:ef:a8: 02:9e:ca:e5:ce:42:cd:f7:5a:96:50:03:56:51:c3:a8:59:19: 51:c6:5d:bb:ae:6c:a8:4d:e0:a2:1a:de:aa:a2:6d:60:8e:c7: f0:40:b6:88:0c:ae:ea:ff:6e:f0:54:05:8c:1c:1a:84:d1:f4: 80:95:b0:dc:5a:aa:40:30:6f:b4:43:82:79:36:e1:aa:13:0d: 58:02:6e:a5:4c:11:95:e3:39:2a:82:0c:86:e3:0d:9d:f1:d0: 4f:dd:da:62:ae:b6:91:65:7f:ce:2c:3c:51:96:40:e2:6f:d3: 35:8b:72:d9:93:c0:83:59:fd:42:e9:41:39:93:5f:76:e4:ae: 78:f5:b3:59:d6:de:d9:6e:5c:55:8d:29:df:dc:b2:bd:fb:50: 41:f1:f2:93:a7:4e:20:22:48:cd:5a:d0:cd:c0:b5:c3:68:7b: bc:73:db:bc -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElDA+9pT9cymC6YFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFiYWJlNGYtNDNhMy00ZGI5LThlMzUtYjg1YTdlNTky MTY4MB4XDTI1MDMyMTEzMDA1MFoXDTI1MDYxOTEzMDA1MFowLzEtMCsGA1UEAxMk Y2JhZjJiMzQtYTk3Yi00NGJhLThiZjUtMDFiYjBlNTQ2NGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOS3CDTpXfe190dawfwAVYKW1vnaY7anzL6C fncQQ5p8RyrBCbEVJ3+UAxnWi1XqAv0p5q9Sck8YEmbfqgrO53RDhW9VpttmIwTz jC+0u2am80ptzRvLHYEG7MRIz3Qc7TTyy+hZ7ueqpIa4MHsoI7pjQacbkisd7/rf 63dguVDjQW0X7jVvBaVrVqCWQIUhSJon8XY0f6pEt7drrcf5+0+0Q3lzn5arLDWz kQZvjQLBl3uUfoBdKI+5yjsFn5c56aEAA96NIgHy/ebZPq5boL/1cmO+NrjktC1M qcyRwsfibN+TH9fiAGp5AbChWVbn+pZ4jPBgdfXRrffjgW2aYwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHJ2+kI256YV5Y+pyVlxUvJtHXKjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YWJh YmU0Zi00M2EzLTRkYjktOGUzNS1iODVhN2U1OTIxNjgvNTJlMWJkMWMtNTQ0Yi0z YTgzLWI4ZmEtOThhYjkzYjY1ZjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWFiYWJlNGYtNDNhMy00ZGI5LThl MzUtYjg1YTdlNTkyMTY4LzlhYmFiZTRmLTQzYTMtNGRiOS04ZTM1LWI4NWE3ZTU5 MjE2OC5jcmwwHwYDVR0jBBgwFoAUI14tUTazJV6fIDfWNhFAKkoP5KEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YWJhYmU0Zi00M2EzLTRkYjktOGUzNS1iODVh N2U1OTIxNjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL93QAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAb/19ERdorWaRnU9o3x9VMDWW7EfMAd+ZHb90RfPebUDFAQGhSSa3 WnMkFSU/+B9V8T1L7/LDmw+ufs+6RLiYKzJnyZKrTz6FNyy3VAHAutg3hjq1OUPo Me+oAp7K5c5CzfdallADVlHDqFkZUcZdu65sqE3gohreqqJtYI7H8EC2iAyu6v9u 8FQFjBwahNH0gJWw3FqqQDBvtEOCeTbhqhMNWAJupUwRleM5KoIMhuMNnfHQT93a Yq62kWV/ziw8UZZA4m/TNYty2ZPAg1n9QulBOZNfduSuePWzWdbe2W5cVY0p39yy vftQQfHyk6dOICJIzVrQzcC1w2h7vHPbvA== -----END CERTIFICATE-----Generated at Mon Apr 28 10:37:17 2025 by rpki-client