$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/8dfd331d-a27c-3036-abb2-c4b7f16c6bd9.roa File: 8dfd331d-a27c-3036-abb2-c4b7f16c6bd9.roa (raw, json) Hash identifier: WZ5erJwNwV5MhrrSGwZ8e/KPcBYumAPOPYHNYY9VcT4= Subject key identifier: F1:0C:66:9D:8D:9B:44:38:FD:28:1D:56:3A:73:80:C8:FE:79:45:C6 Certificate issuer: /CN=e20d7b51-a205-4e55-9426-e473f80b2544 Certificate serial: 010D0C9F43285848FD56AE1E6826FDE1D64F6D80 Authority key identifier: 98:5B:5F:D7:36:C4:EC:98:8A:7F:FD:88:22:70:B1:32:07:74:14:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/8dfd331d-a27c-3036-abb2-c4b7f16c6bd9.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 397736 IP address blocks: 2602:807:d000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/e20d7b51-a205-4e55-9426-e473f80b2544.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/e20d7b51-a205-4e55-9426-e473f80b2544.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:ae:1e:68:26:fd:e1:d6:4f:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e20d7b51-a205-4e55-9426-e473f80b2544 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=cc9f9d58-822e-48c0-b5b9-58e71d67e440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8e:7a:f8:65:48:06:5c:f5:98:54:9c:8c:9f: 65:a5:3a:f5:ca:71:83:90:87:1c:0b:e5:47:a4:fd: fc:69:8c:0c:16:33:e0:61:78:8a:1d:90:de:4b:36: 8f:c5:bd:b1:33:c2:1f:f4:9f:9e:35:25:7b:27:a9: 94:a9:b1:b0:cc:c5:0d:79:9e:28:d0:69:e0:a8:c6: 41:99:f1:df:80:bb:7b:8f:e2:06:ab:43:71:49:10: 4d:de:d4:06:af:a7:18:a3:76:fe:32:b3:af:10:c2: 9e:8e:a4:aa:82:56:55:0a:72:97:93:02:c6:f3:e5: 6e:b9:df:e0:25:e1:4f:af:ed:29:ca:e9:6a:5e:dd: 92:f3:da:bb:70:b5:3a:a4:76:70:7a:91:47:36:6d: a2:73:2b:bb:58:ad:59:01:6b:c5:76:5a:c9:05:42: e3:61:52:b5:ef:0f:53:f7:d8:cc:09:83:1c:21:be: 8c:5e:d3:03:a3:47:73:4a:c6:39:64:19:30:59:47: 60:6b:94:46:50:f9:7e:b5:30:f9:a5:b3:19:b1:a5: fa:d2:04:37:58:bc:6a:74:59:a4:8f:78:a6:c2:77: b2:51:2f:f1:f6:2e:16:ba:f2:ea:a4:b8:ab:6e:ae: ae:0a:ad:8f:47:ff:72:2c:7a:40:c2:7d:0a:01:60: a9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0C:66:9D:8D:9B:44:38:FD:28:1D:56:3A:73:80:C8:FE:79:45:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/8dfd331d-a27c-3036-abb2-c4b7f16c6bd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/e20d7b51-a205-4e55-9426-e473f80b2544.crl X509v3 Authority Key Identifier: keyid:98:5B:5F:D7:36:C4:EC:98:8A:7F:FD:88:22:70:B1:32:07:74:14:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544.cer sbgp-ipAddrBlock: critical IPv6: 2602:807:d000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:c6:21:a4:27:2f:ea:e9:6d:c4:72:71:6d:f4:08:02:f5:ce: c7:3c:7d:93:fc:40:1a:ab:6a:47:61:4f:85:85:31:4f:a7:ce: 52:9b:91:0b:ed:3d:ff:f7:27:e3:41:9b:84:eb:5e:4b:37:fe: 9e:a6:8f:ab:9c:02:63:d3:ec:e2:42:d6:f1:be:89:5d:80:22: 2c:1d:d0:47:a0:55:7e:d9:a9:f2:98:be:ea:59:21:af:59:5f: 7f:bc:f9:ed:e4:3f:9e:78:b8:9d:40:57:8f:be:be:f3:69:07: 51:4b:ac:6d:69:03:63:b0:f4:77:5b:56:5a:64:e4:a1:18:2d: fd:85:18:ad:db:63:ab:53:da:d2:82:22:a5:c6:2f:d0:4c:01: 75:a5:72:d5:40:fe:64:83:3c:30:a0:66:db:ba:9f:19:9e:a8: 02:24:f7:01:bb:06:ae:e4:c8:92:8f:0e:88:53:ab:f0:b6:96: 26:44:f1:47:52:eb:7a:99:19:a5:8e:51:fc:7d:98:66:7e:8a: 9f:3c:d1:2f:c6:cd:74:05:2e:a0:61:e0:2b:a0:e2:cc:fd:3e: 34:bb:0a:5e:a0:17:f2:6e:e7:41:09:33:96:64:f5:ce:d4:df: a3:c8:e1:23:a7:57:92:86:24:f1:8a:e1:2d:ba:cf:12:34:c8: a6:32:b4:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj9Vq4eaCb94dZPbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwZDdiNTEtYTIwNS00ZTU1LTk0MjYtZTQ3M2Y4MGIy NTQ0MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2M5ZjlkNTgtODIyZS00OGMwLWI1YjktNThlNzFkNjdlNDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp456+GVIBlz1mFScjJ9lpTr1ynGDkIccC+VH pP38aYwMFjPgYXiKHZDeSzaPxb2xM8If9J+eNSV7J6mUqbGwzMUNeZ4o0GngqMZB mfHfgLt7j+IGq0NxSRBN3tQGr6cYo3b+MrOvEMKejqSqglZVCnKXkwLG8+Vuud/g JeFPr+0pyulqXt2S89q7cLU6pHZwepFHNm2icyu7WK1ZAWvFdlrJBULjYVK17w9T 99jMCYMcIb6MXtMDo0dzSsY5ZBkwWUdga5RGUPl+tTD5pbMZsaX60gQ3WLxqdFmk j3imwneyUS/x9i4WuvLqpLirbq6uCq2PR/9yLHpAwn0KAWCpHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPEMZp2Nm0Q4/SgdVjpzgMj+eUXGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lMjBk N2I1MS1hMjA1LTRlNTUtOTQyNi1lNDczZjgwYjI1NDQvOGRmZDMzMWQtYTI3Yy0z MDM2LWFiYjItYzRiN2YxNmM2YmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTIwZDdiNTEtYTIwNS00ZTU1LTk0 MjYtZTQ3M2Y4MGIyNTQ0L2UyMGQ3YjUxLWEyMDUtNGU1NS05NDI2LWU0NzNmODBi MjU0NC5jcmwwHwYDVR0jBBgwFoAUmFtf1zbE7JiKf/2IInCxMgd0FNYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lMjBkN2I1MS1hMjA1LTRlNTUtOTQyNi1lNDcz ZjgwYjI1NDQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIB9AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC3GIaQnL+rpbcRycW30CAL1zsc8fZP8QBqrakdhT4WFMU+nzlKb kQvtPf/3J+NBm4TrXks3/p6mj6ucAmPT7OJC1vG+iV2AIiwd0EegVX7ZqfKYvupZ Ia9ZX3+8+e3kP554uJ1AV4++vvNpB1FLrG1pA2Ow9HdbVlpk5KEYLf2FGK3bY6tT 2tKCIqXGL9BMAXWlctVA/mSDPDCgZtu6nxmeqAIk9wG7Bq7kyJKPDohTq/C2liZE 8UdS63qZGaWOUfx9mGZ+ip880S/GzXQFLqBh4Cug4sz9PjS7Cl6gF/Ju50EJM5Zk 9c7U36PI4SOnV5KGJPGK4S26zxI0yKYytOc= -----END CERTIFICATE-----Generated at Mon Apr 28 13:17:20 2025 by rpki-client