$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/5c7ba998-12dc-3785-a77e-5b12a5d09da6.roa File: 5c7ba998-12dc-3785-a77e-5b12a5d09da6.roa (raw, json) Hash identifier: VJxKQ5MQRjzOWsOJvTUtvbOVExa08tRVnKoVJ2aE7hk= Subject key identifier: D9:9C:F5:2A:67:7D:81:E1:DD:6E:16:4E:93:9C:58:1D:D5:CC:D2:B1 Certificate issuer: /CN=fdb3fee9-0b00-4a8d-b320-e293b627bb04 Certificate serial: 010D0C9F43285848D0ABB758B9ED2A1F9A0AAE60 Authority key identifier: CC:35:8E:E1:5C:06:77:2C:6D:89:CE:C4:0A:D4:AA:E4:28:D9:21:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/5c7ba998-12dc-3785-a77e-5b12a5d09da6.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 13737 IP address blocks: 2602:f9ad::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/fdb3fee9-0b00-4a8d-b320-e293b627bb04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/fdb3fee9-0b00-4a8d-b320-e293b627bb04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:b7:58:b9:ed:2a:1f:9a:0a:ae:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdb3fee9-0b00-4a8d-b320-e293b627bb04 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=02dc3d6f-339c-4b2a-a966-e12e0d6ea763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:30:dd:3c:06:fd:3b:19:3a:63:c0:bd:58:bc: e6:63:08:de:39:10:18:11:f2:6a:95:18:5d:dc:a5: 40:72:d6:c7:5a:88:62:0f:4f:47:66:d8:b9:0e:83: 90:9f:6f:44:61:69:40:8a:57:88:77:a1:34:c5:ad: e9:f8:dc:5e:36:c7:f9:fc:01:7f:84:59:7a:88:32: 4f:aa:7d:11:9b:78:64:e9:4b:f3:19:0d:82:6a:2b: 2d:56:8d:af:7d:7b:6c:17:c0:ff:cd:c4:17:60:6a: 26:d2:10:e3:e9:61:93:88:94:58:4e:f7:a9:6c:85: d3:0a:8f:b6:4f:73:c7:d1:86:69:1b:d0:1e:25:ee: fb:5a:97:93:f5:c5:76:a0:dc:d6:88:cc:c9:c8:b1: 00:5f:5b:12:86:70:59:f8:8c:7c:9d:d8:c6:d7:43: 74:bf:37:6b:20:e5:1b:ce:52:ef:9b:3f:4a:90:78: 7e:24:5e:04:90:46:6c:d0:49:42:84:85:dd:3d:63: 79:9d:0f:e4:b1:ef:de:be:da:e7:9b:8d:dd:39:1c: bb:a4:bf:2b:76:c0:ad:81:28:93:a5:c8:9b:bb:55: d7:c0:ed:20:ca:89:e4:8f:70:a6:a5:c5:df:20:1e: cf:69:2f:a1:5b:f2:7f:95:e5:3a:3d:9d:84:67:84: a2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9C:F5:2A:67:7D:81:E1:DD:6E:16:4E:93:9C:58:1D:D5:CC:D2:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/5c7ba998-12dc-3785-a77e-5b12a5d09da6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/fdb3fee9-0b00-4a8d-b320-e293b627bb04.crl X509v3 Authority Key Identifier: keyid:CC:35:8E:E1:5C:06:77:2C:6D:89:CE:C4:0A:D4:AA:E4:28:D9:21:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9ad::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:a7:53:d0:2f:c3:01:ab:3c:9d:ee:f6:4e:3f:f6:a9:59:73: b7:ba:4d:c3:13:69:2f:6e:ec:af:9d:e5:85:63:88:67:48:e0: 5d:72:ce:36:05:a4:d3:ad:69:22:aa:ee:39:47:d6:82:ef:fb: 05:30:a5:24:0a:52:12:5b:a2:29:11:62:72:82:55:81:e4:e8: 64:70:17:89:28:3c:dd:b7:a5:8a:de:a5:de:8c:77:c5:c3:a2: 07:0f:cf:8e:6b:1c:45:17:5e:f5:13:0d:3a:14:ca:1b:4c:1f: 9f:f9:11:29:61:e6:3f:79:0a:ea:94:a8:05:99:22:46:26:2f: 89:b1:5e:66:40:6e:05:0c:d9:92:cb:39:2e:10:65:3c:0f:49: 17:cf:af:0c:f2:ad:42:6a:03:1b:e0:78:cf:2f:8d:d8:05:41: 68:fc:f6:d9:71:91:3f:20:d5:5a:dd:a3:3d:af:01:dd:6f:1f: 86:8b:7d:a8:88:75:58:e5:27:e5:e6:c8:74:e5:ef:65:33:6f: d3:bf:7d:36:d6:28:93:06:34:c1:57:6f:ed:50:f1:a0:61:b8: 73:fb:33:81:68:bd:fa:d5:76:f3:b4:47:ff:b3:6e:a8:6a:f0: 4f:13:ca:69:3d:83:94:59:32:a9:ee:b8:71:c2:50:f5:14:ba: 1a:88:32:84 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjQq7dYue0qH5oKrmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRiM2ZlZTktMGIwMC00YThkLWIzMjAtZTI5M2I2Mjdi YjA0MB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk MDJkYzNkNmYtMzM5Yy00YjJhLWE5NjYtZTEyZTBkNmVhNzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzDdPAb9Oxk6Y8C9WLzmYwjeORAYEfJqlRhd 3KVActbHWohiD09HZti5DoOQn29EYWlAileId6E0xa3p+NxeNsf5/AF/hFl6iDJP qn0Rm3hk6UvzGQ2CaistVo2vfXtsF8D/zcQXYGom0hDj6WGTiJRYTvepbIXTCo+2 T3PH0YZpG9AeJe77WpeT9cV2oNzWiMzJyLEAX1sShnBZ+Ix8ndjG10N0vzdrIOUb zlLvmz9KkHh+JF4EkEZs0ElChIXdPWN5nQ/kse/evtrnm43dORy7pL8rdsCtgSiT pcibu1XXwO0gyonkj3CmpcXfIB7PaS+hW/J/leU6PZ2EZ4Si9wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNmc9SpnfYHh3W4WTpOcWB3VzNKxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mZGIz ZmVlOS0wYjAwLTRhOGQtYjMyMC1lMjkzYjYyN2JiMDQvNWM3YmE5OTgtMTJkYy0z Nzg1LWE3N2UtNWIxMmE1ZDA5ZGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZmRiM2ZlZTktMGIwMC00YThkLWIz MjAtZTI5M2I2MjdiYjA0L2ZkYjNmZWU5LTBiMDAtNGE4ZC1iMzIwLWUyOTNiNjI3 YmIwNC5jcmwwHwYDVR0jBBgwFoAUzDWO4VwGdyxtic7ECtSq5CjZIQ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mZGIzZmVlOS0wYjAwLTRhOGQtYjMyMC1lMjkz YjYyN2JiMDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5rQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAR6dT0C/DAas8ne72Tj/2qVlzt7pNwxNpL27sr53lhWOIZ0jgXXLO NgWk061pIqruOUfWgu/7BTClJApSEluiKRFicoJVgeToZHAXiSg83belit6l3ox3 xcOiBw/PjmscRRde9RMNOhTKG0wfn/kRKWHmP3kK6pSoBZkiRiYvibFeZkBuBQzZ kss5LhBlPA9JF8+vDPKtQmoDG+B4zy+N2AVBaPz22XGRPyDVWt2jPa8B3W8fhot9 qIh1WOUn5ebIdOXvZTNv0799NtYokwY0wVdv7VDxoGG4c/szgWi9+tV287RH/7Nu qGrwTxPKaT2DlFkyqe64ccJQ9RS6GogyhA== -----END CERTIFICATE-----Generated at Mon Apr 28 01:22:43 2025 by rpki-client