$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/38aa2871-1127-35de-be08-5b917c38fae4.roa File: 38aa2871-1127-35de-be08-5b917c38fae4.roa (raw, json) Hash identifier: XjDaookVIA3GsmvL7Fy5I0K69z32ri0DWqbR69mIgS8= Subject key identifier: 5F:08:CC:23:8F:4E:32:FB:14:15:61:06:27:C2:07:91:6F:48:1E:16 Certificate issuer: /CN=443e93d6-47f3-4dff-a7d2-d7de4a2a04ce Certificate serial: 010D0C9F43285848EF61396EAADD61D116E26D80 Authority key identifier: A0:76:4E:8D:13:F2:EB:39:E7:16:02:EC:C0:26:5D:8A:D5:93:E2:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/38aa2871-1127-35de-be08-5b917c38fae4.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 2602:2df::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:39:6e:aa:dd:61:d1:16:e2:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=443e93d6-47f3-4dff-a7d2-d7de4a2a04ce Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=abf2f6fb-c845-45d3-bf45-3c0c0514b1ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:64:ea:72:d8:b3:90:a1:94:ba:6f:38:75:49: 1a:b0:e1:4e:d0:4d:f7:3d:0b:80:9d:42:c0:74:66: 08:11:6d:ce:0b:27:04:4f:b0:04:02:ec:ba:1e:b5: c5:c8:f9:77:af:7f:0f:2f:29:8e:b8:68:d2:86:1a: bf:b3:80:9f:3e:21:68:e3:98:ee:57:6e:6f:3c:0a: 97:0d:79:2a:96:8a:a0:9c:b0:53:91:60:79:a4:6b: cf:3f:bf:9f:79:57:e8:e2:00:82:4a:10:20:01:3c: 58:cd:3c:34:88:d0:0c:c8:34:86:8a:e7:c2:c7:9d: 16:d3:a3:de:8b:55:65:31:e3:52:29:92:1c:e0:95: 76:fe:8a:ac:fb:ae:43:94:66:fd:a2:16:e9:8f:0f: 02:81:86:a0:9d:6b:e5:3b:d8:19:04:4d:2b:c6:d0: 53:6c:c1:7d:9c:27:59:0d:f6:59:17:d0:62:f6:b8: 48:51:2f:06:16:41:16:54:87:be:fb:82:1b:65:05: 34:c4:c8:a4:48:04:07:52:06:78:59:04:0d:ca:22: 87:d1:c7:c9:f5:27:b1:99:81:c7:00:eb:65:f4:78: b4:e2:0e:02:63:24:32:bc:63:47:76:87:cd:11:9d: 2a:15:fb:92:5b:1f:98:11:c9:7d:45:ea:62:d0:f4: cf:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:08:CC:23:8F:4E:32:FB:14:15:61:06:27:C2:07:91:6F:48:1E:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/38aa2871-1127-35de-be08-5b917c38fae4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.crl X509v3 Authority Key Identifier: keyid:A0:76:4E:8D:13:F2:EB:39:E7:16:02:EC:C0:26:5D:8A:D5:93:E2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.cer sbgp-ipAddrBlock: critical IPv6: 2602:2df::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:30:1b:33:2e:1a:78:5c:6b:fa:f4:66:e7:26:44:86:fb:08: 7f:96:94:5e:0a:01:89:44:9b:07:6a:5c:b8:12:53:e9:6a:9a: 7b:d8:ab:c5:d7:fc:94:4e:34:24:e8:4f:7b:ac:8a:fc:18:f3: 4b:c7:68:6e:22:ec:b0:13:3b:c7:7d:2f:b1:ee:f9:60:3a:a1: 26:21:8e:7d:1c:e5:29:6b:6c:ef:7c:a7:b8:50:ba:1c:53:4f: 39:b7:53:ca:d0:60:2e:a9:5b:93:f1:f5:1c:d2:ba:22:30:62: 4f:16:cc:b6:07:e4:28:aa:83:a2:76:fc:a6:27:17:aa:96:9f: 72:92:b6:8e:2b:c9:1d:e5:2c:aa:fd:54:f7:f6:6c:ee:94:19: 70:e6:93:6f:ff:42:01:e1:5c:69:d3:77:a2:bc:eb:3a:9d:8f: 24:6c:f8:20:6e:27:0a:d7:10:89:38:88:b7:26:8c:9f:60:a4: e9:d8:7b:90:e5:94:c2:f8:1b:5e:ed:7a:2a:f0:6f:eb:94:ab: 1c:dc:48:fe:14:4c:4e:79:80:af:42:e9:62:1e:6b:0a:27:c7: 73:04:cb:a3:51:e6:f4:2e:c9:d5:ed:a4:30:48:4a:8a:69:3b: 1a:ef:64:4a:9c:cc:1a:c6:99:e5:c1:a8:c7:85:e6:91:04:f0: 7c:a1:5e:c5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjvYTluqt1h0RbibYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQzZTkzZDYtNDdmMy00ZGZmLWE3ZDItZDdkZTRhMmEw NGNlMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YWJmMmY2ZmItYzg0NS00NWQzLWJmNDUtM2MwYzA1MTRiMWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGTqctizkKGUum84dUkasOFO0E33PQuAnULA dGYIEW3OCycET7AEAuy6HrXFyPl3r38PLymOuGjShhq/s4CfPiFo45juV25vPAqX DXkqloqgnLBTkWB5pGvPP7+feVfo4gCCShAgATxYzTw0iNAMyDSGiufCx50W06Pe i1VlMeNSKZIc4JV2/oqs+65DlGb9ohbpjw8CgYagnWvlO9gZBE0rxtBTbMF9nCdZ DfZZF9Bi9rhIUS8GFkEWVIe++4IbZQU0xMikSAQHUgZ4WQQNyiKH0cfJ9SexmYHH AOtl9Hi04g4CYyQyvGNHdofNEZ0qFfuSWx+YEcl9Repi0PTPGQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFF8IzCOPTjL7FBVhBifCB5FvSB4WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80NDNl OTNkNi00N2YzLTRkZmYtYTdkMi1kN2RlNGEyYTA0Y2UvMzhhYTI4NzEtMTEyNy0z NWRlLWJlMDgtNWI5MTdjMzhmYWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDQzZTkzZDYtNDdmMy00ZGZmLWE3 ZDItZDdkZTRhMmEwNGNlLzQ0M2U5M2Q2LTQ3ZjMtNGRmZi1hN2QyLWQ3ZGU0YTJh MDRjZS5jcmwwHwYDVR0jBBgwFoAUoHZOjRPy6znnFgLswCZditWT4lswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80NDNlOTNkNi00N2YzLTRkZmYtYTdkMi1kN2Rl NGEyYTA0Y2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIC3wAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWzAbMy4aeFxr+vRm5yZEhvsIf5aUXgoBiUSbB2pcuBJT6Wqae9ir xdf8lE40JOhPe6yK/BjzS8dobiLssBM7x30vse75YDqhJiGOfRzlKWts73ynuFC6 HFNPObdTytBgLqlbk/H1HNK6IjBiTxbMtgfkKKqDonb8picXqpafcpK2jivJHeUs qv1U9/Zs7pQZcOaTb/9CAeFcadN3orzrOp2PJGz4IG4nCtcQiTiItyaMn2Ck6dh7 kOWUwvgbXu16KvBv65SrHNxI/hRMTnmAr0LpYh5rCifHcwTLo1Hm9C7J1e2kMEhK imk7Gu9kSpzMGsaZ5cGox4XmkQTwfKFexQ== -----END CERTIFICATE-----Generated at Sat Apr 26 14:49:26 2025 by rpki-client