$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/589da0a2-d425-3d1f-92f5-29c36941c1a5.roa File: 589da0a2-d425-3d1f-92f5-29c36941c1a5.roa (raw, json) Hash identifier: fnLSs5lpMQNA2LasaNmU3LMVDtyCoUkg067772q/Heg= Subject key identifier: 4A:AE:41:E9:90:B8:60:D3:CA:05:38:1B:58:49:B8:BB:24:9A:13:39 Certificate issuer: /CN=dacb0047-4725-424f-a3e9-b6f212c4c5e3 Certificate serial: 010D0C9F4328584937D943002295B820B10B5980 Authority key identifier: 8A:97:87:F5:9B:AF:E2:9E:8A:04:00:52:AF:25:84:7D:11:C7:E3:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/589da0a2-d425-3d1f-92f5-29c36941c1a5.roa Signing time: Mon 17 Mar 2025 13:00:52 +0000 ROA not before: Mon 17 Mar 2025 13:00:52 +0000 ROA not after: Sun 15 Jun 2025 13:00:52 +0000 asID: 401541 IP address blocks: 2602:f757::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/dacb0047-4725-424f-a3e9-b6f212c4c5e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/dacb0047-4725-424f-a3e9-b6f212c4c5e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:37:d9:43:00:22:95:b8:20:b1:0b:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dacb0047-4725-424f-a3e9-b6f212c4c5e3 Validity Not Before: Mar 17 13:00:52 2025 GMT Not After : Jun 15 13:00:52 2025 GMT Subject: CN=56e02816-6d5d-48d2-a24e-bf2f66409573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:78:a7:c9:85:3f:0b:17:53:08:86:7d:66:75: e9:e8:32:fe:be:f8:73:0f:90:51:4f:69:e0:2d:36: 54:87:f7:1d:6d:6d:2d:01:1e:66:0c:3c:36:ae:ea: a8:30:0f:96:2e:88:b0:5b:1a:e9:43:38:5d:cf:58: c3:6c:ef:0c:00:09:86:bb:23:48:9e:43:1d:f6:6f: 26:cb:e9:4b:5e:f5:41:28:d3:16:85:f6:1a:e3:7b: 6a:f2:e7:15:ed:41:1a:40:07:f9:e4:4b:d7:4c:62: a5:cb:52:7c:8b:c7:5f:d0:03:0f:d5:02:52:cb:77: b4:84:4d:00:32:aa:25:5a:b4:d1:7d:92:e8:26:5e: 48:cb:90:5f:c6:78:5c:01:60:f4:89:62:5a:d9:45: e8:00:d0:da:ec:5a:ac:9a:36:4b:28:9e:36:8c:7d: 60:54:21:a5:ee:b2:28:62:a4:c0:2e:85:39:da:ee: 03:eb:44:e1:f4:fe:25:02:5c:0a:bf:0b:c7:06:d1: b3:89:82:1b:8d:26:5a:a1:a2:61:97:6f:cf:74:ed: dc:e1:3d:e8:e4:f6:59:78:df:46:25:42:2d:45:5b: 5b:fc:93:a2:f1:23:8a:a0:01:4b:88:fa:5c:20:d3: 1f:fb:48:41:e6:a3:df:a3:76:0d:02:ea:dd:49:f9: 6b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AE:41:E9:90:B8:60:D3:CA:05:38:1B:58:49:B8:BB:24:9A:13:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/589da0a2-d425-3d1f-92f5-29c36941c1a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/dacb0047-4725-424f-a3e9-b6f212c4c5e3.crl X509v3 Authority Key Identifier: keyid:8A:97:87:F5:9B:AF:E2:9E:8A:04:00:52:AF:25:84:7D:11:C7:E3:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f757::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ba:7e:de:41:46:fd:13:9a:0f:e6:63:a7:ba:f2:ce:44:24: a8:f6:1b:13:96:ac:74:51:a6:88:27:1f:72:00:0c:99:d3:16: 7e:3c:bf:97:d6:97:a6:74:0c:8c:93:3a:27:d0:94:00:30:76: d0:d9:40:0a:f9:fe:d5:d3:ca:eb:00:a0:53:71:36:8c:c0:fc: 3a:2d:e3:43:36:87:ff:61:57:83:b5:d7:3d:dc:4f:d3:40:9e: 6c:a0:e0:77:5b:41:98:0e:fe:fd:80:73:ec:b6:19:31:5a:94: 6e:eb:a8:e8:5e:a8:b5:0d:d1:57:30:70:02:b8:17:ec:49:3a: c1:86:9e:2d:2b:b2:1b:4b:58:b9:de:30:32:8d:f6:09:76:13: 3b:c6:2f:d6:32:19:cc:d8:1e:c9:36:1d:18:72:ac:79:b6:04: 28:f4:08:53:3d:63:54:11:a1:93:5b:e0:0e:f9:a8:1d:75:6a: a0:e2:20:10:13:41:4c:57:b6:0c:e3:e5:b1:41:02:46:4f:d9: b3:76:18:72:b8:bc:78:bc:07:5e:87:f6:bc:12:c2:5e:6d:cf: f5:e2:e2:4a:f6:1b:d5:d9:67:b1:32:eb:2e:c7:37:53:2f:f1: 9b:39:f0:93:57:28:df:0b:46:11:60:27:01:31:da:05:1e:ce: 4e:a9:69:f1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEk32UMAIpW4ILELWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFjYjAwNDctNDcyNS00MjRmLWEzZTktYjZmMjEyYzRj NWUzMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk NTZlMDI4MTYtNmQ1ZC00OGQyLWEyNGUtYmYyZjY2NDA5NTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyninyYU/CxdTCIZ9ZnXp6DL+vvhzD5BRT2ng LTZUh/cdbW0tAR5mDDw2ruqoMA+WLoiwWxrpQzhdz1jDbO8MAAmGuyNInkMd9m8m y+lLXvVBKNMWhfYa43tq8ucV7UEaQAf55EvXTGKly1J8i8df0AMP1QJSy3e0hE0A MqolWrTRfZLoJl5Iy5BfxnhcAWD0iWJa2UXoANDa7FqsmjZLKJ42jH1gVCGl7rIo YqTALoU52u4D60Th9P4lAlwKvwvHBtGziYIbjSZaoaJhl2/PdO3c4T3o5PZZeN9G JUItRVtb/JOi8SOKoAFLiPpcINMf+0hB5qPfo3YNAurdSflriQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEquQemQuGDTygU4G1hJuLskmhM5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kYWNi MDA0Ny00NzI1LTQyNGYtYTNlOS1iNmYyMTJjNGM1ZTMvNTg5ZGEwYTItZDQyNS0z ZDFmLTkyZjUtMjljMzY5NDFjMWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGFjYjAwNDctNDcyNS00MjRmLWEz ZTktYjZmMjEyYzRjNWUzL2RhY2IwMDQ3LTQ3MjUtNDI0Zi1hM2U5LWI2ZjIxMmM0 YzVlMy5jcmwwHwYDVR0jBBgwFoAUipeH9Zuv4p6KBABSryWEfRHH48IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kYWNiMDA0Ny00NzI1LTQyNGYtYTNlOS1iNmYy MTJjNGM1ZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL3VwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGrp+3kFG/ROaD+Zjp7ryzkQkqPYbE5asdFGmiCcfcgAMmdMWfjy/ l9aXpnQMjJM6J9CUADB20NlACvn+1dPK6wCgU3E2jMD8Oi3jQzaH/2FXg7XXPdxP 00CebKDgd1tBmA7+/YBz7LYZMVqUbuuo6F6otQ3RVzBwArgX7Ek6wYaeLSuyG0tY ud4wMo32CXYTO8Yv1jIZzNgeyTYdGHKsebYEKPQIUz1jVBGhk1vgDvmoHXVqoOIg EBNBTFe2DOPlsUECRk/Zs3YYcri8eLwHXof2vBLCXm3P9eLiSvYb1dlnsTLrLsc3 Uy/xmznwk1co3wtGEWAnATHaBR7OTqlp8Q== -----END CERTIFICATE-----Generated at Tue Apr 29 16:18:17 2025 by rpki-client