$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/5587e601-3810-3cad-ad39-d5b549845ba7.roa File: 5587e601-3810-3cad-ad39-d5b549845ba7.roa (raw, json) Hash identifier: NC3xduOJe8Nwv1qqEpF0QKslSBdqEoTyfOIcm1jm8YQ= Subject key identifier: 20:11:76:C7:E0:6B:59:56:9B:A2:CA:27:87:2A:B8:96:A9:75:6E:C3 Certificate issuer: /CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Certificate serial: 010D0C9F43285849FB452B38A5A3602EC8C778F0 Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/5587e601-3810-3cad-ad39-d5b549845ba7.roa Signing time: Mon 26 May 2025 13:01:03 +0000 ROA not before: Mon 26 May 2025 13:01:03 +0000 ROA not after: Sun 24 Aug 2025 13:01:03 +0000 asID: 4186 IP address blocks: 2602:fbdc:80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fb:45:2b:38:a5:a3:60:2e:c8:c7:78:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0 Validity Not Before: May 26 13:01:03 2025 GMT Not After : Aug 24 13:01:03 2025 GMT Subject: CN=1656e435-77d9-4ca8-8a35-bdbc3d003935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:62:39:39:35:91:8b:c3:57:59:f4:26:43:a8: 7c:bc:30:dd:f1:e1:fa:e9:1a:16:1f:5a:ea:c3:67: 27:09:46:26:57:71:41:68:89:93:2c:a2:4a:88:8e: dc:59:25:45:e8:95:42:61:14:65:bd:b2:3a:3e:ae: 74:ad:53:02:58:2c:12:d4:bc:97:00:57:50:20:8d: 7f:a5:9a:89:5c:b3:9a:04:77:87:a0:3c:26:79:ed: a9:9d:ec:ca:11:8d:cb:b7:52:a8:5b:a7:aa:ee:28: ee:5c:3b:60:f5:a2:ca:34:74:1a:73:36:63:2f:f8: 64:bf:aa:6c:f5:26:9e:31:a1:bf:30:90:70:9b:1d: 3c:01:ad:e6:37:71:ac:18:e1:57:92:e7:5d:a8:c6: 8c:95:fd:d2:22:51:6e:05:ba:11:6d:78:78:23:a0: b7:79:9f:37:38:91:80:c6:b8:6d:09:a9:92:cd:97: 71:f2:7e:6b:6d:1b:37:b1:d3:2d:24:d3:df:e3:df: 7b:a8:1f:c5:f9:4d:79:47:7e:bf:3c:4e:af:66:bc: 63:e9:6a:81:91:09:41:39:b3:7c:be:a0:e4:aa:1e: 3f:b1:e5:f7:05:10:0f:79:a8:61:f0:35:21:27:d7: 25:1a:a6:a3:12:34:1f:fc:63:73:4e:2c:9e:c4:e6: a8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:11:76:C7:E0:6B:59:56:9B:A2:CA:27:87:2A:B8:96:A9:75:6E:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/5587e601-3810-3cad-ad39-d5b549845ba7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl X509v3 Authority Key Identifier: keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbdc:80::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:29:71:00:39:d4:0b:89:30:09:3a:0c:ef:2c:48:c4:85:93: 1f:b9:35:99:8b:5f:a8:45:33:77:f4:a7:a5:6d:d8:7b:2b:77: 47:d6:ed:b0:17:81:0c:3c:e5:0d:ee:eb:ba:77:2a:14:b0:f3: 8f:21:57:0a:22:2d:41:11:1b:d3:5f:99:69:27:3b:57:48:17: e1:8d:c7:31:6f:7c:b0:b9:32:dd:5c:63:8a:44:97:87:fc:cb: 5c:1f:53:26:51:0f:1f:b1:80:98:83:d1:c0:22:6f:2b:bc:4d: 01:78:70:e5:56:b6:4c:59:c4:fc:95:47:81:52:7e:d2:c8:64: a6:ab:ce:a7:28:a7:20:6a:17:a6:12:ac:68:2f:e6:bf:bd:d1: a9:60:1b:a5:a8:41:1f:7d:d7:2d:1f:b8:a5:f7:c2:67:3c:59: a7:e6:dd:6e:94:9f:a0:9c:9d:7e:fd:58:fa:a7:68:eb:11:3b: 04:fe:b7:06:ee:a1:e7:88:30:a1:da:20:e1:8c:5f:9f:94:c9: 44:89:38:e7:71:c1:5d:28:fe:85:0b:69:b5:9f:9e:e8:1a:11: 61:da:2e:b0:ac:60:3e:e3:00:47:ff:5d:01:3d:a1:32:32:21: 63:79:a9:a6:95:00:bd:54:f9:8b:f0:fb:e6:35:1e:2b:89:35: 82:6e:38:fc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn7RSs4paNgLsjHePAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh ZGQwMB4XDTI1MDUyNjEzMDEwM1oXDTI1MDgyNDEzMDEwM1owLzEtMCsGA1UEAxMk MTY1NmU0MzUtNzdkOS00Y2E4LThhMzUtYmRiYzNkMDAzOTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWI5OTWRi8NXWfQmQ6h8vDDd8eH66RoWH1rq w2cnCUYmV3FBaImTLKJKiI7cWSVF6JVCYRRlvbI6Pq50rVMCWCwS1LyXAFdQII1/ pZqJXLOaBHeHoDwmee2pnezKEY3Lt1KoW6eq7ijuXDtg9aLKNHQaczZjL/hkv6ps 9SaeMaG/MJBwmx08Aa3mN3GsGOFXkuddqMaMlf3SIlFuBboRbXh4I6C3eZ83OJGA xrhtCamSzZdx8n5rbRs3sdMtJNPf4997qB/F+U15R36/PE6vZrxj6WqBkQlBObN8 vqDkqh4/seX3BRAPeahh8DUhJ9clGqajEjQf/GNzTiyexOaonwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCARdsfga1lWm6LKJ4cquJapdW7DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvNTU4N2U2MDEtMzgxMC0z Y2FkLWFkMzktZDViNTQ5ODQ1YmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4 NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2 YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73ACA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANspcQA51AuJMAk6DO8sSMSFkx+5NZmLX6hFM3f0p6Vt2Hsrd0fW 7bAXgQw85Q3u67p3KhSw848hVwoiLUERG9NfmWknO1dIF+GNxzFvfLC5Mt1cY4pE l4f8y1wfUyZRDx+xgJiD0cAibyu8TQF4cOVWtkxZxPyVR4FSftLIZKarzqcopyBq F6YSrGgv5r+90algG6WoQR991y0fuKX3wmc8Wafm3W6Un6CcnX79WPqnaOsROwT+ twbuoeeIMKHaIOGMX5+UyUSJOOdxwV0o/oULabWfnugaEWHaLrCsYD7jAEf/XQE9 oTIyIWN5qaaVAL1U+Yvw++Y1HiuJNYJuOPw= -----END CERTIFICATE-----Generated at Tue Jul 1 21:22:52 2025 by rpki-client