$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/25dbca42-1fd0-38ab-852a-2e2b01909293.roa File: 25dbca42-1fd0-38ab-852a-2e2b01909293.roa (raw, json) Hash identifier: zEvCSOh9wZwu5SjAWMGeiSNxnJIpz0k9sRDuZGXZ8yo= Subject key identifier: D5:75:1B:DB:BD:C0:B7:C8:8F:F3:86:44:0E:3F:5D:DE:4D:77:47:66 Certificate issuer: /CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080 Certificate serial: 010D0C9F43285848FC8090E0D1BA96155CCDE120 Authority key identifier: 33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/25dbca42-1fd0-38ab-852a-2e2b01909293.roa Signing time: Mon 24 Feb 2025 06:49:38 +0000 ROA not before: Mon 24 Feb 2025 06:49:38 +0000 ROA not after: Sun 25 May 2025 05:49:38 +0000 asID: 64289 IP address blocks: 2602:2ea::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fc:80:90:e0:d1:ba:96:15:5c:cd:e1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080 Validity Not Before: Feb 24 06:49:38 2025 GMT Not After : May 25 05:49:38 2025 GMT Subject: CN=de859aaa-75e4-475d-b404-b2e001f5ed50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bf:5e:80:a3:e0:40:da:0b:d5:df:ab:7e:0a: 4d:1f:00:44:a9:30:2d:a5:2c:a3:e3:68:eb:34:34: 97:cb:45:1e:30:d0:a4:27:8d:21:c9:cd:7f:d2:37: 90:08:ee:1a:14:6c:37:c4:1f:e8:09:81:74:fd:1a: 27:69:54:30:74:25:31:f4:90:70:be:e8:38:21:2b: b1:c6:12:ed:f7:e6:51:48:93:fa:bf:30:13:6d:89: f2:9f:59:15:40:48:17:7c:63:d4:cc:4a:10:80:fc: 14:8a:da:66:09:f4:92:1b:08:12:61:90:19:cd:b1: a0:c1:08:28:5d:6b:b7:ba:8f:8d:47:ef:c8:6c:8f: 80:98:d7:c5:29:aa:96:e6:fa:64:cc:3f:55:fe:6a: 46:06:a9:02:48:51:14:1a:25:d0:2f:37:c9:b4:0b: f2:6a:80:75:95:fc:77:71:ad:15:d4:b3:d0:0c:4b: bd:3d:41:5b:68:48:ef:eb:65:3a:fd:f4:bb:c9:b9: 0e:e7:25:5b:08:cb:5b:33:b9:5a:65:b7:d4:89:16: ca:57:6e:01:5b:79:35:64:b6:2d:01:ed:dc:4a:de: 57:49:0a:68:2b:14:14:73:3c:ed:fa:26:f9:f8:55: 42:b3:70:18:ef:3c:67:b6:cc:df:f8:b1:4d:05:ef: bc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:75:1B:DB:BD:C0:B7:C8:8F:F3:86:44:0E:3F:5D:DE:4D:77:47:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/25dbca42-1fd0-38ab-852a-2e2b01909293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl X509v3 Authority Key Identifier: keyid:33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer sbgp-ipAddrBlock: critical IPv6: 2602:2ea::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:6e:81:43:91:ac:61:ad:6e:f8:a9:b9:96:c4:d4:8f:24:79: 1d:c3:29:fc:09:30:c4:bd:ae:22:78:a9:9e:95:b7:98:5b:53: 6e:40:0a:1d:44:7e:c3:33:d9:13:a4:5d:0a:9c:64:2d:76:57: 68:f1:78:49:10:13:53:f7:27:e1:cc:54:1f:8e:01:d3:96:39: 8e:03:22:64:26:91:cd:bd:a4:fd:0f:e7:5d:71:41:24:73:94: e7:ec:ed:4b:ba:a0:46:66:3e:e3:e7:e6:ee:a4:14:c9:36:f3: bf:ef:de:13:72:a8:d6:43:11:84:9f:8f:4b:a0:1d:40:79:24: 6b:28:d5:3e:05:a8:3e:b3:38:3d:d9:7c:29:65:18:40:87:6b: d2:eb:9c:90:b9:d6:9f:5f:3e:12:3b:b0:a4:c2:e9:9d:4b:d0: 68:58:93:8e:74:6e:03:d7:3e:cd:6e:34:fb:95:f6:1e:90:43: 63:c9:02:1b:29:ad:8a:37:d1:de:fe:da:96:eb:25:bd:4c:6b: bf:ff:2e:ba:93:ad:37:23:9c:ca:d5:c3:c1:e6:9d:b2:30:ba: 98:10:21:70:d5:9e:e6:d7:38:c7:75:14:33:9c:b6:84:43:eb: fd:e9:d3:62:4d:41:74:5b:48:5d:f2:58:4f:e5:e2:fe:e9:3d: cc:28:4e:7d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEj8gJDg0bqWFVzN4SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIzYmMwN2QtNTRjNi00MTVmLTlkYzEtYzFhMjA5ZjJk MDgwMB4XDTI1MDIyNDA2NDkzOFoXDTI1MDUyNTA1NDkzOFowLzEtMCsGA1UEAxMk ZGU4NTlhYWEtNzVlNC00NzVkLWI0MDQtYjJlMDAxZjVlZDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4L9egKPgQNoL1d+rfgpNHwBEqTAtpSyj42jr NDSXy0UeMNCkJ40hyc1/0jeQCO4aFGw3xB/oCYF0/RonaVQwdCUx9JBwvug4ISux xhLt9+ZRSJP6vzATbYnyn1kVQEgXfGPUzEoQgPwUitpmCfSSGwgSYZAZzbGgwQgo XWu3uo+NR+/IbI+AmNfFKaqW5vpkzD9V/mpGBqkCSFEUGiXQLzfJtAvyaoB1lfx3 ca0V1LPQDEu9PUFbaEjv62U6/fS7ybkO5yVbCMtbM7laZbfUiRbKV24BW3k1ZLYt Ae3cSt5XSQpoKxQUczzt+ib5+FVCs3AY7zxntszf+LFNBe+8WQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNV1G9u9wLfIj/OGRA4/Xd5Nd0dmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMjNi YzA3ZC01NGM2LTQxNWYtOWRjMS1jMWEyMDlmMmQwODAvMjVkYmNhNDItMWZkMC0z OGFiLTg1MmEtMmUyYjAxOTA5MjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTIzYmMwN2QtNTRjNi00MTVmLTlk YzEtYzFhMjA5ZjJkMDgwL2EyM2JjMDdkLTU0YzYtNDE1Zi05ZGMxLWMxYTIwOWYy ZDA4MC5jcmwwHwYDVR0jBBgwFoAUMw3RU/41EgfdV4opG2vmF9scWPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMjNiYzA3ZC01NGM2LTQxNWYtOWRjMS1jMWEy MDlmMmQwODAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgIC6gAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAtm6BQ5GsYa1u+Km5lsTUjyR5HcMp/AkwxL2uInipnpW3mFtTbkAK HUR+wzPZE6RdCpxkLXZXaPF4SRATU/cn4cxUH44B05Y5jgMiZCaRzb2k/Q/nXXFB JHOU5+ztS7qgRmY+4+fm7qQUyTbzv+/eE3Ko1kMRhJ+PS6AdQHkkayjVPgWoPrM4 Pdl8KWUYQIdr0uuckLnWn18+EjuwpMLpnUvQaFiTjnRuA9c+zW40+5X2HpBDY8kC GymtijfR3v7aluslvUxrv/8uupOtNyOcytXDweadsjC6mBAhcNWe5tc4x3UUM5y2 hEPr/enTYk1BdFtIXfJYT+Xi/uk9zChOfQ== -----END CERTIFICATE-----Generated at Fri May 9 11:57:08 2025 by rpki-client