$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/a59d57c6-927b-323c-bddc-a10e78a34ec8.roa File: a59d57c6-927b-323c-bddc-a10e78a34ec8.roa (raw, json) Hash identifier: bCUzkuWx2ArfsWCLxfH2t+3Uj40PGrpHSu7fRQNoTtc= Subject key identifier: 12:22:13:70:AF:71:6E:A0:52:45:F1:BD:58:CA:F9:E0:87:19:CD:B5 Certificate issuer: /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Certificate serial: 010D0C9F43285849BF3F67A1F2310A6A4F3CF340 Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/a59d57c6-927b-323c-bddc-a10e78a34ec8.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 27385 IP address blocks: 2602:fdaa:c3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:67:a1:f2:31:0a:6a:4f:3c:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=3a73f3ca-726b-49d3-8241-cd4659c392ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:23:21:a2:e6:2c:a4:46:ba:1e:de:97:35:b2: 75:ba:86:cc:f1:44:8e:27:66:f7:a7:ee:1d:d3:3d: 30:45:47:66:66:5a:22:a2:f9:f9:fe:bc:17:72:dd: 75:34:a5:65:21:6d:04:29:96:f5:eb:18:03:13:f2: de:16:d7:ad:a9:46:24:58:52:9c:2a:14:71:50:a9: 20:2d:cc:15:ec:a9:77:58:75:e0:1d:88:12:62:55: a8:c7:36:e5:1d:1c:8c:b2:d3:fc:eb:d9:07:38:38: 32:31:79:c8:8c:49:35:e2:de:e0:37:dd:f2:b4:08: db:67:2f:e2:30:c1:e0:69:9d:d4:db:4a:1d:8b:e9: 7d:98:8a:cf:46:76:d4:c7:4f:17:19:77:f3:eb:b2: 3e:d5:91:18:ad:f1:5c:af:1d:36:d1:59:9f:d4:f8: be:2e:88:b3:e6:93:1e:77:2d:d7:30:7b:ea:09:8b: c8:ec:b7:c2:2a:6e:53:68:0f:95:df:f4:70:36:60: 16:a5:29:e1:40:99:6b:4b:82:ff:29:cd:a5:7a:47: b9:2f:c1:6a:ec:a1:fa:c0:c1:45:6f:fb:b0:e0:7f: 2b:3c:64:4b:e6:5d:93:f0:18:f3:85:6f:f3:74:8a: 25:ec:1a:01:b7:38:23:01:b9:92:90:82:ce:3a:eb: 61:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:22:13:70:AF:71:6E:A0:52:45:F1:BD:58:CA:F9:E0:87:19:CD:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/a59d57c6-927b-323c-bddc-a10e78a34ec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl X509v3 Authority Key Identifier: keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer sbgp-ipAddrBlock: critical IPv6: 2602:fdaa:c3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:fd:22:de:04:f0:fe:86:09:85:c9:d0:97:77:83:d4:38:9f: dd:99:bd:79:01:87:10:48:7c:a6:57:cf:ae:1f:65:18:71:09: bd:df:25:55:bf:b7:5a:d5:3c:30:42:5d:42:19:13:c9:b3:22: 95:eb:64:1e:6e:40:fd:d1:50:25:14:ad:98:52:a5:c9:c7:0c: a5:e7:e5:04:3e:9b:04:79:b2:2e:23:29:08:73:ce:f9:b2:a6: 7b:e0:2d:cc:28:d7:f6:6e:85:bd:fa:29:15:4d:7b:86:39:f9: aa:bc:06:48:48:d0:b3:82:89:4c:07:0b:a6:b8:f8:d1:42:b1: 5b:0c:95:f8:ea:c2:8a:ea:65:32:00:72:7b:6a:54:95:d9:14: d1:cc:20:49:e9:d8:4d:49:08:6d:24:e5:10:ea:9d:7b:de:1b: 00:4a:f3:6b:7b:58:d2:11:ba:2e:50:90:7c:79:e7:78:9b:a3: 43:fa:a5:23:46:0f:42:75:d6:cc:33:8a:ef:ed:d5:b6:67:6b: 62:08:30:23:18:29:38:25:a2:26:2c:8e:e9:eb:e0:a8:5c:8b: 61:30:35:97:2e:70:65:5b:94:63:a2:9c:4e:2f:e7:80:f3:a7: eb:0c:90:c5:ff:0a:cf:c4:3c:6f:1b:d5:c2:76:ec:b3:25:cf: c9:fe:c3:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm/P2eh8jEKak8880AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMx ZDQxMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk M2E3M2YzY2EtNzI2Yi00OWQzLTgyNDEtY2Q0NjU5YzM5MmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCMhouYspEa6Ht6XNbJ1uobM8USOJ2b3p+4d 0z0wRUdmZloiovn5/rwXct11NKVlIW0EKZb16xgDE/LeFtetqUYkWFKcKhRxUKkg LcwV7Kl3WHXgHYgSYlWoxzblHRyMstP869kHODgyMXnIjEk14t7gN93ytAjbZy/i MMHgaZ3U20odi+l9mIrPRnbUx08XGXfz67I+1ZEYrfFcrx020Vmf1Pi+Loiz5pMe dy3XMHvqCYvI7LfCKm5TaA+V3/RwNmAWpSnhQJlrS4L/Kc2leke5L8Fq7KH6wMFF b/uw4H8rPGRL5l2T8BjzhW/zdIol7BoBtzgjAbmSkILOOuthrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBIiE3CvcW6gUkXxvVjK+eCHGc21MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2 ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvYTU5ZDU3YzYtOTI3Yi0z MjNjLWJkZGMtYTEwZTc4YTM0ZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWQwNmVkNjYtOWZkZC00MDQ4LTg2 NDUtZTMzZThjZWMxZDQxLzlkMDZlZDY2LTlmZGQtNDA0OC04NjQ1LWUzM2U4Y2Vj MWQ0MS5jcmwwHwYDVR0jBBgwFoAUAkRNXm0Knu393PU01zFjuct6wgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNl OGNlYzFkNDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9qgDD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFH9It4E8P6GCYXJ0Jd3g9Q4n92ZvXkBhxBIfKZXz64fZRhxCb3f JVW/t1rVPDBCXUIZE8mzIpXrZB5uQP3RUCUUrZhSpcnHDKXn5QQ+mwR5si4jKQhz zvmypnvgLcwo1/Zuhb36KRVNe4Y5+aq8BkhI0LOCiUwHC6a4+NFCsVsMlfjqworq ZTIAcntqVJXZFNHMIEnp2E1JCG0k5RDqnXveGwBK82t7WNIRui5QkHx553ibo0P6 pSNGD0J11swziu/t1bZna2IIMCMYKTgloiYsjunr4Khci2EwNZcucGVblGOinE4v 54Dzp+sMkMX/Cs/EPG8b1cJ27LMlz8n+w+4= -----END CERTIFICATE-----Generated at Tue May 6 00:51:17 2025 by rpki-client