$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/d6453340-f368-384e-b110-49910ee35392.roa File: d6453340-f368-384e-b110-49910ee35392.roa (raw, json) Hash identifier: jlqYl7Ln6d2lmyTK9SXxh3sSnJW6k+PnmfGbpORShrE= Subject key identifier: 1E:A6:2C:60:EE:E3:08:AA:34:53:13:76:9B:8A:44:55:A8:15:89:DF Certificate issuer: /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d Certificate serial: 010D0C9F43285849C904EA15D04AA22E481113E0 Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/d6453340-f368-384e-b110-49910ee35392.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 203283 IP address blocks: 2602:2db:114::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:ea:15:d0:4a:a2:2e:48:11:13:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=6bcec0ee-ccd2-408a-b8d8-7dfd417eaaf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:af:f0:3b:28:62:66:5b:51:65:16:11:09:d2: 54:38:7a:56:2f:44:6a:6f:d8:4f:16:ef:d4:af:c0: 2a:db:91:aa:f9:89:5f:bc:bc:86:95:6d:00:55:54: 1d:45:0f:08:9d:fc:4c:b2:c1:cd:8e:ae:ca:0b:77: 5f:97:e3:21:05:11:d2:0e:71:20:f8:1c:ce:09:b2: b8:b8:d2:b8:88:e2:5a:87:d5:91:7f:8e:93:df:84: 31:77:24:ca:30:9b:b7:d0:be:9d:f1:84:46:5b:68: 43:99:8d:4d:0b:34:b8:80:da:25:3e:30:e6:76:4f: 56:33:8b:54:4d:df:34:ac:01:0c:ea:13:73:6a:4e: ba:37:64:6d:0b:8e:46:af:c9:8c:0f:3b:e9:36:be: 42:17:f3:08:c5:32:27:c0:cc:91:ce:46:b2:7f:0d: c7:fb:d1:ab:a6:55:26:a1:52:8e:7b:0d:0e:1f:83: 8c:e4:26:e4:89:ba:06:d4:a4:27:d4:a0:64:9d:ef: 32:cd:8e:55:c5:d2:62:f5:4d:2e:93:2c:e2:d4:b2: 31:eb:5d:9e:82:ae:18:8d:de:f3:77:d3:43:54:f1: 51:3c:27:43:5b:37:fd:87:bb:ca:66:1e:f1:f9:6c: 7a:e7:81:98:2f:98:ec:8e:e4:6e:bd:70:db:4e:42: 2a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A6:2C:60:EE:E3:08:AA:34:53:13:76:9B:8A:44:55:A8:15:89:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/d6453340-f368-384e-b110-49910ee35392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl X509v3 Authority Key Identifier: keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer sbgp-ipAddrBlock: critical IPv6: 2602:2db:114::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:ad:56:fc:4f:89:fd:a0:96:77:74:15:94:cb:96:61:d1:f3: ef:a0:6d:72:ce:35:b7:f5:2c:7f:68:32:b2:f7:e4:40:fa:66: 6a:48:f5:cc:7c:c0:1f:71:81:a0:6c:7e:98:a0:11:ac:56:e8: d4:e9:34:82:eb:4a:4f:99:37:66:88:e5:2e:87:40:56:35:fd: 02:df:df:e0:32:f0:90:24:dc:af:ff:a4:5c:7b:be:cd:8d:a4: 4d:ef:da:8e:eb:bc:82:ab:ff:76:28:23:05:76:4a:11:ee:d7: c5:d8:67:27:0b:b5:4d:b0:7a:f7:15:9c:bc:53:10:5c:f6:72: 9a:0a:26:55:a2:01:84:56:c7:26:b9:9f:76:03:11:79:9b:40: 9b:10:dd:e5:ce:c7:52:7a:ba:cf:4c:f8:a9:ac:90:3f:4d:92: f8:57:eb:e9:79:c5:08:dc:14:57:11:ff:c4:fb:84:24:0c:af: 96:fa:6d:a8:75:ab:14:15:b0:9b:c1:29:73:52:55:bf:b2:9b: ec:a0:4c:f6:85:fb:91:45:3c:72:d0:8f:2b:bc:95:35:ab:2d: 0a:a1:69:d1:54:22:ca:62:ea:12:30:bf:96:ae:5d:e3:3a:a1: 84:c2:cf:d4:39:25:48:21:3b:66:35:24:e8:cb:4c:56:23:64: 9b:ae:9a:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnJBOoV0EqiLkgRE+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MwZWIyZGUtZTVlOC00MTA4LTg3MGUtOGNiYmZmMzk4 ODVkMB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk NmJjZWMwZWUtY2NkMi00MDhhLWI4ZDgtN2RmZDQxN2VhYWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna/wOyhiZltRZRYRCdJUOHpWL0Rqb9hPFu/U r8Aq25Gq+YlfvLyGlW0AVVQdRQ8InfxMssHNjq7KC3dfl+MhBRHSDnEg+BzOCbK4 uNK4iOJah9WRf46T34QxdyTKMJu30L6d8YRGW2hDmY1NCzS4gNolPjDmdk9WM4tU Td80rAEM6hNzak66N2RtC45Gr8mMDzvpNr5CF/MIxTInwMyRzkayfw3H+9GrplUm oVKOew0OH4OM5CbkiboG1KQn1KBkne8yzY5VxdJi9U0ukyzi1LIx612egq4Yjd7z d9NDVPFRPCdDWzf9h7vKZh7x+Wx654GYL5jsjuRuvXDbTkIqVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB6mLGDu4wiqNFMTdpuKRFWoFYnfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jYzBl YjJkZS1lNWU4LTQxMDgtODcwZS04Y2JiZmYzOTg4NWQvZDY0NTMzNDAtZjM2OC0z ODRlLWIxMTAtNDk5MTBlZTM1MzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2MwZWIyZGUtZTVlOC00MTA4LTg3 MGUtOGNiYmZmMzk4ODVkL2NjMGViMmRlLWU1ZTgtNDEwOC04NzBlLThjYmJmZjM5 ODg1ZC5jcmwwHwYDVR0jBBgwFoAUbCgRS8LjSpyBl9ozSHser0539MkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jYzBlYjJkZS1lNWU4LTQxMDgtODcwZS04Y2Ji ZmYzOTg4NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgIC2wEU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIStVvxPif2glnd0FZTLlmHR8++gbXLONbf1LH9oMrL35ED6ZmpI 9cx8wB9xgaBsfpigEaxW6NTpNILrSk+ZN2aI5S6HQFY1/QLf3+Ay8JAk3K//pFx7 vs2NpE3v2o7rvIKr/3YoIwV2ShHu18XYZycLtU2wevcVnLxTEFz2cpoKJlWiAYRW xya5n3YDEXmbQJsQ3eXOx1J6us9M+KmskD9NkvhX6+l5xQjcFFcR/8T7hCQMr5b6 bah1qxQVsJvBKXNSVb+ym+ygTPaF+5FFPHLQjyu8lTWrLQqhadFUIspi6hIwv5au XeM6oYTCz9Q5JUghO2Y1JOjLTFYjZJuumq4= -----END CERTIFICATE-----Generated at Sat May 10 19:17:17 2025 by rpki-client