$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a68d2f38-09d2-4f0c-b179-52244e19fa2a/a59f8e6f-9330-3a4f-864a-21e722c0ea34.roa File: a59f8e6f-9330-3a4f-864a-21e722c0ea34.roa (raw, json) Hash identifier: U+GP2AsSozJY05oo3OyOqUQe0plQVLf73Ku97a4eqXE= Subject key identifier: 53:D6:CD:C0:42:35:D6:44:CA:EE:EB:A9:C3:E7:96:F3:9F:52:E7:F9 Certificate issuer: /CN=a68d2f38-09d2-4f0c-b179-52244e19fa2a Certificate serial: 010D0C9F432858492A80570938D0B3759AC47BF0 Authority key identifier: 30:77:84:8C:FD:82:E6:3A:05:8B:32:1C:76:68:7E:FA:27:F5:04:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a68d2f38-09d2-4f0c-b179-52244e19fa2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a68d2f38-09d2-4f0c-b179-52244e19fa2a/a59f8e6f-9330-3a4f-864a-21e722c0ea34.roa Signing time: Wed 12 Mar 2025 18:16:22 +0000 ROA not before: Wed 12 Mar 2025 18:16:22 +0000 ROA not after: Tue 10 Jun 2025 18:16:22 +0000 asID: 401219 IP address blocks: 2602:f881::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a68d2f38-09d2-4f0c-b179-52244e19fa2a/a68d2f38-09d2-4f0c-b179-52244e19fa2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a68d2f38-09d2-4f0c-b179-52244e19fa2a/a68d2f38-09d2-4f0c-b179-52244e19fa2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a68d2f38-09d2-4f0c-b179-52244e19fa2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2a:80:57:09:38:d0:b3:75:9a:c4:7b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a68d2f38-09d2-4f0c-b179-52244e19fa2a Validity Not Before: Mar 12 18:16:22 2025 GMT Not After : Jun 10 18:16:22 2025 GMT Subject: CN=1679158c-4772-4176-acb9-9a8fc5858827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:00:55:a6:63:82:ad:2b:5a:06:14:27:13:27: b5:ae:96:ab:08:b1:56:d3:ae:b9:dd:19:20:eb:d3: a6:01:cd:80:e9:71:e9:6a:b9:71:46:1d:39:35:c2: 9a:00:aa:0f:5e:bf:6a:4a:d7:51:ac:c5:56:25:30: b9:3e:f5:cb:1a:3f:72:2b:93:22:ae:55:3d:48:bd: b3:de:0c:e6:e3:03:63:06:59:44:ab:ae:ff:07:56: d6:00:ce:d4:43:25:9e:c5:1c:5f:ad:d0:39:d4:fa: cd:2c:31:54:65:52:41:49:0b:a3:8d:15:d6:6c:81: e2:25:ea:53:0b:7f:52:12:01:0c:65:7a:a5:6e:d5: 04:bf:c0:17:59:ad:65:2b:8f:d9:00:e2:a1:d9:0b: c0:5c:de:6c:34:32:f6:b8:b5:70:4c:c0:09:2d:c8: c0:3a:47:52:37:32:d6:e9:ce:89:11:11:c7:2b:cc: 59:aa:08:6d:f1:e9:66:1a:08:d0:fe:93:4f:52:a6: 71:63:2b:82:7c:07:09:0f:a6:2b:5a:f0:2d:66:50: 78:d5:02:63:51:98:16:d3:e4:8c:ff:b7:90:4f:96: 7f:eb:bd:3a:1a:7d:7e:b5:a1:b7:62:9a:67:54:93: ac:d9:32:a8:ac:ac:ab:2f:82:25:50:84:43:56:67: e8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D6:CD:C0:42:35:D6:44:CA:EE:EB:A9:C3:E7:96:F3:9F:52:E7:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a68d2f38-09d2-4f0c-b179-52244e19fa2a/a59f8e6f-9330-3a4f-864a-21e722c0ea34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a68d2f38-09d2-4f0c-b179-52244e19fa2a/a68d2f38-09d2-4f0c-b179-52244e19fa2a.crl X509v3 Authority Key Identifier: keyid:30:77:84:8C:FD:82:E6:3A:05:8B:32:1C:76:68:7E:FA:27:F5:04:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a68d2f38-09d2-4f0c-b179-52244e19fa2a.cer sbgp-ipAddrBlock: critical IPv6: 2602:f881::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b6:be:9f:24:9e:18:9c:15:0a:4a:ea:50:52:1e:43:19:2e: 7c:9c:06:7f:f8:ea:3c:a2:ea:1b:db:50:ab:de:a5:44:54:8d: 48:6d:4c:6b:e9:af:7c:9c:a2:b4:f8:22:e9:61:16:24:b0:27: c4:d5:4f:43:c1:ae:2c:fc:6f:e7:36:21:2e:2f:4f:2c:2f:27: ae:db:95:25:31:c7:5f:07:78:4d:11:d9:3a:85:6b:71:dc:56: 00:68:f2:45:23:4b:29:e7:67:ec:88:2a:c4:6c:31:34:0c:c4: ae:a2:02:2c:36:4d:c0:54:66:5e:75:d7:74:e4:4f:80:1a:35: b3:f3:19:e1:1d:7d:a5:34:d9:c0:88:62:5c:88:d3:43:c4:1c: 27:21:67:6c:74:c2:da:85:ca:bc:13:2a:1e:3a:6d:92:38:dd: a9:be:92:f6:64:75:55:cc:8c:6c:24:16:63:d9:23:a4:82:88: c7:64:21:fe:ff:e3:2e:c3:7e:07:0a:d3:7c:a8:82:bc:31:bf: ce:a4:fb:08:c2:5a:11:aa:b4:21:fc:39:a0:44:b3:2f:33:94: e6:3f:9d:da:23:f4:1b:a5:46:fe:27:0b:b9:1a:53:be:ca:c3: ac:25:d3:04:f4:e6:4c:21:ae:68:3e:7d:07:23:da:f7:55:84: bd:f1:da:a7 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkqgFcJONCzdZrEe/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY4ZDJmMzgtMDlkMi00ZjBjLWIxNzktNTIyNDRlMTlm YTJhMB4XDTI1MDMxMjE4MTYyMloXDTI1MDYxMDE4MTYyMlowLzEtMCsGA1UEAxMk MTY3OTE1OGMtNDc3Mi00MTc2LWFjYjktOWE4ZmM1ODU4ODI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywBVpmOCrStaBhQnEye1rparCLFW06653Rkg 69OmAc2A6XHparlxRh05NcKaAKoPXr9qStdRrMVWJTC5PvXLGj9yK5MirlU9SL2z 3gzm4wNjBllEq67/B1bWAM7UQyWexRxfrdA51PrNLDFUZVJBSQujjRXWbIHiJepT C39SEgEMZXqlbtUEv8AXWa1lK4/ZAOKh2QvAXN5sNDL2uLVwTMAJLcjAOkdSNzLW 6c6JERHHK8xZqght8elmGgjQ/pNPUqZxYyuCfAcJD6YrWvAtZlB41QJjUZgW0+SM /7eQT5Z/6706Gn1+taG3YppnVJOs2TKorKyrL4IlUIRDVmfo+wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFPWzcBCNdZEyu7rqcPnlvOfUuf5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNjhk MmYzOC0wOWQyLTRmMGMtYjE3OS01MjI0NGUxOWZhMmEvYTU5ZjhlNmYtOTMzMC0z YTRmLTg2NGEtMjFlNzIyYzBlYTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTY4ZDJmMzgtMDlkMi00ZjBjLWIx NzktNTIyNDRlMTlmYTJhL2E2OGQyZjM4LTA5ZDItNGYwYy1iMTc5LTUyMjQ0ZTE5 ZmEyYS5jcmwwHwYDVR0jBBgwFoAUMHeEjP2C5joFizIcdmh++if1BAYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNjhkMmYzOC0wOWQyLTRmMGMtYjE3OS01MjI0 NGUxOWZhMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL4gQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYLa+nySeGJwVCkrqUFIeQxkufJwGf/jqPKLqG9tQq96lRFSNSG1M a+mvfJyitPgi6WEWJLAnxNVPQ8GuLPxv5zYhLi9PLC8nrtuVJTHHXwd4TRHZOoVr cdxWAGjyRSNLKedn7IgqxGwxNAzErqICLDZNwFRmXnXXdORPgBo1s/MZ4R19pTTZ wIhiXIjTQ8QcJyFnbHTC2oXKvBMqHjptkjjdqb6S9mR1VcyMbCQWY9kjpIKIx2Qh /v/jLsN+BwrTfKiCvDG/zqT7CMJaEaq0Ifw5oESzLzOU5j+d2iP0G6VG/icLuRpT vsrDrCXTBPTmTCGuaD59ByPa91WEvfHapw== -----END CERTIFICATE-----Generated at Tue May 6 21:02:42 2025 by rpki-client