$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83/50e5ab7c-1acf-3dbe-8b60-a943b5dffa4f.roa File: 50e5ab7c-1acf-3dbe-8b60-a943b5dffa4f.roa (raw, json) Hash identifier: Xdzdj9MCqgkhjdgRyqp1wD7Oa1r+w8YAKvxqB1ZWj3w= Subject key identifier: B3:D7:6F:D3:8D:6E:E2:46:D7:7E:58:4B:18:8F:F9:08:37:3E:E5:07 Certificate issuer: /CN=cc2d4c2a-348d-4380-bc7d-7ec3ced46b83 Certificate serial: 010D0C9F43285848FBF12F7A7BC52981C15B8700 Authority key identifier: 05:D9:33:DD:A3:8D:D5:3A:18:CA:6F:FA:6E:AC:CA:11:7E:65:6A:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83/50e5ab7c-1acf-3dbe-8b60-a943b5dffa4f.roa Signing time: Mon 24 Feb 2025 02:00:38 +0000 ROA not before: Mon 24 Feb 2025 02:00:38 +0000 ROA not after: Sun 25 May 2025 01:00:38 +0000 asID: 401513 IP address blocks: 2602:f785::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fb:f1:2f:7a:7b:c5:29:81:c1:5b:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc2d4c2a-348d-4380-bc7d-7ec3ced46b83 Validity Not Before: Feb 24 02:00:38 2025 GMT Not After : May 25 01:00:38 2025 GMT Subject: CN=d5926842-4a3b-47f6-b878-e4415d8fbd9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e9:a4:5a:53:12:f4:df:b8:95:5f:56:cd:f1: 66:38:99:89:50:46:90:30:31:1c:6f:67:65:d5:88: c2:fd:de:e5:c0:27:2f:77:e7:a0:83:10:d9:62:ba: 95:ad:aa:0d:91:bd:93:b2:8f:40:33:4b:1a:59:7e: 24:5d:14:f3:88:9d:4b:dd:68:d4:8d:37:84:83:65: cd:5b:62:89:71:13:16:d8:f6:42:9c:f4:54:f1:b8: 8b:18:d6:6f:b3:bf:90:8d:a8:b2:19:cc:6d:e3:85: 71:0f:44:4d:05:90:35:fa:b8:20:71:97:b0:d7:24: b6:5b:15:af:dc:4b:7f:c0:4c:78:3c:b4:1d:78:99: b7:09:52:d7:01:3f:39:36:6b:91:0e:2a:1c:8d:f9: ea:7b:be:24:1f:e7:cb:bf:e0:50:54:b9:43:a7:32: e3:0f:ee:4e:23:f7:90:44:12:a1:c4:58:16:b2:04: d6:ba:49:5b:dd:0b:10:ed:e2:f8:bd:f8:26:95:ea: ec:76:cb:04:cc:6b:70:a5:a6:83:84:b4:60:1e:aa: 85:e9:51:47:da:43:c4:a0:26:d5:f3:64:d4:a1:b7: 19:15:14:d0:81:51:64:62:c8:bd:69:f7:c9:20:5a: de:91:9d:8b:68:2b:8a:5c:84:c0:13:7f:74:96:62: 4c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D7:6F:D3:8D:6E:E2:46:D7:7E:58:4B:18:8F:F9:08:37:3E:E5:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83/50e5ab7c-1acf-3dbe-8b60-a943b5dffa4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83.crl X509v3 Authority Key Identifier: keyid:05:D9:33:DD:A3:8D:D5:3A:18:CA:6F:FA:6E:AC:CA:11:7E:65:6A:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83.cer sbgp-ipAddrBlock: critical IPv6: 2602:f785::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:ed:39:b5:06:63:21:49:32:30:41:37:77:f3:34:34:b6:3c: dc:ef:7e:43:66:0c:09:e7:a0:ad:1c:a0:15:a2:d5:79:d0:f8: 74:19:63:39:8d:e7:00:34:d8:2d:0b:c6:d2:17:95:5f:8d:d5: 86:46:16:39:48:9b:b8:6a:6c:0d:b5:d0:58:cf:d6:8f:08:27: ad:31:81:bd:42:a7:df:42:e8:7d:71:4d:a3:61:b1:6b:4b:f6: 1a:93:eb:81:9a:4c:9b:02:83:af:7a:bf:0b:32:46:32:e2:2a: e3:e5:4d:f7:87:b2:00:93:fb:fe:79:ad:55:9b:d6:26:94:89: 54:3f:70:20:d0:80:92:1d:b2:d1:71:0b:7c:14:b2:d9:1e:41: 91:1b:8c:8d:25:35:05:b6:16:fd:26:8a:cc:1f:70:fb:e5:17: e5:80:65:ad:1c:88:91:23:e0:bd:4f:62:d8:f0:4a:5e:5b:45: cd:68:ec:d8:af:63:b5:cb:46:dc:79:82:ea:47:93:82:86:57: 4a:3b:25:fc:a6:3e:85:e1:9c:c7:ef:67:cd:da:32:96:a8:f6: 9c:d1:67:cb:c4:af:c1:bb:09:41:62:0d:9f:3b:1d:f7:be:6c: a7:81:98:b1:cb:b9:a8:e1:28:0f:e7:1b:f1:96:ec:9c:c6:e9: 27:fa:33:a5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEj78S96e8UpgcFbhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MyZDRjMmEtMzQ4ZC00MzgwLWJjN2QtN2VjM2NlZDQ2 YjgzMB4XDTI1MDIyNDAyMDAzOFoXDTI1MDUyNTAxMDAzOFowLzEtMCsGA1UEAxMk ZDU5MjY4NDItNGEzYi00N2Y2LWI4NzgtZTQ0MTVkOGZiZDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnemkWlMS9N+4lV9WzfFmOJmJUEaQMDEcb2dl 1YjC/d7lwCcvd+eggxDZYrqVraoNkb2Tso9AM0saWX4kXRTziJ1L3WjUjTeEg2XN W2KJcRMW2PZCnPRU8biLGNZvs7+QjaiyGcxt44VxD0RNBZA1+rggcZew1yS2WxWv 3Et/wEx4PLQdeJm3CVLXAT85NmuRDiocjfnqe74kH+fLv+BQVLlDpzLjD+5OI/eQ RBKhxFgWsgTWuklb3QsQ7eL4vfgmlersdssEzGtwpaaDhLRgHqqF6VFH2kPEoCbV 82TUobcZFRTQgVFkYsi9affJIFrekZ2LaCuKXITAE390lmJMHQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLPXb9ONbuJG135YSxiP+Qg3PuUHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYzJk NGMyYS0zNDhkLTQzODAtYmM3ZC03ZWMzY2VkNDZiODMvNTBlNWFiN2MtMWFjZi0z ZGJlLThiNjAtYTk0M2I1ZGZmYTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2MyZDRjMmEtMzQ4ZC00MzgwLWJj N2QtN2VjM2NlZDQ2YjgzL2NjMmQ0YzJhLTM0OGQtNDM4MC1iYzdkLTdlYzNjZWQ0 NmI4My5jcmwwHwYDVR0jBBgwFoAUBdkz3aON1ToYym/6bqzKEX5lakowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYzJkNGMyYS0zNDhkLTQzODAtYmM3ZC03ZWMz Y2VkNDZiODMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL3hQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAne05tQZjIUkyMEE3d/M0NLY83O9+Q2YMCeegrRygFaLVedD4dBlj OY3nADTYLQvG0heVX43VhkYWOUibuGpsDbXQWM/WjwgnrTGBvUKn30LofXFNo2Gx a0v2GpPrgZpMmwKDr3q/CzJGMuIq4+VN94eyAJP7/nmtVZvWJpSJVD9wINCAkh2y 0XELfBSy2R5BkRuMjSU1BbYW/SaKzB9w++UX5YBlrRyIkSPgvU9i2PBKXltFzWjs 2K9jtctG3HmC6keTgoZXSjsl/KY+heGcx+9nzdoylqj2nNFny8SvwbsJQWINnzsd 975sp4GYscu5qOEoD+cb8ZbsnMbpJ/ozpQ== -----END CERTIFICATE-----Generated at Wed May 7 15:03:14 2025 by rpki-client