$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/65b660a1-3975-385b-add8-d9b4f1e98a18.roa File: 65b660a1-3975-385b-add8-d9b4f1e98a18.roa (raw, json) Hash identifier: ffJc5kV7t5Nmr47cFbCb8XKBjvnAyQDTLUPHiKaRD5Q= Subject key identifier: 49:78:F4:CB:C4:A2:CE:63:68:DD:98:EB:C9:E4:16:C9:38:A2:95:62 Certificate issuer: /CN=21a7c020-ebbc-4762-8841-54efb508a7c7 Certificate serial: 010D0C9F432858497279B9A719D1E719714F1580 Authority key identifier: 22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/65b660a1-3975-385b-add8-d9b4f1e98a18.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 64199 IP address blocks: 2602:fa78::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:b9:a7:19:d1:e7:19:71:4f:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a7c020-ebbc-4762-8841-54efb508a7c7 Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=038b77ba-3974-4a8a-81ea-49a3537466ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4e:2f:1b:47:f6:60:cd:d4:c0:1c:70:18:69: d0:83:1a:cb:26:09:58:d1:33:b1:5b:95:4b:50:09: 8e:3a:d5:f2:4c:37:cb:a4:b8:3f:24:12:b8:7f:b7: 24:20:74:e0:96:c7:68:c0:fa:23:82:d1:2e:09:5b: 79:a8:ca:8e:28:e7:ac:5f:f8:8f:73:3f:01:ab:73: 25:92:d0:b4:3d:f6:e8:c4:2a:05:93:ce:9c:05:b7: 90:94:09:60:65:f1:2d:f9:6e:64:2a:c1:ac:82:b1: 17:cb:45:f5:67:50:8a:05:b4:f2:d2:61:56:49:6d: 3d:b4:d8:6f:82:7b:5d:fd:06:0c:19:a0:2b:f6:16: 35:ab:7f:f4:58:32:9e:a1:88:50:5e:23:7b:58:cd: 84:e4:d6:2c:a1:f1:6b:52:1e:48:f2:6e:f5:62:92: bb:4d:1f:18:a6:86:df:96:2d:ab:20:8a:4d:48:6f: 3b:96:d0:19:20:15:1f:1d:59:a7:bb:e9:c5:60:bb: e9:57:7c:02:c0:bd:23:dd:4c:33:d5:08:9e:3c:95: 81:4b:bd:05:45:49:d6:a5:bc:3e:21:f1:74:1f:a5: d0:ac:27:d0:3a:9a:5c:d8:7d:2c:c4:bd:34:f6:42: 59:47:f7:60:bf:bb:35:bf:d0:1a:c0:00:0c:00:a5: 73:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:78:F4:CB:C4:A2:CE:63:68:DD:98:EB:C9:E4:16:C9:38:A2:95:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/65b660a1-3975-385b-add8-d9b4f1e98a18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl X509v3 Authority Key Identifier: keyid:22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa78::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:b7:66:ed:3c:05:e3:b4:9a:f6:46:e3:3f:fa:74:37:c3:ad: aa:b1:f0:75:89:f8:19:a5:d0:9a:eb:e2:5a:5c:61:0c:83:58: 35:b2:b7:3a:ea:e7:91:11:69:d7:5c:5c:37:db:16:5c:ab:24: 21:17:09:9a:92:ce:2f:14:52:82:88:0a:d4:c3:29:f2:a9:a9: dc:7a:4d:f5:3a:54:dd:52:36:a8:c7:1a:7d:f7:61:a5:46:57: cd:c8:a1:d4:8e:11:52:c5:17:a9:95:ee:9d:3c:a6:eb:9a:04: 13:78:ad:55:72:b5:e6:57:18:b1:9d:e6:8b:52:23:55:64:d7: f7:46:9a:a6:60:db:cb:f2:13:fa:28:44:bd:c1:13:78:97:38: 6a:dc:0e:81:e0:0e:3c:73:55:ac:ba:1d:64:a3:de:22:3f:9f: f1:90:62:13:2d:cd:10:60:1f:5e:d0:19:bf:43:fd:6f:07:3d: 71:dd:36:47:06:a2:5b:1f:b8:b8:27:78:34:a1:15:c4:d9:5a: 29:ed:29:0a:91:9a:4f:80:38:f9:a0:47:00:aa:0a:75:77:55: f2:75:ea:fc:a8:cf:21:e4:08:11:d5:c9:b5:4a:3d:78:b6:8f: 36:27:21:6d:a6:ae:fc:e3:b9:c0:94:f9:a0:73:29:66:87:c4: b3:6b:50:4c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElyebmnGdHnGXFPFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhN2MwMjAtZWJiYy00NzYyLTg4NDEtNTRlZmI1MDhh N2M3MB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk MDM4Yjc3YmEtMzk3NC00YThhLTgxZWEtNDlhMzUzNzQ2NmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgE4vG0f2YM3UwBxwGGnQgxrLJglY0TOxW5VL UAmOOtXyTDfLpLg/JBK4f7ckIHTglsdowPojgtEuCVt5qMqOKOesX/iPcz8Bq3Ml ktC0PfboxCoFk86cBbeQlAlgZfEt+W5kKsGsgrEXy0X1Z1CKBbTy0mFWSW09tNhv gntd/QYMGaAr9hY1q3/0WDKeoYhQXiN7WM2E5NYsofFrUh5I8m71YpK7TR8Ypobf li2rIIpNSG87ltAZIBUfHVmnu+nFYLvpV3wCwL0j3Uwz1QiePJWBS70FRUnWpbw+ IfF0H6XQrCfQOppc2H0sxL009kJZR/dgv7s1v9AawAAMAKVz3wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEl49MvEos5jaN2Y68nkFsk4opViMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWE3 YzAyMC1lYmJjLTQ3NjItODg0MS01NGVmYjUwOGE3YzcvNjViNjYwYTEtMzk3NS0z ODViLWFkZDgtZDliNGYxZTk4YTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFhN2MwMjAtZWJiYy00NzYyLTg4 NDEtNTRlZmI1MDhhN2M3LzIxYTdjMDIwLWViYmMtNDc2Mi04ODQxLTU0ZWZiNTA4 YTdjNy5jcmwwHwYDVR0jBBgwFoAUIm7/Fpf6khUxCul23NPYRtOPYZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWE3YzAyMC1lYmJjLTQ3NjItODg0MS01NGVm YjUwOGE3YzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6eAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQLdm7TwF47Sa9kbjP/p0N8OtqrHwdYn4GaXQmuviWlxhDINYNbK3 OurnkRFp11xcN9sWXKskIRcJmpLOLxRSgogK1MMp8qmp3HpN9TpU3VI2qMcaffdh pUZXzcih1I4RUsUXqZXunTym65oEE3itVXK15lcYsZ3mi1IjVWTX90aapmDby/IT +ihEvcETeJc4atwOgeAOPHNVrLodZKPeIj+f8ZBiEy3NEGAfXtAZv0P9bwc9cd02 RwaiWx+4uCd4NKEVxNlaKe0pCpGaT4A4+aBHAKoKdXdV8nXq/KjPIeQIEdXJtUo9 eLaPNichbaau/OO5wJT5oHMpZofEs2tQTA== -----END CERTIFICATE-----Generated at Fri Apr 11 23:31:05 2025 by rpki-client