$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/f869cbd8-4b13-3204-a71f-f9f77adaf977.roa File: f869cbd8-4b13-3204-a71f-f9f77adaf977.roa (raw, json) Hash identifier: Qdd6a3VIWilafuQ6eOVjM2ODuhEFn0WJMyYocEvev50= Subject key identifier: F2:4A:C9:D1:40:6C:43:E1:F2:B6:28:EF:55:B5:AA:BD:C6:F8:37:60 Certificate issuer: /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd Certificate serial: 010D0C9F43285849F9DFBDEC8BC77CD1BB3BCB00 Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/f869cbd8-4b13-3204-a71f-f9f77adaf977.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 0 IP address blocks: 2602:fd10:c00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:bd:ec:8b:c7:7c:d1:bb:3b:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=def7764a-3f91-429f-8abc-3fba79e3821f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c9:95:10:b5:04:f4:86:35:f9:49:49:d9:18: 18:9c:fd:b7:45:c7:70:ed:3a:3d:1b:e2:9b:43:3f: f8:4b:c8:92:ad:72:ec:45:a6:94:fc:cc:64:28:bb: e5:71:0f:21:4c:83:95:8c:d5:23:d1:3e:63:c2:30: ee:5d:e6:d8:fb:42:95:59:f9:2d:ad:09:64:a8:81: a8:b2:80:e0:72:e4:cb:a8:36:2a:f0:e7:17:09:5c: d3:ef:83:9f:c8:29:65:e9:0e:41:c3:4b:2b:94:04: 66:44:54:bd:a8:8c:6d:21:39:f7:b8:9a:79:ea:75: 10:82:a5:89:25:be:fa:87:19:34:8b:f1:74:0b:71: 06:2b:63:88:77:6d:5c:f4:93:72:0b:b3:bf:48:a2: e6:38:71:a7:be:92:96:ec:60:35:59:67:9f:78:c7: fd:52:aa:b0:aa:33:5f:a4:65:d6:0f:c1:d1:ed:d4: a7:dd:62:ea:cd:26:f6:18:d6:58:9d:9b:f4:53:3f: 4b:66:24:55:56:81:97:57:28:79:40:21:0c:0a:50: ed:04:c0:5d:c1:0f:cd:cb:06:39:18:cb:5d:a8:3a: 3d:3c:fe:90:73:01:20:7d:2b:54:ea:58:97:86:ab: 33:a0:80:16:9a:f3:fb:aa:b2:28:c6:d6:a2:e0:6c: b2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:4A:C9:D1:40:6C:43:E1:F2:B6:28:EF:55:B5:AA:BD:C6:F8:37:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/f869cbd8-4b13-3204-a71f-f9f77adaf977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl X509v3 Authority Key Identifier: keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd10:c00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:c9:4d:c5:b2:9e:18:2b:0a:59:0c:f8:64:4d:58:ee:72:69: 38:33:4b:d8:56:e5:50:b3:77:64:b1:8d:52:29:26:91:85:6c: c6:b9:6b:c1:d0:1d:55:18:65:71:ef:5d:c5:94:8b:b4:14:50: 17:c6:bb:a0:63:dc:95:dd:d5:14:3d:eb:2e:c6:a2:4f:31:51: ed:a1:db:5e:46:91:3b:52:cf:26:cc:e5:d1:40:56:6e:a0:5a: 34:bd:c6:29:f9:9b:a0:7a:9b:db:e7:1f:1e:21:4b:7b:15:08: 22:f5:86:a4:d7:40:72:94:02:40:f9:e8:41:22:71:83:3f:47: b3:8e:39:e5:e8:f4:bf:ed:07:56:2c:ca:c0:94:82:ba:91:dd: 66:c6:2b:66:38:f5:73:e3:73:74:f6:b7:34:8a:90:82:cb:47: bd:dd:5c:da:91:a0:fc:8e:84:45:da:b7:b6:15:24:d7:99:1b: a7:b9:32:6c:7a:3e:9e:6d:28:67:d7:48:ff:f2:a6:00:18:7c: 67:14:58:22:d6:b8:b6:a6:8d:91:fb:5f:38:3a:8b:15:3f:58: 8b:01:7a:0e:7e:12:81:0b:04:a4:c1:11:da:0a:21:6f:21:d6: 55:08:e7:8b:25:dd:dc:f5:72:49:54:37:1a:ca:cb:df:9c:92: 01:70:53:45 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEn5373si8d80bs7ywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTQyYzU3OTUtOTU0ZC00NjhmLTlkZWItN2YzYWI2M2Mx MWRkMB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk ZGVmNzc2NGEtM2Y5MS00MjlmLThhYmMtM2ZiYTc5ZTM4MjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3smVELUE9IY1+UlJ2RgYnP23Rcdw7To9G+Kb Qz/4S8iSrXLsRaaU/MxkKLvlcQ8hTIOVjNUj0T5jwjDuXebY+0KVWfktrQlkqIGo soDgcuTLqDYq8OcXCVzT74OfyCll6Q5Bw0srlARmRFS9qIxtITn3uJp56nUQgqWJ Jb76hxk0i/F0C3EGK2OId21c9JNyC7O/SKLmOHGnvpKW7GA1WWefeMf9UqqwqjNf pGXWD8HR7dSn3WLqzSb2GNZYnZv0Uz9LZiRVVoGXVyh5QCEMClDtBMBdwQ/NywY5 GMtdqDo9PP6QcwEgfStU6liXhqszoIAWmvP7qrIoxtai4GyyJwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPJKydFAbEPh8rYo71W1qr3G+DdgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNDJj NTc5NS05NTRkLTQ2OGYtOWRlYi03ZjNhYjYzYzExZGQvZjg2OWNiZDgtNGIxMy0z MjA0LWE3MWYtZjlmNzdhZGFmOTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTQyYzU3OTUtOTU0ZC00NjhmLTlk ZWItN2YzYWI2M2MxMWRkL2E0MmM1Nzk1LTk1NGQtNDY4Zi05ZGViLTdmM2FiNjNj MTFkZC5jcmwwHwYDVR0jBBgwFoAUhQ9DF07j3MbPHnpY1nyLgvEX3HAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNDJjNTc5NS05NTRkLTQ2OGYtOWRlYi03ZjNh YjYzYzExZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL9EAww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAMMlNxbKeGCsKWQz4ZE1Y7nJpODNL2FblULN3ZLGNUikmkYVsxrlr wdAdVRhlce9dxZSLtBRQF8a7oGPcld3VFD3rLsaiTzFR7aHbXkaRO1LPJszl0UBW bqBaNL3GKfmboHqb2+cfHiFLexUIIvWGpNdAcpQCQPnoQSJxgz9Hs4455ej0v+0H VizKwJSCupHdZsYrZjj1c+NzdPa3NIqQgstHvd1c2pGg/I6ERdq3thUk15kbp7ky bHo+nm0oZ9dI//KmABh8ZxRYIta4tqaNkftfODqLFT9YiwF6Dn4SgQsEpMER2goh byHWVQjniyXd3PVySVQ3GsrL35ySAXBTRQ== -----END CERTIFICATE-----Generated at Sun Jun 1 03:23:40 2025 by rpki-client