$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/5f8f69ec-c39a-3802-984f-8412e35aa83b.roa File: 5f8f69ec-c39a-3802-984f-8412e35aa83b.roa (raw, json) Hash identifier: x/yimpiMpM5YnLYrk3yClZi93qSHsclV8Tfpv0vfakU= Subject key identifier: 01:F7:F9:2D:82:B4:F8:2E:3E:63:13:3C:55:E1:D1:78:D7:E0:C6:82 Certificate issuer: /CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee Certificate serial: 010D0C9F432858494469403326B32056D5B5A900 Authority key identifier: 71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/5f8f69ec-c39a-3802-984f-8412e35aa83b.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 400688 IP address blocks: 2602:80f:900c::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:40:33:26:b3:20:56:d5:b5:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=b61f0250-0417-4b7d-b19e-9807ab0660f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ae:68:9c:0e:2b:ad:78:31:2e:7f:4a:8c:f5: 32:aa:48:d9:ae:ad:d6:21:fd:9f:3a:09:ea:9b:ca: 9d:af:6c:80:2d:d2:df:6a:db:67:c5:b6:62:c4:b7: 85:fe:f0:60:41:00:9d:d6:15:45:a0:0e:bd:5b:5d: e3:2d:94:f1:66:54:ff:a6:b1:d3:58:f3:35:0b:a5: 6f:5f:5e:71:96:3c:ca:f1:84:cd:23:e8:b9:60:93: 12:b0:8f:ac:8c:cf:17:5f:33:f5:dd:c0:9a:b5:2c: 6d:da:a6:06:97:fa:47:4b:e8:6f:c7:16:0a:35:93: 12:6a:fc:7c:a9:8e:eb:4d:9d:fe:85:7a:8b:2e:61: 2c:c7:9d:5e:d4:60:34:a1:f5:5e:61:9c:d0:2d:93: 8f:1c:c4:39:42:1b:16:5d:2c:5d:9d:8e:83:0a:76: 02:32:b1:80:19:bf:fa:6a:1b:e5:f3:10:d5:7d:89: 41:72:17:c9:be:ef:63:79:cc:49:ab:6c:30:c0:17: 1d:60:c4:7c:42:11:09:ac:b1:c9:8c:4e:cc:50:20: 3d:5a:d6:77:51:f2:61:b9:b6:c7:be:7c:39:12:8a: db:65:84:ab:bb:b4:b0:81:60:4c:be:83:21:c5:f2: 47:19:35:bb:85:b2:e9:30:8a:e0:fe:41:c3:cf:ce: fd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F7:F9:2D:82:B4:F8:2E:3E:63:13:3C:55:E1:D1:78:D7:E0:C6:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/5f8f69ec-c39a-3802-984f-8412e35aa83b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl X509v3 Authority Key Identifier: keyid:71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer sbgp-ipAddrBlock: critical IPv6: 2602:80f:900c::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ef:5e:f6:7f:4e:3d:3f:eb:73:aa:3c:dd:22:a4:0e:6f:a8: 4b:3d:3e:cf:db:ab:26:01:b6:36:cb:31:55:c4:6f:60:e1:7f: 78:e7:f5:07:36:44:4b:32:28:02:f0:cf:75:0c:88:1b:0b:69: f8:ce:d3:6b:ce:2e:b9:fd:70:46:80:a3:b9:23:22:2f:1b:24: 84:ae:70:20:20:03:23:02:e5:91:1b:2b:56:79:4f:74:0a:12: 4b:14:0c:fa:0e:af:3e:d4:25:76:67:b1:45:27:95:2b:2f:5b: a9:3a:59:73:f9:5f:9c:1e:7d:72:1c:bf:bd:ce:b7:3f:f8:dc: 21:75:34:4a:f8:ba:27:06:d6:e3:c8:65:e3:94:d9:fe:92:5d: c3:5b:0a:67:58:78:6f:e8:2d:0c:f7:17:6c:96:14:2c:5b:79: a3:a8:01:20:c2:3b:38:1d:4b:3f:d2:d5:7b:8a:85:7f:d3:79: f6:a6:88:a8:87:0f:94:ab:be:28:2b:4f:bb:f5:63:73:3e:0d: 2d:c8:f6:11:dc:6e:49:2b:07:a1:e8:2b:3b:d9:9b:91:ff:af: be:0e:a6:09:85:96:f3:02:be:35:12:1f:7e:25:c7:a2:6e:0d: 8d:9a:67:7b:d3:9c:1a:5f:b0:90:81:02:a3:ad:1b:40:0c:fe: d2:61:79:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElEaUAzJrMgVtW1qQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM0NzY4N2MtZDgwZC00NmUyLWIzMGUtMTBhZTY4ZDhl MWVlMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk YjYxZjAyNTAtMDQxNy00YjdkLWIxOWUtOTgwN2FiMDY2MGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza5onA4rrXgxLn9KjPUyqkjZrq3WIf2fOgnq m8qdr2yALdLfattnxbZixLeF/vBgQQCd1hVFoA69W13jLZTxZlT/prHTWPM1C6Vv X15xljzK8YTNI+i5YJMSsI+sjM8XXzP13cCatSxt2qYGl/pHS+hvxxYKNZMSavx8 qY7rTZ3+hXqLLmEsx51e1GA0ofVeYZzQLZOPHMQ5QhsWXSxdnY6DCnYCMrGAGb/6 ahvl8xDVfYlBchfJvu9jecxJq2wwwBcdYMR8QhEJrLHJjE7MUCA9WtZ3UfJhubbH vnw5EorbZYSru7SwgWBMvoMhxfJHGTW7hbLpMIrg/kHDz879zQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAH3+S2CtPguPmMTPFXh0XjX4MaCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMzQ3 Njg3Yy1kODBkLTQ2ZTItYjMwZS0xMGFlNjhkOGUxZWUvNWY4ZjY5ZWMtYzM5YS0z ODAyLTk4NGYtODQxMmUzNWFhODNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTM0NzY4N2MtZDgwZC00NmUyLWIz MGUtMTBhZTY4ZDhlMWVlL2UzNDc2ODdjLWQ4MGQtNDZlMi1iMzBlLTEwYWU2OGQ4 ZTFlZS5jcmwwHwYDVR0jBBgwFoAUcaIz1Ch+MfU34SL6UnnC6wYl1ZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMzQ3Njg3Yy1kODBkLTQ2ZTItYjMwZS0xMGFl NjhkOGUxZWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgIID5AM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADvvXvZ/Tj0/63OqPN0ipA5vqEs9Ps/bqyYBtjbLMVXEb2Dhf3jn 9Qc2REsyKALwz3UMiBsLafjO02vOLrn9cEaAo7kjIi8bJISucCAgAyMC5ZEbK1Z5 T3QKEksUDPoOrz7UJXZnsUUnlSsvW6k6WXP5X5wefXIcv73Otz/43CF1NEr4uicG 1uPIZeOU2f6SXcNbCmdYeG/oLQz3F2yWFCxbeaOoASDCOzgdSz/S1XuKhX/Tefam iKiHD5SrvigrT7v1Y3M+DS3I9hHcbkkrB6HoKzvZm5H/r74OpgmFlvMCvjUSH34l x6JuDY2aZ3vTnBpfsJCBAqOtG0AM/tJheVY= -----END CERTIFICATE-----Generated at Sat Apr 5 09:59:36 2025 by rpki-client