$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/9f72c271-f1f1-38c0-b9d4-ae2deadaf80c.roa File: 9f72c271-f1f1-38c0-b9d4-ae2deadaf80c.roa (raw, json) Hash identifier: LsXzZUQg4iJ3d7tXoh9rxy+JNedcg+61yYF2xVwl03s= Subject key identifier: F8:E0:2F:D9:7F:65:06:20:38:98:B1:AB:C4:3B:AB:9F:2F:C5:55:99 Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Certificate serial: 010D0C9F432858494469476F7AFEB7322E66FBE0 Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/9f72c271-f1f1-38c0-b9d4-ae2deadaf80c.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 33039 IP address blocks: 2602:f95c:7a3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:47:6f:7a:fe:b7:32:2e:66:fb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=69d6f190-c3c4-4bc8-aae6-b798f2c86231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d4:41:52:de:46:4e:fa:c1:37:26:a9:67:1d: f0:6d:db:fa:e5:9d:f6:b7:c0:a0:fe:fd:a5:d6:76: 4b:84:dd:d5:57:59:2a:c6:95:93:3d:a5:0c:76:18: af:38:c1:46:dc:b7:68:bb:5d:48:8e:75:5d:dd:b9: 99:73:b0:ba:d3:8b:31:41:55:15:34:d6:dc:f9:69: 63:c6:49:1e:29:a3:a5:42:a4:08:e7:0c:30:71:5a: 83:5b:e4:5f:4f:67:94:46:af:17:3d:74:97:04:96: 0a:37:11:15:df:40:3f:2a:d3:1d:4c:6d:6e:86:b0: ed:7c:a3:68:31:67:b7:44:7f:c4:c6:1b:76:07:4a: 81:6f:c1:35:bd:2f:ff:46:0c:a2:39:77:4c:6a:94: 84:5e:62:cf:ff:17:28:cb:78:41:4e:05:52:d4:64: fd:ff:0a:0e:0b:9b:e6:d0:9f:23:32:90:1d:9d:0c: 7c:3c:c2:f5:ef:07:e6:ce:ce:e6:2f:c3:c1:c2:ba: c8:0a:d3:13:41:68:c4:26:c7:17:c7:1b:7f:d1:da: 6b:6a:5a:08:bb:f6:76:51:bb:db:c4:0c:70:d2:1a: aa:ad:6f:64:58:61:ba:05:c9:67:3f:c8:20:50:c0: f0:18:6e:d4:83:cc:d9:6d:36:9b:bb:9b:77:70:73: a4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E0:2F:D9:7F:65:06:20:38:98:B1:AB:C4:3B:AB:9F:2F:C5:55:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/9f72c271-f1f1-38c0-b9d4-ae2deadaf80c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl X509v3 Authority Key Identifier: keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer sbgp-ipAddrBlock: critical IPv6: 2602:f95c:7a3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:6d:a9:07:25:cb:1a:af:b1:df:52:f1:b8:43:d8:ae:55:b4: b5:81:8f:ec:60:ea:6f:30:02:27:6d:2c:e6:40:52:cb:76:03: e3:7e:e6:44:c6:75:45:60:2a:55:36:f6:cb:cf:50:f4:e2:70: 02:8e:91:65:aa:6d:ee:b5:90:b4:af:a4:d0:9a:5d:7b:5e:90: bf:37:d9:fb:15:35:6d:d3:2e:2d:c8:f9:d2:b5:f5:3d:18:27: ed:80:cb:68:85:64:ef:b0:40:af:12:46:d6:8d:27:7d:a9:ea: 9b:81:2d:fa:6e:d9:0e:63:e6:41:c3:4f:58:9f:28:91:ed:a1: 43:ab:b8:f6:56:95:95:29:32:b9:48:bb:c5:17:8b:f3:fa:bd: 75:7a:d3:17:3a:94:14:2f:7d:7a:ad:5e:66:f6:0e:ab:a0:dd: 1b:cc:fe:3c:cb:2a:72:5c:8d:bc:51:96:f2:82:d9:39:0e:d8: 0d:2d:b3:fb:ae:1f:76:29:db:29:7f:2f:56:ac:fa:a8:59:1d: e4:ac:33:c3:c7:de:1a:cc:f1:0c:1a:a4:f4:48:3a:d2:25:01: bd:90:54:a1:a3:1e:3d:f9:25:1a:8e:52:65:f7:ca:f1:07:74: a4:87:3b:95:c5:a9:84:70:7f:4e:ef:9c:35:f6:1d:c5:63:1a: f3:b1:41:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElEaUdvev63Mi5m++AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNjNzhkNjAtMzRlYi00ZmVkLThlMjUtOTI1Yjk1YTMw YzhlMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk NjlkNmYxOTAtYzNjNC00YmM4LWFhZTYtYjc5OGYyYzg2MjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9RBUt5GTvrBNyapZx3wbdv65Z32t8Cg/v2l 1nZLhN3VV1kqxpWTPaUMdhivOMFG3Ldou11IjnVd3bmZc7C604sxQVUVNNbc+Wlj xkkeKaOlQqQI5wwwcVqDW+RfT2eURq8XPXSXBJYKNxEV30A/KtMdTG1uhrDtfKNo MWe3RH/Exht2B0qBb8E1vS//RgyiOXdMapSEXmLP/xcoy3hBTgVS1GT9/woOC5vm 0J8jMpAdnQx8PML17wfmzs7mL8PBwrrICtMTQWjEJscXxxt/0dpraloIu/Z2Ubvb xAxw0hqqrW9kWGG6BclnP8ggUMDwGG7Ug8zZbTabu5t3cHOklwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPjgL9l/ZQYgOJixq8Q7q58vxVWZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zM2M3 OGQ2MC0zNGViLTRmZWQtOGUyNS05MjViOTVhMzBjOGUvOWY3MmMyNzEtZjFmMS0z OGMwLWI5ZDQtYWUyZGVhZGFmODBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzNjNzhkNjAtMzRlYi00ZmVkLThl MjUtOTI1Yjk1YTMwYzhlLzMzYzc4ZDYwLTM0ZWItNGZlZC04ZTI1LTkyNWI5NWEz MGM4ZS5jcmwwHwYDVR0jBBgwFoAUX2UlsGmXIYLm4tORRne6XDPT4EEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zM2M3OGQ2MC0zNGViLTRmZWQtOGUyNS05MjVi OTVhMzBjOGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5XAej MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAExtqQclyxqvsd9S8bhD2K5VtLWBj+xg6m8wAidtLOZAUst2A+N+ 5kTGdUVgKlU29svPUPTicAKOkWWqbe61kLSvpNCaXXtekL832fsVNW3TLi3I+dK1 9T0YJ+2Ay2iFZO+wQK8SRtaNJ32p6puBLfpu2Q5j5kHDT1ifKJHtoUOruPZWlZUp MrlIu8UXi/P6vXV60xc6lBQvfXqtXmb2Dqug3RvM/jzLKnJcjbxRlvKC2TkO2A0t s/uuH3Yp2yl/L1as+qhZHeSsM8PH3hrM8QwapPRIOtIlAb2QVKGjHj35JRqOUmX3 yvEHdKSHO5XFqYRwf07vnDX2HcVjGvOxQaE= -----END CERTIFICATE-----Generated at Fri Apr 4 19:51:26 2025 by rpki-client