$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/86cfd56a-8ef0-3f13-bf58-fc3d519c472d.roa File: 86cfd56a-8ef0-3f13-bf58-fc3d519c472d.roa (raw, json) Hash identifier: N1CSNGmhwnRi5YLR/VZYU+7uWPuGXiZ6L4ReQy7VXfo= Subject key identifier: 7D:AB:54:23:33:8C:CC:96:93:A1:6F:72:59:5D:A1:BE:70:9B:D2:74 Certificate issuer: /CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd Certificate serial: 010D0C9F432858491AA6D125D328774CE4B94F40 Authority key identifier: 67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/86cfd56a-8ef0-3f13-bf58-fc3d519c472d.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 40569 IP address blocks: 2602:f981::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:d1:25:d3:28:77:4c:e4:b9:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=6a1b762c-c534-4b6b-aea3-971551d591a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ff:1e:cd:6c:24:a7:98:4c:fc:95:f4:4f:3b: 32:c6:67:2b:31:49:7d:9d:02:e9:5b:e7:da:e5:35: 99:b5:fd:fa:ce:bd:57:67:ec:aa:6c:c8:c6:bc:92: c4:23:53:b3:ba:f4:0f:a0:ab:2f:0e:75:b8:36:d8: be:9a:3f:bf:51:c9:63:83:71:a3:c2:05:5e:11:cf: 35:bc:d2:28:bb:fb:b7:95:80:3a:46:ef:06:d7:97: 7b:97:0c:4e:ac:c2:2f:62:2b:9b:4c:c1:34:cf:cb: f1:bc:83:4f:36:44:16:c3:40:bc:7e:1a:35:6b:6c: ca:3a:1b:c5:8c:c5:6d:22:c7:87:3d:55:2e:16:ac: 78:10:c1:4e:90:7e:6d:80:5e:44:19:eb:aa:a1:8d: 9d:31:68:90:d9:62:ee:67:09:c0:ab:31:7b:c0:ce: da:3c:59:e0:5f:95:0f:40:9a:d1:85:63:ee:af:ea: 4f:6c:10:0e:31:ff:a5:1c:1f:1b:93:cf:46:67:04: 7e:34:e0:e4:5e:5f:0a:0d:4f:24:20:50:32:11:9d: 3b:aa:08:15:da:29:97:6d:59:ac:c7:ef:4c:5a:62: f9:a3:d9:a4:79:b2:a8:e8:cf:c8:6d:f2:00:43:c5: ba:24:46:ee:38:50:7a:3c:a7:63:7a:71:63:fa:97: e7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AB:54:23:33:8C:CC:96:93:A1:6F:72:59:5D:A1:BE:70:9B:D2:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/86cfd56a-8ef0-3f13-bf58-fc3d519c472d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl X509v3 Authority Key Identifier: keyid:67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer sbgp-ipAddrBlock: critical IPv6: 2602:f981::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:4f:ee:42:8e:03:16:c2:3f:78:5c:97:35:30:44:da:47:b6: be:b3:c2:ba:30:ab:ef:38:d6:1e:1a:d2:b3:c9:27:07:a4:c9: 9a:70:3c:38:d7:bc:65:d5:32:24:67:50:21:d8:42:45:ce:36: 31:da:ab:8a:19:a4:b5:6c:b1:d6:7a:80:ea:04:c1:e0:f9:25: de:28:88:4a:68:d2:a6:44:81:58:50:ae:8b:60:f8:c2:40:ce: c9:27:26:6a:db:49:d4:6c:fe:d2:6b:ea:dc:cb:b7:18:00:57: ea:17:e0:0b:a3:9f:c2:24:99:f6:f4:f9:9e:48:01:12:57:04: 23:14:44:69:39:96:4f:26:d2:ae:71:40:ca:75:c5:15:c1:bf: a7:f4:7c:c0:da:05:08:dd:a2:e0:63:8d:5f:2f:ff:38:4f:51: 16:04:0b:a2:2f:d6:06:d5:43:ce:01:d9:16:34:57:a7:cb:d3: 7c:c2:a8:29:76:36:e1:ac:33:28:bb:5f:b1:59:8b:3b:f9:6a: 78:66:3b:63:9e:0d:15:46:19:2d:9a:d7:c6:d9:13:b5:a7:8a: b6:59:e3:2e:61:38:4c:c6:22:62:fd:ba:e0:9e:7b:a2:35:5f: 17:bf:48:50:c5:db:b9:47:3f:80:49:fd:80:b8:df:5f:45:e4: ba:cf:b1:d3 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkaptEl0yh3TOS5T0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjliODc0MzQtMDBkZS00ZDJmLWE0NWQtYWJlMWVmZTVl Y2ZkMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk NmExYjc2MmMtYzUzNC00YjZiLWFlYTMtOTcxNTUxZDU5MWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/8ezWwkp5hM/JX0TzsyxmcrMUl9nQLpW+fa 5TWZtf36zr1XZ+yqbMjGvJLEI1OzuvQPoKsvDnW4Nti+mj+/Ucljg3GjwgVeEc81 vNIou/u3lYA6Ru8G15d7lwxOrMIvYiubTME0z8vxvINPNkQWw0C8fho1a2zKOhvF jMVtIseHPVUuFqx4EMFOkH5tgF5EGeuqoY2dMWiQ2WLuZwnAqzF7wM7aPFngX5UP QJrRhWPur+pPbBAOMf+lHB8bk89GZwR+NODkXl8KDU8kIFAyEZ07qggV2imXbVms x+9MWmL5o9mkebKo6M/IbfIAQ8W6JEbuOFB6PKdjenFj+pfnhQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFH2rVCMzjMyWk6Fvclldob5wm9J0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOWI4 NzQzNC0wMGRlLTRkMmYtYTQ1ZC1hYmUxZWZlNWVjZmQvODZjZmQ1NmEtOGVmMC0z ZjEzLWJmNTgtZmMzZDUxOWM0NzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjliODc0MzQtMDBkZS00ZDJmLWE0 NWQtYWJlMWVmZTVlY2ZkL2I5Yjg3NDM0LTAwZGUtNGQyZi1hNDVkLWFiZTFlZmU1 ZWNmZC5jcmwwHwYDVR0jBBgwFoAUZ7qrgtUltq3erC7/J+WFnJfOPGswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iOWI4NzQzNC0wMGRlLTRkMmYtYTQ1ZC1hYmUx ZWZlNWVjZmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5gQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAM0/uQo4DFsI/eFyXNTBE2ke2vrPCujCr7zjWHhrSs8knB6TJmnA8 ONe8ZdUyJGdQIdhCRc42MdqrihmktWyx1nqA6gTB4Pkl3iiISmjSpkSBWFCui2D4 wkDOyScmattJ1Gz+0mvq3Mu3GABX6hfgC6OfwiSZ9vT5nkgBElcEIxREaTmWTybS rnFAynXFFcG/p/R8wNoFCN2i4GONXy//OE9RFgQLoi/WBtVDzgHZFjRXp8vTfMKo KXY24awzKLtfsVmLO/lqeGY7Y54NFUYZLZrXxtkTtaeKtlnjLmE4TMYiYv264J57 ojVfF79IUMXbuUc/gEn9gLjfX0Xkus+x0w== -----END CERTIFICATE-----Generated at Fri Apr 4 16:05:05 2025 by rpki-client