$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/5df2f2dc-f00c-33b4-a473-55bf6827f226.roa File: 5df2f2dc-f00c-33b4-a473-55bf6827f226.roa (raw, json) Hash identifier: Oj/kKZ98fRhqsx9BUtUvXOyHQK7pFfrNkrFQntjCZ1Q= Subject key identifier: E7:FF:03:31:4D:90:C4:BE:9C:D1:B9:59:96:C2:A4:1E:C4:14:91:4D Certificate issuer: /CN=03bfb29d-57a4-49c6-aa85-4892c1f69c48 Certificate serial: 010D0C9F4328584973DEDCE9BF52A913F89F0880 Authority key identifier: 23:6E:01:BF:B2:7A:54:FB:0E:89:DC:5F:28:3B:E1:D5:F6:57:11:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/5df2f2dc-f00c-33b4-a473-55bf6827f226.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 401612 IP address blocks: 2602:fb87::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:dc:e9:bf:52:a9:13:f8:9f:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bfb29d-57a4-49c6-aa85-4892c1f69c48 Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=bd298875-fbc2-432f-9b6d-f3389f976b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ae:2c:d2:d2:d8:68:8a:b7:86:98:d3:8b:fa: 9f:71:e4:c6:50:41:05:54:28:c6:6a:1b:ed:b4:12: 20:26:32:39:70:7b:45:82:ad:2d:a3:63:4c:13:28: e7:2c:52:d8:e8:d5:52:88:ad:56:3f:79:1b:b4:4a: 1b:14:d1:f6:8f:09:eb:eb:3e:44:6f:f8:9c:29:6e: e9:75:2c:94:e0:09:f4:d6:90:e2:41:b5:6c:6e:f5: 7e:25:86:43:0a:d1:99:7d:16:82:d1:bb:8e:30:36: 96:38:1d:cd:67:92:11:49:7a:f0:a7:59:6c:6c:bd: 8e:02:2e:cc:bf:e2:d7:87:a6:13:a3:ff:94:44:d5: e9:22:11:de:69:4e:4e:d4:01:96:e7:54:46:2e:e6: 46:f4:68:56:52:ad:d9:56:2c:8f:a1:c5:76:3f:9a: e8:0b:c4:39:e3:cb:62:74:14:fe:b3:80:c8:89:bf: 74:d8:5f:33:e0:96:1a:9f:fe:16:e5:21:9d:6b:ae: 22:57:6c:28:49:0f:a3:dc:90:69:fd:9a:4a:92:fd: 9b:c8:73:39:89:11:3e:df:e1:0b:63:cd:b2:c9:b3: 30:65:9b:d6:16:b3:0b:9c:53:c6:8a:c4:8b:e7:7b: e1:ca:40:77:9e:a7:1f:f9:61:0c:08:ef:d0:0f:c9: 3a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FF:03:31:4D:90:C4:BE:9C:D1:B9:59:96:C2:A4:1E:C4:14:91:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/5df2f2dc-f00c-33b4-a473-55bf6827f226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.crl X509v3 Authority Key Identifier: keyid:23:6E:01:BF:B2:7A:54:FB:0E:89:DC:5F:28:3B:E1:D5:F6:57:11:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb87::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:40:14:9c:5a:d2:e6:10:7d:f2:32:df:ac:15:5e:b2:46:19: eb:a2:9d:00:07:7d:16:ce:18:78:3c:8b:a9:eb:71:8e:ca:33: a4:42:55:3e:97:db:b0:ef:d9:f3:27:3b:b7:3c:5a:64:03:5d: 1d:c7:7f:58:b8:61:90:30:16:4d:a5:1b:e5:54:c4:3d:7f:13: c9:4c:42:94:19:77:80:85:eb:d2:07:01:0e:14:bd:3c:f2:d6: e8:09:d6:92:a7:f2:44:b1:e8:86:f7:43:02:ec:72:e4:fc:ef: fa:08:75:52:dc:b4:c6:eb:c8:d2:4e:d1:31:3b:3a:d3:8b:2f: 8e:e8:79:7e:ae:15:c2:7b:b6:a9:19:7d:69:cc:59:5d:63:30: 45:d2:aa:f2:71:9a:66:99:03:c4:e9:7a:c0:93:58:68:16:18: cd:3c:cc:05:6a:8a:cf:bf:9c:c5:9a:66:29:14:92:91:d5:66: 95:d0:fc:bd:74:46:58:ac:17:74:08:45:92:4c:55:ee:46:68: a1:db:47:93:85:d0:a7:69:57:21:8d:c4:79:f9:1c:32:98:3f: e1:94:38:11:19:e6:22:77:98:e9:c4:ba:06:c9:87:54:bb:a6: ca:2b:f2:50:48:19:ea:53:a3:da:fc:e1:ab:08:8c:7e:1d:2e: 58:88:b9:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElz3tzpv1KpE/ifCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZmIyOWQtNTdhNC00OWM2LWFhODUtNDg5MmMxZjY5 YzQ4MB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk YmQyOTg4NzUtZmJjMi00MzJmLTliNmQtZjMzODlmOTc2YjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj64s0tLYaIq3hpjTi/qfceTGUEEFVCjGahvt tBIgJjI5cHtFgq0to2NMEyjnLFLY6NVSiK1WP3kbtEobFNH2jwnr6z5Eb/icKW7p dSyU4An01pDiQbVsbvV+JYZDCtGZfRaC0buOMDaWOB3NZ5IRSXrwp1lsbL2OAi7M v+LXh6YTo/+URNXpIhHeaU5O1AGW51RGLuZG9GhWUq3ZViyPocV2P5roC8Q548ti dBT+s4DIib902F8z4JYan/4W5SGda64iV2woSQ+j3JBp/ZpKkv2byHM5iRE+3+EL Y82yybMwZZvWFrMLnFPGisSL53vhykB3nqcf+WEMCO/QD8k60QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOf/AzFNkMS+nNG5WZbCpB7EFJFNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wM2Jm YjI5ZC01N2E0LTQ5YzYtYWE4NS00ODkyYzFmNjljNDgvNWRmMmYyZGMtZjAwYy0z M2I0LWE0NzMtNTViZjY4MjdmMjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDNiZmIyOWQtNTdhNC00OWM2LWFh ODUtNDg5MmMxZjY5YzQ4LzAzYmZiMjlkLTU3YTQtNDljNi1hYTg1LTQ4OTJjMWY2 OWM0OC5jcmwwHwYDVR0jBBgwFoAUI24Bv7J6VPsOidxfKDvh1fZXEYkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wM2JmYjI5ZC01N2E0LTQ5YzYtYWE4NS00ODky YzFmNjljNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7hwAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABdAFJxa0uYQffIy36wVXrJGGeuinQAHfRbOGHg8i6nrcY7KM6RC VT6X27Dv2fMnO7c8WmQDXR3Hf1i4YZAwFk2lG+VUxD1/E8lMQpQZd4CF69IHAQ4U vTzy1ugJ1pKn8kSx6Ib3QwLscuT87/oIdVLctMbryNJO0TE7OtOLL47oeX6uFcJ7 tqkZfWnMWV1jMEXSqvJxmmaZA8TpesCTWGgWGM08zAVqis+/nMWaZikUkpHVZpXQ /L10RlisF3QIRZJMVe5GaKHbR5OF0KdpVyGNxHn5HDKYP+GUOBEZ5iJ3mOnEugbJ h1S7psor8lBIGepTo9r84asIjH4dLliIuSM= -----END CERTIFICATE-----Generated at Sun Apr 13 03:07:36 2025 by rpki-client