$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/76b42bc4-57ac-394d-ba88-7d614145118a.roa File: 76b42bc4-57ac-394d-ba88-7d614145118a.roa (raw, json) Hash identifier: p/qhd0zwqHGw/V/yInRgdElsashdiSBhE68mTPxSsvg= Subject key identifier: 7D:BC:76:89:5A:AC:FB:B2:65:9C:50:2A:96:17:92:A9:8C:EA:3E:36 Certificate issuer: /CN=add35f11-0294-4be9-94b7-49cac2bcb001 Certificate serial: 010D0C9F43285849FE0FE98450DF5FEE2557BE80 Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/76b42bc4-57ac-394d-ba88-7d614145118a.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 212149 IP address blocks: 2602:fbf5::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:e9:84:50:df:5f:ee:25:57:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=4962a82a-bc56-4481-a828-28e48fad9b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f6:db:21:28:2b:e6:e8:0c:85:7b:17:6b:2b: 92:68:d4:ab:00:02:26:11:19:19:07:28:24:3d:6c: 29:40:d8:ef:ab:92:ca:a6:38:2f:fd:32:88:43:30: 9c:0d:9d:b6:a7:b4:af:c5:4c:8f:a7:18:87:6c:8c: a7:a2:6a:e2:db:97:ed:6b:5d:88:d3:37:5f:7a:d3: ec:cd:dd:48:21:13:94:88:f0:62:e1:2b:6b:4b:b7: 67:c2:82:0e:8e:36:47:3c:78:b3:8f:a9:16:7f:98: 23:37:09:6e:ee:81:88:09:c5:f8:ae:66:73:4f:f1: 08:47:83:eb:2b:b6:f8:05:b6:bd:25:6d:1c:d1:17: c0:07:00:99:f1:1c:08:e6:44:06:57:8b:0c:ba:e6: 21:0b:01:55:5c:60:2f:9a:78:89:8d:08:31:bd:6b: a0:73:f9:22:26:4d:6f:06:0c:04:b5:af:b2:bf:84: e5:be:82:73:02:57:c5:0e:b4:92:52:6a:b0:07:6a: e6:06:b2:a3:66:6b:0c:0a:97:61:cc:7b:be:e5:f7: 58:22:b2:fb:5c:f7:29:32:70:ab:f7:e7:69:7c:c6: c4:ba:a6:4a:86:f7:56:7c:94:05:41:0a:19:53:76: 0f:4a:76:b4:88:f1:41:c3:56:fd:3d:5c:1c:fb:c3: 0e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BC:76:89:5A:AC:FB:B2:65:9C:50:2A:96:17:92:A9:8C:EA:3E:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/76b42bc4-57ac-394d-ba88-7d614145118a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl X509v3 Authority Key Identifier: keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbf5::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:2b:d6:ac:09:9d:f7:0e:fe:77:6a:82:68:7a:d2:9a:da:58: 6a:46:32:de:fd:c7:1d:49:da:0c:e2:a0:42:6e:7a:8f:2f:f1: 1f:ba:6d:a5:77:29:73:cf:d0:5e:a8:84:89:5d:d2:e5:24:c8: 1c:0e:13:57:79:78:0f:bd:af:a3:27:da:c7:a8:8e:74:8e:c3: d0:69:8d:53:30:a1:f7:2f:ce:dd:4d:03:d0:44:6e:4a:45:11: 5f:89:cf:99:46:68:08:34:a2:32:62:ca:ca:e0:b1:47:4e:dd: 63:0f:35:a6:c8:ab:9d:59:9c:78:76:04:ae:23:28:fe:cf:86: a0:bc:fa:1d:90:a6:3e:c4:51:4f:d0:0d:85:a6:d2:d0:43:d2: 07:85:a9:dc:68:73:cc:99:b5:86:f7:f6:c6:35:2d:8b:8d:01: 91:36:7e:28:8b:23:f1:fc:a0:c2:76:49:07:3b:ae:de:10:55: 7a:d3:8c:12:35:06:05:88:75:69:cb:f9:0d:bb:e2:ae:44:58: 46:d9:ef:7c:81:46:87:34:7c:d3:a2:6e:4c:47:22:e8:f1:20: 0d:66:e2:35:05:11:05:25:02:7d:e7:f6:ed:9a:77:8f:13:36: 11:82:90:fb:d5:18:5d:39:43:99:52:f5:4d:32:2b:0d:a3:3d: 90:e0:de:32 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEn+D+mEUN9f7iVXvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRkMzVmMTEtMDI5NC00YmU5LTk0YjctNDljYWMyYmNi MDAxMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk NDk2MmE4MmEtYmM1Ni00NDgxLWE4MjgtMjhlNDhmYWQ5YjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfbbISgr5ugMhXsXayuSaNSrAAImERkZBygk PWwpQNjvq5LKpjgv/TKIQzCcDZ22p7SvxUyPpxiHbIynomri25fta12I0zdfetPs zd1IIROUiPBi4StrS7dnwoIOjjZHPHizj6kWf5gjNwlu7oGICcX4rmZzT/EIR4Pr K7b4Bba9JW0c0RfABwCZ8RwI5kQGV4sMuuYhCwFVXGAvmniJjQgxvWugc/kiJk1v BgwEta+yv4TlvoJzAlfFDrSSUmqwB2rmBrKjZmsMCpdhzHu+5fdYIrL7XPcpMnCr 9+dpfMbEuqZKhvdWfJQFQQoZU3YPSna0iPFBw1b9PVwc+8MOYwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFH28dolarPuyZZxQKpYXkqmM6j42MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQz NWYxMS0wMjk0LTRiZTktOTRiNy00OWNhYzJiY2IwMDEvNzZiNDJiYzQtNTdhYy0z OTRkLWJhODgtN2Q2MTQxNDUxMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWRkMzVmMTEtMDI5NC00YmU5LTk0 YjctNDljYWMyYmNiMDAxL2FkZDM1ZjExLTAyOTQtNGJlOS05NGI3LTQ5Y2FjMmJj YjAwMS5jcmwwHwYDVR0jBBgwFoAUpXphLLBJKDwfCZ0NXgzzjrlY+MowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQzNWYxMS0wMjk0LTRiZTktOTRiNy00OWNh YzJiY2IwMDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL79QAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAhSvWrAmd9w7+d2qCaHrSmtpYakYy3v3HHUnaDOKgQm56jy/xH7pt pXcpc8/QXqiEiV3S5STIHA4TV3l4D72voyfax6iOdI7D0GmNUzCh9y/O3U0D0ERu SkURX4nPmUZoCDSiMmLKyuCxR07dYw81psirnVmceHYEriMo/s+GoLz6HZCmPsRR T9ANhabS0EPSB4Wp3GhzzJm1hvf2xjUti40BkTZ+KIsj8fygwnZJBzuu3hBVetOM EjUGBYh1acv5DbvirkRYRtnvfIFGhzR806JuTEci6PEgDWbiNQURBSUCfef27Zp3 jxM2EYKQ+9UYXTlDmVL1TTIrDaM9kODeMg== -----END CERTIFICATE-----Generated at Wed Jun 4 22:22:09 2025 by rpki-client