$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/99257afb-a53f-3aff-851a-32ef3f5c6f71.roa File: 99257afb-a53f-3aff-851a-32ef3f5c6f71.roa (raw, json) Hash identifier: jccaMfdUM1Y1HECsX9BKXHrr71xyVsb6NjT1FCIFws8= Subject key identifier: C9:D8:15:52:A5:A0:21:88:E0:0B:F6:52:16:DC:8F:8E:E8:E8:2E:66 Certificate issuer: /CN=8f9f6775-d445-4be7-9398-1cbbeacb9707 Certificate serial: 010D0C9F432858496CE45C8294ECA5742BF34B80 Authority key identifier: E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/99257afb-a53f-3aff-851a-32ef3f5c6f71.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 57974 IP address blocks: 2602:2d4:f00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:5c:82:94:ec:a5:74:2b:f3:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f9f6775-d445-4be7-9398-1cbbeacb9707 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=15494e96-409c-4d4a-9cdf-8698eb897dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:40:9c:a0:cf:9f:97:3c:67:c3:41:37:5a:73: af:1f:5a:19:e6:7c:f4:f0:df:8c:58:2a:63:f7:b0: b5:aa:42:c0:e5:18:26:21:12:f8:3d:7b:29:37:5e: 04:e1:2c:b4:53:7b:84:39:18:81:a6:a2:73:8e:2b: 99:f0:0e:0d:9d:39:61:d1:72:bf:6e:ad:e8:2c:48: 70:8a:08:83:fb:c5:07:d6:b7:30:bf:0e:88:40:7b: a6:0c:74:59:0e:18:74:12:47:72:41:5c:64:18:e4: d6:76:8c:40:dc:f3:a4:f2:ca:29:57:75:6d:dd:3f: 1b:9c:bc:64:d4:9d:43:b9:04:2e:4f:ed:f8:3e:2d: 3c:c5:17:91:77:dc:b6:4c:34:1f:f0:a0:8e:25:ab: 83:4a:7f:18:8f:eb:b0:cd:89:31:a9:8c:64:69:97: 5d:30:a1:7c:65:92:6f:36:12:31:82:a3:9f:76:f9: 09:4c:0e:fb:67:26:e1:c7:55:fa:33:46:83:3f:7d: 18:94:41:6d:32:54:5e:7e:07:b7:d5:5a:66:28:c0: 8e:33:30:4d:8d:a1:7c:11:53:ca:e8:c2:79:2f:8c: c0:05:83:12:ab:ca:b5:63:37:cb:a5:c1:2f:b1:cf: 49:2b:b9:fb:3e:46:d3:e3:86:83:47:3e:65:2f:63: 43:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D8:15:52:A5:A0:21:88:E0:0B:F6:52:16:DC:8F:8E:E8:E8:2E:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/99257afb-a53f-3aff-851a-32ef3f5c6f71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl X509v3 Authority Key Identifier: keyid:E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer sbgp-ipAddrBlock: critical IPv6: 2602:2d4:f00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:1b:7c:03:a3:bb:e8:8f:ed:60:86:80:b1:67:17:f7:50:f1: 2f:c0:c3:09:36:ea:8b:45:4a:9d:3a:1a:29:68:f1:51:8e:78: 49:d9:f6:1f:5c:00:02:13:7e:6b:95:67:76:94:c7:9f:c6:8f: 00:3b:d3:76:c2:0a:c0:85:37:23:25:19:a0:f2:67:b0:bb:67: 54:de:7c:92:42:fe:56:4c:f1:02:24:62:fe:42:ed:a4:97:26: 68:5d:4f:c1:50:16:63:63:80:1b:b9:0d:6a:1c:af:a1:cf:d4: 31:6a:28:f1:54:6b:c3:54:16:10:56:29:91:03:b8:1f:74:91: 48:c1:c4:1d:67:1f:e8:3c:68:60:e2:25:3c:ea:3b:ac:88:fc: d3:7e:a9:5e:3e:75:e5:58:02:16:62:e9:b3:a5:10:6b:ca:13: b4:57:5f:bb:e7:0a:55:b6:6d:0d:6a:fe:15:28:d3:84:04:7d: 34:c3:b1:8d:48:5e:f5:29:fb:28:4b:0e:99:51:ad:52:e4:42: 64:e3:50:1c:70:84:53:85:6f:4f:1c:9b:99:7f:a6:20:f2:af: c0:05:c0:4b:b9:d8:84:9c:f1:29:f5:07:bc:1a:e1:4c:43:57: 39:32:ac:01:ce:d6:42:bd:30:3b:ad:51:6d:06:aa:74:8a:48: d5:d7:63:b8 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEls5FyClOyldCvzS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY5ZjY3NzUtZDQ0NS00YmU3LTkzOTgtMWNiYmVhY2I5 NzA3MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk MTU0OTRlOTYtNDA5Yy00ZDRhLTljZGYtODY5OGViODk3ZGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyECcoM+flzxnw0E3WnOvH1oZ5nz08N+MWCpj 97C1qkLA5RgmIRL4PXspN14E4Sy0U3uEORiBpqJzjiuZ8A4NnTlh0XK/bq3oLEhw igiD+8UH1rcwvw6IQHumDHRZDhh0EkdyQVxkGOTWdoxA3POk8sopV3Vt3T8bnLxk 1J1DuQQuT+34Pi08xReRd9y2TDQf8KCOJauDSn8Yj+uwzYkxqYxkaZddMKF8ZZJv NhIxgqOfdvkJTA77Zybhx1X6M0aDP30YlEFtMlRefge31VpmKMCOMzBNjaF8EVPK 6MJ5L4zABYMSq8q1YzfLpcEvsc9JK7n7PkbT44aDRz5lL2NDNQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMnYFVKloCGI4Av2Uhbcj47o6C5mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84Zjlm Njc3NS1kNDQ1LTRiZTctOTM5OC0xY2JiZWFjYjk3MDcvOTkyNTdhZmItYTUzZi0z YWZmLTg1MWEtMzJlZjNmNWM2ZjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGY5ZjY3NzUtZDQ0NS00YmU3LTkz OTgtMWNiYmVhY2I5NzA3LzhmOWY2Nzc1LWQ0NDUtNGJlNy05Mzk4LTFjYmJlYWNi OTcwNy5jcmwwHwYDVR0jBBgwFoAU4PWKadjMFHV1bA4wXEdutJ0Z9BIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84ZjlmNjc3NS1kNDQ1LTRiZTctOTM5OC0xY2Ji ZWFjYjk3MDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIC1A8w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEACRt8A6O76I/tYIaAsWcX91DxL8DDCTbqi0VKnToaKWjxUY54Sdn2 H1wAAhN+a5VndpTHn8aPADvTdsIKwIU3IyUZoPJnsLtnVN58kkL+VkzxAiRi/kLt pJcmaF1PwVAWY2OAG7kNahyvoc/UMWoo8VRrw1QWEFYpkQO4H3SRSMHEHWcf6Dxo YOIlPOo7rIj8036pXj515VgCFmLps6UQa8oTtFdfu+cKVbZtDWr+FSjThAR9NMOx jUhe9Sn7KEsOmVGtUuRCZONQHHCEU4VvTxybmX+mIPKvwAXAS7nYhJzxKfUHvBrh TENXOTKsAc7WQr0wO61RbQaqdIpI1ddjuA== -----END CERTIFICATE-----Generated at Tue Apr 8 23:31:41 2025 by rpki-client