$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/3365ed12-aaa6-34be-82d4-33f987b22502.roa File: 3365ed12-aaa6-34be-82d4-33f987b22502.roa (raw, json) Hash identifier: rfMWWjl0SqRylrYdK3e2T84Y+E5KHgKuyvVGdm923tY= Subject key identifier: A8:E2:96:EE:25:C9:73:65:B7:74:DB:22:BB:00:0E:EF:96:1F:16:87 Certificate issuer: /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Certificate serial: 010D0C9F43285848BCE5E3C10F75F69E8B326ED8 Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/3365ed12-aaa6-34be-82d4-33f987b22502.roa Signing time: Sat 01 Feb 2025 12:02:03 +0000 ROA not before: Sat 01 Feb 2025 12:02:03 +0000 ROA not after: Fri 02 May 2025 11:02:03 +0000 asID: 214809 IP address blocks: 2602:f71e:ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bc:e5:e3:c1:0f:75:f6:9e:8b:32:6e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Validity Not Before: Feb 1 12:02:03 2025 GMT Not After : May 2 11:02:03 2025 GMT Subject: CN=696f4b21-fc84-4752-860a-9a657f731df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cc:23:8f:aa:0d:ba:be:17:96:37:dc:e1:bb: 34:25:bf:c4:aa:e2:1f:82:91:8d:b6:6d:3f:18:88: 6c:f1:c9:13:c5:0a:e6:4f:da:1d:9e:60:48:ab:49: bb:3b:5b:2b:6d:65:1e:97:4e:7f:f8:8a:df:60:57: 3c:28:eb:c2:72:db:eb:93:67:a0:0f:06:df:3b:06: 4c:80:ef:bd:81:71:46:2a:7b:cd:c5:67:6f:03:86: 03:e6:d8:79:65:1e:5d:a8:d9:c7:87:71:f8:fe:34: 2e:56:79:c3:43:68:5c:a1:52:87:dc:b8:2c:70:26: 8f:88:7c:27:85:d8:54:fe:69:92:e8:f7:e5:97:76: 12:1e:96:e6:bb:c5:e1:f4:67:5b:01:cb:a9:e8:de: 6b:44:44:04:85:c6:a5:4f:f8:61:67:84:4e:5c:d5: bb:53:db:0f:da:77:8c:74:d0:bd:0a:70:47:c2:14: 2c:49:e1:74:c0:12:2e:72:4f:aa:31:32:0d:a8:28: 8f:21:56:da:3b:2b:29:10:23:4b:59:fd:fd:b7:91: f7:ab:25:c7:68:6b:c9:5a:d8:8a:9e:8e:14:03:44: 9a:ec:f5:46:d1:29:eb:5d:e1:15:93:d1:3e:e0:7e: 31:65:f4:e1:3d:bd:dd:b8:13:be:62:0f:6d:37:e8: 9e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E2:96:EE:25:C9:73:65:B7:74:DB:22:BB:00:0E:EF:96:1F:16:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/3365ed12-aaa6-34be-82d4-33f987b22502.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl X509v3 Authority Key Identifier: keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer sbgp-ipAddrBlock: critical IPv6: 2602:f71e:ff::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:e9:7a:7c:bb:be:68:69:93:c8:5b:dc:da:5b:75:c2:55:d9: 6e:3a:5f:bd:42:57:87:84:ec:da:8d:80:9e:8f:4b:c0:05:f7: dc:2d:b0:27:86:db:bc:5d:61:71:a1:26:99:50:2a:75:c9:68: 5f:77:ef:be:ec:0b:72:c2:d3:ad:b5:63:e8:80:42:fc:9c:af: 46:ab:d7:77:34:dc:1f:0a:46:08:36:cb:c6:ee:97:e6:c4:1d: 5a:b0:64:2c:8c:78:32:c2:a4:a1:86:d0:e0:b1:cb:d2:ac:01: 1f:91:f2:10:4e:46:4a:c5:2d:87:3e:61:c4:ec:ea:e8:b8:1a: d0:b4:3c:24:0c:fb:5f:0a:37:fe:49:1c:cb:50:74:50:27:76: d1:63:d7:24:68:b9:c1:95:07:24:9c:42:40:b3:2f:38:9b:f7: 77:ea:63:5e:27:2c:ff:a4:57:9d:f7:ff:12:9d:d1:53:35:c2: 8e:3f:89:5a:63:bc:f6:69:2b:c3:f1:21:4b:41:c5:40:28:ea: e9:bd:ec:f7:28:ce:a2:a2:8f:8c:7a:36:de:66:d1:9a:f7:84: 8f:9a:64:76:ce:a4:6d:4b:ce:8d:c9:e7:40:3f:44:ad:bf:af: fa:18:a5:69:74:6f:9f:f0:69:5e:a9:fb:6f:a3:27:7e:0b:51: a7:97:1e:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEi85ePBD3X2nosybtgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjN2YyM2YtYjBhMC00ZDJjLWE4YTItMzYwNWM2ZjA4 ZTljMB4XDTI1MDIwMTEyMDIwM1oXDTI1MDUwMjExMDIwM1owLzEtMCsGA1UEAxMk Njk2ZjRiMjEtZmM4NC00NzUyLTg2MGEtOWE2NTdmNzMxZGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArswjj6oNur4Xljfc4bs0Jb/EquIfgpGNtm0/ GIhs8ckTxQrmT9odnmBIq0m7O1srbWUel05/+IrfYFc8KOvCctvrk2egDwbfOwZM gO+9gXFGKnvNxWdvA4YD5th5ZR5dqNnHh3H4/jQuVnnDQ2hcoVKH3LgscCaPiHwn hdhU/mmS6Pfll3YSHpbmu8Xh9GdbAcup6N5rREQEhcalT/hhZ4ROXNW7U9sP2neM dNC9CnBHwhQsSeF0wBIuck+qMTINqCiPIVbaOyspECNLWf39t5H3qyXHaGvJWtiK no4UA0Sa7PVG0SnrXeEVk9E+4H4xZfThPb3duBO+Yg9tN+ieBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKjilu4lyXNlt3TbIrsADu+WHxaHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3 ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1YzZmMDhlOWMvMzM2NWVkMTItYWFhNi0z NGJlLTgyZDQtMzNmOTg3YjIyNTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWZjN2YyM2YtYjBhMC00ZDJjLWE4 YTItMzYwNWM2ZjA4ZTljLzFmYzdmMjNmLWIwYTAtNGQyYy1hOGEyLTM2MDVjNmYw OGU5Yy5jcmwwHwYDVR0jBBgwFoAUGy7JMmnAka14g/B1ftT7/uA8pgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1 YzZmMDhlOWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3HgD/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE3peny7vmhpk8hb3NpbdcJV2W46X71CV4eE7NqNgJ6PS8AF99wt sCeG27xdYXGhJplQKnXJaF93777sC3LC0621Y+iAQvycr0ar13c03B8KRgg2y8bu l+bEHVqwZCyMeDLCpKGG0OCxy9KsAR+R8hBORkrFLYc+YcTs6ui4GtC0PCQM+18K N/5JHMtQdFAndtFj1yRoucGVByScQkCzLzib93fqY14nLP+kV533/xKd0VM1wo4/ iVpjvPZpK8PxIUtBxUAo6um97PcozqKij4x6Nt5m0Zr3hI+aZHbOpG1Lzo3J50A/ RK2/r/oYpWl0b5/waV6p+2+jJ34LUaeXHjM= -----END CERTIFICATE-----Generated at Sun Apr 6 02:01:07 2025 by rpki-client