$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/ac2bc3bf-adf8-32de-ae4d-0e5eddfa0f1a.roa File: ac2bc3bf-adf8-32de-ae4d-0e5eddfa0f1a.roa (raw, json) Hash identifier: 2VgVsYpwN9G4LJMRKud8HSNnGjvvGS+jMzyj27s9maY= Subject key identifier: 42:57:AF:36:3C:F6:4B:91:9C:45:97:AC:B9:D2:74:C4:AD:63:70:EC Certificate issuer: /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Certificate serial: 010D0C9F4328584A0FC262587446CD3399986880 Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/ac2bc3bf-adf8-32de-ae4d-0e5eddfa0f1a.roa Signing time: Mon 02 Jun 2025 21:09:33 +0000 ROA not before: Mon 02 Jun 2025 21:09:33 +0000 ROA not after: Sun 31 Aug 2025 21:09:33 +0000 asID: 400556 IP address blocks: 2602:f71e:71::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0f:c2:62:58:74:46:cd:33:99:98:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Validity Not Before: Jun 2 21:09:33 2025 GMT Not After : Aug 31 21:09:33 2025 GMT Subject: CN=2de89364-71c5-4452-965a-f2b856405175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8d:d8:60:e5:e9:c0:19:e2:0b:9a:50:83:8b: 8d:7b:8c:84:0e:ed:4a:3a:57:4e:53:d6:67:6d:e0: 68:61:9e:87:a2:88:2f:23:04:c5:09:34:5d:49:20: a6:80:2b:20:85:f6:df:b5:c5:4d:65:e2:1f:b6:cc: 0d:35:43:29:0b:22:e5:1c:39:41:13:4c:c5:f2:a2: 98:69:90:7d:a6:00:9b:80:b7:32:d5:69:d0:af:af: 80:1d:87:02:51:e2:9f:58:54:67:31:ac:cf:f4:c1: 7c:aa:a6:d6:79:d1:97:61:dd:e1:c4:1d:93:19:74: 6f:1d:26:32:32:c3:12:08:13:dc:33:0c:ea:f7:4e: 35:23:a7:4a:8f:8d:93:1f:81:67:5b:ef:5c:3d:61: 06:c1:ea:c1:bf:cb:c1:90:a8:80:f9:f2:5e:3a:a6: 02:01:33:e3:31:d1:c2:55:92:32:e6:30:30:4f:13: 6b:da:0e:bc:91:9a:52:a1:d6:84:14:8b:e8:51:76: 42:a7:e6:f3:50:13:9e:78:7b:a1:d9:48:f1:75:b8: 6b:2a:02:16:78:69:ed:22:4c:02:dd:be:7d:f7:32: 6e:f1:15:38:1b:ad:4f:e1:f2:74:94:6a:05:42:da: fe:09:3b:1e:72:c0:76:81:43:b9:16:ca:cc:ac:10: 5d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:57:AF:36:3C:F6:4B:91:9C:45:97:AC:B9:D2:74:C4:AD:63:70:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/ac2bc3bf-adf8-32de-ae4d-0e5eddfa0f1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl X509v3 Authority Key Identifier: keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer sbgp-ipAddrBlock: critical IPv6: 2602:f71e:71::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:f0:bd:34:8a:69:2b:81:c0:df:67:98:bb:7e:0d:b7:35:57: 51:9b:b3:71:01:7d:54:bb:dc:49:ae:b0:e3:7a:23:0b:49:23: bf:19:f0:de:11:60:2e:39:cd:87:13:0c:42:db:76:e5:84:da: 60:df:31:18:3e:bc:bd:12:88:c5:55:84:63:94:12:db:e9:9a: c6:95:b5:0d:4e:b3:57:2d:7f:a7:0b:d2:24:6c:b6:c9:bc:78: 98:4b:83:fc:d8:8b:a6:52:b9:9a:a3:c1:e5:29:58:24:e9:ea: 28:62:2e:04:07:de:83:61:d8:0d:e9:23:b9:f9:bb:d1:b7:67: 5f:94:ce:4f:48:b8:aa:f7:b1:5d:c2:f3:90:19:bd:19:4f:2f: d2:af:85:55:87:b1:9b:64:49:42:7e:71:37:3e:14:38:84:fc: 77:aa:c4:c4:5b:48:9f:b8:ab:fd:f1:dc:c3:11:9c:f9:03:0a: 11:a9:45:f4:01:1d:17:3f:e6:e9:b3:8d:7f:09:59:90:06:a2: d0:4d:81:0a:41:16:e3:53:d0:ce:e6:7e:9c:22:c0:69:f1:38: a7:d0:af:77:be:6d:e6:17:e2:f1:a2:d6:e2:43:15:5a:80:34: f5:bd:bd:b1:de:8f:37:97:35:a1:07:a9:8f:a4:40:3f:9c:d3: 03:7e:2a:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoPwmJYdEbNM5mYaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjN2YyM2YtYjBhMC00ZDJjLWE4YTItMzYwNWM2ZjA4 ZTljMB4XDTI1MDYwMjIxMDkzM1oXDTI1MDgzMTIxMDkzM1owLzEtMCsGA1UEAxMk MmRlODkzNjQtNzFjNS00NDUyLTk2NWEtZjJiODU2NDA1MTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI3YYOXpwBniC5pQg4uNe4yEDu1KOldOU9Zn beBoYZ6HoogvIwTFCTRdSSCmgCsghfbftcVNZeIftswNNUMpCyLlHDlBE0zF8qKY aZB9pgCbgLcy1WnQr6+AHYcCUeKfWFRnMazP9MF8qqbWedGXYd3hxB2TGXRvHSYy MsMSCBPcMwzq9041I6dKj42TH4FnW+9cPWEGwerBv8vBkKiA+fJeOqYCATPjMdHC VZIy5jAwTxNr2g68kZpSodaEFIvoUXZCp+bzUBOeeHuh2UjxdbhrKgIWeGntIkwC 3b599zJu8RU4G61P4fJ0lGoFQtr+CTsecsB2gUO5FsrMrBBdoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEJXrzY89kuRnEWXrLnSdMStY3DsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3 ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1YzZmMDhlOWMvYWMyYmMzYmYtYWRmOC0z MmRlLWFlNGQtMGU1ZWRkZmEwZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWZjN2YyM2YtYjBhMC00ZDJjLWE4 YTItMzYwNWM2ZjA4ZTljLzFmYzdmMjNmLWIwYTAtNGQyYy1hOGEyLTM2MDVjNmYw OGU5Yy5jcmwwHwYDVR0jBBgwFoAUGy7JMmnAka14g/B1ftT7/uA8pgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1 YzZmMDhlOWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3HgBx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJrwvTSKaSuBwN9nmLt+Dbc1V1Gbs3EBfVS73EmusON6IwtJI78Z 8N4RYC45zYcTDELbduWE2mDfMRg+vL0SiMVVhGOUEtvpmsaVtQ1Os1ctf6cL0iRs tsm8eJhLg/zYi6ZSuZqjweUpWCTp6ihiLgQH3oNh2A3pI7n5u9G3Z1+Uzk9IuKr3 sV3C85AZvRlPL9KvhVWHsZtkSUJ+cTc+FDiE/HeqxMRbSJ+4q/3x3MMRnPkDChGp RfQBHRc/5umzjX8JWZAGotBNgQpBFuNT0M7mfpwiwGnxOKfQr3e+beYX4vGi1uJD FVqANPW9vbHejzeXNaEHqY+kQD+c0wN+KqE= -----END CERTIFICATE-----Generated at Sat Jun 7 22:00:25 2025 by rpki-client