$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/09762465-b2e6-360a-b0d4-36522e5d15ce.roa File: 09762465-b2e6-360a-b0d4-36522e5d15ce.roa (raw, json) Hash identifier: 2Jr8Bs+fZNTDquRZwgm/7ZQyh5iFeQLVsWP2j3NyBhg= Subject key identifier: 21:E3:D1:35:B3:2C:15:CB:7F:AD:1D:18:EA:04:53:FB:31:03:86:88 Certificate issuer: /CN=af4b288d-bc7b-443a-b3f4-52662b22717a Certificate serial: 010D0C9F432858490CB166EB87E87A5B2825C800 Authority key identifier: 33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/09762465-b2e6-360a-b0d4-36522e5d15ce.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 398843 IP address blocks: 2602:f7c5::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:66:eb:87:e8:7a:5b:28:25:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4b288d-bc7b-443a-b3f4-52662b22717a Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=91e3ef41-6221-47b7-925f-1b2d52070191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:95:50:bf:e8:c5:a2:d7:84:12:75:dc:ad:2e: 35:2d:f1:e5:24:b0:5f:dd:ac:1f:8b:26:34:32:4f: 6c:af:f1:2d:48:ca:43:10:20:1a:16:ee:d0:f5:9e: db:57:a6:2e:bd:66:8b:bd:78:e4:44:c1:e7:2e:fa: 84:5a:75:9d:06:cb:f4:4a:b5:0c:b2:d4:73:e1:df: aa:84:63:fe:91:44:2a:2c:0a:b4:03:e4:87:2f:b4: 7f:de:b5:06:b3:51:d4:fc:73:83:1b:61:f2:42:0d: 9e:f3:ff:3d:e8:f4:ca:65:0d:f2:34:cd:a7:5d:68: 0a:a0:b3:82:e9:39:ed:d3:41:8c:98:71:00:ad:05: 84:2e:e5:5a:87:3f:2e:73:d4:ce:aa:ce:77:0e:7d: 2f:99:9f:60:9b:90:fc:5c:96:49:c8:c3:70:d8:10: 78:4a:2f:9c:15:c8:ac:4b:41:cf:82:37:c8:49:55: 2c:32:4c:09:85:52:a6:0b:32:b2:a7:49:ac:97:9b: 36:82:9a:ad:de:63:55:64:61:f1:a8:68:dd:fd:80: 77:64:5f:65:cf:67:af:2c:82:41:06:13:c8:47:58: c5:07:4e:3d:32:ee:0d:16:b4:8f:e6:f6:60:f9:43: a7:10:35:63:1d:5d:b3:ec:71:c9:48:55:96:d3:b7: ef:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E3:D1:35:B3:2C:15:CB:7F:AD:1D:18:EA:04:53:FB:31:03:86:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/09762465-b2e6-360a-b0d4-36522e5d15ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl X509v3 Authority Key Identifier: keyid:33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7c5::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:71:1b:3c:09:a2:55:c2:d0:4a:5e:4c:c3:32:3f:dd:1c:c9: db:b9:9d:ed:8e:33:cd:89:a1:07:7a:dd:1a:37:64:a7:81:61: 92:b0:ca:a9:7d:79:43:d2:34:7d:51:5c:54:23:bb:a7:76:b9: 72:59:90:18:54:f0:4b:da:65:4b:80:c6:14:a8:a4:fe:dd:14: f5:a2:ad:bf:5e:f1:00:25:38:22:22:74:60:ba:2b:fa:2e:f5: e6:fe:68:25:84:fd:a9:74:3a:7f:48:0c:30:03:44:18:22:88: 87:ba:74:9e:d8:fe:6e:b3:22:38:b6:d8:32:b9:43:ce:57:9d: 1c:a4:2e:5a:4b:33:ed:2c:7f:08:9c:95:ea:5e:ba:c4:f2:9a: 0a:f5:b9:72:aa:2b:7e:bc:bd:02:f0:f9:bd:fd:68:26:21:1a: 12:dc:5d:08:27:1f:99:7c:fb:1c:c8:2a:4d:b4:dc:4f:e4:42: 2d:06:39:50:28:4d:48:35:df:34:de:6e:d8:ca:5f:af:82:c1: 77:66:85:44:c0:6f:22:1d:e6:37:e4:d9:39:c7:e0:e5:10:88: bc:84:a9:1c:e0:f1:aa:53:98:e9:65:d5:44:4e:5b:b6:07:6c: ca:b2:e5:82:01:a6:4c:b8:03:6b:f4:7b:a2:9c:de:9c:75:82: a2:9b:c8:b2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkMsWbrh+h6WyglyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY0YjI4OGQtYmM3Yi00NDNhLWIzZjQtNTI2NjJiMjI3 MTdhMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk OTFlM2VmNDEtNjIyMS00N2I3LTkyNWYtMWIyZDUyMDcwMTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZVQv+jFoteEEnXcrS41LfHlJLBf3awfiyY0 Mk9sr/EtSMpDECAaFu7Q9Z7bV6YuvWaLvXjkRMHnLvqEWnWdBsv0SrUMstRz4d+q hGP+kUQqLAq0A+SHL7R/3rUGs1HU/HODG2HyQg2e8/896PTKZQ3yNM2nXWgKoLOC 6Tnt00GMmHEArQWELuVahz8uc9TOqs53Dn0vmZ9gm5D8XJZJyMNw2BB4Si+cFcis S0HPgjfISVUsMkwJhVKmCzKyp0msl5s2gpqt3mNVZGHxqGjd/YB3ZF9lz2evLIJB BhPIR1jFB049Mu4NFrSP5vZg+UOnEDVjHV2z7HHJSFWW07fv9wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCHj0TWzLBXLf60dGOoEU/sxA4aIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZjRi Mjg4ZC1iYzdiLTQ0M2EtYjNmNC01MjY2MmIyMjcxN2EvMDk3NjI0NjUtYjJlNi0z NjBhLWIwZDQtMzY1MjJlNWQxNWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWY0YjI4OGQtYmM3Yi00NDNhLWIz ZjQtNTI2NjJiMjI3MTdhL2FmNGIyODhkLWJjN2ItNDQzYS1iM2Y0LTUyNjYyYjIy NzE3YS5jcmwwHwYDVR0jBBgwFoAUMwAGbg+QRP3FILa6x1LzfcnipMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZjRiMjg4ZC1iYzdiLTQ0M2EtYjNmNC01MjY2 MmIyMjcxN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3xQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEA2XEbPAmiVcLQSl5MwzI/3RzJ27md7Y4zzYmhB3rdGjdkp4FhkrDK qX15Q9I0fVFcVCO7p3a5clmQGFTwS9plS4DGFKik/t0U9aKtv17xACU4IiJ0YLor +i715v5oJYT9qXQ6f0gMMANEGCKIh7p0ntj+brMiOLbYMrlDzledHKQuWksz7Sx/ CJyV6l66xPKaCvW5cqorfry9AvD5vf1oJiEaEtxdCCcfmXz7HMgqTbTcT+RCLQY5 UChNSDXfNN5u2Mpfr4LBd2aFRMBvIh3mN+TZOcfg5RCIvISpHODxqlOY6WXVRE5b tgdsyrLlggGmTLgDa/R7opzenHWCopvIsg== -----END CERTIFICATE-----Generated at Sat Apr 5 23:21:17 2025 by rpki-client