$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4521230d-a7d3-3539-b54c-49378e8313e8.roa File: 4521230d-a7d3-3539-b54c-49378e8313e8.roa (raw, json) Hash identifier: wRvGz972FwXs3qIAqufPL/Z6610ASAGeGYvebXx5F0I= Subject key identifier: 3B:7B:B6:A5:4A:B4:50:09:18:7B:84:25:D3:E9:48:9E:9F:86:53:03 Certificate issuer: /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Certificate serial: 010D0C9F4328584917DC01D91A8CE4AFD94A2890 Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4521230d-a7d3-3539-b54c-49378e8313e8.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 38047 IP address blocks: 2602:f83b:a201::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:01:d9:1a:8c:e4:af:d9:4a:28:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=f18c79b8-969d-47c1-88b7-b3f61b85264b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:75:8b:bb:90:54:ff:2e:e9:fc:5d:e1:0b:e8: a9:ac:51:c1:6d:26:29:48:fd:0a:e2:13:24:b9:08: 36:19:7b:72:b8:d0:e4:f1:8c:e0:bf:7d:32:58:4a: 2a:88:d6:ca:ed:88:10:92:a7:26:aa:0d:61:4a:4b: 92:62:e7:1e:fd:23:11:a8:79:61:5a:1d:22:4d:1f: 54:1b:7e:67:41:9d:ad:b2:ac:5c:66:21:4d:e7:3c: 32:68:95:f2:e3:cd:15:0a:e4:72:0f:f9:29:c6:e4: 1e:eb:6b:84:e7:ac:70:38:38:6e:ef:42:ea:52:f9: 59:de:a0:35:c4:98:ca:ff:4c:d7:9a:35:45:5e:9e: 35:42:ad:11:25:6d:e8:e8:bf:31:00:50:84:a6:29: f0:78:2b:91:67:b9:5b:b3:95:f1:79:ad:c0:2f:a4: 53:e2:f6:57:d8:64:ad:cc:12:bc:7a:fd:42:ee:eb: 1f:ba:56:de:77:2e:ba:b2:b4:ee:6c:90:6e:48:a5: cf:3a:90:6b:2b:1c:fc:49:6a:ec:9d:38:af:45:0a: e3:05:e9:e8:10:e6:d2:3d:62:e9:33:f0:58:46:51: 5f:8d:1a:a1:b0:e8:41:52:7d:c5:8c:bb:16:37:db: 96:ce:09:73:4a:e7:af:05:06:6b:6d:9d:89:5d:ad: f4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:7B:B6:A5:4A:B4:50:09:18:7B:84:25:D3:E9:48:9E:9F:86:53:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4521230d-a7d3-3539-b54c-49378e8313e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl X509v3 Authority Key Identifier: keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer sbgp-ipAddrBlock: critical IPv6: 2602:f83b:a201::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:c1:94:26:4c:b4:57:0c:7d:8e:f6:2d:80:1f:8c:59:ef:f5: 67:77:34:a7:07:45:87:d0:f5:9e:bd:7f:42:db:37:b5:1a:3f: 79:37:3c:b0:ca:af:57:7d:f3:82:d4:ad:b6:c7:d1:c4:47:a4: 39:41:74:19:ec:c6:7f:72:d8:c2:88:12:b9:47:b3:c8:9e:b5: 5c:9b:0a:c7:a9:1d:b4:e8:77:72:c8:57:4a:84:c0:74:88:34: 24:5a:3d:86:85:13:31:9c:1a:75:bc:69:8b:55:8e:61:2a:18: cb:bc:b7:32:6c:a7:d4:fe:a7:a1:a2:58:f4:ff:91:08:8d:e7: 62:88:7e:4b:73:fc:e2:0e:74:24:97:42:4d:39:a9:9a:c2:87: 77:7f:2e:e6:47:96:a1:54:81:e3:5e:50:b9:d7:ba:20:4a:e4: 14:bc:20:3d:1a:ab:5e:6c:29:ac:48:60:24:2b:bd:2c:d0:49: 56:20:56:5b:0a:d2:63:d7:6f:39:c4:f2:e8:62:13:29:06:fe: 56:2a:3a:6b:11:15:76:41:f6:d9:f0:52:20:4a:a4:04:25:16: 6f:98:b1:ea:e4:b4:8b:86:23:55:c4:dc:2c:a3:1c:61:2e:a3: cf:b8:8b:be:db:fa:5e:05:19:3b:23:56:7e:2b:8d:da:96:da: 90:cd:be:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkX3AHZGozkr9lKKJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg5OGMxMjItYjk4ZS00Y2U0LTk1YjQtZmU1ZjI1ZmRk MjYxMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZjE4Yzc5YjgtOTY5ZC00N2MxLTg4YjctYjNmNjFiODUyNjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHWLu5BU/y7p/F3hC+iprFHBbSYpSP0K4hMk uQg2GXtyuNDk8Yzgv30yWEoqiNbK7YgQkqcmqg1hSkuSYuce/SMRqHlhWh0iTR9U G35nQZ2tsqxcZiFN5zwyaJXy480VCuRyD/kpxuQe62uE56xwODhu70LqUvlZ3qA1 xJjK/0zXmjVFXp41Qq0RJW3o6L8xAFCEpinweCuRZ7lbs5Xxea3AL6RT4vZX2GSt zBK8ev1C7usfulbedy66srTubJBuSKXPOpBrKxz8SWrsnTivRQrjBenoEObSPWLp M/BYRlFfjRqhsOhBUn3FjLsWN9uWzglzSuevBQZrbZ2JXa300QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDt7tqVKtFAJGHuEJdPpSJ6fhlMDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4 YzEyMi1iOThlLTRjZTQtOTViNC1mZTVmMjVmZGQyNjEvNDUyMTIzMGQtYTdkMy0z NTM5LWI1NGMtNDkzNzhlODMxM2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzg5OGMxMjItYjk4ZS00Y2U0LTk1 YjQtZmU1ZjI1ZmRkMjYxL2M4OThjMTIyLWI5OGUtNGNlNC05NWI0LWZlNWYyNWZk ZDI2MS5jcmwwHwYDVR0jBBgwFoAUv70ixlKUaZvmLUeXzBvNm78uNLwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4YzEyMi1iOThlLTRjZTQtOTViNC1mZTVm MjVmZGQyNjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4O6IB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEjBlCZMtFcMfY72LYAfjFnv9Wd3NKcHRYfQ9Z69f0LbN7UaP3k3 PLDKr1d984LUrbbH0cRHpDlBdBnsxn9y2MKIErlHs8ietVybCsepHbTod3LIV0qE wHSINCRaPYaFEzGcGnW8aYtVjmEqGMu8tzJsp9T+p6GiWPT/kQiN52KIfktz/OIO dCSXQk05qZrCh3d/LuZHlqFUgeNeULnXuiBK5BS8ID0aq15sKaxIYCQrvSzQSVYg VlsK0mPXbznE8uhiEykG/lYqOmsRFXZB9tnwUiBKpAQlFm+YserktIuGI1XE3Cyj HGEuo8+4i77b+l4FGTsjVn4rjdqW2pDNviE= -----END CERTIFICATE-----Generated at Wed Apr 9 23:13:57 2025 by rpki-client