$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/625ab4ed-3a48-3dcc-968c-fddd7ff4a936.roa File: 625ab4ed-3a48-3dcc-968c-fddd7ff4a936.roa (raw, json) Hash identifier: 89fkbXAgP0wJgGCeTULRLQSJGu/M8W/ZikmdSnPrr6g= Subject key identifier: 3D:96:DD:9E:E6:84:BC:58:F5:98:58:65:A2:17:AC:9D:0C:FF:A9:0C Certificate issuer: /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Certificate serial: 010D0C9F43285848D0ABC35622E2B0B5E54F0F00 Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/625ab4ed-3a48-3dcc-968c-fddd7ff4a936.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 38047 IP address blocks: 2602:f83b:a886::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:c3:56:22:e2:b0:b5:e5:4f:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=99b89d9e-a061-4ad7-ad19-6ede766baa67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:03:68:52:54:db:66:dc:22:89:a6:47:3e:5e: 34:35:ca:fa:79:ca:19:ca:be:65:2c:26:f4:0d:b9: 19:19:e5:d6:d3:3d:b5:3a:9d:30:74:38:9a:3c:f5: 67:b6:1d:d9:f6:88:63:8b:0d:e2:30:1c:f3:74:12: 70:ae:01:c0:fa:52:67:cc:84:49:ef:cd:5e:5c:7f: c1:91:87:ec:19:4d:da:fd:55:f8:40:80:3b:c1:57: 93:6b:f9:f0:90:39:fc:97:52:14:49:2a:5d:e8:0a: 39:4e:a6:cb:b0:f5:b2:e6:3d:04:a6:e6:1f:17:63: b0:a7:5e:af:db:2b:ba:0e:72:4a:ab:d0:65:fd:35: df:af:ad:73:ea:e7:89:85:03:84:4b:4f:26:ba:11: c8:7c:c8:b4:24:4c:3d:11:46:59:0e:61:61:e7:dc: b0:7e:e8:f4:b6:18:ab:04:fa:88:95:58:72:be:7f: de:f7:2c:83:f4:8d:1b:71:ff:37:22:1b:b6:42:79: 72:d9:ce:bf:d8:9b:a6:4f:d9:87:10:b6:37:a1:62: ef:d6:37:4b:02:dc:2e:44:6d:1b:b1:82:7d:73:21: 09:0e:65:1a:66:ae:30:b7:8d:ce:f9:3d:eb:ef:d3: 51:61:52:22:d6:b2:28:8f:54:46:22:96:2f:98:56: da:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:96:DD:9E:E6:84:BC:58:F5:98:58:65:A2:17:AC:9D:0C:FF:A9:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/625ab4ed-3a48-3dcc-968c-fddd7ff4a936.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl X509v3 Authority Key Identifier: keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer sbgp-ipAddrBlock: critical IPv6: 2602:f83b:a886::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:fc:20:92:7a:9b:ea:85:27:74:9e:f2:22:5a:8c:40:61:8a: 26:ae:72:77:03:3f:66:ea:d1:74:f4:cd:44:c6:88:63:12:89: 4a:4d:c0:87:cb:38:75:4a:46:1c:3c:99:28:f3:68:fb:12:d2: 96:dd:0d:7b:c2:bf:59:28:18:00:e2:96:73:a3:a9:9d:f8:00: c3:1f:47:a1:51:73:52:47:93:c7:ce:ae:62:dd:58:9a:b7:92: 85:b0:a1:19:ec:56:77:65:96:ba:ac:9c:0e:60:78:c5:05:89: 9b:40:0b:3f:b2:29:9d:68:06:a8:7d:cd:89:5c:73:de:06:7e: 42:94:32:4b:b5:f6:5f:d5:8f:02:ad:77:96:f9:de:c8:bc:0b: b0:c4:d3:97:b7:bd:a8:5f:ec:c2:18:04:ef:4c:29:71:03:4f: 76:9e:e8:ca:6e:7d:f8:0e:ef:2d:1d:e0:40:31:05:62:62:bd: 5b:eb:19:5c:89:32:2a:80:fe:ee:1a:ee:5c:2c:fd:70:be:a8: 17:4f:bf:8b:70:b6:80:a6:98:1a:78:e1:f6:ca:64:66:bc:39: 15:36:8d:af:26:e6:64:8c:d1:e8:dc:62:9b:a6:89:39:23:a1: 1b:e0:31:8f:f9:aa:20:85:c4:87:97:59:0b:a4:8c:00:91:2b: 57:71:dc:75 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjQq8NWIuKwteVPDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg5OGMxMjItYjk4ZS00Y2U0LTk1YjQtZmU1ZjI1ZmRk MjYxMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk OTliODlkOWUtYTA2MS00YWQ3LWFkMTktNmVkZTc2NmJhYTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgANoUlTbZtwiiaZHPl40Ncr6ecoZyr5lLCb0 DbkZGeXW0z21Op0wdDiaPPVnth3Z9ohjiw3iMBzzdBJwrgHA+lJnzIRJ781eXH/B kYfsGU3a/VX4QIA7wVeTa/nwkDn8l1IUSSpd6Ao5TqbLsPWy5j0EpuYfF2Owp16v 2yu6DnJKq9Bl/TXfr61z6ueJhQOES08muhHIfMi0JEw9EUZZDmFh59ywfuj0thir BPqIlVhyvn/e9yyD9I0bcf83Ihu2Qnly2c6/2JumT9mHELY3oWLv1jdLAtwuRG0b sYJ9cyEJDmUaZq4wt43O+T3r79NRYVIi1rIoj1RGIpYvmFbaZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD2W3Z7mhLxY9ZhYZaIXrJ0M/6kMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4 YzEyMi1iOThlLTRjZTQtOTViNC1mZTVmMjVmZGQyNjEvNjI1YWI0ZWQtM2E0OC0z ZGNjLTk2OGMtZmRkZDdmZjRhOTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzg5OGMxMjItYjk4ZS00Y2U0LTk1 YjQtZmU1ZjI1ZmRkMjYxL2M4OThjMTIyLWI5OGUtNGNlNC05NWI0LWZlNWYyNWZk ZDI2MS5jcmwwHwYDVR0jBBgwFoAUv70ixlKUaZvmLUeXzBvNm78uNLwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4YzEyMi1iOThlLTRjZTQtOTViNC1mZTVm MjVmZGQyNjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4O6iG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH78IJJ6m+qFJ3Se8iJajEBhiiaucncDP2bq0XT0zUTGiGMSiUpN wIfLOHVKRhw8mSjzaPsS0pbdDXvCv1koGADilnOjqZ34AMMfR6FRc1JHk8fOrmLd WJq3koWwoRnsVndllrqsnA5geMUFiZtACz+yKZ1oBqh9zYlcc94GfkKUMku19l/V jwKtd5b53si8C7DE05e3vahf7MIYBO9MKXEDT3ae6MpuffgO7y0d4EAxBWJivVvr GVyJMiqA/u4a7lws/XC+qBdPv4twtoCmmBp44fbKZGa8ORU2ja8m5mSM0ejcYpum iTkjoRvgMY/5qiCFxIeXWQukjACRK1dx3HU= -----END CERTIFICATE-----Generated at Wed Apr 9 23:08:49 2025 by rpki-client