$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/6a761f86-d2f6-375e-8b37-52b4d7d0a670.roa File: 6a761f86-d2f6-375e-8b37-52b4d7d0a670.roa (raw, json) Hash identifier: tjEOZcnKuSpGvhUS/XUoKOP+J1LxTMB3s/HJepv2Aaw= Subject key identifier: 8A:27:CB:6E:CE:F6:B5:1C:C0:2E:1D:65:CF:CA:3E:8C:98:82:4F:44 Certificate issuer: /CN=78f2a37d-9624-4031-908c-08f70f9830f9 Certificate serial: 010D0C9F43285849244E89B52F719AF47AF90F00 Authority key identifier: 77:56:2C:D7:F3:9A:CB:1C:96:F0:48:AF:50:F2:E3:FF:CD:0C:E0:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/6a761f86-d2f6-375e-8b37-52b4d7d0a670.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 399794 IP address blocks: 2602:f9f2::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/78f2a37d-9624-4031-908c-08f70f9830f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/78f2a37d-9624-4031-908c-08f70f9830f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:89:b5:2f:71:9a:f4:7a:f9:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78f2a37d-9624-4031-908c-08f70f9830f9 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=6080af22-8320-4d87-bc23-05fcf6e0ca83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:97:c5:c3:9d:64:cf:ed:be:e2:19:ba:40:92: 3e:6b:0e:ed:8e:15:ef:67:d6:fc:7a:da:9c:07:b1: 58:70:fd:44:81:31:7f:15:00:41:8d:f4:da:65:cb: cc:c7:4c:ca:69:e6:6f:d6:b1:d6:1f:f9:70:ac:4c: 02:0e:be:fe:b0:54:d2:5f:4d:99:ee:f6:98:f5:59: 3d:32:f1:4f:6a:1a:2a:be:06:2b:1d:93:36:e9:ba: 3a:84:f6:90:18:8e:90:ca:dc:93:7e:dc:85:6b:7f: fa:97:d1:50:94:97:6d:cb:58:43:4e:d3:3c:d3:6a: 13:98:76:79:5c:38:74:e7:26:4e:44:b7:47:ff:e2: d3:23:61:cb:dd:6c:11:a9:95:d1:0e:03:22:b2:95: 52:26:aa:25:1f:3a:9a:23:4e:20:82:8a:be:46:cd: 4a:36:6a:36:05:76:e3:5a:5e:ba:bd:17:a8:a8:99: ca:b2:ad:96:36:b8:06:bd:7b:fc:6e:80:1e:2c:05: 73:b1:7b:9c:3d:67:a7:55:17:08:88:69:98:df:78: d5:1f:dd:11:fb:f8:08:e8:d5:74:c1:6c:e6:fc:db: bb:df:10:92:4d:de:56:84:8b:dd:58:f5:16:f8:90: 15:cc:3d:eb:69:cf:a0:0a:c7:f8:89:7a:1f:10:e4: ac:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:27:CB:6E:CE:F6:B5:1C:C0:2E:1D:65:CF:CA:3E:8C:98:82:4F:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/6a761f86-d2f6-375e-8b37-52b4d7d0a670.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/78f2a37d-9624-4031-908c-08f70f9830f9.crl X509v3 Authority Key Identifier: keyid:77:56:2C:D7:F3:9A:CB:1C:96:F0:48:AF:50:F2:E3:FF:CD:0C:E0:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9f2::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:c1:c9:80:d5:20:13:cb:4a:5f:8d:75:cb:09:c5:f2:ce:9f: 1a:e8:18:2d:3e:9d:a4:5a:1f:5d:30:50:6a:4b:3e:c3:03:bf: 99:f5:5e:c6:be:6f:ee:13:e9:06:d3:28:13:13:66:5d:bc:18: 8b:9f:6e:0b:76:56:1c:20:4a:27:b5:f4:f7:a0:d3:61:18:6e: e6:26:64:09:30:8c:3d:37:e0:df:99:df:48:58:ff:fb:56:b0: be:48:5d:47:6b:b0:ee:08:e5:a8:a1:42:0e:a1:09:af:11:72: 84:06:49:5d:5c:3c:e4:42:99:de:cf:30:8a:59:ec:f6:4b:de: da:a2:e2:42:c3:68:5f:0f:d0:08:83:f4:b9:90:e4:89:40:03: 7a:17:2e:f4:98:fe:ce:d3:41:96:36:b4:6b:c6:23:ed:c9:3c: d4:7c:09:f1:21:29:57:44:75:8e:1a:cf:0a:44:e6:27:cc:30: 53:8a:07:ea:e7:30:0e:2a:17:24:39:9d:85:61:a3:c7:92:af: 0c:d3:a4:75:0c:17:4d:07:f5:2d:40:32:f7:93:08:c2:58:b2: 72:35:c5:f4:af:74:85:6e:a2:b7:ca:1b:a9:7f:f8:7b:c5:9d: cd:9f:a4:21:76:fe:92:e3:c9:af:59:f1:b6:d9:4e:d8:6c:c6: f7:7a:e3:f0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkkTom1L3Ga9Hr5DwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhmMmEzN2QtOTYyNC00MDMxLTkwOGMtMDhmNzBmOTgz MGY5MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk NjA4MGFmMjItODMyMC00ZDg3LWJjMjMtMDVmY2Y2ZTBjYTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpfFw51kz+2+4hm6QJI+aw7tjhXvZ9b8etqc B7FYcP1EgTF/FQBBjfTaZcvMx0zKaeZv1rHWH/lwrEwCDr7+sFTSX02Z7vaY9Vk9 MvFPahoqvgYrHZM26bo6hPaQGI6QytyTftyFa3/6l9FQlJdty1hDTtM802oTmHZ5 XDh05yZORLdH/+LTI2HL3WwRqZXRDgMispVSJqolHzqaI04ggoq+Rs1KNmo2BXbj Wl66vReoqJnKsq2WNrgGvXv8boAeLAVzsXucPWenVRcIiGmY33jVH90R+/gI6NV0 wWzm/Nu73xCSTd5WhIvdWPUW+JAVzD3rac+gCsf4iXofEOSshwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIony27O9rUcwC4dZc/KPoyYgk9EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83OGYy YTM3ZC05NjI0LTQwMzEtOTA4Yy0wOGY3MGY5ODMwZjkvNmE3NjFmODYtZDJmNi0z NzVlLThiMzctNTJiNGQ3ZDBhNjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzhmMmEzN2QtOTYyNC00MDMxLTkw OGMtMDhmNzBmOTgzMGY5Lzc4ZjJhMzdkLTk2MjQtNDAzMS05MDhjLTA4ZjcwZjk4 MzBmOS5jcmwwHwYDVR0jBBgwFoAUd1Ys1/OayxyW8EivUPLj/80M4JAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83OGYyYTM3ZC05NjI0LTQwMzEtOTA4Yy0wOGY3 MGY5ODMwZjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL58gAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGcHJgNUgE8tKX411ywnF8s6fGugYLT6dpFofXTBQaks+wwO/mfVe xr5v7hPpBtMoExNmXbwYi59uC3ZWHCBKJ7X096DTYRhu5iZkCTCMPTfg35nfSFj/ +1awvkhdR2uw7gjlqKFCDqEJrxFyhAZJXVw85EKZ3s8wilns9kve2qLiQsNoXw/Q CIP0uZDkiUADehcu9Jj+ztNBlja0a8Yj7ck81HwJ8SEpV0R1jhrPCkTmJ8wwU4oH 6ucwDioXJDmdhWGjx5KvDNOkdQwXTQf1LUAy95MIwliycjXF9K90hW6it8obqX/4 e8WdzZ+kIXb+kuPJr1nxttlO2GzG93rj8A== -----END CERTIFICATE-----Generated at Fri Apr 4 19:29:46 2025 by rpki-client