$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/ddd19d33-ef02-34c1-abd1-aef2904b7c52.roa File: ddd19d33-ef02-34c1-abd1-aef2904b7c52.roa (raw, json) Hash identifier: we55nnEzae8A7u1wA9MU2gl9B+hjOEwemhx3daxEsiE= Subject key identifier: 13:DB:DF:DE:E1:67:74:28:8B:76:D9:85:61:DF:2E:4C:9E:F2:16:D8 Certificate issuer: /CN=a99f9d36-f970-481f-ae52-e74a6f8a7541 Certificate serial: 010D0C9F43285849350EA48E35F02D0E27ABA910 Authority key identifier: BC:C4:55:41:5B:83:B3:D0:6D:B9:F0:71:80:93:5B:B4:21:99:D3:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/ddd19d33-ef02-34c1-abd1-aef2904b7c52.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 396996 IP address blocks: 2602:f9c8::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/a99f9d36-f970-481f-ae52-e74a6f8a7541.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/a99f9d36-f970-481f-ae52-e74a6f8a7541.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:a4:8e:35:f0:2d:0e:27:ab:a9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a99f9d36-f970-481f-ae52-e74a6f8a7541 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=1eb6a020-84b6-4ff4-88b4-a3d0fe03ebe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2b:5a:51:5d:48:52:50:87:c2:cb:1c:0f:83: 7f:b0:73:d9:42:c2:41:eb:00:5b:03:4d:77:f6:e8: fd:bd:e7:44:48:d6:32:25:f6:0e:a1:f4:4f:0e:eb: 14:9f:d5:0b:00:32:a8:38:a8:83:bc:b9:f9:51:b8: c9:02:85:0c:a9:0d:19:62:37:e8:0f:38:b7:5c:83: ea:3b:ea:c8:95:53:21:9b:b5:7e:a6:93:df:52:85: fb:be:41:f7:2e:e1:be:50:ad:13:b4:51:52:88:d2: a4:63:55:de:4e:14:d3:de:1b:85:81:ab:90:af:56: 45:6c:f3:fa:52:58:bf:37:be:1d:ec:96:73:4d:6f: 07:44:f7:17:d7:fc:01:0f:51:8a:f8:e3:45:46:73: 11:14:8f:d3:a8:e3:79:bc:0c:32:a1:44:4b:d9:ec: f3:da:64:ae:9a:60:66:5a:a3:4b:37:b0:ee:fa:dd: dc:1f:59:42:24:b8:96:5f:ac:e1:bf:e9:6a:88:71: 8d:02:3a:35:5d:68:8e:e3:2c:e5:e3:3a:71:c9:70: 07:1b:97:78:7e:89:d4:26:03:ea:f7:ae:9b:69:b7: 63:9b:f5:67:92:af:8d:99:a0:55:41:fa:76:62:43: ba:33:f6:31:3d:4a:d1:b1:db:97:c5:c0:f1:91:6a: 55:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:DB:DF:DE:E1:67:74:28:8B:76:D9:85:61:DF:2E:4C:9E:F2:16:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/ddd19d33-ef02-34c1-abd1-aef2904b7c52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/a99f9d36-f970-481f-ae52-e74a6f8a7541.crl X509v3 Authority Key Identifier: keyid:BC:C4:55:41:5B:83:B3:D0:6D:B9:F0:71:80:93:5B:B4:21:99:D3:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9c8::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ad:e1:72:66:9f:0b:b9:80:3b:1f:10:05:62:93:d4:db:f8: 21:d0:05:f2:fa:c8:9f:87:5f:cf:a6:fc:5f:c1:71:66:24:05: af:f9:67:d0:f1:d8:50:f3:9f:da:46:d6:4d:0e:88:ec:40:87: b9:7f:d5:1a:09:25:6e:bc:d4:5c:c6:4e:f7:a1:68:b2:0b:92: 1b:af:85:0b:90:a6:16:fc:7e:66:00:04:9c:54:eb:32:ba:d7: 1d:4f:34:67:bc:44:29:92:99:0f:d0:a7:35:b3:9e:e4:2f:f9: f5:17:60:b8:26:b2:d9:c9:b6:f4:0b:e2:3f:c6:d2:fe:80:e3: cd:38:07:6f:bc:ef:99:ef:f2:19:21:08:ee:85:19:1e:4e:72: a8:53:04:56:05:38:50:14:29:99:81:a7:fa:49:15:9c:3e:fc: db:0f:a8:2e:fa:b5:29:84:20:cc:35:33:5a:a9:59:b8:36:24: 2f:80:9a:89:d7:33:d3:87:86:3a:ce:41:89:53:a2:2d:60:68: b7:6d:70:f1:84:cd:4c:3a:c2:2e:30:58:88:82:e6:d2:56:73: 4f:a3:a7:2e:d7:2f:9c:69:5a:c4:89:80:4f:62:fa:3b:d1:ae: 31:9a:3b:cb:f9:6d:ed:7f:41:12:24:ba:02:63:db:5e:78:7c: bd:d7:d8:56 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEk1DqSONfAtDierqRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk5ZjlkMzYtZjk3MC00ODFmLWFlNTItZTc0YTZmOGE3 NTQxMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk MWViNmEwMjAtODRiNi00ZmY0LTg4YjQtYTNkMGZlMDNlYmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApytaUV1IUlCHwsscD4N/sHPZQsJB6wBbA013 9uj9vedESNYyJfYOofRPDusUn9ULADKoOKiDvLn5UbjJAoUMqQ0ZYjfoDzi3XIPq O+rIlVMhm7V+ppPfUoX7vkH3LuG+UK0TtFFSiNKkY1XeThTT3huFgauQr1ZFbPP6 Uli/N74d7JZzTW8HRPcX1/wBD1GK+ONFRnMRFI/TqON5vAwyoURL2ezz2mSummBm WqNLN7Du+t3cH1lCJLiWX6zhv+lqiHGNAjo1XWiO4yzl4zpxyXAHG5d4fonUJgPq 966babdjm/Vnkq+NmaBVQfp2YkO6M/YxPUrRsduXxcDxkWpVhwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBPb397hZ3Qoi3bZhWHfLkye8hbYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hOTlm OWQzNi1mOTcwLTQ4MWYtYWU1Mi1lNzRhNmY4YTc1NDEvZGRkMTlkMzMtZWYwMi0z NGMxLWFiZDEtYWVmMjkwNGI3YzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTk5ZjlkMzYtZjk3MC00ODFmLWFl NTItZTc0YTZmOGE3NTQxL2E5OWY5ZDM2LWY5NzAtNDgxZi1hZTUyLWU3NGE2Zjhh NzU0MS5jcmwwHwYDVR0jBBgwFoAUvMRVQVuDs9BtufBxgJNbtCGZ05swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hOTlmOWQzNi1mOTcwLTQ4MWYtYWU1Mi1lNzRh NmY4YTc1NDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5yAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALq3hcmafC7mAOx8QBWKT1Nv4IdAF8vrIn4dfz6b8X8FxZiQFr/ln 0PHYUPOf2kbWTQ6I7ECHuX/VGgklbrzUXMZO96FosguSG6+FC5CmFvx+ZgAEnFTr MrrXHU80Z7xEKZKZD9CnNbOe5C/59RdguCay2cm29AviP8bS/oDjzTgHb7zvme/y GSEI7oUZHk5yqFMEVgU4UBQpmYGn+kkVnD782w+oLvq1KYQgzDUzWqlZuDYkL4Ca idcz04eGOs5BiVOiLWBot21w8YTNTDrCLjBYiILm0lZzT6OnLtcvnGlaxImAT2L6 O9GuMZo7y/lt7X9BEiS6AmPbXnh8vdfYVg== -----END CERTIFICATE-----Generated at Fri Apr 4 19:03:23 2025 by rpki-client