$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/46f99dc5-813f-39f9-947b-55e16d26b314.roa File: 46f99dc5-813f-39f9-947b-55e16d26b314.roa (raw, json) Hash identifier: DhVeuea8I7oQYpUDI2SQsb7OQsuS51d/1cXe0z7rXic= Subject key identifier: EB:CC:41:77:72:13:10:47:F6:7D:B0:DB:7E:5A:9C:35:17:88:A9:49 Certificate issuer: /CN=98161ef7-249b-450b-ba6a-5819e613ed63 Certificate serial: 010D0C9F4328584919417D08E1481E1DC77200D0 Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/46f99dc5-813f-39f9-947b-55e16d26b314.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 60900 IP address blocks: 2602:2b7:420::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:7d:08:e1:48:1e:1d:c7:72:00:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=6621f792-4c8e-4054-9663-8342c5b64b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f5:4d:84:a0:63:4e:6c:fa:a7:67:1c:bc:f5: 17:61:c6:3a:4a:fb:da:6a:bd:c6:bc:c3:c7:4c:57: 21:d7:1c:88:6f:d8:69:17:44:e3:4b:a8:e7:29:9c: 79:a6:22:f8:8c:db:c6:ae:8e:b9:cf:35:45:50:07: 09:8c:de:f6:ed:29:bf:f4:c9:76:16:64:fb:26:1b: 4e:8a:bd:28:e7:7d:d1:01:34:3b:6c:1a:c1:ec:14: 0c:f3:c2:df:e5:50:90:7c:3e:77:c5:b0:ed:f5:2a: d2:22:fb:62:01:c1:ca:d4:66:db:ae:f1:d0:b6:57: 7b:af:1e:4e:50:93:cd:38:39:15:ae:a1:94:3b:9a: 16:a4:00:cd:73:1b:38:e5:f2:bf:91:63:b9:37:a5: 67:1c:17:f1:fa:d4:98:46:e7:6c:04:4b:f3:46:7e: e0:a5:70:45:fa:28:a6:58:f8:37:b2:a3:0b:9b:08: 76:b3:98:76:83:50:14:b5:ff:51:c4:7e:44:f8:82: f5:29:00:2c:de:f2:cf:56:fd:f3:5f:da:38:60:6f: 8a:55:c3:bd:87:c1:26:a8:99:3c:d6:24:bb:86:d5: d0:f0:e2:bb:57:6a:56:3a:3d:29:b9:05:63:21:3e: ad:ec:2f:09:92:4a:8e:9a:cb:b9:c0:8c:7a:ce:21: 91:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:CC:41:77:72:13:10:47:F6:7D:B0:DB:7E:5A:9C:35:17:88:A9:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/46f99dc5-813f-39f9-947b-55e16d26b314.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl X509v3 Authority Key Identifier: keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer sbgp-ipAddrBlock: critical IPv6: 2602:2b7:420::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:67:7c:21:ad:ea:ca:c1:97:22:92:7b:da:b3:d6:a5:14:c9: 68:8b:ab:a1:30:98:cf:2e:bb:33:30:ee:93:da:d2:8c:6e:10: 85:dc:a7:72:dd:0e:f9:10:a5:3c:a6:43:4a:b4:e7:fc:12:4f: ce:17:c7:83:9a:64:ea:df:ce:e9:0c:de:86:f4:78:06:ee:58: 45:b4:bc:82:e0:c8:92:e7:a4:17:9c:2a:eb:f4:f0:b3:de:dc: fc:e9:5f:f3:f2:00:d0:41:d0:e0:33:ed:1a:47:5b:df:70:8b: de:a3:35:ba:05:31:88:ce:fe:73:c7:a5:f5:da:7f:97:a1:de: 2a:00:cc:57:ba:19:32:f0:07:d4:3e:a6:52:b0:f8:7c:77:c4: b6:ac:14:f3:30:b6:83:d8:9e:a0:65:28:7b:69:46:42:d6:c9: d9:83:37:1b:0e:57:9e:10:00:8c:bd:d3:29:ed:5c:84:0e:fb: 9d:0c:c1:0c:95:64:69:65:c2:aa:6c:7d:ab:0b:f9:3b:2e:42: 69:79:f1:41:7b:4d:20:7a:03:a2:b9:9e:cf:96:41:a6:39:b0: 83:34:53:60:7e:8f:53:d3:10:a7:66:98:f2:25:62:0b:02:f0: b4:5d:9e:0b:e7:d6:d5:4a:88:42:db:e6:ee:6e:c2:88:8a:f3: ee:54:68:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkZQX0I4UgeHcdyANAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgxNjFlZjctMjQ5Yi00NTBiLWJhNmEtNTgxOWU2MTNl ZDYzMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk NjYyMWY3OTItNGM4ZS00MDU0LTk2NjMtODM0MmM1YjY0YjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/VNhKBjTmz6p2ccvPUXYcY6Svvaar3GvMPH TFch1xyIb9hpF0TjS6jnKZx5piL4jNvGro65zzVFUAcJjN727Sm/9Ml2FmT7JhtO ir0o533RATQ7bBrB7BQM88Lf5VCQfD53xbDt9SrSIvtiAcHK1GbbrvHQtld7rx5O UJPNODkVrqGUO5oWpADNcxs45fK/kWO5N6VnHBfx+tSYRudsBEvzRn7gpXBF+iim WPg3sqMLmwh2s5h2g1AUtf9RxH5E+IL1KQAs3vLPVv3zX9o4YG+KVcO9h8EmqJk8 1iS7htXQ8OK7V2pWOj0puQVjIT6t7C8JkkqOmsu5wIx6ziGRlwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOvMQXdyExBH9n2w235anDUXiKlJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODE2 MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5ZTYxM2VkNjMvNDZmOTlkYzUtODEzZi0z OWY5LTk0N2ItNTVlMTZkMjZiMzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTgxNjFlZjctMjQ5Yi00NTBiLWJh NmEtNTgxOWU2MTNlZDYzLzk4MTYxZWY3LTI0OWItNDUwYi1iYTZhLTU4MTllNjEz ZWQ2My5jcmwwHwYDVR0jBBgwFoAU1BnUREsRiVyMbWhl/etLT/KsGnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ODE2MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5 ZTYxM2VkNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICtwQg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABtnfCGt6srBlyKSe9qz1qUUyWiLq6EwmM8uuzMw7pPa0oxuEIXc p3LdDvkQpTymQ0q05/wST84Xx4OaZOrfzukM3ob0eAbuWEW0vILgyJLnpBecKuv0 8LPe3PzpX/PyANBB0OAz7RpHW99wi96jNboFMYjO/nPHpfXaf5eh3ioAzFe6GTLw B9Q+plKw+Hx3xLasFPMwtoPYnqBlKHtpRkLWydmDNxsOV54QAIy90yntXIQO+50M wQyVZGllwqpsfasL+TsuQml58UF7TSB6A6K5ns+WQaY5sIM0U2B+j1PTEKdmmPIl YgsC8LRdngvn1tVKiELb5u5uwoiK8+5UaEk= -----END CERTIFICATE-----Generated at Sat Apr 5 09:57:17 2025 by rpki-client