$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/1c661a4e-30f2-3464-acbd-d88cf667907b.roa File: 1c661a4e-30f2-3464-acbd-d88cf667907b.roa (raw, json) Hash identifier: XD38HQYlKXSZyKlcF5DjLk1QnIGQX9NLG/x3EUtQwjs= Subject key identifier: 5C:88:F5:30:6C:1D:AF:4C:99:30:55:54:D4:C7:F8:AB:2E:15:3F:69 Certificate issuer: /CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488 Certificate serial: 010D0C9F432858496581F179FDEF0C13373E1128 Authority key identifier: 77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/1c661a4e-30f2-3464-acbd-d88cf667907b.roa Signing time: Wed 02 Apr 2025 21:32:17 +0000 ROA not before: Wed 02 Apr 2025 21:32:17 +0000 ROA not after: Tue 01 Jul 2025 21:32:17 +0000 asID: 3819 IP address blocks: 2602:f69a:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:81:f1:79:fd:ef:0c:13:37:3e:11:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488 Validity Not Before: Apr 2 21:32:17 2025 GMT Not After : Jul 1 21:32:17 2025 GMT Subject: CN=2bb96753-e81b-4fb9-8b2a-06f1da03efff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:29:cd:d7:a8:36:35:f3:1b:88:5f:37:6e:2a: 19:48:a9:ba:46:30:d3:b2:58:36:19:71:bf:43:67: e3:42:0f:34:c1:d2:f1:82:c4:ae:b2:8a:bb:8e:d5: 6a:49:32:0a:dc:c3:92:c2:1d:78:61:c5:b7:67:ba: 68:00:96:60:b7:8d:83:95:7d:87:4a:31:30:53:4e: d9:fb:1f:ba:09:0e:68:2d:08:5b:e7:ae:75:83:f8: 81:20:1a:0a:ee:9f:0f:d2:49:39:ff:d3:87:f9:40: fa:5a:e0:fa:39:35:7b:2e:b1:10:ff:f6:cc:73:2a: 61:2a:71:2a:43:19:4a:67:51:44:c8:26:4b:1a:89: a7:45:6f:ba:5e:5c:1a:49:33:cd:9a:98:66:ca:e0: af:d4:86:3a:ff:33:c1:bb:2b:ca:88:98:78:e7:36: 73:15:5a:0c:c3:43:8e:af:d7:7c:07:0a:c7:9f:61: 02:64:39:2e:03:8d:31:07:7f:c5:22:18:fa:e2:f0: 82:e6:7a:9c:17:ab:48:4c:38:9b:28:4a:b8:db:b6: 76:fd:b3:f3:aa:30:de:80:c4:07:f3:81:b3:38:c2: c6:41:c0:23:ab:d2:9d:c3:12:27:9b:0a:de:7f:62: ec:ea:93:4d:04:5c:eb:06:29:7e:5b:97:44:da:79: df:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:88:F5:30:6C:1D:AF:4C:99:30:55:54:D4:C7:F8:AB:2E:15:3F:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/1c661a4e-30f2-3464-acbd-d88cf667907b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl X509v3 Authority Key Identifier: keyid:77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer sbgp-ipAddrBlock: critical IPv6: 2602:f69a:7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c2:9b:c3:56:5c:4e:4f:1a:0b:33:63:d1:8d:35:35:b9:77: d5:b8:68:5b:4a:11:e3:82:de:a7:69:3b:9f:9a:c9:70:9e:45: 86:25:42:a8:ed:2e:50:3d:5b:28:d8:61:67:1d:b0:df:61:5d: 2d:f1:c6:83:23:67:1f:2a:71:33:d7:96:b6:e4:90:d2:e9:9b: f6:42:87:23:60:c3:b4:08:31:71:ab:46:f4:c3:cf:e8:07:86: 2d:fc:5a:4f:04:5c:5c:22:46:44:20:f5:6d:bd:dc:ea:62:31: 15:c2:e1:c0:7b:e5:6c:e2:c4:4f:1e:1e:7d:ba:c5:99:ef:68: dd:3d:82:34:ce:ba:e9:92:bd:9f:34:e9:68:ff:fc:5d:38:c4: 82:d2:e6:28:6d:63:d8:03:5a:bf:30:0c:f2:31:d8:6b:ab:66: 94:2d:22:3c:b3:9b:1f:37:9b:0f:be:88:61:d2:9a:9d:a8:f3: fa:29:f7:c4:c3:7a:9e:5b:31:54:69:b2:d2:14:6f:4b:bc:b4: 08:c7:bf:bb:d4:2c:57:2f:c0:cc:c4:01:3a:47:dd:5a:c8:26: 33:ab:a7:73:52:76:8b:85:8c:bc:a6:47:0a:cd:88:15:ae:cf: 93:9f:84:3f:d0:29:79:e6:c1:67:e3:59:88:3f:5f:d8:4c:c9: a7:5e:ea:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEllgfF5/e8MEzc+ESgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YmE3Y2EtMDRkYy00OWEyLWFlNzktNGU2ZjZiMzRl NDg4MB4XDTI1MDQwMjIxMzIxN1oXDTI1MDcwMTIxMzIxN1owLzEtMCsGA1UEAxMk MmJiOTY3NTMtZTgxYi00ZmI5LThiMmEtMDZmMWRhMDNlZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCnN16g2NfMbiF83bioZSKm6RjDTslg2GXG/ Q2fjQg80wdLxgsSusoq7jtVqSTIK3MOSwh14YcW3Z7poAJZgt42DlX2HSjEwU07Z +x+6CQ5oLQhb5651g/iBIBoK7p8P0kk5/9OH+UD6WuD6OTV7LrEQ//bMcyphKnEq QxlKZ1FEyCZLGomnRW+6XlwaSTPNmphmyuCv1IY6/zPBuyvKiJh45zZzFVoMw0OO r9d8BwrHn2ECZDkuA40xB3/FIhj64vCC5nqcF6tITDibKEq427Z2/bPzqjDegMQH 84GzOMLGQcAjq9KdwxInmwref2Ls6pNNBFzrBil+W5dE2nnf3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFyI9TBsHa9MmTBVVNTH+KsuFT9pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hYzli YTdjYS0wNGRjLTQ5YTItYWU3OS00ZTZmNmIzNGU0ODgvMWM2NjFhNGUtMzBmMi0z NDY0LWFjYmQtZDg4Y2Y2Njc5MDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWM5YmE3Y2EtMDRkYy00OWEyLWFl NzktNGU2ZjZiMzRlNDg4L2FjOWJhN2NhLTA0ZGMtNDlhMi1hZTc5LTRlNmY2YjM0 ZTQ4OC5jcmwwHwYDVR0jBBgwFoAUdwqi3iU4yVnSsvQGasfVER2E/iQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hYzliYTdjYS0wNGRjLTQ5YTItYWU3OS00ZTZm NmIzNGU0ODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL2mgAH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADzCm8NWXE5PGgszY9GNNTW5d9W4aFtKEeOC3qdpO5+ayXCeRYYl QqjtLlA9WyjYYWcdsN9hXS3xxoMjZx8qcTPXlrbkkNLpm/ZChyNgw7QIMXGrRvTD z+gHhi38Wk8EXFwiRkQg9W293OpiMRXC4cB75WzixE8eHn26xZnvaN09gjTOuumS vZ806Wj//F04xILS5ihtY9gDWr8wDPIx2GurZpQtIjyzmx83mw++iGHSmp2o8/op 98TDep5bMVRpstIUb0u8tAjHv7vULFcvwMzEATpH3VrIJjOrp3NSdouFjLymRwrN iBWuz5OfhD/QKXnmwWfjWYg/X9hMyade6g8= -----END CERTIFICATE-----Generated at Fri Apr 18 19:17:36 2025 by rpki-client