$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/1e5d43f9-d80e-3809-9abe-3ace80837f83.roa File: 1e5d43f9-d80e-3809-9abe-3ace80837f83.roa (raw, json) Hash identifier: oP0HLGuA3+tiLUo1uFEoC5zSfG9OezIrja/m0dHNE3E= Subject key identifier: 2B:86:16:6F:04:10:9C:5C:D6:D2:8B:FA:C2:9F:CE:C0:2F:5A:5F:ED Certificate issuer: /CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488 Certificate serial: 010D0C9F4328584965871E415B173FE82F74E900 Authority key identifier: 77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/1e5d43f9-d80e-3809-9abe-3ace80837f83.roa Signing time: Wed 02 Apr 2025 21:42:43 +0000 ROA not before: Wed 02 Apr 2025 21:42:43 +0000 ROA not after: Tue 01 Jul 2025 21:42:43 +0000 asID: 3819 IP address blocks: 2602:f69a:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:87:1e:41:5b:17:3f:e8:2f:74:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488 Validity Not Before: Apr 2 21:42:43 2025 GMT Not After : Jul 1 21:42:43 2025 GMT Subject: CN=d2e2db8b-0f51-49f4-84b7-9b1764b9d035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:72:d2:67:bb:20:b8:92:0b:86:54:95:a2:26: 7e:0b:b1:cd:66:77:91:54:b8:f0:6a:61:9b:d6:8b: 8b:af:64:1d:bd:94:c6:f3:ba:12:1b:e4:c8:07:89: 2e:04:5f:52:7d:08:d9:dd:63:08:c7:6a:04:b3:75: 7b:63:48:a1:17:03:fd:e3:eb:3f:23:2a:50:4c:59: 50:68:3e:65:bc:e3:48:f4:39:4d:39:3d:29:a2:ea: 7c:a0:ac:97:c9:77:0d:79:cd:a2:91:90:af:ba:72: a3:5b:dc:7b:58:01:c4:c0:3c:e3:ba:01:e9:d5:b3: d4:96:ba:05:e4:2c:6e:bb:1d:08:d4:64:f9:03:fd: a7:11:7d:7a:6a:57:ee:3d:c3:61:2c:d6:ef:a9:3f: 0a:7e:82:a8:44:ca:25:2c:49:03:41:bd:9e:92:7e: db:8f:5e:7a:b5:7f:52:8d:3d:25:1e:d7:56:0e:26: 50:13:0f:43:1c:d7:77:09:b0:d3:d0:95:19:b7:2d: c6:cd:27:e0:57:c2:61:7c:58:51:99:23:0a:7d:2e: 1f:d6:a2:1e:62:da:e2:06:41:e4:bb:98:c4:23:05: dc:50:96:df:32:0d:56:94:c0:b6:06:6b:c5:9e:d5: a4:a7:94:1d:0b:4e:79:d5:c6:3f:84:33:26:34:50: 19:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:86:16:6F:04:10:9C:5C:D6:D2:8B:FA:C2:9F:CE:C0:2F:5A:5F:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/1e5d43f9-d80e-3809-9abe-3ace80837f83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl X509v3 Authority Key Identifier: keyid:77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer sbgp-ipAddrBlock: critical IPv6: 2602:f69a:18::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:4d:bc:9f:9a:55:3f:03:84:fd:75:c2:72:93:1d:cd:16:f1: 76:6a:76:21:aa:64:27:a8:38:7e:cb:87:ad:e7:e9:a5:b5:e6: 41:b3:52:b8:81:48:f6:57:55:8b:a0:2c:ed:66:b0:5b:5f:cf: 76:30:b4:10:74:ce:c5:41:f3:90:74:4c:d3:7e:9c:bb:1f:3f: 8f:5a:08:36:7f:45:6c:cd:bc:95:e2:19:55:bf:97:bb:f4:ef: 92:1f:81:f8:e6:fa:a8:54:2c:b4:d4:c3:a7:9b:0b:11:74:8a: a0:e0:1e:c1:f6:dd:ba:04:16:5e:ed:c2:24:a0:3d:fa:9d:1d: a2:9c:28:ea:18:78:52:cc:57:7b:d2:a2:32:04:ec:3f:10:28: fe:de:b8:d6:5f:b6:3e:da:13:87:d1:3a:8d:9f:91:ea:f6:88: 91:3f:bb:a3:1d:b6:cf:65:96:7c:21:21:af:8d:37:c4:38:c4: 64:2d:78:31:fb:18:fa:72:e0:ac:aa:88:cd:65:8c:ae:75:c5: 11:6c:c9:32:35:34:e5:65:10:78:16:bc:0e:d1:b9:22:67:98: ad:0c:86:ec:01:96:b9:61:b4:d4:cf:98:0c:d9:d6:8d:1f:91: f8:b8:48:12:54:93:80:34:13:60:e6:f4:0d:80:bd:d2:d4:d1: 27:8e:6a:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEllhx5BWxc/6C906QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YmE3Y2EtMDRkYy00OWEyLWFlNzktNGU2ZjZiMzRl NDg4MB4XDTI1MDQwMjIxNDI0M1oXDTI1MDcwMTIxNDI0M1owLzEtMCsGA1UEAxMk ZDJlMmRiOGItMGY1MS00OWY0LTg0YjctOWIxNzY0YjlkMDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3LSZ7sguJILhlSVoiZ+C7HNZneRVLjwamGb 1ouLr2QdvZTG87oSG+TIB4kuBF9SfQjZ3WMIx2oEs3V7Y0ihFwP94+s/IypQTFlQ aD5lvONI9DlNOT0poup8oKyXyXcNec2ikZCvunKjW9x7WAHEwDzjugHp1bPUlroF 5Cxuux0I1GT5A/2nEX16alfuPcNhLNbvqT8KfoKoRMolLEkDQb2ekn7bj156tX9S jT0lHtdWDiZQEw9DHNd3CbDT0JUZty3GzSfgV8JhfFhRmSMKfS4f1qIeYtriBkHk u5jEIwXcUJbfMg1WlMC2BmvFntWkp5QdC0551cY/hDMmNFAZdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCuGFm8EEJxc1tKL+sKfzsAvWl/tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hYzli YTdjYS0wNGRjLTQ5YTItYWU3OS00ZTZmNmIzNGU0ODgvMWU1ZDQzZjktZDgwZS0z ODA5LTlhYmUtM2FjZTgwODM3ZjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWM5YmE3Y2EtMDRkYy00OWEyLWFl NzktNGU2ZjZiMzRlNDg4L2FjOWJhN2NhLTA0ZGMtNDlhMi1hZTc5LTRlNmY2YjM0 ZTQ4OC5jcmwwHwYDVR0jBBgwFoAUdwqi3iU4yVnSsvQGasfVER2E/iQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hYzliYTdjYS0wNGRjLTQ5YTItYWU3OS00ZTZm NmIzNGU0ODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL2mgAY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAENNvJ+aVT8DhP11wnKTHc0W8XZqdiGqZCeoOH7Lh63n6aW15kGz UriBSPZXVYugLO1msFtfz3YwtBB0zsVB85B0TNN+nLsfP49aCDZ/RWzNvJXiGVW/ l7v075Ifgfjm+qhULLTUw6ebCxF0iqDgHsH23boEFl7twiSgPfqdHaKcKOoYeFLM V3vSojIE7D8QKP7euNZftj7aE4fROo2fker2iJE/u6Mdts9llnwhIa+NN8Q4xGQt eDH7GPpy4KyqiM1ljK51xRFsyTI1NOVlEHgWvA7RuSJnmK0MhuwBlrlhtNTPmAzZ 1o0fkfi4SBJUk4A0E2Dm9A2AvdLU0SeOal0= -----END CERTIFICATE-----Generated at Fri Apr 18 19:13:33 2025 by rpki-client