$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/7a31d252-8c15-31d2-80ca-a8f9eef19be1.roa File: 7a31d252-8c15-31d2-80ca-a8f9eef19be1.roa (raw, json) Hash identifier: OQR0MWT/OHNFBQsSFV35XJIoQnZQSpyf/Eve4CdwMGk= Subject key identifier: E9:85:F4:8B:81:E3:99:28:63:B9:FE:63:F4:4F:6D:D0:E3:48:A4:5B Certificate issuer: /CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488 Certificate serial: 010D0C9F43285849658788E0ADB3CD62089D2A00 Authority key identifier: 77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/7a31d252-8c15-31d2-80ca-a8f9eef19be1.roa Signing time: Wed 02 Apr 2025 21:43:33 +0000 ROA not before: Wed 02 Apr 2025 21:43:33 +0000 ROA not after: Tue 01 Jul 2025 21:43:33 +0000 asID: 3819 IP address blocks: 2602:f69a:19::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:87:88:e0:ad:b3:cd:62:08:9d:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488 Validity Not Before: Apr 2 21:43:33 2025 GMT Not After : Jul 1 21:43:33 2025 GMT Subject: CN=9ad96198-6307-429c-9316-4d4c7a7b167e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f0:8a:3f:0f:6e:28:47:de:ee:6b:8c:62:1c: e1:5d:81:d0:16:22:ee:b3:15:f7:f4:bf:95:40:30: 76:2a:28:64:48:a9:00:ba:ee:37:d1:04:d7:25:2f: f9:f8:88:be:68:78:c9:75:8a:40:bf:b6:b2:3e:28: 8c:66:c4:e0:2c:31:fc:67:b7:23:e7:58:2e:30:91: 7e:a6:6f:58:97:73:bc:03:24:25:03:40:5c:a6:7b: 35:be:e2:b2:c0:52:27:16:40:e7:57:1f:3c:c0:cf: 4b:1d:bf:0e:1c:cf:93:70:bd:b9:5b:28:67:8b:78: ae:06:de:2e:6a:b8:e3:08:4c:ae:94:1e:9e:15:88: ef:55:05:6f:13:9b:75:5c:de:57:37:4e:91:e8:56: 25:91:36:15:a5:6f:09:c7:c6:ae:a2:e7:16:e8:b4: 78:52:b3:b4:3a:07:6b:f5:5a:6d:ee:b2:60:c0:e5: 9c:ac:c1:b4:5f:2c:98:6f:16:b0:2b:ae:19:dd:ea: b1:17:2e:04:c3:94:fa:12:db:f0:53:67:e4:78:f0: 4a:28:3c:03:09:2f:9a:aa:be:ce:8c:9f:da:d8:30: a5:18:db:cf:54:ea:9f:a3:59:96:55:5d:df:54:c4: bb:f3:b0:3d:8c:79:01:17:6d:71:0d:bb:12:d3:be: 8c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:85:F4:8B:81:E3:99:28:63:B9:FE:63:F4:4F:6D:D0:E3:48:A4:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/7a31d252-8c15-31d2-80ca-a8f9eef19be1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl X509v3 Authority Key Identifier: keyid:77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer sbgp-ipAddrBlock: critical IPv6: 2602:f69a:19::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:5a:ef:6a:11:6c:d0:1b:ae:c8:28:a4:ad:b7:bb:af:91:d4: c3:87:0a:94:42:07:ac:0a:f0:dc:d2:2f:42:26:4b:89:83:b5: b7:03:00:e1:ca:c8:8c:ff:98:98:af:9d:1d:24:4d:b9:6f:1b: 8a:28:ee:e9:ea:50:f5:06:63:00:40:0a:26:c3:89:85:fb:38: 1b:42:6b:fb:43:3b:f1:56:d1:81:b8:5a:84:b4:49:45:1e:91: 6e:92:79:7b:a1:7f:61:0f:b8:a1:93:0f:65:53:6d:40:59:c2: b1:0d:41:f9:f6:18:32:46:a0:a4:02:4a:61:45:c4:29:58:98: bd:12:cd:b0:fa:d2:3d:d5:d7:a4:2f:e6:e0:07:8a:53:d4:f3: 2e:33:11:9f:ce:04:41:2a:5b:aa:5e:16:88:07:9d:42:ed:f9: 8c:b3:97:a4:e7:6b:a7:86:8d:a0:74:96:0c:cb:6f:8a:65:81: 75:a6:53:4d:ed:fd:d1:d1:cc:f0:28:68:22:ef:46:87:a6:e8: 80:5d:3c:d4:3c:be:14:e8:18:2f:85:ff:32:53:97:13:56:10: 06:47:8c:26:aa:4a:f8:21:d3:77:29:4a:9e:3f:aa:10:bc:ba: 88:bd:98:7d:32:3f:8e:6b:8a:b2:48:1d:c6:a4:d9:56:d7:cc: a1:29:83:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEllh4jgrbPNYgidKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YmE3Y2EtMDRkYy00OWEyLWFlNzktNGU2ZjZiMzRl NDg4MB4XDTI1MDQwMjIxNDMzM1oXDTI1MDcwMTIxNDMzM1owLzEtMCsGA1UEAxMk OWFkOTYxOTgtNjMwNy00MjljLTkzMTYtNGQ0YzdhN2IxNjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvCKPw9uKEfe7muMYhzhXYHQFiLusxX39L+V QDB2KihkSKkAuu430QTXJS/5+Ii+aHjJdYpAv7ayPiiMZsTgLDH8Z7cj51guMJF+ pm9Yl3O8AyQlA0Bcpns1vuKywFInFkDnVx88wM9LHb8OHM+TcL25Wyhni3iuBt4u arjjCEyulB6eFYjvVQVvE5t1XN5XN06R6FYlkTYVpW8Jx8auoucW6LR4UrO0Ogdr 9Vpt7rJgwOWcrMG0XyyYbxawK64Z3eqxFy4Ew5T6EtvwU2fkePBKKDwDCS+aqr7O jJ/a2DClGNvPVOqfo1mWVV3fVMS787A9jHkBF21xDbsS076MvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOmF9IuB45koY7n+Y/RPbdDjSKRbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hYzli YTdjYS0wNGRjLTQ5YTItYWU3OS00ZTZmNmIzNGU0ODgvN2EzMWQyNTItOGMxNS0z MWQyLTgwY2EtYThmOWVlZjE5YmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWM5YmE3Y2EtMDRkYy00OWEyLWFl NzktNGU2ZjZiMzRlNDg4L2FjOWJhN2NhLTA0ZGMtNDlhMi1hZTc5LTRlNmY2YjM0 ZTQ4OC5jcmwwHwYDVR0jBBgwFoAUdwqi3iU4yVnSsvQGasfVER2E/iQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hYzliYTdjYS0wNGRjLTQ5YTItYWU3OS00ZTZm NmIzNGU0ODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL2mgAZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACVa72oRbNAbrsgopK23u6+R1MOHCpRCB6wK8NzSL0ImS4mDtbcD AOHKyIz/mJivnR0kTblvG4oo7unqUPUGYwBACibDiYX7OBtCa/tDO/FW0YG4WoS0 SUUekW6SeXuhf2EPuKGTD2VTbUBZwrENQfn2GDJGoKQCSmFFxClYmL0SzbD60j3V 16Qv5uAHilPU8y4zEZ/OBEEqW6peFogHnULt+Yyzl6Tna6eGjaB0lgzLb4plgXWm U03t/dHRzPAoaCLvRoem6IBdPNQ8vhToGC+F/zJTlxNWEAZHjCaqSvgh03cpSp4/ qhC8uoi9mH0yP45rirJIHcak2VbXzKEpg6M= -----END CERTIFICATE-----Generated at Sun Apr 20 13:55:02 2025 by rpki-client