$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3742509e-2411-38d0-abe6-6cdf13605db9.roa File: 3742509e-2411-38d0-abe6-6cdf13605db9.roa (raw, json) Hash identifier: s296zM/xdQKiiC6id7CLCLTWSG7CM4J2F8dzKI6n7KM= Subject key identifier: 41:77:09:DE:42:19:09:8E:55:D8:11:48:94:7B:77:3A:A8:ED:A0:45 Certificate issuer: /CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0 Certificate serial: 010D0C9F43285849F715078A3391022D34C97180 Authority key identifier: 1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3742509e-2411-38d0-abe6-6cdf13605db9.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 401502 IP address blocks: 2602:f783::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:07:8a:33:91:02:2d:34:c9:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=89d9bb60-003e-4f04-9fd2-5b320365db2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6d:a4:13:6b:5b:aa:28:66:36:70:d4:41:17: 0c:ca:b2:c1:0e:07:ed:c1:24:94:07:1d:d3:1b:21: f2:69:0a:5e:8e:03:e9:6a:b0:ed:6d:31:1f:fe:4a: 55:d4:29:9e:f7:42:c2:e2:f8:8a:37:b8:9d:91:45: a2:75:64:68:28:8e:de:c1:7b:0e:77:28:b8:0b:84: ee:73:17:52:21:d2:a6:9f:98:3b:89:f8:e0:63:08: f2:3c:6f:86:30:cc:20:d8:e2:57:3f:aa:54:cf:f9: 64:5d:77:fd:8a:30:85:bf:f6:c4:75:bf:6e:17:b3: 3a:dc:3a:1f:9b:bc:cd:9f:98:82:2a:df:25:b3:8b: fe:9b:b3:d7:91:56:6b:98:97:2c:6e:b4:2e:2c:48: 65:f9:4e:a3:fb:32:a3:70:a6:1a:68:94:50:d9:27: e0:6c:02:5b:54:1a:bf:fa:77:2f:a4:2a:b1:da:ca: d8:0c:00:40:1e:19:4f:35:f4:1f:16:6b:92:c2:05: 38:90:72:02:30:6e:c8:66:30:8c:ee:43:38:4b:f8: c2:c5:3f:39:bc:8f:94:91:d1:84:56:1e:33:14:fa: 9b:ac:28:ed:49:61:83:8d:da:03:f2:dc:9d:91:1c: 4f:60:73:4d:f1:56:4f:72:2b:39:e7:4a:46:91:99: ce:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:77:09:DE:42:19:09:8E:55:D8:11:48:94:7B:77:3A:A8:ED:A0:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3742509e-2411-38d0-abe6-6cdf13605db9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl X509v3 Authority Key Identifier: keyid:1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer sbgp-ipAddrBlock: critical IPv6: 2602:f783::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:10:3b:91:88:e0:55:bb:16:d4:44:b5:9d:d6:9f:7a:36:83: 74:b9:a5:7e:76:7e:70:cb:59:b6:77:38:06:98:00:96:55:0a: 13:dd:ee:ba:d1:0d:58:3f:1a:d8:73:1a:5c:c3:aa:0d:19:6b: 24:96:80:6d:3f:55:fa:34:80:8d:0e:e3:5b:71:f2:44:96:be: 97:27:de:dd:73:34:dc:14:6a:30:51:e8:83:de:17:86:00:38: 17:de:c2:5a:c6:23:29:1b:6e:b3:6a:be:32:ed:9b:d1:73:72: de:e1:a0:80:cd:50:a7:e6:30:30:cf:d3:25:84:ad:df:1e:5c: d5:41:4a:2b:f9:a3:79:a0:ab:74:2f:c9:c5:c9:b0:b9:7a:8e: d8:e5:ff:d6:ef:6e:0a:03:81:71:fc:98:6b:63:3a:56:39:3a: a8:b5:e5:d9:47:6b:b8:82:74:14:aa:82:ce:65:ca:b1:df:07: 81:57:d8:a4:be:c0:46:15:5e:58:d0:6c:2b:81:8e:e1:e0:aa: 97:7c:ea:f4:59:3e:68:5d:6a:0c:52:b2:98:7b:5f:2e:63:e3: 7c:71:e5:16:9a:93:b6:db:f6:59:ed:34:c8:07:42:54:4b:43: 5c:22:49:70:33:53:1e:c0:c0:b1:0f:9f:e5:e0:1a:52:b2:ee: 89:89:44:8a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEn3FQeKM5ECLTTJcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E5NTlhYmEtZWY2OS00YTU2LWFhNmItMWNhMWZhNWFm M2EwMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk ODlkOWJiNjAtMDAzZS00ZjA0LTlmZDItNWIzMjAzNjVkYjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom2kE2tbqihmNnDUQRcMyrLBDgftwSSUBx3T GyHyaQpejgPparDtbTEf/kpV1Cme90LC4viKN7idkUWidWRoKI7ewXsOdyi4C4Tu cxdSIdKmn5g7ifjgYwjyPG+GMMwg2OJXP6pUz/lkXXf9ijCFv/bEdb9uF7M63Dof m7zNn5iCKt8ls4v+m7PXkVZrmJcsbrQuLEhl+U6j+zKjcKYaaJRQ2SfgbAJbVBq/ +ncvpCqx2srYDABAHhlPNfQfFmuSwgU4kHICMG7IZjCM7kM4S/jCxT85vI+UkdGE Vh4zFPqbrCjtSWGDjdoD8tydkRxPYHNN8VZPcis550pGkZnO5wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEF3Cd5CGQmOVdgRSJR7dzqo7aBFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYTk1 OWFiYS1lZjY5LTRhNTYtYWE2Yi0xY2ExZmE1YWYzYTAvMzc0MjUwOWUtMjQxMS0z OGQwLWFiZTYtNmNkZjEzNjA1ZGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2E5NTlhYmEtZWY2OS00YTU2LWFh NmItMWNhMWZhNWFmM2EwLzNhOTU5YWJhLWVmNjktNGE1Ni1hYTZiLTFjYTFmYTVh ZjNhMC5jcmwwHwYDVR0jBBgwFoAUGh9aapRds4UKQVOCNFyUClT0Oi8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYTk1OWFiYS1lZjY5LTRhNTYtYWE2Yi0xY2Ex ZmE1YWYzYTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3gwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAbhA7kYjgVbsW1ES1ndafejaDdLmlfnZ+cMtZtnc4BpgAllUKE93u utENWD8a2HMaXMOqDRlrJJaAbT9V+jSAjQ7jW3HyRJa+lyfe3XM03BRqMFHog94X hgA4F97CWsYjKRtus2q+Mu2b0XNy3uGggM1Qp+YwMM/TJYSt3x5c1UFKK/mjeaCr dC/JxcmwuXqO2OX/1u9uCgOBcfyYa2M6Vjk6qLXl2UdruIJ0FKqCzmXKsd8HgVfY pL7ARhVeWNBsK4GO4eCql3zq9Fk+aF1qDFKymHtfLmPjfHHlFpqTttv2We00yAdC VEtDXCJJcDNTHsDAsQ+f5eAaUrLuiYlEig== -----END CERTIFICATE-----Generated at Sun Jun 8 06:23:02 2025 by rpki-client