$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/2dc2063e-28dd-3936-aa61-b0d1e7a6065c.roa File: 2dc2063e-28dd-3936-aa61-b0d1e7a6065c.roa (raw, json) Hash identifier: WY48/3ilXuqfS7R5NITBx9hMRn9DC+HcwpFDUSmLzaI= Subject key identifier: BC:FB:C8:E6:72:ED:8C:86:94:85:EF:FB:F4:3C:EB:FB:FB:C5:31:05 Certificate issuer: /CN=42c666c1-a603-4b7f-a5b1-8292a815144e Certificate serial: 010D0C9F4328584971142A5AF574A816AB467140 Authority key identifier: 9E:1A:34:20:B0:66:4F:98:39:3A:33:EF:54:18:95:61:DE:AF:BB:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/2dc2063e-28dd-3936-aa61-b0d1e7a6065c.roa Signing time: Mon 07 Apr 2025 01:00:47 +0000 ROA not before: Mon 07 Apr 2025 01:00:47 +0000 ROA not after: Sun 06 Jul 2025 01:00:47 +0000 asID: 401605 IP address blocks: 2602:f72d::/38 maxlen: 38 2602:f72d:400::/38 maxlen: 38 2602:f72d:800::/38 maxlen: 38 2602:f72d:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/42c666c1-a603-4b7f-a5b1-8292a815144e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/42c666c1-a603-4b7f-a5b1-8292a815144e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:71:14:2a:5a:f5:74:a8:16:ab:46:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42c666c1-a603-4b7f-a5b1-8292a815144e Validity Not Before: Apr 7 01:00:47 2025 GMT Not After : Jul 6 01:00:47 2025 GMT Subject: CN=147ce5a9-2842-430f-91a6-7fa237d615f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:36:28:c2:15:ad:8c:16:02:21:b9:00:bc:42: 7d:8d:9c:25:61:44:44:0c:14:21:78:75:75:a4:b8: 12:24:f3:d8:a2:7d:e6:74:41:32:a6:cb:30:52:ff: e0:76:f7:78:aa:f4:1d:4e:de:05:cf:b2:08:f6:0d: 39:35:ab:8f:c4:47:5f:be:75:36:4e:7f:9b:cb:b3: 22:d2:6c:97:0b:28:ae:09:7e:4e:b6:dd:ee:b2:2f: b9:9b:bc:be:b7:b6:7d:0b:77:f2:69:ec:2a:5e:8f: 46:bf:f8:49:44:5a:93:16:48:fe:2c:9f:d2:44:9d: 83:9b:e9:27:5b:f6:5f:52:fb:49:ae:18:18:a8:2c: 7d:e4:36:69:59:9a:ea:c6:63:09:4d:ca:78:75:10: c7:44:08:fd:4e:71:9e:1a:3a:01:fd:c1:8b:a9:66: ce:cb:af:64:fa:3e:eb:72:59:d4:e1:78:5a:38:0f: c9:cb:b7:4c:9a:89:75:03:64:62:d7:b2:d1:9c:78: db:3b:b8:b7:9c:71:f0:8d:61:5c:cc:f7:7e:8c:25: ae:da:d1:ee:ac:e3:2b:7b:d3:c0:0c:9b:ce:47:96: b8:ce:48:bc:4f:b3:30:01:e6:f9:8f:62:40:fe:f7: 3d:76:da:66:c4:8f:c6:b4:47:ae:0e:70:8a:6e:5b: ae:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FB:C8:E6:72:ED:8C:86:94:85:EF:FB:F4:3C:EB:FB:FB:C5:31:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/2dc2063e-28dd-3936-aa61-b0d1e7a6065c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/42c666c1-a603-4b7f-a5b1-8292a815144e.crl X509v3 Authority Key Identifier: keyid:9E:1A:34:20:B0:66:4F:98:39:3A:33:EF:54:18:95:61:DE:AF:BB:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e.cer sbgp-ipAddrBlock: critical IPv6: 2602:f72d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:f8:fc:4a:e9:1b:ef:37:99:c8:78:7f:43:c7:42:c5:95:6d: 52:47:4f:34:b6:78:25:87:ae:65:86:b2:59:0d:2b:d1:76:02: 2c:70:60:91:d3:2b:f5:af:6f:ca:17:bf:d7:3a:50:33:a2:26: ff:54:d8:1a:a7:b3:bc:dd:46:3a:e4:9d:64:45:ea:cd:6a:23: 6e:f0:7e:56:5b:53:ab:5d:a3:6a:54:ef:05:41:b2:97:d9:ce: 73:cb:46:0b:4e:71:b9:7d:9f:ec:81:84:9e:26:0b:e4:5d:0f: 01:ab:35:08:e3:7d:f2:35:fa:c5:f0:f5:18:19:66:46:c7:74: 66:cc:04:5c:f2:df:3e:ae:ca:f6:36:74:d1:77:56:35:48:d2: d9:1a:5e:e6:d4:eb:75:76:dc:a4:43:85:28:7b:9c:9f:43:88: 98:6d:a4:24:4b:bf:22:d6:8b:3e:f8:e0:9d:1a:ba:a6:17:6a: 4b:95:33:f9:eb:c1:e8:1e:6c:3e:d2:5a:da:a9:ce:d3:06:5c: 3f:58:da:34:77:5a:21:8b:88:fb:2d:d9:c1:cb:86:ac:2c:f5: a6:0f:d6:69:da:e3:86:81:f2:d7:7c:f9:81:4b:60:88:97:3f: 47:27:42:19:64:3f:b8:0e:16:9e:62:5a:e6:00:18:f9:4e:2e: e2:49:06:71 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElxFCpa9XSoFqtGcUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJjNjY2YzEtYTYwMy00YjdmLWE1YjEtODI5MmE4MTUx NDRlMB4XDTI1MDQwNzAxMDA0N1oXDTI1MDcwNjAxMDA0N1owLzEtMCsGA1UEAxMk MTQ3Y2U1YTktMjg0Mi00MzBmLTkxYTYtN2ZhMjM3ZDYxNWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTYowhWtjBYCIbkAvEJ9jZwlYUREDBQheHV1 pLgSJPPYon3mdEEypsswUv/gdvd4qvQdTt4Fz7II9g05NauPxEdfvnU2Tn+by7Mi 0myXCyiuCX5Ott3usi+5m7y+t7Z9C3fyaewqXo9Gv/hJRFqTFkj+LJ/SRJ2Dm+kn W/ZfUvtJrhgYqCx95DZpWZrqxmMJTcp4dRDHRAj9TnGeGjoB/cGLqWbOy69k+j7r clnU4XhaOA/Jy7dMmol1A2Ri17LRnHjbO7i3nHHwjWFczPd+jCWu2tHurOMre9PA DJvOR5a4zki8T7MwAeb5j2JA/vc9dtpmxI/GtEeuDnCKbluuWQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLz7yOZy7YyGlIXv+/Q86/v7xTEFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80MmM2 NjZjMS1hNjAzLTRiN2YtYTViMS04MjkyYTgxNTE0NGUvMmRjMjA2M2UtMjhkZC0z OTM2LWFhNjEtYjBkMWU3YTYwNjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDJjNjY2YzEtYTYwMy00YjdmLWE1 YjEtODI5MmE4MTUxNDRlLzQyYzY2NmMxLWE2MDMtNGI3Zi1hNWIxLTgyOTJhODE1 MTQ0ZS5jcmwwHwYDVR0jBBgwFoAUnho0ILBmT5g5OjPvVBiVYd6vu3AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80MmM2NjZjMS1hNjAzLTRiN2YtYTViMS04Mjky YTgxNTE0NGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL3LQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALvj8Sukb7zeZyHh/Q8dCxZVtUkdPNLZ4JYeuZYayWQ0r0XYCLHBg kdMr9a9vyhe/1zpQM6Im/1TYGqezvN1GOuSdZEXqzWojbvB+VltTq12jalTvBUGy l9nOc8tGC05xuX2f7IGEniYL5F0PAas1CON98jX6xfD1GBlmRsd0ZswEXPLfPq7K 9jZ00XdWNUjS2Rpe5tTrdXbcpEOFKHucn0OImG2kJEu/ItaLPvjgnRq6phdqS5Uz +evB6B5sPtJa2qnO0wZcP1jaNHdaIYuI+y3ZwcuGrCz1pg/WadrjhoHy13z5gUtg iJc/RydCGWQ/uA4WnmJa5gAY+U4u4kkGcQ== -----END CERTIFICATE-----Generated at Fri Apr 11 21:18:56 2025 by rpki-client