$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/5c377274-4b58-36cb-8980-14e63b7411d8.roa File: 5c377274-4b58-36cb-8980-14e63b7411d8.roa (raw, json) Hash identifier: k9QzZLcUKSdFjroX+qaM1nJJ4y2j2m1Yx8mg1Pg3kXw= Subject key identifier: 3C:B8:E8:52:AC:69:54:2A:8B:07:B5:98:AD:06:80:B1:07:9E:B5:AE Certificate issuer: /CN=f9e87468-3770-44b8-9cdc-c0b0e117f2db Certificate serial: 010D0C9F43285849797436B0550E05AF530EC280 Authority key identifier: 5E:1A:94:DA:91:56:B9:AD:6A:2F:83:4C:8B:E8:E2:0F:E1:44:8E:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/5c377274-4b58-36cb-8980-14e63b7411d8.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 36832 IP address blocks: 2602:f72b::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9e87468-3770-44b8-9cdc-c0b0e117f2db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9e87468-3770-44b8-9cdc-c0b0e117f2db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:36:b0:55:0e:05:af:53:0e:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9e87468-3770-44b8-9cdc-c0b0e117f2db Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=dcda8605-555a-4d3c-a370-c7aaa1a9c8a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:06:8a:35:aa:55:4f:d8:da:9d:0e:d0:b9:e8: da:76:80:2a:c6:44:5c:6e:7e:43:f4:e4:fe:9c:88: 03:c6:32:c1:76:76:dd:23:82:65:ab:5b:c5:72:ce: ea:86:b3:4d:be:fb:aa:61:b1:2e:70:60:10:ce:b5: 00:69:43:f2:45:1e:e9:33:0f:88:ac:e2:51:67:ed: c3:95:eb:f6:b0:53:65:bf:04:50:16:cf:89:0e:32: 8c:43:4c:b3:5e:be:c2:e2:87:50:e6:9c:c5:4f:9c: 0a:63:df:1b:d7:25:d3:9b:b3:7b:b6:c1:3a:4d:4e: 2c:77:83:d9:bc:39:86:61:29:29:cb:4e:d9:6f:77: 7c:fc:ea:5c:55:17:ab:f3:fd:9f:ba:fb:4d:55:b2: d2:5a:0f:13:77:e7:09:07:92:b0:9a:6b:f3:8b:53: 62:75:e2:91:64:bf:e3:af:36:a0:0c:a5:a5:6e:de: 31:5a:5c:ee:56:75:e5:f0:cf:78:4f:99:93:75:32: 23:d5:52:56:ea:b6:7b:c5:ef:05:5b:35:5d:86:d2: 2c:3e:30:f0:0c:06:65:00:4b:93:8a:74:aa:f6:8a: 3e:a6:dc:f2:d7:4d:28:9f:b6:c5:85:3c:6a:de:92: 65:51:07:56:72:a8:58:0c:6f:7d:fb:51:a7:65:fe: 15:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B8:E8:52:AC:69:54:2A:8B:07:B5:98:AD:06:80:B1:07:9E:B5:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/5c377274-4b58-36cb-8980-14e63b7411d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9e87468-3770-44b8-9cdc-c0b0e117f2db.crl X509v3 Authority Key Identifier: keyid:5E:1A:94:DA:91:56:B9:AD:6A:2F:83:4C:8B:E8:E2:0F:E1:44:8E:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db.cer sbgp-ipAddrBlock: critical IPv6: 2602:f72b::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:2b:90:07:50:ec:9f:d2:08:18:ed:0f:cd:65:e4:95:59:7a: 77:1a:95:5b:c8:dc:95:e6:3a:cd:fe:f9:1f:3b:6c:d9:4c:8a: 3d:80:9d:e0:cf:0e:1f:69:dc:3b:f0:0f:d9:27:0a:bb:55:99: 42:64:61:d8:f6:56:58:9c:10:96:56:94:a3:75:c0:df:2c:cc: 42:b5:8f:0c:98:ea:1a:4d:23:91:41:e8:27:7d:96:27:9b:2b: 8f:ea:77:34:91:da:2b:88:49:73:d6:4c:91:17:ac:7a:d0:99: 9d:78:ab:5f:3c:2e:72:61:f1:a2:30:56:c2:9d:e5:b6:d2:3f: 06:ca:75:1d:93:11:37:bb:22:c8:05:0c:31:c2:bc:d3:7e:ea: f2:c1:f5:90:c3:2f:5e:a9:3f:eb:26:04:cd:c4:7d:22:79:fa: 8b:c8:b7:64:2b:de:58:02:aa:8f:d0:de:dc:00:76:a5:e8:74: c8:b7:b4:0e:aa:a8:e3:39:83:b3:87:f3:1a:66:62:93:ae:7e: 8e:ba:8f:39:2e:cd:be:fe:78:40:e2:b1:85:6e:30:7c:27:db: b1:23:93:87:94:db:4b:29:05:77:56:eb:60:95:9a:8c:35:71: 83:12:7b:2e:c9:60:4c:d4:ea:26:87:6a:f1:16:8e:a7:90:f1: e2:20:51:b7 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEl5dDawVQ4Fr1MOwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjllODc0NjgtMzc3MC00NGI4LTljZGMtYzBiMGUxMTdm MmRiMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk ZGNkYTg2MDUtNTU1YS00ZDNjLWEzNzAtYzdhYWExYTljOGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAaKNapVT9janQ7QuejadoAqxkRcbn5D9OT+ nIgDxjLBdnbdI4Jlq1vFcs7qhrNNvvuqYbEucGAQzrUAaUPyRR7pMw+IrOJRZ+3D lev2sFNlvwRQFs+JDjKMQ0yzXr7C4odQ5pzFT5wKY98b1yXTm7N7tsE6TU4sd4PZ vDmGYSkpy07Zb3d8/OpcVRer8/2fuvtNVbLSWg8Td+cJB5Kwmmvzi1NideKRZL/j rzagDKWlbt4xWlzuVnXl8M94T5mTdTIj1VJW6rZ7xe8FWzVdhtIsPjDwDAZlAEuT inSq9oo+ptzy100on7bFhTxq3pJlUQdWcqhYDG99+1GnZf4V1wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDy46FKsaVQqiwe1mK0GgLEHnrWuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mOWU4 NzQ2OC0zNzcwLTQ0YjgtOWNkYy1jMGIwZTExN2YyZGIvNWMzNzcyNzQtNGI1OC0z NmNiLTg5ODAtMTRlNjNiNzQxMWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjllODc0NjgtMzc3MC00NGI4LTlj ZGMtYzBiMGUxMTdmMmRiL2Y5ZTg3NDY4LTM3NzAtNDRiOC05Y2RjLWMwYjBlMTE3 ZjJkYi5jcmwwHwYDVR0jBBgwFoAUXhqU2pFWua1qL4NMi+jiD+FEjrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mOWU4NzQ2OC0zNzcwLTQ0YjgtOWNkYy1jMGIw ZTExN2YyZGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3KwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARyuQB1Dsn9IIGO0PzWXklVl6dxqVW8jcleY6zf75Hzts2UyKPYCd 4M8OH2ncO/AP2ScKu1WZQmRh2PZWWJwQllaUo3XA3yzMQrWPDJjqGk0jkUHoJ32W J5srj+p3NJHaK4hJc9ZMkResetCZnXirXzwucmHxojBWwp3lttI/Bsp1HZMRN7si yAUMMcK8037q8sH1kMMvXqk/6yYEzcR9Inn6i8i3ZCveWAKqj9De3AB2peh0yLe0 Dqqo4zmDs4fzGmZik65+jrqPOS7Nvv54QOKxhW4wfCfbsSOTh5TbSykFd1brYJWa jDVxgxJ7LslgTNTqJodq8RaOp5Dx4iBRtw== -----END CERTIFICATE-----Generated at Sun Apr 20 12:53:42 2025 by rpki-client