$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/3d7c3eff-2ea6-36cd-8adf-94c767930e79.roa File: 3d7c3eff-2ea6-36cd-8adf-94c767930e79.roa (raw, json) Hash identifier: hswxq/XyT+FGx9EXDqiD2tNDQ/CH1G7/omZ7V5hEVjk= Subject key identifier: 42:EA:B9:C6:F4:09:B0:D6:AF:3D:13:D8:1E:DD:AD:9F:CB:1D:73:F5 Certificate issuer: /CN=18a928eb-48a5-4560-a217-36cb1ea32648 Certificate serial: 010D0C9F432858496CE45E0A80126DADF5D9DB00 Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/3d7c3eff-2ea6-36cd-8adf-94c767930e79.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 63150 IP address blocks: 2602:f988:88::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:5e:0a:80:12:6d:ad:f5:d9:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=fb10aeb9-cc48-4048-aa54-416b9ac1e1ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6a:5c:45:e7:a9:9c:84:d9:35:9a:66:98:22: 3c:b8:47:f7:67:a4:f1:e8:8a:1c:33:72:db:b2:24: ef:12:dd:c2:cf:c7:82:0b:b8:13:eb:e8:c3:9b:be: 0f:1f:50:db:34:82:f7:8d:8e:a9:86:96:30:73:e3: fb:cc:86:5b:54:1a:cb:34:90:5e:63:5b:9f:ae:fd: e8:8f:7b:e1:45:36:e7:ba:c4:a3:5d:f8:af:82:e7: c1:3a:0a:d1:b7:86:0f:34:9d:49:7c:4f:a6:e3:db: ee:57:41:d3:48:40:02:50:6f:5d:2e:ba:99:e2:7a: bd:91:19:7a:14:cc:66:bc:9d:bc:ce:7a:1f:7a:cb: ec:3a:4d:e0:33:07:58:42:82:c9:bd:9d:f0:7c:56: 9e:07:57:86:df:a9:8f:be:2e:9d:27:ab:e8:a0:33: 24:33:a6:cc:ac:d1:90:bf:01:d8:b8:e1:72:f0:f7: 81:ea:e0:b5:f8:15:5b:b7:be:66:42:31:0a:da:91: d3:2a:83:3b:1f:a4:99:86:39:6f:51:8f:d2:ff:a5: 4c:59:6f:0a:92:68:e0:17:a6:68:0a:55:6a:23:8e: 5c:f3:94:0a:2f:49:cc:f3:ca:dd:48:3f:39:04:1e: 61:26:5e:6e:62:d4:65:0e:0f:a7:75:4f:d6:3e:32: f4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:EA:B9:C6:F4:09:B0:D6:AF:3D:13:D8:1E:DD:AD:9F:CB:1D:73:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/3d7c3eff-2ea6-36cd-8adf-94c767930e79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl X509v3 Authority Key Identifier: keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer sbgp-ipAddrBlock: critical IPv6: 2602:f988:88::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:6b:d2:a5:25:7f:6f:5e:10:40:c5:02:b3:33:40:35:74:a5: 3b:87:70:5e:21:55:cd:44:cb:32:f1:56:9e:b4:e3:b7:d3:f8: e0:57:4f:02:22:f1:0f:a4:2c:95:15:5d:53:32:35:99:b7:c2: 27:9d:64:16:73:5a:ca:00:0a:5e:03:9f:09:a6:d3:66:20:42: 78:52:7e:c3:95:f2:12:38:e4:56:0f:6d:50:d6:76:25:b3:17: e3:97:89:15:f4:75:99:79:8a:80:15:48:bc:ba:f3:17:a8:5a: dc:91:f0:08:88:16:24:b7:17:e5:c7:96:98:77:00:1e:5a:61: 34:86:6e:a6:50:aa:5d:01:e8:f3:df:4d:a2:dd:5a:6d:53:a8: df:65:a2:99:f1:b1:72:83:2c:2c:77:a4:9e:af:da:2a:d6:6c: 52:99:f5:7c:ab:99:f5:40:a9:64:10:99:f9:da:f3:ca:85:e6: 78:f1:4f:c6:e1:f9:52:2d:7f:ca:ea:88:96:80:73:33:e6:5b: 29:98:c4:88:2c:e4:84:72:49:d1:8d:c9:3a:54:6d:5a:99:75: 19:13:27:42:9c:6e:c9:8c:f5:07:bf:e0:d2:b3:53:e0:28:a1: e1:01:8d:cf:3f:d0:6f:c7:b9:9c:f3:6c:06:54:c0:5a:05:7f: 08:8a:f5:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEls5F4KgBJtrfXZ2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThhOTI4ZWItNDhhNS00NTYwLWEyMTctMzZjYjFlYTMy NjQ4MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk ZmIxMGFlYjktY2M0OC00MDQ4LWFhNTQtNDE2YjlhYzFlMWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmpcReepnITZNZpmmCI8uEf3Z6Tx6IocM3Lb siTvEt3Cz8eCC7gT6+jDm74PH1DbNIL3jY6phpYwc+P7zIZbVBrLNJBeY1ufrv3o j3vhRTbnusSjXfivgufBOgrRt4YPNJ1JfE+m49vuV0HTSEACUG9dLrqZ4nq9kRl6 FMxmvJ28znofesvsOk3gMwdYQoLJvZ3wfFaeB1eG36mPvi6dJ6vooDMkM6bMrNGQ vwHYuOFy8PeB6uC1+BVbt75mQjEK2pHTKoM7H6SZhjlvUY/S/6VMWW8KkmjgF6Zo ClVqI45c85QKL0nM88rdSD85BB5hJl5uYtRlDg+ndU/WPjL0DQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFELqucb0CbDWrz0T2B7drZ/LHXP1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xOGE5 MjhlYi00OGE1LTQ1NjAtYTIxNy0zNmNiMWVhMzI2NDgvM2Q3YzNlZmYtMmVhNi0z NmNkLThhZGYtOTRjNzY3OTMwZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMThhOTI4ZWItNDhhNS00NTYwLWEy MTctMzZjYjFlYTMyNjQ4LzE4YTkyOGViLTQ4YTUtNDU2MC1hMjE3LTM2Y2IxZWEz MjY0OC5jcmwwHwYDVR0jBBgwFoAU9H6x3C6P5f0Uj3qixMZGdbQwqzgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xOGE5MjhlYi00OGE1LTQ1NjAtYTIxNy0zNmNi MWVhMzI2NDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5iACI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABJr0qUlf29eEEDFArMzQDV0pTuHcF4hVc1EyzLxVp6047fT+OBX TwIi8Q+kLJUVXVMyNZm3wiedZBZzWsoACl4Dnwmm02YgQnhSfsOV8hI45FYPbVDW diWzF+OXiRX0dZl5ioAVSLy68xeoWtyR8AiIFiS3F+XHlph3AB5aYTSGbqZQql0B 6PPfTaLdWm1TqN9lopnxsXKDLCx3pJ6v2irWbFKZ9XyrmfVAqWQQmfna88qF5njx T8bh+VItf8rqiJaAczPmWymYxIgs5IRySdGNyTpUbVqZdRkTJ0KcbsmM9Qe/4NKz U+AooeEBjc8/0G/HuZzzbAZUwFoFfwiK9RE= -----END CERTIFICATE-----Generated at Sat Apr 26 18:07:32 2025 by rpki-client