$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/3d9ce023-0de3-3125-a98a-468a1abb87f4.roa File: 3d9ce023-0de3-3125-a98a-468a1abb87f4.roa (raw, json) Hash identifier: S+w+P5SV8wIMfke0r7Zrufx08wItBxuYwj0g+iOKMO4= Subject key identifier: 25:F1:33:17:CF:18:46:F7:63:D3:02:3D:12:8B:8C:74:94:DE:47:B2 Certificate issuer: /CN=868a7747-d16d-4c1e-b36c-28d03effd7eb Certificate serial: 010D0C9F432858497DA472B869AEDF5324348B80 Authority key identifier: C0:EB:6D:CC:1A:A3:55:C6:38:2C:BA:06:CD:71:23:0A:77:F7:0C:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/3d9ce023-0de3-3125-a98a-468a1abb87f4.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 150698 IP address blocks: 2602:f969:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/868a7747-d16d-4c1e-b36c-28d03effd7eb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/868a7747-d16d-4c1e-b36c-28d03effd7eb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:72:b8:69:ae:df:53:24:34:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=868a7747-d16d-4c1e-b36c-28d03effd7eb Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=1b313162-aac0-435d-93c3-b5aa2db7bbdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a4:e6:2a:14:50:71:e0:39:e9:58:5b:77:4a: d4:2a:91:5b:04:f0:ba:ac:2f:08:47:92:97:e5:94: 4f:a4:dc:7f:af:86:94:20:47:0a:26:2a:79:10:5c: 15:83:77:4c:30:64:89:6a:01:34:7e:e5:38:04:1c: 2d:4f:77:4f:94:fa:f4:29:1f:5f:a3:60:0c:26:47: 81:88:fc:24:49:fd:cf:9f:af:22:ee:1f:4b:47:7b: 5d:90:9c:dc:db:e2:96:39:b9:e4:cb:d9:d5:b7:0c: 57:23:4a:8f:51:a8:f5:a2:1a:6e:f9:a8:26:ba:3b: 5d:9d:b3:f4:97:09:d6:47:6f:6b:9e:a6:fe:50:4b: 84:57:83:da:8d:d3:04:c7:30:f1:9f:d8:f8:73:15: 02:f0:d2:78:d5:e3:60:51:72:6f:2e:f2:0b:38:97: ab:14:e5:83:8a:23:3d:57:09:70:cb:05:07:54:9f: b4:8e:40:f4:28:43:4c:e8:a4:f7:4e:c2:53:d4:61: 1a:3c:fb:a3:fd:85:c6:36:41:b0:30:1f:14:0c:d6: 85:ba:42:8f:6a:ec:ff:b7:b5:77:0c:e9:98:4b:6c: 5d:b5:ed:da:6d:35:12:d1:b7:ba:53:f9:11:ff:ff: 06:b9:b9:33:b6:d5:b3:42:45:39:f6:a9:38:ff:bd: 88:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F1:33:17:CF:18:46:F7:63:D3:02:3D:12:8B:8C:74:94:DE:47:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/3d9ce023-0de3-3125-a98a-468a1abb87f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/868a7747-d16d-4c1e-b36c-28d03effd7eb.crl X509v3 Authority Key Identifier: keyid:C0:EB:6D:CC:1A:A3:55:C6:38:2C:BA:06:CD:71:23:0A:77:F7:0C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb.cer sbgp-ipAddrBlock: critical IPv6: 2602:f969:100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:bf:0c:1d:11:53:21:75:a8:b2:40:84:04:4a:72:53:d4:cf: de:67:73:31:7c:d0:c1:0f:db:3a:1e:49:47:ab:d1:e1:57:c1: 45:db:23:90:37:5f:23:8d:5c:65:69:16:e2:b1:1b:d7:a3:28: 30:43:3c:bf:a2:99:41:5d:e8:2f:dd:01:dc:f4:4d:49:f8:64: 47:8f:67:74:b2:23:80:52:19:55:ef:ed:81:22:0b:57:57:ad: a1:98:cc:89:4b:5d:d1:80:bf:3a:f3:39:ca:27:9e:08:6b:67: fa:e3:f2:ed:ac:27:3b:27:51:01:16:b3:3b:7b:d7:c6:42:96: fd:0c:8f:7d:10:ed:b2:6b:99:8d:4a:a1:39:eb:5a:4c:62:45: ce:40:d5:58:d8:5d:62:16:f8:23:f2:2f:75:03:ca:07:b0:93: aa:eb:23:cc:ec:73:1b:3e:e5:50:b3:2e:c5:2c:fb:0a:08:46: 28:8f:3a:10:f4:99:35:08:ce:19:ee:c2:66:b8:2d:38:4f:6d: bf:30:ea:65:2a:91:0d:10:c5:d5:7d:42:36:b0:99:c6:d1:fb: 8f:5b:5f:be:64:70:61:7b:21:b0:a6:ae:ec:bb:c6:c0:eb:d0: 3d:6d:8a:3e:d5:bf:77:94:70:cb:87:1f:b7:78:30:9c:0c:39: 41:dc:2e:aa -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEl9pHK4aa7fUyQ0i4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY4YTc3NDctZDE2ZC00YzFlLWIzNmMtMjhkMDNlZmZk N2ViMB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MWIzMTMxNjItYWFjMC00MzVkLTkzYzMtYjVhYTJkYjdiYmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKTmKhRQceA56Vhbd0rUKpFbBPC6rC8IR5KX 5ZRPpNx/r4aUIEcKJip5EFwVg3dMMGSJagE0fuU4BBwtT3dPlPr0KR9fo2AMJkeB iPwkSf3Pn68i7h9LR3tdkJzc2+KWObnky9nVtwxXI0qPUaj1ohpu+agmujtdnbP0 lwnWR29rnqb+UEuEV4PajdMExzDxn9j4cxUC8NJ41eNgUXJvLvILOJerFOWDiiM9 VwlwywUHVJ+0jkD0KENM6KT3TsJT1GEaPPuj/YXGNkGwMB8UDNaFukKPauz/t7V3 DOmYS2xdte3abTUS0be6U/kR//8GubkzttWzQkU59qk4/72I1wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCXxMxfPGEb3Y9MCPRKLjHSU3keyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84Njhh Nzc0Ny1kMTZkLTRjMWUtYjM2Yy0yOGQwM2VmZmQ3ZWIvM2Q5Y2UwMjMtMGRlMy0z MTI1LWE5OGEtNDY4YTFhYmI4N2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvODY4YTc3NDctZDE2ZC00YzFlLWIz NmMtMjhkMDNlZmZkN2ViLzg2OGE3NzQ3LWQxNmQtNGMxZS1iMzZjLTI4ZDAzZWZm ZDdlYi5jcmwwHwYDVR0jBBgwFoAUwOttzBqjVcY4LLoGzXEjCnf3DNgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84NjhhNzc0Ny1kMTZkLTRjMWUtYjM2Yy0yOGQw M2VmZmQ3ZWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5aQEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAmL8MHRFTIXWoskCEBEpyU9TP3mdzMXzQwQ/bOh5JR6vR4VfBRdsj kDdfI41cZWkW4rEb16MoMEM8v6KZQV3oL90B3PRNSfhkR49ndLIjgFIZVe/tgSIL V1etoZjMiUtd0YC/OvM5yieeCGtn+uPy7awnOydRARazO3vXxkKW/QyPfRDtsmuZ jUqhOetaTGJFzkDVWNhdYhb4I/IvdQPKB7CTqusjzOxzGz7lULMuxSz7CghGKI86 EPSZNQjOGe7CZrgtOE9tvzDqZSqRDRDF1X1CNrCZxtH7j1tfvmRwYXshsKau7LvG wOvQPW2KPtW/d5Rwy4cft3gwnAw5Qdwuqg== -----END CERTIFICATE-----Generated at Sun Apr 27 01:03:30 2025 by rpki-client