$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/5af69910-53d7-36e0-bea9-9105b0772848.roa File: 5af69910-53d7-36e0-bea9-9105b0772848.roa (raw, json) Hash identifier: 9BaS2KKoCf5SpCF5W9M8gQRemH9UyH+B7sUa3vzZaRE= Subject key identifier: 92:8D:1E:02:E0:24:A5:6D:B7:EE:E7:95:E9:DF:EB:68:89:3A:04:F8 Certificate issuer: /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3 Certificate serial: 010D0C9F432858497114323032B060E7653CA700 Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/5af69910-53d7-36e0-bea9-9105b0772848.roa Signing time: Mon 07 Apr 2025 01:00:47 +0000 ROA not before: Mon 07 Apr 2025 01:00:47 +0000 ROA not after: Sun 06 Jul 2025 01:00:47 +0000 asID: 53727 IP address blocks: 2602:f982:10::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:71:14:32:30:32:b0:60:e7:65:3c:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3 Validity Not Before: Apr 7 01:00:47 2025 GMT Not After : Jul 6 01:00:47 2025 GMT Subject: CN=96b3688f-2a45-4d67-ab13-e05f84de11b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3a:7d:36:74:fc:7d:37:48:38:de:ad:20:83: 3b:da:3c:32:c2:b3:13:1f:6b:e8:9d:f3:7a:c8:c5: 0d:29:1d:63:be:b5:e3:de:a4:53:ad:00:4b:62:a6: d7:89:ca:ea:20:c0:41:4e:e4:75:5b:45:79:6c:9b: 07:54:06:a6:1b:1e:3a:ee:dc:2f:ea:e1:95:9e:1d: 0d:d8:16:da:24:a0:af:7a:d1:49:01:3f:66:71:a9: 88:b7:ac:21:b9:9d:c7:92:34:d2:7e:cd:f6:b5:cc: 40:e9:b0:72:46:95:8d:23:3a:d8:fa:59:56:c1:61: 05:70:04:c5:f0:07:fd:ac:cb:c7:04:e4:a6:bd:df: 57:c3:3d:be:b1:a3:5c:ad:90:b3:a0:0d:c8:12:17: 27:3f:b0:58:25:63:5e:30:0c:f4:8c:ad:dd:fa:94: a9:9c:9d:e9:12:1e:47:b8:e8:c6:6f:ce:44:1c:ff: 07:ea:7b:7a:fd:57:81:19:36:39:77:c8:0f:9f:b8: 25:51:71:a1:82:81:9e:49:37:89:69:aa:54:79:73: d0:3a:76:d4:3d:ca:ee:32:d6:88:52:58:65:ad:18: c2:f9:05:41:c5:5e:c1:d8:20:15:a6:bc:21:5e:9a: 22:0a:d1:66:d8:8f:86:68:5c:d5:9c:49:42:55:f5: c6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8D:1E:02:E0:24:A5:6D:B7:EE:E7:95:E9:DF:EB:68:89:3A:04:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/5af69910-53d7-36e0-bea9-9105b0772848.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl X509v3 Authority Key Identifier: keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f982:10::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:e4:08:05:89:60:bb:19:76:ad:21:69:ec:39:8a:b2:ab:d4: 19:8b:b8:9d:99:29:3a:57:49:72:56:b1:ee:47:93:4c:0c:b1: 24:1b:5c:d3:45:50:4c:1b:8f:f7:b0:f2:2c:e6:9d:60:4a:ab: a5:15:fa:0f:7f:3f:23:a1:d7:9d:73:3e:9f:6b:8b:d9:d5:f3: 72:af:93:e9:63:e2:59:34:60:f5:37:04:bd:e9:9d:67:80:cf: d8:07:3a:7b:49:a2:87:1f:00:80:8b:4a:99:64:1b:b5:cd:10: 2e:ee:e0:ca:cb:af:5e:1e:81:64:2f:c1:53:c0:b4:cc:1d:50: 12:73:ed:bc:f3:3c:e8:1a:68:62:f6:88:8c:8c:28:9a:f5:1c: 5c:29:fa:f0:04:28:07:57:39:58:13:e8:6a:f5:a6:7c:00:8b: ad:f4:44:36:1e:ba:39:46:83:5f:0e:97:ba:f8:af:ad:81:b8: 5a:b5:1f:17:a8:ea:77:53:8d:57:18:53:63:3f:dc:2c:bf:5e: fc:0b:2c:11:63:0f:e9:03:8b:3f:b6:89:63:f3:cb:8e:f2:59: d0:7c:e7:6f:07:d2:c3:14:58:bf:00:d2:f3:70:84:75:d1:f5: df:ea:f2:a6:7e:06:b3:18:b8:1c:a2:f2:31:89:ca:ae:e7:57: b1:73:22:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElxFDIwMrBg52U8pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQyY2Q3OGQtYzNmMS00NzFhLTkzMWEtMjZlYWY1YTg3 MmYzMB4XDTI1MDQwNzAxMDA0N1oXDTI1MDcwNjAxMDA0N1owLzEtMCsGA1UEAxMk OTZiMzY4OGYtMmE0NS00ZDY3LWFiMTMtZTA1Zjg0ZGUxMWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTp9NnT8fTdION6tIIM72jwywrMTH2vonfN6 yMUNKR1jvrXj3qRTrQBLYqbXicrqIMBBTuR1W0V5bJsHVAamGx467twv6uGVnh0N 2BbaJKCvetFJAT9mcamIt6whuZ3HkjTSfs32tcxA6bByRpWNIzrY+llWwWEFcATF 8Af9rMvHBOSmvd9Xwz2+saNcrZCzoA3IEhcnP7BYJWNeMAz0jK3d+pSpnJ3pEh5H uOjGb85EHP8H6nt6/VeBGTY5d8gPn7glUXGhgoGeSTeJaapUeXPQOnbUPcruMtaI UlhlrRjC+QVBxV7B2CAVprwhXpoiCtFm2I+GaFzVnElCVfXGPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJKNHgLgJKVtt+7nlenf62iJOgT4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNDJj ZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVhZjVhODcyZjMvNWFmNjk5MTAtNTNkNy0z NmUwLWJlYTktOTEwNWIwNzcyODQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjQyY2Q3OGQtYzNmMS00NzFhLTkz MWEtMjZlYWY1YTg3MmYzL2I0MmNkNzhkLWMzZjEtNDcxYS05MzFhLTI2ZWFmNWE4 NzJmMy5jcmwwHwYDVR0jBBgwFoAUCvMe9nHLW/UmAy037mbdyIttVN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNDJjZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVh ZjVhODcyZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL5ggAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAELkCAWJYLsZdq0haew5irKr1BmLuJ2ZKTpXSXJWse5Hk0wMsSQb XNNFUEwbj/ew8izmnWBKq6UV+g9/PyOh151zPp9ri9nV83Kvk+lj4lk0YPU3BL3p nWeAz9gHOntJoocfAICLSplkG7XNEC7u4MrLr14egWQvwVPAtMwdUBJz7bzzPOga aGL2iIyMKJr1HFwp+vAEKAdXOVgT6Gr1pnwAi630RDYeujlGg18Ol7r4r62BuFq1 Hxeo6ndTjVcYU2M/3Cy/XvwLLBFjD+kDiz+2iWPzy47yWdB8528H0sMUWL8A0vNw hHXR9d/q8qZ+BrMYuByi8jGJyq7nV7FzIik= -----END CERTIFICATE-----Generated at Sun Apr 27 23:01:12 2025 by rpki-client