$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/2879a075-4779-38e7-a71e-76910345c230.roa File: 2879a075-4779-38e7-a71e-76910345c230.roa (raw, json) Hash identifier: 0+RsUBfADgzniMgbQRz31gR+jvVADJ01JN6DNLFw72M= Subject key identifier: C5:05:2B:64:3E:0F:12:FC:5F:8D:7D:5F:FD:C4:D4:12:82:39:AB:1E Certificate issuer: /CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3 Certificate serial: 010D0C9F43285849EBEA55C3DA98CC0960ABDD40 Authority key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/2879a075-4779-38e7-a71e-76910345c230.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 16509 IP address blocks: 2602:f961::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:55:c3:da:98:cc:09:60:ab:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=e63ca7eb-f21a-4d28-84e1-e6660d816cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c0:9f:15:ba:ff:80:0a:27:7d:0b:fe:55:ca: fe:3b:15:53:4b:29:af:4f:4d:97:a3:69:db:59:58: 4c:ce:77:9e:6c:84:ef:8d:dc:b8:1d:e1:c1:d6:28: 44:44:2a:91:df:fe:69:69:da:13:ad:4e:62:8f:02: a8:b7:d3:3f:20:b7:73:72:0a:6b:53:aa:bb:c3:45: 0a:6b:95:2a:37:7a:a7:ef:ec:9e:5b:74:1d:9c:d8: f3:c1:61:75:ef:96:41:32:64:d3:36:31:6f:5b:4f: 47:96:96:7f:b4:a3:8d:b5:0c:35:1d:35:e0:92:e2: 33:f1:be:23:a7:3c:74:23:3b:5e:ed:d5:36:0c:f5: 6e:a5:18:11:15:0c:a6:19:ab:18:de:e4:79:d2:25: c5:6b:1e:e7:25:cb:5e:ec:7c:cf:ae:fe:52:a4:35: 0e:f3:31:44:12:5f:d8:7d:8a:12:06:27:27:20:4a: a6:08:51:69:30:f8:c4:92:2b:4b:af:33:d1:6a:ae: c1:2f:b3:79:ce:7b:c7:18:6a:77:d3:5a:ea:65:28: 06:00:e9:cf:3b:7b:95:05:53:c0:ca:95:fc:54:e3: 87:a3:62:62:fc:e1:29:32:4b:b5:13:5d:d2:b7:1c: f7:e6:fc:92:e1:43:04:11:b9:00:57:68:41:5b:0f: 13:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:05:2B:64:3E:0F:12:FC:5F:8D:7D:5F:FD:C4:D4:12:82:39:AB:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/2879a075-4779-38e7-a71e-76910345c230.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl X509v3 Authority Key Identifier: keyid:92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f961::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:e4:ef:e0:66:2c:66:6a:8e:cf:38:68:4f:0f:77:8c:59:5d: 10:c7:85:06:db:d0:18:bd:59:7c:9f:69:6e:d3:8a:40:84:c4: 93:66:a0:c0:75:94:d4:bb:5b:59:ee:a8:ff:e4:a8:8e:6a:2f: f2:8f:27:bd:20:db:97:f8:56:f7:79:6d:3c:a3:e2:e2:fc:e4: 71:a1:8e:ae:0a:0d:af:1c:16:0a:df:1e:23:60:74:1d:ba:ab: 8b:c4:25:fe:93:68:b5:a0:2f:fd:48:c1:99:54:33:6a:17:2e: 16:34:76:3e:b9:1c:42:64:3b:05:20:ed:2e:68:fd:a6:93:9c: 21:56:39:64:5c:6a:d7:1d:d1:8a:5a:04:44:12:0f:e3:71:55: 48:ac:c6:a3:c5:de:71:84:37:e9:d6:18:9b:65:c0:b6:44:ab: 45:f3:73:95:61:2b:6f:32:21:ae:f8:30:52:6a:bd:b6:05:f6: 47:7a:a2:da:e2:7a:b8:47:85:b2:6f:54:b1:98:ea:d4:9d:5f: ec:b1:0c:4f:44:75:cf:eb:d9:9e:5d:65:51:31:72:b2:00:8e: 26:f0:df:7c:9c:83:9d:b7:94:05:bb:58:93:32:ab:20:ed:77: 9b:ee:c7:96:91:71:b5:e4:6b:89:b1:a4:2c:ec:be:3b:99:81: fe:ad:4e:7b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnr6lXD2pjMCWCr3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkYjQ1ZGItOGM5Mi00YjYxLWEzZDUtZjViYmI5OTNi ZGMzMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk ZTYzY2E3ZWItZjIxYS00ZDI4LTg0ZTEtZTY2NjBkODE2Y2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcCfFbr/gAonfQv+Vcr+OxVTSymvT02Xo2nb WVhMzneebITvjdy4HeHB1ihERCqR3/5padoTrU5ijwKot9M/ILdzcgprU6q7w0UK a5UqN3qn7+yeW3QdnNjzwWF175ZBMmTTNjFvW09HlpZ/tKONtQw1HTXgkuIz8b4j pzx0Izte7dU2DPVupRgRFQymGasY3uR50iXFax7nJcte7HzPrv5SpDUO8zFEEl/Y fYoSBicnIEqmCFFpMPjEkitLrzPRaq7BL7N5znvHGGp301rqZSgGAOnPO3uVBVPA ypX8VOOHo2Ji/OEpMku1E13Stxz35vyS4UMEEbkAV2hBWw8TbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMUFK2Q+DxL8X419X/3E1BKCOaseMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNWRi NDVkYi04YzkyLTRiNjEtYTNkNS1mNWJiYjk5M2JkYzMvMjg3OWEwNzUtNDc3OS0z OGU3LWE3MWUtNzY5MTAzNDVjMjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjVkYjQ1ZGItOGM5Mi00YjYxLWEz ZDUtZjViYmI5OTNiZGMzL2I1ZGI0NWRiLThjOTItNGI2MS1hM2Q1LWY1YmJiOTkz YmRjMy5jcmwwHwYDVR0jBBgwFoAUkn3XcB+0+u5+Zl1mjwwJi7KTpGAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNWRiNDVkYi04YzkyLTRiNjEtYTNkNS1mNWJi Yjk5M2JkYzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5YQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFzk7+BmLGZqjs84aE8Pd4xZXRDHhQbb0Bi9WXyfaW7TikCExJNm oMB1lNS7W1nuqP/kqI5qL/KPJ70g25f4Vvd5bTyj4uL85HGhjq4KDa8cFgrfHiNg dB26q4vEJf6TaLWgL/1IwZlUM2oXLhY0dj65HEJkOwUg7S5o/aaTnCFWOWRcatcd 0YpaBEQSD+NxVUisxqPF3nGEN+nWGJtlwLZEq0Xzc5VhK28yIa74MFJqvbYF9kd6 otrierhHhbJvVLGY6tSdX+yxDE9Edc/r2Z5dZVExcrIAjibw33ycg523lAW7WJMy qyDtd5vux5aRcbXka4mxpCzsvjuZgf6tTns= -----END CERTIFICATE-----Generated at Sat Jun 14 06:16:17 2025 by rpki-client