$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/15db4c7f-a0e2-3d65-b833-2756ea3409a4.roa File: 15db4c7f-a0e2-3d65-b833-2756ea3409a4.roa (raw, json) Hash identifier: vhiO13KvQ71w/v7+Mv4jnH1EiweMX+66Fw8lhTrq4DI= Subject key identifier: C0:F9:13:31:E1:60:C3:A7:F3:91:F2:11:DE:59:02:26:83:0D:64:62 Certificate issuer: /CN=0679e601-ff38-42c1-9b52-0b5bad96b962 Certificate serial: 010D0C9F43285849ABB49912B3537524F96B9700 Authority key identifier: FC:E6:46:FD:25:DD:20:4C:DC:40:81:53:67:B2:73:B1:B1:5A:1C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/15db4c7f-a0e2-3d65-b833-2756ea3409a4.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 137509 IP address blocks: 2602:fbe6:10::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:99:12:b3:53:75:24:f9:6b:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0679e601-ff38-42c1-9b52-0b5bad96b962 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=da3081a5-87ae-45a6-a9fc-025d1d0fba30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8f:1e:23:e2:38:94:2a:f1:51:50:6d:b0:87: dd:96:83:95:85:d0:09:9a:c5:9d:af:83:a5:ac:af: 61:0e:cc:93:09:b1:6b:a2:33:9d:91:79:9d:05:75: 99:29:b1:f8:19:2f:4b:6e:42:6a:f7:5a:3f:19:38: 29:e3:1e:a7:d5:84:22:20:ca:e8:2a:ed:6a:52:f2: 6a:24:cf:3a:0c:2e:65:5b:3d:5b:59:d9:bd:92:ca: 90:08:71:e6:ee:8a:70:92:31:45:32:56:ec:46:ed: b0:51:77:d0:93:6f:b0:42:94:6a:4c:fd:44:33:e9: 01:56:39:04:ad:a1:49:79:42:9e:99:2a:08:2e:57: cc:c0:7b:ae:f2:37:6b:cf:ec:fd:0e:86:d1:6b:c8: 35:c4:eb:b8:58:3a:f6:70:bc:85:76:64:58:50:a9: f7:e4:bb:fe:15:2f:6d:f7:c5:17:ec:af:be:0c:20: 99:4e:3f:d7:f5:9c:c9:fb:09:78:7e:c6:ee:92:14: 56:79:f6:78:a0:d0:6e:c0:01:72:c3:32:d8:c7:f8: b7:b1:d4:10:e4:de:d3:17:4a:8e:5a:94:1b:33:51: 24:0e:93:68:e1:70:e6:7f:7f:f6:e5:90:0e:ce:f7: 5a:08:af:f9:b2:f6:e4:a8:76:7c:2c:8e:37:ff:d1: 55:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F9:13:31:E1:60:C3:A7:F3:91:F2:11:DE:59:02:26:83:0D:64:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/15db4c7f-a0e2-3d65-b833-2756ea3409a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.crl X509v3 Authority Key Identifier: keyid:FC:E6:46:FD:25:DD:20:4C:DC:40:81:53:67:B2:73:B1:B1:5A:1C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbe6:10::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:d6:54:39:40:61:e0:7c:39:d6:92:ef:49:34:c0:79:e7:c7: 6d:2e:01:ca:64:a1:7b:da:4d:5b:fa:f0:41:e5:f2:27:28:48: 5c:60:83:ab:78:64:80:8e:bd:e9:f1:ab:fa:64:cc:4a:68:97: 00:ef:b8:8c:10:cc:67:ba:a5:89:4b:eb:ec:49:70:55:91:9a: 19:0a:88:d6:2e:4a:6e:c7:fe:0e:c5:8d:4d:25:43:ba:67:11: 02:4b:e1:9f:69:7a:8d:3e:48:db:a0:e4:fd:24:84:71:2f:51: 75:a1:00:33:94:75:73:b2:a3:cd:e9:2f:d9:d4:a2:75:d0:49: 25:16:68:59:f8:22:4b:b6:09:54:2d:89:e3:71:92:e7:dc:68: 68:91:63:77:95:54:24:4d:63:16:61:01:6c:42:48:8b:53:75: a8:e5:0d:86:52:9d:0d:d2:7b:92:9c:57:0c:37:c3:63:15:10: cc:e8:16:1c:95:a1:9c:a7:77:fe:b5:41:14:56:21:b6:b6:9a: 7a:54:4a:ed:f7:1d:98:db:76:ff:1a:9d:b3:ee:35:83:3b:1a: 4a:d0:a2:41:7a:40:55:70:dc:c6:9f:22:b5:41:a5:a6:58:fc: f8:7c:04:b6:b4:ab:b3:0a:8f:53:46:44:c9:70:34:f1:6f:01: 2e:a2:83:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmrtJkSs1N1JPlrlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY3OWU2MDEtZmYzOC00MmMxLTliNTItMGI1YmFkOTZi OTYyMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk ZGEzMDgxYTUtODdhZS00NWE2LWE5ZmMtMDI1ZDFkMGZiYTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo8eI+I4lCrxUVBtsIfdloOVhdAJmsWdr4Ol rK9hDsyTCbFrojOdkXmdBXWZKbH4GS9LbkJq91o/GTgp4x6n1YQiIMroKu1qUvJq JM86DC5lWz1bWdm9ksqQCHHm7opwkjFFMlbsRu2wUXfQk2+wQpRqTP1EM+kBVjkE raFJeUKemSoILlfMwHuu8jdrz+z9DobRa8g1xOu4WDr2cLyFdmRYUKn35Lv+FS9t 98UX7K++DCCZTj/X9ZzJ+wl4fsbukhRWefZ4oNBuwAFywzLYx/i3sdQQ5N7TF0qO WpQbM1EkDpNo4XDmf3/25ZAOzvdaCK/5svbkqHZ8LI43/9FVLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMD5EzHhYMOn85HyEd5ZAiaDDWRiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjc5 ZTYwMS1mZjM4LTQyYzEtOWI1Mi0wYjViYWQ5NmI5NjIvMTVkYjRjN2YtYTBlMi0z ZDY1LWI4MzMtMjc1NmVhMzQwOWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDY3OWU2MDEtZmYzOC00MmMxLTli NTItMGI1YmFkOTZiOTYyLzA2NzllNjAxLWZmMzgtNDJjMS05YjUyLTBiNWJhZDk2 Yjk2Mi5jcmwwHwYDVR0jBBgwFoAU/OZG/SXdIEzcQIFTZ7JzsbFaHJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjc5ZTYwMS1mZjM4LTQyYzEtOWI1Mi0wYjVi YWQ5NmI5NjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL75gAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGTWVDlAYeB8OdaS70k0wHnnx20uAcpkoXvaTVv68EHl8icoSFxg g6t4ZICOvenxq/pkzEpolwDvuIwQzGe6pYlL6+xJcFWRmhkKiNYuSm7H/g7FjU0l Q7pnEQJL4Z9peo0+SNug5P0khHEvUXWhADOUdXOyo83pL9nUonXQSSUWaFn4Iku2 CVQtieNxkufcaGiRY3eVVCRNYxZhAWxCSItTdajlDYZSnQ3Se5KcVww3w2MVEMzo FhyVoZynd/61QRRWIba2mnpUSu33HZjbdv8anbPuNYM7GkrQokF6QFVw3MafIrVB paZY/Ph8BLa0q7MKj1NGRMlwNPFvAS6ig6M= -----END CERTIFICATE-----Generated at Mon Apr 28 21:07:03 2025 by rpki-client