$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/ffd9f8d6-0f97-3fc2-87fc-63cc08d4488f.roa File: ffd9f8d6-0f97-3fc2-87fc-63cc08d4488f.roa (raw, json) Hash identifier: TKG58H2TiAsPim6IOZeR6vPB43t8UPzxwphZc7WyMmg= Subject key identifier: DB:98:8B:D5:4E:CD:0E:5D:85:45:66:C4:BA:21:24:90:D3:5C:D4:E5 Certificate issuer: /CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6 Certificate serial: 010D0C9F4328584A07D5282762672C26B2C7AFC0 Authority key identifier: 4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/ffd9f8d6-0f97-3fc2-87fc-63cc08d4488f.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 174 IP address blocks: 2602:fc39:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:28:27:62:67:2c:26:b2:c7:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=13b7454f-fb77-4da4-a4b9-2a4df6d2e77c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:29:ef:86:ca:96:93:ad:60:c3:78:51:32:67: fb:67:31:9e:a1:00:17:a7:51:c6:92:15:aa:d3:56: 44:c0:d3:95:d0:05:a2:83:58:6c:34:82:39:67:0c: 68:16:fe:25:2c:15:2b:71:27:7e:cb:ab:7c:cc:dd: 47:cd:ec:43:6b:0d:71:99:76:d0:ab:b0:2d:44:b6: b7:3c:30:55:6d:86:cc:f7:0e:40:59:54:88:05:61: 37:f8:57:b4:1a:7c:a5:4c:d3:af:2f:07:8f:5f:67: 32:19:37:2b:8c:cb:72:0b:c9:02:b7:13:a9:24:0f: 6e:09:64:a6:8a:1e:3a:58:de:22:b2:2d:6a:1f:1b: 63:54:d5:55:b4:c8:cd:5b:7d:3e:b9:ef:5d:dd:8c: e9:f9:cd:ec:05:5d:44:72:f2:ad:db:95:2c:0b:b6: 3d:7b:81:3d:d4:28:34:03:cd:2f:47:ac:29:08:30: fe:b9:f4:92:6f:b0:9c:2d:d2:9b:5e:58:e6:d2:44: 1e:ae:49:d7:ce:bb:d5:26:c1:e0:6f:0c:ba:6e:f6: e1:36:73:bb:1d:33:b9:23:20:75:15:fe:b0:58:b0: 09:5c:66:e9:45:d6:f7:36:a0:11:9e:ea:54:00:7a: 67:1f:3b:18:29:1e:54:1e:98:6e:09:7e:00:7d:e1: c5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:98:8B:D5:4E:CD:0E:5D:85:45:66:C4:BA:21:24:90:D3:5C:D4:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/ffd9f8d6-0f97-3fc2-87fc-63cc08d4488f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl X509v3 Authority Key Identifier: keyid:4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc39:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:a4:9a:bd:9e:10:d3:f6:f3:bd:96:0f:c3:c5:52:63:62:a8: 1f:a7:79:c1:76:04:31:8c:4f:93:88:0e:a0:ca:2f:d5:4b:53: fa:aa:97:01:1b:de:e7:7f:83:e8:8c:c6:d3:45:e1:b5:ad:d8: d0:47:0e:15:25:9a:31:1a:4a:be:7e:15:1f:21:4d:5a:0c:7a: fd:9f:d8:d5:c4:40:7e:c8:11:06:8a:2f:f6:74:cc:00:c4:d9: 2d:ec:19:7b:69:e8:67:62:f7:55:8c:36:6c:d1:a9:12:c1:41: 5f:fd:b8:18:77:30:ee:0f:9f:f8:8f:da:71:c0:0d:9a:b8:8f: 2e:8a:d6:66:f7:21:69:a9:28:3f:d0:20:3a:00:bd:0e:1c:4c: d4:2d:07:a6:1b:4b:09:c8:96:19:29:4c:19:5a:11:f3:53:10: 75:b8:5f:15:f5:b0:db:cd:a3:cc:70:e2:94:87:b2:a6:4e:32: 10:ab:e1:20:e4:6a:95:d9:9f:e2:0d:3c:6f:46:54:b8:68:6d: 0d:b8:97:17:fb:c8:12:59:f2:59:4c:ab:4d:10:d4:27:5f:7a: 9e:66:85:b9:a2:ce:ca:5a:a3:52:0f:7e:38:0a:ce:c9:b7:63: 97:9e:7c:07:76:d7:a7:19:c7:d3:af:17:9d:7f:1c:2e:ac:04: f2:a8:22:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoH1SgnYmcsJrLHr8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRkNzFkYTktNmZmMS00OWFiLWExZTUtNmM0OGY4ZjBj MWQ2MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk MTNiNzQ1NGYtZmI3Ny00ZGE0LWE0YjktMmE0ZGY2ZDJlNzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSnvhsqWk61gw3hRMmf7ZzGeoQAXp1HGkhWq 01ZEwNOV0AWig1hsNII5ZwxoFv4lLBUrcSd+y6t8zN1HzexDaw1xmXbQq7AtRLa3 PDBVbYbM9w5AWVSIBWE3+Fe0GnylTNOvLwePX2cyGTcrjMtyC8kCtxOpJA9uCWSm ih46WN4isi1qHxtjVNVVtMjNW30+ue9d3Yzp+c3sBV1EcvKt25UsC7Y9e4E91Cg0 A80vR6wpCDD+ufSSb7CcLdKbXljm0kQerknXzrvVJsHgbwy6bvbhNnO7HTO5IyB1 Ff6wWLAJXGbpRdb3NqARnupUAHpnHzsYKR5UHphuCX4AfeHFawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNuYi9VOzQ5dhUVmxLohJJDTXNTlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3 MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4ZjhmMGMxZDYvZmZkOWY4ZDYtMGY5Ny0z ZmMyLTg3ZmMtNjNjYzA4ZDQ0ODhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjRkNzFkYTktNmZmMS00OWFiLWEx ZTUtNmM0OGY4ZjBjMWQ2L2I0ZDcxZGE5LTZmZjEtNDlhYi1hMWU1LTZjNDhmOGYw YzFkNi5jcmwwHwYDVR0jBBgwFoAUT4QpIPFqZbJeSMpRP7Uli1CK9fswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4 ZjhmMGMxZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OQAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABykmr2eENP2872WD8PFUmNiqB+necF2BDGMT5OIDqDKL9VLU/qq lwEb3ud/g+iMxtNF4bWt2NBHDhUlmjEaSr5+FR8hTVoMev2f2NXEQH7IEQaKL/Z0 zADE2S3sGXtp6Gdi91WMNmzRqRLBQV/9uBh3MO4Pn/iP2nHADZq4jy6K1mb3IWmp KD/QIDoAvQ4cTNQtB6YbSwnIlhkpTBlaEfNTEHW4XxX1sNvNo8xw4pSHsqZOMhCr 4SDkapXZn+INPG9GVLhobQ24lxf7yBJZ8llMq00Q1Cdfep5mhbmizspao1IPfjgK zsm3Y5eefAd216cZx9OvF51/HC6sBPKoIik= -----END CERTIFICATE-----Generated at Mon Jun 16 05:13:16 2025 by rpki-client