$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/08788e9a-4441-35fa-ae0e-b867ca97e82c.roa File: 08788e9a-4441-35fa-ae0e-b867ca97e82c.roa (raw, json) Hash identifier: A3BkEMWb3QrpNhwHL6PGF+ZsKcP7gD64iZ4pWf/3H04= Subject key identifier: 95:2F:33:1A:E9:3C:FE:A8:25:94:20:A9:EB:B2:CD:E6:8F:11:3A:F5 Certificate issuer: /CN=eff73345-b771-45fd-be81-1f41a7f777ec Certificate serial: 010D0C9F432858499294A2D5DFE9BC004569B140 Authority key identifier: 9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/08788e9a-4441-35fa-ae0e-b867ca97e82c.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 36168 IP address blocks: 2602:f922:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a2:d5:df:e9:bc:00:45:69:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eff73345-b771-45fd-be81-1f41a7f777ec Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=dfc9cd58-487d-4cbe-9317-51517cd33ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ea:68:8a:32:b1:c6:85:ef:4e:30:73:8b:b6: f8:36:7e:be:1c:2b:cb:96:ff:07:e5:c1:41:21:49: 1e:20:12:79:8d:2e:ff:66:b2:1e:ec:c4:60:7f:ca: 94:60:6a:ab:1f:15:35:61:8f:9e:5d:0a:11:ad:59: 91:17:5c:8f:f6:03:7c:f2:cc:d5:67:7d:3e:d8:d7: 15:23:45:93:af:55:45:9f:5d:9e:e5:8f:4c:34:69: 5a:f0:e8:3f:93:53:e2:04:29:c6:7a:ea:bd:bf:bb: af:14:58:1e:b8:cc:ec:1b:6a:8d:91:53:96:90:bb: 69:e5:00:27:53:10:ff:f0:54:85:86:1f:45:27:19: 5a:52:24:5e:f0:d2:5e:7a:bc:59:ac:0a:16:df:94: 94:a1:75:54:6b:0f:d9:1d:db:93:1f:26:c8:89:cd: 46:93:31:b2:20:c5:f9:39:89:fe:49:32:42:25:49: 74:ec:64:b7:80:d1:22:af:3b:88:9b:0f:12:b5:d1: 58:9f:e0:7b:79:14:40:ea:8e:ff:52:93:db:16:32: 4d:8b:37:2c:8e:25:a1:a6:f8:9a:d2:72:40:cd:6c: 2e:08:0d:6e:25:bb:9b:f0:e5:03:cf:0f:1a:e9:5e: 3f:82:66:3d:d0:17:ed:d7:c6:a0:19:b6:c7:ca:86: e0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2F:33:1A:E9:3C:FE:A8:25:94:20:A9:EB:B2:CD:E6:8F:11:3A:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/08788e9a-4441-35fa-ae0e-b867ca97e82c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl X509v3 Authority Key Identifier: keyid:9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer sbgp-ipAddrBlock: critical IPv6: 2602:f922:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:f1:1d:23:70:d4:4a:d7:1c:33:26:98:a6:7a:34:0c:1d:dd: 30:36:3a:42:a9:6f:a3:25:47:6d:98:6f:4e:e7:f1:ee:f4:e8: c5:73:d1:1e:d2:3d:cc:9b:e0:78:a4:c2:b3:e7:74:00:42:87: 8d:ec:8c:3f:a3:42:ca:b4:ad:43:01:fc:67:14:0c:d0:77:fb: af:8d:39:32:c3:e2:fe:a5:df:b5:56:12:76:e5:9d:6b:73:3b: d3:ba:e6:66:17:8a:db:ad:f0:f2:8b:96:c5:21:81:54:18:43: 01:9e:f4:a4:a9:20:de:67:2d:e5:96:46:d4:fe:c7:0f:aa:02: 4c:d0:d8:5f:fa:9d:07:bf:3a:45:27:ac:d0:56:2e:e8:c9:12: 7d:86:aa:e9:8c:9a:3c:85:6e:a2:bd:de:f1:eb:a8:cb:52:eb: 90:8e:c0:9b:dd:5c:fb:ed:d1:2c:c3:2f:e9:51:81:99:d3:90: 26:b4:27:28:3b:3c:68:54:65:44:c4:de:4f:71:a7:c8:62:ab: 80:e4:32:96:ed:57:8a:9e:00:0e:71:a9:22:dd:d1:83:90:9d: ff:bb:19:14:ea:56:4b:0f:4e:5c:d3:c3:26:7e:c4:89:0a:8b: 48:d9:fe:21:86:ea:ae:99:5c:74:76:44:db:1b:b6:59:28:ed: 73:51:8f:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmSlKLV3+m8AEVpsUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZmNzMzNDUtYjc3MS00NWZkLWJlODEtMWY0MWE3Zjc3 N2VjMB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk ZGZjOWNkNTgtNDg3ZC00Y2JlLTkzMTctNTE1MTdjZDMzZWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2epoijKxxoXvTjBzi7b4Nn6+HCvLlv8H5cFB IUkeIBJ5jS7/ZrIe7MRgf8qUYGqrHxU1YY+eXQoRrVmRF1yP9gN88szVZ30+2NcV I0WTr1VFn12e5Y9MNGla8Og/k1PiBCnGeuq9v7uvFFgeuMzsG2qNkVOWkLtp5QAn UxD/8FSFhh9FJxlaUiRe8NJeerxZrAoW35SUoXVUaw/ZHduTHybIic1GkzGyIMX5 OYn+STJCJUl07GS3gNEirzuImw8StdFYn+B7eRRA6o7/UpPbFjJNizcsjiWhpvia 0nJAzWwuCA1uJbub8OUDzw8a6V4/gmY90Bft18agGbbHyobg1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJUvMxrpPP6oJZQgqeuyzeaPETr1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lZmY3 MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQxYTdmNzc3ZWMvMDg3ODhlOWEtNDQ0MS0z NWZhLWFlMGUtYjg2N2NhOTdlODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWZmNzMzNDUtYjc3MS00NWZkLWJl ODEtMWY0MWE3Zjc3N2VjL2VmZjczMzQ1LWI3NzEtNDVmZC1iZTgxLTFmNDFhN2Y3 NzdlYy5jcmwwHwYDVR0jBBgwFoAUmmU/aXxyav0itCAZwUUwlk0VckYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lZmY3MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQx YTdmNzc3ZWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5IgAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABPxHSNw1ErXHDMmmKZ6NAwd3TA2OkKpb6MlR22Yb07n8e706MVz 0R7SPcyb4HikwrPndABCh43sjD+jQsq0rUMB/GcUDNB3+6+NOTLD4v6l37VWEnbl nWtzO9O65mYXitut8PKLlsUhgVQYQwGe9KSpIN5nLeWWRtT+xw+qAkzQ2F/6nQe/ OkUnrNBWLujJEn2GqumMmjyFbqK93vHrqMtS65COwJvdXPvt0SzDL+lRgZnTkCa0 Jyg7PGhUZUTE3k9xp8hiq4DkMpbtV4qeAA5xqSLd0YOQnf+7GRTqVksPTlzTwyZ+ xIkKi0jZ/iGG6q6ZXHR2RNsbtlko7XNRj9c= -----END CERTIFICATE-----Generated at Wed Apr 30 21:53:26 2025 by rpki-client