$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/2a31dd75-45e6-307f-b715-e7b55a1e5617.roa File: 2a31dd75-45e6-307f-b715-e7b55a1e5617.roa (raw, json) Hash identifier: mLvTNfb8pLSB2s/3jDfYtpblfH6851+kWe2LoDfJJOo= Subject key identifier: B0:C2:76:D7:F2:17:80:50:FF:EE:05:D1:79:7A:09:90:DE:10:B3:F1 Certificate issuer: /CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Certificate serial: 010D0C9F432858499AF48188F5A03BA2B85FF180 Authority key identifier: 2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/2a31dd75-45e6-307f-b715-e7b55a1e5617.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 14618 IP address blocks: 2602:814:b008::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:81:88:f5:a0:3b:a2:b8:5f:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=eafafc71-e4af-446f-88a3-bd1699ca9aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:96:0e:08:a9:b4:63:a8:67:eb:e5:29:22:42: 6d:13:ae:e6:ae:96:9c:d8:49:81:fc:45:55:e1:e0: 0f:07:cb:4b:7c:13:14:c5:40:85:a5:87:e5:c3:aa: f4:36:2d:94:23:b8:da:2c:90:62:fe:e8:a3:1d:e4: ef:ca:dc:b2:61:a0:dd:3d:86:63:31:c7:01:5c:9e: fb:46:a8:c3:43:26:81:47:21:35:a2:ef:11:ec:d3: ad:0e:1e:52:de:03:76:52:12:9a:d6:9e:95:47:76: f6:72:bd:a3:f0:bd:89:4a:7c:65:81:de:a9:7c:7a: 4a:52:18:53:d5:50:9e:44:7c:ae:82:18:5e:e2:b7: e6:d6:e2:9b:68:83:a0:e0:c4:25:46:37:0c:06:05: fb:23:45:59:3e:72:f5:f4:4c:8c:a7:92:1e:eb:58: c2:11:f2:3b:7d:2a:5e:54:32:87:b2:bf:18:10:e3: 85:b8:07:44:07:1a:26:b0:26:9b:c6:51:e8:45:7d: 6d:51:1e:c9:98:93:3d:a9:8d:94:4e:c7:df:b4:35: a9:e7:cb:71:18:11:78:1a:a8:8c:57:26:1a:2e:6c: ef:b6:09:01:68:24:9d:d4:a6:45:f6:d8:95:8a:fd: 40:db:28:15:9c:ba:ad:62:d9:92:0d:00:ba:62:10: 00:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C2:76:D7:F2:17:80:50:FF:EE:05:D1:79:7A:09:90:DE:10:B3:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/2a31dd75-45e6-307f-b715-e7b55a1e5617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl X509v3 Authority Key Identifier: keyid:2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer sbgp-ipAddrBlock: critical IPv6: 2602:814:b008::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d5:e5:dc:6c:b3:af:12:38:fb:70:91:52:bd:3c:82:93:40: f3:79:02:0b:14:c8:b6:b3:59:8d:59:7e:ac:86:13:0a:e5:a3: 8e:25:49:b3:3c:c8:d0:95:ec:fe:ff:9a:ec:1e:37:73:fb:e3: 23:21:05:4d:9b:cd:d5:53:84:ef:3b:86:18:ff:a5:68:8e:b7: a1:f1:94:4c:35:5b:07:7f:5e:01:18:33:bd:af:c3:99:04:bd: 7a:3c:25:fb:73:bb:de:25:3b:9c:dc:f1:54:94:e0:99:1d:6a: 31:d2:60:37:b2:6c:f7:7a:6c:2a:3c:ab:26:ee:4b:8e:2b:55: bd:f1:6f:5d:81:35:9e:1f:bb:e4:27:33:45:d8:c3:22:0d:21: 8e:bf:b6:11:65:11:db:4d:0c:d8:ea:ae:ab:c3:e4:87:6f:36: 15:c3:73:b5:b0:cd:a6:d9:59:21:8c:3f:d5:d8:43:30:8a:56: 15:8f:43:b4:5e:f8:8c:e8:94:eb:8a:9c:7a:e1:c1:12:12:0e: 1d:cc:36:a4:4c:1f:31:3d:5a:cb:f2:20:dc:7d:a2:f6:5b:b7: 90:84:ef:a6:75:92:83:a7:fd:f9:d2:b3:25:13:cc:a5:4d:50: a3:2c:91:40:3f:1c:c9:7c:0d:17:20:26:1a:15:32:b7:0d:97: 4a:ee:d5:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEma9IGI9aA7orhf8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBmYThlM2YtNjdlOS00ZThmLTlkMTgtNjIxMWRkNjEz MDczMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZWFmYWZjNzEtZTRhZi00NDZmLTg4YTMtYmQxNjk5Y2E5YWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJYOCKm0Y6hn6+UpIkJtE67mrpac2EmB/EVV 4eAPB8tLfBMUxUCFpYflw6r0Ni2UI7jaLJBi/uijHeTvytyyYaDdPYZjMccBXJ77 RqjDQyaBRyE1ou8R7NOtDh5S3gN2UhKa1p6VR3b2cr2j8L2JSnxlgd6pfHpKUhhT 1VCeRHyughhe4rfm1uKbaIOg4MQlRjcMBgX7I0VZPnL19EyMp5Ie61jCEfI7fSpe VDKHsr8YEOOFuAdEBxomsCabxlHoRX1tUR7JmJM9qY2UTsfftDWp58txGBF4GqiM VyYaLmzvtgkBaCSd1KZF9tiViv1A2ygVnLqtYtmSDQC6YhAAzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLDCdtfyF4BQ/+4F0Xl6CZDeELPxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZh OGUzZi02N2U5LTRlOGYtOWQxOC02MjExZGQ2MTMwNzMvMmEzMWRkNzUtNDVlNi0z MDdmLWI3MTUtZTdiNTVhMWU1NjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBmYThlM2YtNjdlOS00ZThmLTlk MTgtNjIxMWRkNjEzMDczL2QwZmE4ZTNmLTY3ZTktNGU4Zi05ZDE4LTYyMTFkZDYx MzA3My5jcmwwHwYDVR0jBBgwFoAUK7RjzmcAGdo63rw75WI23btNwp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZhOGUzZi02N2U5LTRlOGYtOWQxOC02MjEx ZGQ2MTMwNzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFLAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHrV5dxss68SOPtwkVK9PIKTQPN5AgsUyLazWY1ZfqyGEwrlo44l SbM8yNCV7P7/muweN3P74yMhBU2bzdVThO87hhj/pWiOt6HxlEw1Wwd/XgEYM72v w5kEvXo8Jftzu94lO5zc8VSU4JkdajHSYDeybPd6bCo8qybuS44rVb3xb12BNZ4f u+QnM0XYwyINIY6/thFlEdtNDNjqrqvD5IdvNhXDc7WwzabZWSGMP9XYQzCKVhWP Q7Re+IzolOuKnHrhwRISDh3MNqRMHzE9WsvyINx9ovZbt5CE76Z1koOn/fnSsyUT zKVNUKMskUA/HMl8DRcgJhoVMrcNl0ru1c4= -----END CERTIFICATE-----Generated at Sat Apr 26 13:17:53 2025 by rpki-client