$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/c2d2ca0b-f812-3101-ba90-0261d1b5768a.roa File: c2d2ca0b-f812-3101-ba90-0261d1b5768a.roa (raw, json) Hash identifier: 96nNzKVxM6ctA5jsnBq4Uu39Ul44/Lvb3reDA9Q98pA= Subject key identifier: 61:38:D6:DB:BD:20:23:93:A1:38:D2:47:2D:F0:30:52:50:AB:7B:36 Certificate issuer: /CN=f601ba70-383e-4f5d-aacb-7e45e33ac6ba Certificate serial: 010D0C9F4328584921840BDD74D97BADF4D4EA60 Authority key identifier: 63:E4:E1:0B:2B:65:78:FC:96:06:23:A2:03:18:67:8B:54:59:F4:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/c2d2ca0b-f812-3101-ba90-0261d1b5768a.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 40846 IP address blocks: 2602:2e4:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:0b:dd:74:d9:7b:ad:f4:d4:ea:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f601ba70-383e-4f5d-aacb-7e45e33ac6ba Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=3cfab8ae-4fd2-4383-a55d-8d22018cba83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a7:63:49:2e:2a:3b:e8:ed:89:07:18:58:c1: 21:ff:72:ea:d1:da:df:fc:2a:ba:86:b4:ec:23:32: 93:70:f5:9c:3d:54:42:0a:2f:66:a3:61:b5:53:b8: 3b:73:2f:f1:31:87:73:e6:23:41:3d:3c:24:0a:55: d4:06:c9:ce:ed:6f:82:05:c0:86:a8:79:16:7a:95: 1c:80:c2:2c:93:d1:fd:b7:e9:cc:8b:d6:4b:89:37: e4:20:dd:ae:f6:01:65:8f:5a:59:08:26:91:99:5a: b7:a7:3b:59:6f:a1:02:d9:71:f1:7e:10:b3:3f:86: 1d:80:be:d1:cc:2d:e3:47:14:64:de:f9:64:5d:ab: 57:92:92:41:5a:85:00:ab:ac:a3:0c:b5:8c:89:eb: 44:7a:ec:ba:d9:01:d0:f8:0c:e3:c5:76:27:cc:26: 7b:c2:a4:ea:ea:8c:4d:80:9b:10:8a:c5:69:ff:bc: a0:b1:57:11:0a:44:e5:c1:9f:09:08:d8:24:f0:f7: 0c:65:d5:22:3e:a5:82:c2:f4:02:8c:8e:9f:20:82: 08:62:73:b3:8c:0d:8c:88:bc:53:9e:3f:4e:22:3f: c8:18:c8:fb:7a:74:5c:96:40:1a:e1:66:52:c1:64: 55:45:f8:98:c5:e2:2b:d9:fb:dc:b5:d8:f4:45:3d: 5a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:38:D6:DB:BD:20:23:93:A1:38:D2:47:2D:F0:30:52:50:AB:7B:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/c2d2ca0b-f812-3101-ba90-0261d1b5768a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.crl X509v3 Authority Key Identifier: keyid:63:E4:E1:0B:2B:65:78:FC:96:06:23:A2:03:18:67:8B:54:59:F4:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.cer sbgp-ipAddrBlock: critical IPv6: 2602:2e4:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:3d:f9:c9:d3:73:6e:bf:0e:75:15:74:fb:50:21:5c:1b:a5: 81:db:87:c1:a7:df:46:c3:23:09:f0:37:6b:4d:e9:e9:9a:2f: 37:b6:f4:fa:30:a8:f4:6a:ae:2a:d4:9b:dc:91:26:15:66:68: 88:db:46:78:d4:91:4c:c6:13:96:80:2e:0e:26:8e:bc:68:f8: ac:ef:f2:8f:87:27:4d:15:86:36:99:3a:b8:be:4a:01:81:b3: 70:6e:28:38:ee:b5:ad:a4:da:44:c6:b4:95:8b:51:3a:1a:e8: f6:c5:47:c5:ea:e4:c7:68:f7:da:4a:17:7b:ca:8c:7e:d1:d1: a9:a7:cd:07:40:1c:70:85:83:cd:38:ad:32:fc:67:3f:c7:17: 54:32:25:08:33:09:80:e1:2b:05:1c:db:97:cc:e9:03:78:05: 4d:7a:a3:d9:55:b6:9c:ed:b6:3b:50:91:4c:f6:7b:11:c7:8f: 9b:78:b5:66:82:58:06:3c:0f:bb:8a:38:41:2d:4b:71:b4:02: 55:2d:7f:b0:80:45:4e:b1:2f:c2:2f:19:d4:72:3c:9f:95:58: f5:a7:70:15:6d:d4:cf:27:99:e8:ff:a4:a6:3e:59:f8:cf:41: f4:bb:bc:6f:29:9a:dd:b9:24:ff:1c:4d:02:ea:17:83:d8:e0: e3:1f:3c:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkhhAvddNl7rfTU6mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwMWJhNzAtMzgzZS00ZjVkLWFhY2ItN2U0NWUzM2Fj NmJhMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk M2NmYWI4YWUtNGZkMi00MzgzLWE1NWQtOGQyMjAxOGNiYTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqdjSS4qO+jtiQcYWMEh/3Lq0drf/Cq6hrTs IzKTcPWcPVRCCi9mo2G1U7g7cy/xMYdz5iNBPTwkClXUBsnO7W+CBcCGqHkWepUc gMIsk9H9t+nMi9ZLiTfkIN2u9gFlj1pZCCaRmVq3pztZb6EC2XHxfhCzP4YdgL7R zC3jRxRk3vlkXatXkpJBWoUAq6yjDLWMietEeuy62QHQ+AzjxXYnzCZ7wqTq6oxN gJsQisVp/7ygsVcRCkTlwZ8JCNgk8PcMZdUiPqWCwvQCjI6fIIIIYnOzjA2MiLxT nj9OIj/IGMj7enRclkAa4WZSwWRVRfiYxeIr2fvctdj0RT1aLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGE41tu9ICOToTjSRy3wMFJQq3s2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjAx YmE3MC0zODNlLTRmNWQtYWFjYi03ZTQ1ZTMzYWM2YmEvYzJkMmNhMGItZjgxMi0z MTAxLWJhOTAtMDI2MWQxYjU3NjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYwMWJhNzAtMzgzZS00ZjVkLWFh Y2ItN2U0NWUzM2FjNmJhL2Y2MDFiYTcwLTM4M2UtNGY1ZC1hYWNiLTdlNDVlMzNh YzZiYS5jcmwwHwYDVR0jBBgwFoAUY+ThCytlePyWBiOiAxhni1RZ9NowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjAxYmE3MC0zODNlLTRmNWQtYWFjYi03ZTQ1 ZTMzYWM2YmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIC5AAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMc9+cnTc26/DnUVdPtQIVwbpYHbh8Gn30bDIwnwN2tN6emaLze2 9PowqPRqrirUm9yRJhVmaIjbRnjUkUzGE5aALg4mjrxo+Kzv8o+HJ00VhjaZOri+ SgGBs3BuKDjuta2k2kTGtJWLUToa6PbFR8Xq5Mdo99pKF3vKjH7R0amnzQdAHHCF g804rTL8Zz/HF1QyJQgzCYDhKwUc25fM6QN4BU16o9lVtpzttjtQkUz2exHHj5t4 tWaCWAY8D7uKOEEtS3G0AlUtf7CARU6xL8IvGdRyPJ+VWPWncBVt1M8nmej/pKY+ WfjPQfS7vG8pmt25JP8cTQLqF4PY4OMfPOw= -----END CERTIFICATE-----Generated at Tue Apr 29 11:57:56 2025 by rpki-client