$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/875d84f1-68b5-3901-8d31-7443d9e4e2db.roa File: 875d84f1-68b5-3901-8d31-7443d9e4e2db.roa (raw, json) Hash identifier: 0JU/5d7cGgPU6xT3ofgQIgKAgQwAJiO+d+e4nTO52i0= Subject key identifier: B9:CE:2C:7E:73:62:AC:98:68:90:1C:41:3B:3B:5C:C3:CC:E0:16:67 Certificate issuer: /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410 Certificate serial: 010D0C9F4328584985F7A4F5AA087B13F9BF9280 Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/875d84f1-68b5-3901-8d31-7443d9e4e2db.roa Signing time: Mon 14 Apr 2025 12:35:18 +0000 ROA not before: Mon 14 Apr 2025 12:35:18 +0000 ROA not after: Sun 13 Jul 2025 12:35:18 +0000 asID: 11385 IP address blocks: 2602:f7a8::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:85:f7:a4:f5:aa:08:7b:13:f9:bf:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410 Validity Not Before: Apr 14 12:35:18 2025 GMT Not After : Jul 13 12:35:18 2025 GMT Subject: CN=e446dbf9-8d95-40b1-be53-63d40b30b105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cc:e0:bb:cc:dc:02:8c:99:53:89:c9:74:5f: ae:5f:10:51:34:5c:74:c9:10:eb:c5:1f:1a:50:be: 40:90:57:f3:77:16:0d:2f:fe:48:e7:db:d9:9d:c3: 98:d7:18:76:3b:0e:6b:17:e4:0e:f9:27:f1:d3:16: c4:e2:4b:9f:c1:46:49:06:c7:c1:fa:f4:64:0e:7b: db:8f:98:4f:bc:c2:2a:b0:88:11:e1:b4:e7:69:52: 28:02:84:f0:f8:84:fc:22:15:91:3e:24:f7:8f:0b: ba:d0:c9:9d:0c:be:a1:cf:61:14:d8:23:95:59:9e: cb:88:a7:f7:f5:02:7e:b0:58:51:69:db:70:77:49: 62:29:46:13:e2:1f:19:f8:de:af:58:3e:00:43:0a: 93:9e:64:58:51:1b:9d:f0:0d:7c:a4:a1:be:d7:70: 93:93:85:8b:a3:e5:80:d0:35:63:42:89:76:c5:79: 23:1a:8f:3e:74:d0:6f:7c:53:ba:6e:02:d4:65:c8: c9:95:5a:26:94:6e:6d:16:28:0a:7b:9b:80:c7:74: de:9c:e7:cf:d1:d5:d3:43:2f:de:3e:c4:7d:c7:8d: de:ce:59:28:3f:c0:1f:3d:30:2c:d1:07:c7:33:38: 69:47:53:e8:d5:4d:61:7f:74:9e:1b:4f:05:f2:12: 80:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CE:2C:7E:73:62:AC:98:68:90:1C:41:3B:3B:5C:C3:CC:E0:16:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/875d84f1-68b5-3901-8d31-7443d9e4e2db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl X509v3 Authority Key Identifier: keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7a8::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:bb:6d:85:7a:b0:d7:b1:0f:69:3f:cf:42:c3:8c:ec:db:5b: ba:16:15:69:7f:d0:fc:f1:7e:80:2f:7b:3c:71:f7:ed:fe:59: b2:60:ec:42:b8:38:24:4f:c3:23:f9:f1:86:f7:6c:5f:27:bc: d9:b6:77:00:7d:63:0c:f5:65:35:25:4a:28:15:ef:8b:d9:42: 0c:97:92:80:65:f6:9e:d3:96:f6:9b:47:4e:2a:d3:ef:aa:db: d5:b2:8f:bd:b5:93:c5:1c:37:b3:d5:82:e7:0a:86:6f:3a:bb: 8c:1d:cb:7e:82:8b:c1:4a:90:08:36:02:b9:06:94:8b:c8:a5: 50:0d:5f:ba:72:1b:77:0a:3d:6c:a3:82:11:bd:70:45:a4:59: 50:00:32:b5:ad:77:be:9e:59:64:ae:0a:a2:3d:92:67:b9:e6: 7b:7c:21:7d:9a:a4:7e:a2:f3:aa:2c:f4:69:dd:7d:9d:e6:b0: fb:66:90:06:dc:10:3e:67:64:26:e8:c8:ef:5f:8f:fe:ac:58: 59:5c:26:15:53:fd:ee:3b:f5:59:df:e0:4e:c0:53:50:ee:aa: 23:48:b0:b0:88:55:f8:40:ed:36:bf:46:88:14:10:3c:8a:c4: fd:ca:80:40:45:2b:80:7b:18:ca:f6:e2:c1:9a:6f:17:53:e9: ed:ba:f5:34 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmF96T1qgh7E/m/koAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyYjc2ZmItMDU1NS00YmVkLWI3OWItMjBlYzU2Yjhk NDEwMB4XDTI1MDQxNDEyMzUxOFoXDTI1MDcxMzEyMzUxOFowLzEtMCsGA1UEAxMk ZTQ0NmRiZjktOGQ5NS00MGIxLWJlNTMtNjNkNDBiMzBiMTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsczgu8zcAoyZU4nJdF+uXxBRNFx0yRDrxR8a UL5AkFfzdxYNL/5I59vZncOY1xh2Ow5rF+QO+Sfx0xbE4kufwUZJBsfB+vRkDnvb j5hPvMIqsIgR4bTnaVIoAoTw+IT8IhWRPiT3jwu60MmdDL6hz2EU2COVWZ7LiKf3 9QJ+sFhRadtwd0liKUYT4h8Z+N6vWD4AQwqTnmRYURud8A18pKG+13CTk4WLo+WA 0DVjQol2xXkjGo8+dNBvfFO6bgLUZcjJlVomlG5tFigKe5uAx3TenOfP0dXTQy/e PsR9x43ezlkoP8AfPTAs0QfHMzhpR1Po1U1hf3SeG08F8hKABwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLnOLH5zYqyYaJAcQTs7XMPM4BZnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJi NzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVjNTZiOGQ0MTAvODc1ZDg0ZjEtNjhiNS0z OTAxLThkMzEtNzQ0M2Q5ZTRlMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMyYjc2ZmItMDU1NS00YmVkLWI3 OWItMjBlYzU2YjhkNDEwLzBjMmI3NmZiLTA1NTUtNGJlZC1iNzliLTIwZWM1NmI4 ZDQxMC5jcmwwHwYDVR0jBBgwFoAUeNy1PiAYh8PTOX5p9HJkq/F7sNQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJiNzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVj NTZiOGQ0MTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3qAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEASLtthXqw17EPaT/PQsOM7NtbuhYVaX/Q/PF+gC97PHH37f5ZsmDs Qrg4JE/DI/nxhvdsXye82bZ3AH1jDPVlNSVKKBXvi9lCDJeSgGX2ntOW9ptHTirT 76rb1bKPvbWTxRw3s9WC5wqGbzq7jB3LfoKLwUqQCDYCuQaUi8ilUA1funIbdwo9 bKOCEb1wRaRZUAAyta13vp5ZZK4Koj2SZ7nme3whfZqkfqLzqiz0ad19neaw+2aQ BtwQPmdkJujI71+P/qxYWVwmFVP97jv1Wd/gTsBTUO6qI0iwsIhV+EDtNr9GiBQQ PIrE/cqAQEUrgHsYyvbiwZpvF1Pp7br1NA== -----END CERTIFICATE-----Generated at Tue Apr 29 03:36:03 2025 by rpki-client