$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/06cee608-814a-344b-9ac8-10a8363812c5.roa File: 06cee608-814a-344b-9ac8-10a8363812c5.roa (raw, json) Hash identifier: X5+hSbaRd07FTq+stHM0Aoj7I707oNuGuN1xmGtUr/E= Subject key identifier: D1:4B:2E:A4:54:F7:7B:0B:30:74:FA:48:00:19:1B:14:09:3C:A0:3D Certificate issuer: /CN=22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8 Certificate serial: 010D0C9F4328584944693C87B59465FFB82D8180 Authority key identifier: D6:B1:86:2D:3E:38:C4:B5:A9:99:F0:A9:DB:82:7D:8D:E1:B5:1B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/06cee608-814a-344b-9ac8-10a8363812c5.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 401401 IP address blocks: 2602:f7d8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:3c:87:b5:94:65:ff:b8:2d:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=fb2e1d47-ca68-4484-b185-4c0e73641829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5b:66:a6:6f:17:b9:a3:c3:cc:4c:8e:4e:01: a2:f1:e7:5c:62:7d:c7:8c:12:b9:87:3b:00:94:df: 37:33:a7:19:7d:1f:e8:5f:1a:b6:d0:99:d3:92:9b: 4f:35:6a:34:af:62:0c:ef:d1:9c:f7:8a:12:d5:c0: d6:f7:14:50:42:47:2a:ce:eb:31:4d:28:4d:c2:e3: 12:10:c1:93:de:d0:d1:91:a6:86:c4:7f:11:11:78: f7:c4:a0:35:d0:20:09:22:ba:75:1a:4d:41:5a:ea: 1f:8e:3a:bd:6c:bd:75:84:14:98:5b:80:58:e8:ab: d4:3b:0b:89:31:42:df:ee:21:73:cc:d5:73:d0:24: b2:36:3e:f8:23:e0:a4:36:be:23:7d:37:32:54:01: f8:73:91:cb:c0:68:0b:ca:db:d9:84:26:5f:b1:08: 5e:28:0a:4d:9c:ce:92:81:7e:59:3c:43:69:b5:ff: b8:12:90:3e:75:b4:bc:82:b0:aa:bd:d5:c8:63:3e: 57:01:f9:5f:2d:a8:6e:1d:16:2d:26:f5:97:6c:23: 73:a0:09:f6:d0:1d:39:00:c6:80:60:05:2b:a4:cf: 65:d5:f2:b6:79:8f:a7:76:41:0c:b0:1f:53:0f:e6: e1:b5:d3:4c:b1:95:be:3c:de:30:2a:26:98:11:6f: 8f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4B:2E:A4:54:F7:7B:0B:30:74:FA:48:00:19:1B:14:09:3C:A0:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/06cee608-814a-344b-9ac8-10a8363812c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.crl X509v3 Authority Key Identifier: keyid:D6:B1:86:2D:3E:38:C4:B5:A9:99:F0:A9:DB:82:7D:8D:E1:B5:1B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7d8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:fa:8c:51:45:c1:9c:bb:56:8f:ef:ff:b8:8c:75:24:b3:23: 74:7d:59:a8:55:63:59:2b:bb:87:96:16:fe:20:9d:d6:ce:67: 71:af:31:4f:e2:aa:3c:f5:07:d4:2e:c0:0f:67:13:5e:ed:95: 6c:ed:bc:fe:ee:6c:a7:85:37:58:07:46:cd:36:63:a2:ab:15: 80:a5:e2:0c:31:23:15:1f:94:3f:47:20:25:91:c0:0e:de:b1: 2a:57:8a:46:03:5a:2d:1b:46:44:b4:d0:c2:21:8a:6e:2a:7a: 94:65:6c:65:18:12:6d:24:93:1d:82:46:bd:5a:45:06:b2:ba: 3e:04:ec:b9:af:0d:7c:2c:be:d1:63:0b:f6:49:49:4d:cc:9a: 6d:ce:98:d8:d4:4d:6c:75:c9:11:56:49:34:f8:65:f4:cf:26: 2e:4b:a4:b5:e5:84:6c:12:e8:db:a7:5c:eb:bf:bb:64:bd:1f: 2e:ae:d5:55:df:f6:95:82:79:d8:f6:97:97:c0:b5:c3:96:52: c3:51:8e:13:9f:86:38:8e:85:f7:7e:11:ea:b5:1d:ef:dd:84: f9:40:c8:9c:6f:66:98:87:89:52:92:0d:88:c0:29:6f:d6:f4: 35:aa:a6:e8:4c:24:bc:45:ed:2a:46:ab:1f:b4:76:ac:6e:57: c2:29:8d:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElEaTyHtZRl/7gtgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJhYjI0ZTYtNTlmNy00YzJhLWEzN2ItMGNlOThmYWEz ZGM4MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk ZmIyZTFkNDctY2E2OC00NDg0LWIxODUtNGMwZTczNjQxODI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFtmpm8XuaPDzEyOTgGi8edcYn3HjBK5hzsA lN83M6cZfR/oXxq20JnTkptPNWo0r2IM79Gc94oS1cDW9xRQQkcqzusxTShNwuMS EMGT3tDRkaaGxH8REXj3xKA10CAJIrp1Gk1BWuofjjq9bL11hBSYW4BY6KvUOwuJ MULf7iFzzNVz0CSyNj74I+CkNr4jfTcyVAH4c5HLwGgLytvZhCZfsQheKApNnM6S gX5ZPENptf+4EpA+dbS8grCqvdXIYz5XAflfLahuHRYtJvWXbCNzoAn20B05AMaA YAUrpM9l1fK2eY+ndkEMsB9TD+bhtdNMsZW+PN4wKiaYEW+PcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNFLLqRU93sLMHT6SAAZGxQJPKA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMmFi MjRlNi01OWY3LTRjMmEtYTM3Yi0wY2U5OGZhYTNkYzgvMDZjZWU2MDgtODE0YS0z NDRiLTlhYzgtMTBhODM2MzgxMmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjJhYjI0ZTYtNTlmNy00YzJhLWEz N2ItMGNlOThmYWEzZGM4LzIyYWIyNGU2LTU5ZjctNGMyYS1hMzdiLTBjZTk4ZmFh M2RjOC5jcmwwHwYDVR0jBBgwFoAU1rGGLT44xLWpmfCp24J9jeG1G6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMmFiMjRlNi01OWY3LTRjMmEtYTM3Yi0wY2U5 OGZhYTNkYzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL32AAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAX6jFFFwZy7Vo/v/7iMdSSzI3R9WahVY1kru4eWFv4gndbOZ3Gv MU/iqjz1B9QuwA9nE17tlWztvP7ubKeFN1gHRs02Y6KrFYCl4gwxIxUflD9HICWR wA7esSpXikYDWi0bRkS00MIhim4qepRlbGUYEm0kkx2CRr1aRQayuj4E7LmvDXws vtFjC/ZJSU3Mmm3OmNjUTWx1yRFWSTT4ZfTPJi5LpLXlhGwS6NunXOu/u2S9Hy6u 1VXf9pWCedj2l5fAtcOWUsNRjhOfhjiOhfd+Eeq1He/dhPlAyJxvZpiHiVKSDYjA KW/W9DWqpuhMJLxF7SpGqx+0dqxuV8Ipje0= -----END CERTIFICATE-----Generated at Sun Apr 27 23:00:19 2025 by rpki-client