$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/09db9a4d-0e69-304d-b5da-1b70837caac5.roa File: 09db9a4d-0e69-304d-b5da-1b70837caac5.roa (raw, json) Hash identifier: VRB0sHRdRZ8kOe0gZe47B8VCW9yliqfUSYQH2s2UC/8= Subject key identifier: 77:58:AD:AF:5A:3B:3C:A9:AA:0F:C3:C3:E1:B4:15:6D:1C:75:C4:8F Certificate issuer: /CN=425f73bb-63fc-4aec-8f78-14a58f92bf2e Certificate serial: 010D0C9F432858498B99C717241013CFFB9527B0 Authority key identifier: CF:26:08:8C:5E:FC:FA:48:C6:45:88:C6:E6:0D:D6:29:F7:93:5B:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/09db9a4d-0e69-304d-b5da-1b70837caac5.roa Signing time: Wed 16 Apr 2025 13:01:01 +0000 ROA not before: Wed 16 Apr 2025 13:01:01 +0000 ROA not after: Tue 15 Jul 2025 13:01:01 +0000 asID: 397700 IP address blocks: 2602:f826::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:99:c7:17:24:10:13:cf:fb:95:27:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=425f73bb-63fc-4aec-8f78-14a58f92bf2e Validity Not Before: Apr 16 13:01:01 2025 GMT Not After : Jul 15 13:01:01 2025 GMT Subject: CN=88c75f42-ed55-4169-86c7-3f319136bc1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:59:9e:28:00:9c:2a:cc:9e:bb:df:e7:15:1e: dd:fd:db:7c:3f:78:bf:cf:ee:e8:a8:80:ad:ec:fd: d4:bb:7a:f0:da:d9:d5:15:30:70:74:a0:ad:bb:f1: b5:2a:af:76:13:4c:62:28:71:36:01:b0:01:f6:2d: 47:d7:cd:3a:be:e2:68:fa:f9:c7:f4:7d:83:47:49: 4c:83:88:a6:d3:89:6e:34:6d:53:e4:8a:70:e6:9b: 24:88:91:20:b5:3e:28:2d:f1:ec:d7:1f:9a:25:fa: e3:aa:06:f1:5f:f9:3e:41:0f:6a:bb:fb:0b:61:68: 99:01:f8:96:88:91:3e:d2:1d:44:3b:8b:0f:a3:22: 4e:89:d4:0b:7f:29:22:71:28:74:39:f9:7c:2a:0c: a6:ee:f1:a6:0d:c7:f2:6b:71:08:ed:0a:46:83:60: 76:40:f5:44:1c:1c:61:68:a0:19:27:55:89:64:95: 02:91:5f:89:a2:fc:2d:d9:ca:eb:82:4e:63:fc:a4: 5f:d8:84:6e:35:c4:22:a5:ea:82:67:6e:6a:a2:04: aa:5d:48:c7:85:a7:24:ab:d8:e1:d7:0b:68:77:71: bf:0e:35:e2:11:80:f2:13:d1:67:24:ee:61:33:eb: d7:57:a7:38:16:d7:b7:7b:3a:00:5b:58:50:99:fa: dc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:58:AD:AF:5A:3B:3C:A9:AA:0F:C3:C3:E1:B4:15:6D:1C:75:C4:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/09db9a4d-0e69-304d-b5da-1b70837caac5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.crl X509v3 Authority Key Identifier: keyid:CF:26:08:8C:5E:FC:FA:48:C6:45:88:C6:E6:0D:D6:29:F7:93:5B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer sbgp-ipAddrBlock: critical IPv6: 2602:f826::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:8f:c6:e2:18:6b:51:82:34:73:43:1d:5e:f9:b1:28:16:7b: f2:3e:d0:ba:53:9f:7a:db:cc:20:00:dc:cf:d9:07:08:64:09: ad:71:61:71:f1:10:4d:6e:a2:3f:d2:87:99:71:03:6e:d1:ab: 92:df:08:95:6c:d8:fe:d2:70:a3:bd:e1:06:3d:91:4f:f1:9d: 55:8e:1c:18:99:88:8e:9e:10:84:79:ac:a1:48:e1:8e:77:a7: cf:32:a5:75:66:c9:b4:f7:39:f6:c4:b7:50:8e:ab:0e:90:7d: ce:83:8d:46:b8:a5:9f:04:d3:8d:38:f7:21:88:bf:81:c7:b8: 7b:54:60:4f:6d:e8:b7:45:c4:b7:9b:62:bb:6f:d1:ec:67:1e: af:d0:a7:27:21:af:4b:3a:50:a3:f0:34:b2:44:2c:53:2d:e4: ae:2b:42:e5:54:65:a1:3e:5c:60:7f:d2:e3:dc:06:ed:ba:ae: c2:f7:4d:c5:52:50:6e:1e:b9:b0:13:96:cb:6e:97:4e:5a:e7: a9:07:d3:3b:f4:2a:01:88:3d:5f:6b:81:3d:20:26:18:e5:58: 1c:64:8f:85:d8:b4:b0:f8:80:46:6b:5b:0f:38:06:67:9a:db: a2:8a:7a:32:07:83:f4:e3:f0:ff:8b:c1:c6:b9:07:0e:0f:14: 90:2d:df:21 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmLmccXJBATz/uVJ7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI1ZjczYmItNjNmYy00YWVjLThmNzgtMTRhNThmOTJi ZjJlMB4XDTI1MDQxNjEzMDEwMVoXDTI1MDcxNTEzMDEwMVowLzEtMCsGA1UEAxMk ODhjNzVmNDItZWQ1NS00MTY5LTg2YzctM2YzMTkxMzZiYzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1meKACcKsyeu9/nFR7d/dt8P3i/z+7oqICt 7P3Uu3rw2tnVFTBwdKCtu/G1Kq92E0xiKHE2AbAB9i1H1806vuJo+vnH9H2DR0lM g4im04luNG1T5Ipw5pskiJEgtT4oLfHs1x+aJfrjqgbxX/k+QQ9qu/sLYWiZAfiW iJE+0h1EO4sPoyJOidQLfykicSh0Ofl8Kgym7vGmDcfya3EI7QpGg2B2QPVEHBxh aKAZJ1WJZJUCkV+Jovwt2crrgk5j/KRf2IRuNcQipeqCZ25qogSqXUjHhackq9jh 1wtod3G/DjXiEYDyE9FnJO5hM+vXV6c4Fte3ezoAW1hQmfrckwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHdYra9aOzypqg/Dw+G0FW0cdcSPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80MjVm NzNiYi02M2ZjLTRhZWMtOGY3OC0xNGE1OGY5MmJmMmUvMDlkYjlhNGQtMGU2OS0z MDRkLWI1ZGEtMWI3MDgzN2NhYWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDI1ZjczYmItNjNmYy00YWVjLThm NzgtMTRhNThmOTJiZjJlLzQyNWY3M2JiLTYzZmMtNGFlYy04Zjc4LTE0YTU4Zjky YmYyZS5jcmwwHwYDVR0jBBgwFoAUzyYIjF78+kjGRYjG5g3WKfeTW6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80MjVmNzNiYi02M2ZjLTRhZWMtOGY3OC0xNGE1 OGY5MmJmMmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL4JgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAco/G4hhrUYI0c0MdXvmxKBZ78j7QulOfetvMIADcz9kHCGQJrXFh cfEQTW6iP9KHmXEDbtGrkt8IlWzY/tJwo73hBj2RT/GdVY4cGJmIjp4QhHmsoUjh jnenzzKldWbJtPc59sS3UI6rDpB9zoONRrilnwTTjTj3IYi/gce4e1RgT23ot0XE t5tiu2/R7Gcer9CnJyGvSzpQo/A0skQsUy3kritC5VRloT5cYH/S49wG7bquwvdN xVJQbh65sBOWy26XTlrnqQfTO/QqAYg9X2uBPSAmGOVYHGSPhdi0sPiARmtbDzgG Z5rboop6MgeD9OPw/4vBxrkHDg8UkC3fIQ== -----END CERTIFICATE-----Generated at Tue Apr 29 15:41:53 2025 by rpki-client