$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/5f4cf2d6-3f8e-3a0d-98aa-64556b5e99a7.roa File: 5f4cf2d6-3f8e-3a0d-98aa-64556b5e99a7.roa (raw, json) Hash identifier: 7JVxR77LeqAAnVYgH7nnmahxaUQ98KS83hAKq6YoRE8= Subject key identifier: 98:36:D6:F4:BB:A2:EB:31:BC:3E:EA:AB:12:E1:5C:5C:5F:E9:45:32 Certificate issuer: /CN=cf602fb3-e0a4-4315-96e3-52b1359c9d10 Certificate serial: 010D0C9F43285849A35480C8AA6987B269D7DA00 Authority key identifier: 29:72:FB:6B:B1:9E:91:73:94:55:C1:A8:AE:05:66:73:D5:52:55:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/5f4cf2d6-3f8e-3a0d-98aa-64556b5e99a7.roa Signing time: Fri 25 Apr 2025 01:00:47 +0000 ROA not before: Fri 25 Apr 2025 01:00:47 +0000 ROA not after: Thu 24 Jul 2025 01:00:47 +0000 asID: 63302 IP address blocks: 2620:88:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/cf602fb3-e0a4-4315-96e3-52b1359c9d10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/cf602fb3-e0a4-4315-96e3-52b1359c9d10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:54:80:c8:aa:69:87:b2:69:d7:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf602fb3-e0a4-4315-96e3-52b1359c9d10 Validity Not Before: Apr 25 01:00:47 2025 GMT Not After : Jul 24 01:00:47 2025 GMT Subject: CN=39b6b29e-40f3-43a9-b77d-839987974a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:33:b7:fb:55:a5:74:ee:02:e2:89:5e:4e:0b: 91:23:4e:df:1e:0c:aa:69:cc:ae:97:e7:01:dd:d5: 17:4c:a8:70:56:0d:da:1a:44:5d:45:66:22:ac:68: a5:47:bb:22:66:c7:c0:49:73:d7:33:59:af:d2:45: 73:c8:18:36:34:0a:88:55:7a:5e:7a:ff:e0:79:cc: c7:bb:66:ba:d0:5f:31:56:15:82:bc:a6:91:e5:f9: fc:ef:df:07:c9:fe:2a:c8:01:cc:c0:8b:22:45:1b: ae:a7:97:6a:9e:ca:87:a4:dd:ef:48:3c:11:d8:99: 32:41:a5:e4:44:e3:34:68:ed:5a:57:7d:d2:2e:1a: cd:cb:76:a6:0f:97:34:f5:93:10:25:7b:54:39:ee: 6e:ee:fb:d8:77:69:68:25:a8:7a:da:d4:4e:d0:a2: 68:fb:b4:0a:e2:71:6e:18:47:1f:fb:e1:19:cf:64: 1a:85:b1:fb:e4:4a:f3:36:38:73:e7:bf:a4:c5:a0: 15:ab:36:90:eb:06:fc:89:aa:a0:b1:6e:5b:a4:84: 0b:dd:0c:18:f7:18:29:df:48:26:70:0c:28:45:e5: 2e:40:4d:9a:21:2e:cb:81:e1:f0:8d:f3:50:90:ee: c2:b4:3d:81:7f:c5:37:e5:2c:fd:51:79:97:00:21: 82:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:36:D6:F4:BB:A2:EB:31:BC:3E:EA:AB:12:E1:5C:5C:5F:E9:45:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/5f4cf2d6-3f8e-3a0d-98aa-64556b5e99a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/cf602fb3-e0a4-4315-96e3-52b1359c9d10.crl X509v3 Authority Key Identifier: keyid:29:72:FB:6B:B1:9E:91:73:94:55:C1:A8:AE:05:66:73:D5:52:55:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10.cer sbgp-ipAddrBlock: critical IPv6: 2620:88:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:a1:0d:68:10:82:14:f8:62:b0:82:75:79:c6:9d:56:a6:b7: 8b:6e:11:20:7c:25:1e:d4:e9:36:1a:f2:a6:ff:b3:1a:29:2b: e2:bd:ba:7b:fe:43:15:7d:32:71:76:f0:0c:5d:6b:b4:20:e1: fc:a2:54:e9:bd:81:15:dc:91:da:8f:d0:e6:d4:b0:4a:a1:22: 32:13:10:a1:2e:f3:fb:c6:ee:52:2f:58:2e:a8:d7:f2:32:d2: 68:94:34:7f:07:ec:d1:a4:7e:50:bb:fd:b5:13:a9:b2:bf:15: a6:6c:10:84:c7:5f:97:65:3d:21:10:bf:77:01:d8:a9:c6:5b: c7:e3:35:7b:af:5e:7b:6f:9e:bd:b4:ef:91:f5:bf:d3:d8:6a: 74:af:bb:b4:96:1c:39:98:a0:3e:39:61:35:2f:c9:79:69:f8: 0d:a3:35:11:30:6b:8d:98:78:42:35:96:25:2c:ea:00:44:b3: e6:f1:aa:a2:53:62:4f:41:97:27:44:e4:7c:da:ba:98:da:8d: fc:7b:04:e6:3d:b8:69:ec:8c:56:6b:1e:5f:fe:f7:ce:87:d8: ae:88:c4:1e:54:c2:1d:0f:5e:dd:f0:5b:4a:e8:50:9c:76:a1: 75:c3:27:7a:0c:15:45:60:69:c6:cc:f9:97:9d:c2:97:20:7a: 41:09:b0:75 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmjVIDIqmmHsmnX2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Y2MDJmYjMtZTBhNC00MzE1LTk2ZTMtNTJiMTM1OWM5 ZDEwMB4XDTI1MDQyNTAxMDA0N1oXDTI1MDcyNDAxMDA0N1owLzEtMCsGA1UEAxMk MzliNmIyOWUtNDBmMy00M2E5LWI3N2QtODM5OTg3OTc0YTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjO3+1WldO4C4oleTguRI07fHgyqacyul+cB 3dUXTKhwVg3aGkRdRWYirGilR7siZsfASXPXM1mv0kVzyBg2NAqIVXpeev/geczH u2a60F8xVhWCvKaR5fn8798Hyf4qyAHMwIsiRRuup5dqnsqHpN3vSDwR2JkyQaXk ROM0aO1aV33SLhrNy3amD5c09ZMQJXtUOe5u7vvYd2loJah62tRO0KJo+7QK4nFu GEcf++EZz2QahbH75ErzNjhz57+kxaAVqzaQ6wb8iaqgsW5bpIQL3QwY9xgp30gm cAwoReUuQE2aIS7LgeHwjfNQkO7CtD2Bf8U35Sz9UXmXACGCnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJg21vS7ousxvD7qqxLhXFxf6UUyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jZjYw MmZiMy1lMGE0LTQzMTUtOTZlMy01MmIxMzU5YzlkMTAvNWY0Y2YyZDYtM2Y4ZS0z YTBkLTk4YWEtNjQ1NTZiNWU5OWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2Y2MDJmYjMtZTBhNC00MzE1LTk2 ZTMtNTJiMTM1OWM5ZDEwL2NmNjAyZmIzLWUwYTQtNDMxNS05NmUzLTUyYjEzNTlj OWQxMC5jcmwwHwYDVR0jBBgwFoAUKXL7a7GekXOUVcGorgVmc9VSVSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jZjYwMmZiMy1lMGE0LTQzMTUtOTZlMy01MmIx MzU5YzlkMTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAiCAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJShDWgQghT4YrCCdXnGnVamt4tuESB8JR7U6TYa8qb/sxopK+K9 unv+QxV9MnF28Axda7Qg4fyiVOm9gRXckdqP0ObUsEqhIjITEKEu8/vG7lIvWC6o 1/Iy0miUNH8H7NGkflC7/bUTqbK/FaZsEITHX5dlPSEQv3cB2KnGW8fjNXuvXntv nr2075H1v9PYanSvu7SWHDmYoD45YTUvyXlp+A2jNREwa42YeEI1liUs6gBEs+bx qqJTYk9BlydE5Hzaupjajfx7BOY9uGnsjFZrHl/+986H2K6IxB5Uwh0PXt3wW0ro UJx2oXXDJ3oMFUVgacbM+ZedwpcgekEJsHU= -----END CERTIFICATE-----Generated at Tue Apr 29 09:42:01 2025 by rpki-client