$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/3b9d7cb3-27da-3b9c-bbc3-382a6d178788.roa File: 3b9d7cb3-27da-3b9c-bbc3-382a6d178788.roa (raw, json) Hash identifier: HNtpMaPa8RjLQzCo0bcwOFIPNjt1qERqPIvRa3cv/8U= Subject key identifier: A7:A7:0D:9D:75:96:CB:58:8D:D7:96:6B:66:99:7B:BA:05:0B:2B:A0 Certificate issuer: /CN=d189c13c-82f8-4a93-80ac-c659e448dd77 Certificate serial: 010D0C9F432858494303F653CB580F96E341EF38 Authority key identifier: 34:77:9B:3F:83:B7:E0:2E:32:80:F6:25:8B:10:3F:DA:3D:D5:BD:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/3b9d7cb3-27da-3b9c-bbc3-382a6d178788.roa Signing time: Fri 21 Mar 2025 13:00:50 +0000 ROA not before: Fri 21 Mar 2025 13:00:50 +0000 ROA not after: Thu 19 Jun 2025 13:00:50 +0000 asID: 401400 IP address blocks: 2602:81a:8000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/d189c13c-82f8-4a93-80ac-c659e448dd77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/d189c13c-82f8-4a93-80ac-c659e448dd77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:03:f6:53:cb:58:0f:96:e3:41:ef:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d189c13c-82f8-4a93-80ac-c659e448dd77 Validity Not Before: Mar 21 13:00:50 2025 GMT Not After : Jun 19 13:00:50 2025 GMT Subject: CN=4affb8ee-6148-485d-8e57-e7c597fdaaed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a8:86:dc:c0:d7:b3:b9:6b:ff:b0:7d:36:9f: 07:cd:09:f9:70:61:d9:e5:6c:48:74:42:21:e2:64: c0:e8:11:aa:c3:f7:ec:3a:37:3f:d5:5d:46:90:d9: 32:96:52:e8:a4:5d:7c:ab:b0:23:46:d1:40:79:f0: 5f:08:0b:c6:4c:6b:f1:84:89:b7:a6:74:47:20:89: b3:8d:a8:ce:7c:31:6f:f0:14:c3:bf:2d:e1:b4:96: 1e:97:63:06:5c:00:06:16:f1:9e:56:a5:cd:26:35: 36:e0:b4:94:0b:4c:d5:3c:67:d4:a8:89:86:50:e1: 6c:62:b2:4f:7e:3a:a7:61:a8:c4:9f:c9:54:0c:2d: 2a:cb:9b:d6:1c:37:83:b7:64:dc:b4:d7:3f:b2:00: ba:c4:81:10:9a:b0:3d:87:79:66:21:1f:24:36:3c: 6f:7a:b6:5c:ac:68:07:1c:ac:b0:7a:c2:ab:e1:39: 16:4f:c9:b9:af:f6:ff:a5:a4:50:a6:b6:24:86:4b: fa:0d:60:e4:87:75:3c:bf:7c:f4:37:9e:a0:ae:95: 66:35:a1:e7:88:b6:0e:23:ce:da:b6:55:5d:48:8e: d6:d3:32:57:bb:0d:47:99:95:f7:e4:0d:fd:c6:72: 7b:18:6f:b7:9a:3d:f2:07:27:54:44:1f:15:ef:4e: 8c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A7:0D:9D:75:96:CB:58:8D:D7:96:6B:66:99:7B:BA:05:0B:2B:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/3b9d7cb3-27da-3b9c-bbc3-382a6d178788.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/d189c13c-82f8-4a93-80ac-c659e448dd77.crl X509v3 Authority Key Identifier: keyid:34:77:9B:3F:83:B7:E0:2E:32:80:F6:25:8B:10:3F:DA:3D:D5:BD:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77.cer sbgp-ipAddrBlock: critical IPv6: 2602:81a:8000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:7b:10:ec:ab:df:b6:3e:13:ce:8d:cf:a9:50:b3:15:83:0b: 7e:08:c4:96:04:fd:d2:f5:79:40:fa:0e:27:4e:3b:6b:b1:87: 77:71:23:cb:9e:27:ab:95:65:ad:ff:6c:9e:a4:5c:d5:91:14: 66:55:bf:71:65:99:96:30:4c:4f:19:19:45:77:15:6d:6e:40: 8a:2f:53:39:d9:48:47:d7:d1:1e:67:c8:ad:d4:7a:61:a2:47: 95:72:4b:83:ec:fb:96:99:34:1f:cb:3e:29:31:8f:5c:93:a1: 36:fb:bf:8a:a4:22:5b:3c:5d:04:ba:d5:1e:62:96:9e:34:f3: b0:05:cf:53:9e:7e:a6:d6:69:7b:5f:c0:35:27:b6:09:1a:8c: da:ef:98:85:73:f6:f1:0b:f0:c5:b7:24:a2:73:47:bb:de:1e: db:21:8f:e6:c4:12:68:0d:b5:88:a6:0e:1d:90:ae:ef:f7:7a: 88:02:28:a4:e7:df:72:e6:5b:48:71:29:2e:8c:b7:7a:34:22: bc:d3:c6:85:b4:7d:21:80:1a:84:84:4d:b3:cd:a0:85:40:78: e1:48:be:1f:84:af:ad:ea:60:bf:8e:8d:29:12:d4:9b:a3:b9: 0b:31:8a:e1:39:e9:b9:d7:dc:54:7e:af:6d:b0:88:b4:b7:42: 57:74:c0:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElDA/ZTy1gPluNB7zgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE4OWMxM2MtODJmOC00YTkzLTgwYWMtYzY1OWU0NDhk ZDc3MB4XDTI1MDMyMTEzMDA1MFoXDTI1MDYxOTEzMDA1MFowLzEtMCsGA1UEAxMk NGFmZmI4ZWUtNjE0OC00ODVkLThlNTctZTdjNTk3ZmRhYWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KiG3MDXs7lr/7B9Np8HzQn5cGHZ5WxIdEIh 4mTA6BGqw/fsOjc/1V1GkNkyllLopF18q7AjRtFAefBfCAvGTGvxhIm3pnRHIImz jajOfDFv8BTDvy3htJYel2MGXAAGFvGeVqXNJjU24LSUC0zVPGfUqImGUOFsYrJP fjqnYajEn8lUDC0qy5vWHDeDt2TctNc/sgC6xIEQmrA9h3lmIR8kNjxverZcrGgH HKywesKr4TkWT8m5r/b/paRQprYkhkv6DWDkh3U8v3z0N56grpVmNaHniLYOI87a tlVdSI7W0zJXuw1HmZX35A39xnJ7GG+3mj3yBydURB8V706MPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKenDZ11lstYjdeWa2aZe7oFCyugMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kMTg5 YzEzYy04MmY4LTRhOTMtODBhYy1jNjU5ZTQ0OGRkNzcvM2I5ZDdjYjMtMjdkYS0z YjljLWJiYzMtMzgyYTZkMTc4Nzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDE4OWMxM2MtODJmOC00YTkzLTgw YWMtYzY1OWU0NDhkZDc3L2QxODljMTNjLTgyZjgtNGE5My04MGFjLWM2NTllNDQ4 ZGQ3Ny5jcmwwHwYDVR0jBBgwFoAUNHebP4O34C4ygPYlixA/2j3VvUwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kMTg5YzEzYy04MmY4LTRhOTMtODBhYy1jNjU5 ZTQ0OGRkNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIGoAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADd7EOyr37Y+E86Nz6lQsxWDC34IxJYE/dL1eUD6DidOO2uxh3dx I8ueJ6uVZa3/bJ6kXNWRFGZVv3FlmZYwTE8ZGUV3FW1uQIovUznZSEfX0R5nyK3U emGiR5VyS4Ps+5aZNB/LPikxj1yToTb7v4qkIls8XQS61R5ilp4087AFz1OefqbW aXtfwDUntgkajNrvmIVz9vEL8MW3JKJzR7veHtshj+bEEmgNtYimDh2Qru/3eogC KKTn33LmW0hxKS6Mt3o0IrzTxoW0fSGAGoSETbPNoIVAeOFIvh+Er63qYL+OjSkS 1JujuQsxiuE56bnX3FR+r22wiLS3Qld0wKo= -----END CERTIFICATE-----Generated at Tue Apr 29 09:11:37 2025 by rpki-client