$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/b3626f23-b4e4-3d3c-aa7c-9b1c67dc3193.roa File: b3626f23-b4e4-3d3c-aa7c-9b1c67dc3193.roa (raw, json) Hash identifier: QVRXn74wlb23cWZJdxDHD/MNfx3dC2Rh9yZR+houN9M= Subject key identifier: 1B:AD:18:F7:8C:77:C3:61:5B:37:AE:9C:5E:C8:38:61:BE:56:47:FE Certificate issuer: /CN=d57fb7e0-00a6-4537-98dd-87a5acbd1225 Certificate serial: 010D0C9F432858499829D1828CD16FD9BAFA9480 Authority key identifier: 12:9E:1E:B9:07:96:A5:BD:17:65:C9:E4:28:11:73:8F:4D:B2:91:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/b3626f23-b4e4-3d3c-aa7c-9b1c67dc3193.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 401466 IP address blocks: 2602:f874:fa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d1:82:8c:d1:6f:d9:ba:fa:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d57fb7e0-00a6-4537-98dd-87a5acbd1225 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=bc496c2f-8864-4f54-96ec-5a783f2fcc8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a5:5f:3a:60:86:2f:31:45:94:8a:61:73:19: a7:06:e9:43:fb:73:7c:84:21:02:52:93:7e:eb:e4: 9e:bc:43:e5:0c:d9:6a:72:45:a3:eb:53:53:f9:eb: f8:2b:24:7b:3b:c9:ed:b9:df:e5:99:6d:92:9a:8d: 63:f0:88:57:a9:11:e5:1e:55:8e:f5:da:48:75:88: 69:1a:54:78:49:82:cf:e7:69:6a:97:1a:d4:57:90: 0d:2d:cc:a7:e3:18:ea:b8:be:95:da:a2:a4:bb:82: 0e:da:5d:33:df:48:1b:e4:5a:26:74:68:1c:5a:f5: 9e:dd:0c:fe:03:d6:7e:b8:61:56:4c:e7:9f:c0:6f: f8:21:ca:7c:16:d7:93:5e:ee:1b:68:af:6c:f5:93: a5:ee:08:0c:cc:08:50:f1:c6:af:73:a6:59:de:ad: 55:ba:13:6c:ff:e2:2f:ba:d0:cb:cd:5a:ee:25:63: 4b:a6:8b:d5:cd:7e:c8:44:e4:72:5f:11:49:75:26: 08:a9:fc:f2:13:e3:a2:4f:a5:db:d4:2d:2b:9d:2d: 7a:7a:a9:5f:30:8d:14:a5:0d:f0:1a:14:48:c5:3d: f1:11:f6:f4:25:34:1f:92:3e:95:34:bd:cc:15:df: e8:75:8b:ab:3e:47:d8:bc:08:6f:ee:75:fa:26:a3: b0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:AD:18:F7:8C:77:C3:61:5B:37:AE:9C:5E:C8:38:61:BE:56:47:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/b3626f23-b4e4-3d3c-aa7c-9b1c67dc3193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.crl X509v3 Authority Key Identifier: keyid:12:9E:1E:B9:07:96:A5:BD:17:65:C9:E4:28:11:73:8F:4D:B2:91:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer sbgp-ipAddrBlock: critical IPv6: 2602:f874:fa::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:3f:d2:8d:8e:1d:e5:53:8c:6f:35:8e:a2:ff:fa:cb:57:e2: 88:3c:33:34:a7:e1:87:bf:a8:49:5a:cc:38:b4:e9:c7:ed:d9: 9a:8b:f0:59:22:51:ed:09:f4:03:00:6e:ee:44:5c:21:8b:b0: c1:19:3c:a4:02:cf:9d:28:92:b6:7f:9f:50:1f:ad:e6:20:7b: 63:ff:1b:d2:3e:d0:98:0b:f4:19:43:d9:bf:9a:97:f5:2b:39: ec:39:d7:50:bd:49:f1:53:f7:a7:e4:48:01:f2:b5:64:a7:dc: 4a:73:c2:9c:79:00:13:dd:3a:26:a3:96:37:09:ff:48:8f:cc: ec:a3:23:83:d7:d7:ad:6c:64:9a:51:cf:09:11:0d:1e:99:2b: 15:02:79:01:b8:00:06:f1:61:fe:28:21:98:9f:a7:a7:4f:f1: 20:cc:52:ea:4f:85:e4:f3:e4:bf:9a:92:8d:ea:db:e0:f2:6f: 97:13:8f:0c:d5:08:b3:39:af:a7:47:13:dd:9b:31:3c:bf:73: 46:e8:fe:df:a2:d6:b8:7e:49:b5:e1:4c:24:c8:e8:87:b7:e0: 2f:4c:64:0c:08:3b:aa:09:74:65:5a:fe:ff:b5:6f:3c:e1:cc: 97:00:57:b4:f6:06:66:99:a2:82:26:2c:b5:65:5e:46:7a:dc: 1b:c4:e6:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmYKdGCjNFv2br6lIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU3ZmI3ZTAtMDBhNi00NTM3LTk4ZGQtODdhNWFjYmQx MjI1MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk YmM0OTZjMmYtODg2NC00ZjU0LTk2ZWMtNWE3ODNmMmZjYzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKVfOmCGLzFFlIphcxmnBulD+3N8hCECUpN+ 6+SevEPlDNlqckWj61NT+ev4KyR7O8ntud/lmW2Smo1j8IhXqRHlHlWO9dpIdYhp GlR4SYLP52lqlxrUV5ANLcyn4xjquL6V2qKku4IO2l0z30gb5FomdGgcWvWe3Qz+ A9Z+uGFWTOefwG/4Icp8FteTXu4baK9s9ZOl7ggMzAhQ8cavc6ZZ3q1VuhNs/+Iv utDLzVruJWNLpovVzX7IRORyXxFJdSYIqfzyE+OiT6Xb1C0rnS16eqlfMI0UpQ3w GhRIxT3xEfb0JTQfkj6VNL3MFd/odYurPkfYvAhv7nX6JqOwrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFButGPeMd8NhWzeunF7IOGG+Vkf+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNTdm YjdlMC0wMGE2LTQ1MzctOThkZC04N2E1YWNiZDEyMjUvYjM2MjZmMjMtYjRlNC0z ZDNjLWFhN2MtOWIxYzY3ZGMzMTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDU3ZmI3ZTAtMDBhNi00NTM3LTk4 ZGQtODdhNWFjYmQxMjI1L2Q1N2ZiN2UwLTAwYTYtNDUzNy05OGRkLTg3YTVhY2Jk MTIyNS5jcmwwHwYDVR0jBBgwFoAUEp4euQeWpb0XZcnkKBFzj02ykcMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNTdmYjdlMC0wMGE2LTQ1MzctOThkZC04N2E1 YWNiZDEyMjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4dAD6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD0/0o2OHeVTjG81jqL/+stX4og8MzSn4Ye/qElazDi06cft2ZqL 8FkiUe0J9AMAbu5EXCGLsMEZPKQCz50okrZ/n1AfreYge2P/G9I+0JgL9BlD2b+a l/UrOew511C9SfFT96fkSAHytWSn3Epzwpx5ABPdOiajljcJ/0iPzOyjI4PX161s ZJpRzwkRDR6ZKxUCeQG4AAbxYf4oIZifp6dP8SDMUupPheTz5L+ako3q2+Dyb5cT jwzVCLM5r6dHE92bMTy/c0bo/t+i1rh+SbXhTCTI6Ie34C9MZAwIO6oJdGVa/v+1 bzzhzJcAV7T2BmaZooImLLVlXkZ63BvE5v8= -----END CERTIFICATE-----Generated at Sat May 3 12:35:13 2025 by rpki-client