$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/e888c9e1-ca31-3769-89fa-4e80979f3f2b.roa File: e888c9e1-ca31-3769-89fa-4e80979f3f2b.roa (raw, json) Hash identifier: RAM0higUIyNvakYcKDVbvylSGZTwWllt1tLNh4xK+vs= Subject key identifier: 35:C8:C1:72:6C:7A:B4:FE:8D:84:D8:23:FD:D8:AC:11:70:39:C3:4C Certificate issuer: /CN=dfbfe00a-3fd7-40c7-b3be-10f9b6968836 Certificate serial: 010D0C9F43285849780F1628F44FEDE70AD5EC50 Authority key identifier: 6A:F4:80:FA:0B:58:28:C8:C6:2D:5E:09:A5:B0:4D:2F:BE:C0:50:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/e888c9e1-ca31-3769-89fa-4e80979f3f2b.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 20417 IP address blocks: 2602:f7d1::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:16:28:f4:4f:ed:e7:0a:d5:ec:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfbfe00a-3fd7-40c7-b3be-10f9b6968836 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=704cf3fd-ee56-4dad-8063-bfa7b3fa5580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:61:1d:d6:35:d1:29:af:fc:16:45:3d:10:3d: 93:59:b8:64:42:d8:5c:8d:e8:fd:c7:3b:b9:8f:6e: 73:f8:5a:d4:af:1d:cc:1a:78:77:07:ec:f8:e5:90: 66:4b:88:70:d0:0c:03:36:22:bc:a5:8e:24:aa:8b: b8:6e:b9:76:8a:de:5b:dc:7b:31:ff:f8:04:03:e3: 20:ba:71:48:a6:fe:f5:04:80:d6:91:bf:11:f8:4d: 8e:14:86:1c:7a:e4:aa:cd:29:a0:b7:7e:84:a9:5d: 2d:24:78:ce:a1:29:88:69:74:d0:d3:75:fd:91:e9: 8b:97:9a:cf:ca:97:85:d0:ef:87:d8:a6:a5:33:28: f6:7d:0f:0b:b1:05:64:38:69:c5:fb:c7:a9:06:50: 2a:3c:fd:6a:0c:ab:88:d2:fd:25:93:8c:78:21:15: fd:6e:eb:e1:b6:a4:0c:aa:6d:67:2c:79:0b:35:3c: 23:77:ac:90:67:97:b6:42:86:31:15:e7:05:4d:e8: 46:79:89:66:2e:7d:2f:fb:3f:1f:df:5d:e0:5b:8c: 0d:be:b8:c0:10:22:e4:d2:00:6e:c6:97:fc:ef:b2: 08:fc:67:45:e4:ce:bd:26:dc:1d:da:ae:5c:fd:ee: 3e:be:55:e5:1c:f5:42:ef:5c:ff:60:0c:58:89:0b: a2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C8:C1:72:6C:7A:B4:FE:8D:84:D8:23:FD:D8:AC:11:70:39:C3:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/e888c9e1-ca31-3769-89fa-4e80979f3f2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.crl X509v3 Authority Key Identifier: keyid:6A:F4:80:FA:0B:58:28:C8:C6:2D:5E:09:A5:B0:4D:2F:BE:C0:50:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7d1::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:45:9d:af:4f:84:1a:22:fc:ed:99:f9:e9:ee:90:4e:a4:19: 9f:d8:ef:30:a8:ab:b1:61:4f:8d:6d:66:ef:be:6e:f6:fd:cb: 14:1c:c1:ce:0d:ef:00:33:6d:d6:ea:30:ae:d4:06:b8:e5:61: 17:db:89:cc:f4:1a:d9:fa:43:ac:c1:41:73:97:e4:f8:c0:a5: 4a:95:05:e7:ce:a8:ee:b1:e8:1d:5f:b1:01:8f:68:c7:99:56: 73:b1:93:9a:55:97:85:8e:6e:53:3e:b2:d2:42:df:07:d5:4a: bd:3a:e1:a7:43:1e:c1:57:83:43:0e:c6:f0:4c:c0:c6:e6:ee: 0e:40:4a:45:ad:b1:55:0f:58:15:6c:ff:d3:08:e3:36:1a:d2: a0:8b:81:5a:17:b4:01:c3:d4:bd:5d:2b:37:41:22:af:d1:37: 9a:3f:c1:d4:0a:41:48:10:a2:f5:25:4c:28:8f:17:d0:40:e1: 4d:d7:d7:47:6b:6c:89:70:ab:69:05:78:f1:8f:9c:c8:38:93: 2f:30:cd:ee:79:6f:a4:f6:2a:8e:fa:99:fd:98:0e:48:2a:1a: 8c:56:fd:04:ba:8d:84:86:8f:39:00:ca:09:9e:42:fb:fb:a6: 9c:26:65:65:d3:84:db:b8:d8:68:98:92:c9:60:ee:ae:2b:0e: 24:ad:f3:ff -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEl4DxYo9E/t5wrV7FAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZiZmUwMGEtM2ZkNy00MGM3LWIzYmUtMTBmOWI2OTY4 ODM2MB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk NzA0Y2YzZmQtZWU1Ni00ZGFkLTgwNjMtYmZhN2IzZmE1NTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2Ed1jXRKa/8FkU9ED2TWbhkQthcjej9xzu5 j25z+FrUrx3MGnh3B+z45ZBmS4hw0AwDNiK8pY4kqou4brl2it5b3Hsx//gEA+Mg unFIpv71BIDWkb8R+E2OFIYceuSqzSmgt36EqV0tJHjOoSmIaXTQ03X9kemLl5rP ypeF0O+H2KalMyj2fQ8LsQVkOGnF+8epBlAqPP1qDKuI0v0lk4x4IRX9buvhtqQM qm1nLHkLNTwjd6yQZ5e2QoYxFecFTehGeYlmLn0v+z8f313gW4wNvrjAECLk0gBu xpf877II/GdF5M69Jtwd2q5c/e4+vlXlHPVC71z/YAxYiQuiZwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDXIwXJserT+jYTYI/3YrBFwOcNMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZmJm ZTAwYS0zZmQ3LTQwYzctYjNiZS0xMGY5YjY5Njg4MzYvZTg4OGM5ZTEtY2EzMS0z NzY5LTg5ZmEtNGU4MDk3OWYzZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGZiZmUwMGEtM2ZkNy00MGM3LWIz YmUtMTBmOWI2OTY4ODM2L2RmYmZlMDBhLTNmZDctNDBjNy1iM2JlLTEwZjliNjk2 ODgzNi5jcmwwHwYDVR0jBBgwFoAUavSA+gtYKMjGLV4JpbBNL77AUG0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZmJmZTAwYS0zZmQ3LTQwYzctYjNiZS0xMGY5 YjY5Njg4MzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL30QAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEACkWdr0+EGiL87Zn56e6QTqQZn9jvMKirsWFPjW1m775u9v3LFBzB zg3vADNt1uowrtQGuOVhF9uJzPQa2fpDrMFBc5fk+MClSpUF586o7rHoHV+xAY9o x5lWc7GTmlWXhY5uUz6y0kLfB9VKvTrhp0MewVeDQw7G8EzAxubuDkBKRa2xVQ9Y FWz/0wjjNhrSoIuBWhe0AcPUvV0rN0Eir9E3mj/B1ApBSBCi9SVMKI8X0EDhTdfX R2tsiXCraQV48Y+cyDiTLzDN7nlvpPYqjvqZ/ZgOSCoajFb9BLqNhIaPOQDKCZ5C +/umnCZlZdOE27jYaJiSyWDurisOJK3z/w== -----END CERTIFICATE-----Generated at Sun Apr 27 22:16:37 2025 by rpki-client