$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/4a2c271a-6692-3179-941a-0d087d280308.roa File: 4a2c271a-6692-3179-941a-0d087d280308.roa (raw, json) Hash identifier: Uu/2rk5GK/tPA19ShL2gqY9Sdf7GrX6sPcjle7mS1CA= Subject key identifier: E1:28:20:CF:E3:5C:EB:67:80:B1:F1:EE:C3:F5:F6:94:5A:CA:5E:24 Certificate issuer: /CN=8baf6f06-4472-4c79-8a01-5c338d64c402 Certificate serial: 010D0C9F43285849A784C4A22C853D21D0D44C00 Authority key identifier: 95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/4a2c271a-6692-3179-941a-0d087d280308.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 401082 IP address blocks: 2602:f8b4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c4:a2:2c:85:3d:21:d0:d4:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8baf6f06-4472-4c79-8a01-5c338d64c402 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=8ee9706f-52c8-4b92-9949-728a630419f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:42:2d:f5:ac:31:5d:1e:5f:40:31:94:93:f1: 4a:1c:36:55:e8:c7:3c:93:5b:cf:3f:84:30:5f:58: 2e:ac:0f:d4:89:72:19:9e:1b:8c:87:6e:8b:fd:e1: 6c:33:dc:8e:0d:89:c4:65:81:2e:bd:1a:13:4e:b6: a7:14:f6:64:f0:71:86:c2:02:75:56:bb:3c:6d:86: 30:06:2f:29:94:20:30:88:82:17:fd:40:6e:36:36: 89:30:99:ce:1f:ad:79:2e:63:a9:b3:90:a0:27:44: 0c:04:67:18:71:c3:11:9d:39:e5:ba:dd:1c:d0:62: 9e:14:cf:51:21:53:95:8b:2c:4a:d4:54:c3:78:22: fc:48:87:49:14:23:10:ea:ed:08:56:03:c8:8b:58: 3c:60:e4:10:65:41:c1:f5:f8:fd:19:84:77:81:45: a6:c1:51:6d:58:24:69:32:ec:a5:91:ab:27:22:c1: d7:40:c8:56:4c:6b:5f:14:ae:37:7f:6a:5a:b2:be: 94:75:81:be:74:4c:f6:7f:af:30:cc:ac:27:64:b4: ba:f8:26:c9:82:ca:8c:a2:92:c5:ec:09:0d:e5:03: 6b:a5:d0:a5:d2:7d:61:86:fd:c5:3e:db:b0:44:a6: 42:54:72:bb:29:f3:36:4c:38:e3:aa:e7:20:a6:28: f3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:28:20:CF:E3:5C:EB:67:80:B1:F1:EE:C3:F5:F6:94:5A:CA:5E:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/4a2c271a-6692-3179-941a-0d087d280308.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl X509v3 Authority Key Identifier: keyid:95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer sbgp-ipAddrBlock: critical IPv6: 2602:f8b4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:8c:b5:d6:9b:3a:3f:19:d6:9c:89:32:39:7f:49:3f:12:fe: 52:33:2f:e4:02:1e:e1:f7:ed:83:d3:33:a9:af:5b:2b:f4:cc: c5:ed:b3:51:f0:40:5c:a2:7c:69:21:c8:4f:4e:b3:a6:25:87: 57:3a:fc:0e:f0:31:a3:ad:44:85:a1:ca:ca:63:76:30:fe:d5: c6:9b:81:88:74:d1:17:90:6e:5c:02:29:75:02:57:e5:e7:06: c6:59:a6:98:c4:a1:25:2c:88:d3:0a:46:e5:36:a6:ec:c4:80: 9a:43:cf:6a:39:41:a5:1f:4d:8f:b7:76:cc:39:86:42:53:e4: b3:9c:dc:d8:1f:31:aa:86:bf:6f:62:55:28:cb:8b:81:c5:86: f7:8d:b7:88:bc:27:d5:14:b8:54:fb:e9:d3:1b:09:f0:2c:e2: 13:34:f4:37:78:a7:3b:1d:c9:e4:bd:84:d1:a2:84:ed:01:d3: 37:2b:8e:26:72:79:b3:07:b3:c6:c4:cb:1d:51:30:03:9e:a8: 7a:8a:7c:40:4d:d6:4c:96:39:d0:67:72:a6:65:96:6a:85:ad: 54:03:54:32:eb:8e:ec:ef:b6:d2:f1:23:d6:1c:8b:d8:78:45: 2d:83:26:aa:1d:51:74:c2:cc:9f:4e:1b:45:ca:d9:98:86:25: 6f:1b:4a:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmnhMSiLIU9IdDUTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJhZjZmMDYtNDQ3Mi00Yzc5LThhMDEtNWMzMzhkNjRj NDAyMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OGVlOTcwNmYtNTJjOC00YjkyLTk5NDktNzI4YTYzMDQxOWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkIt9awxXR5fQDGUk/FKHDZV6Mc8k1vPP4Qw X1gurA/UiXIZnhuMh26L/eFsM9yODYnEZYEuvRoTTranFPZk8HGGwgJ1Vrs8bYYw Bi8plCAwiIIX/UBuNjaJMJnOH615LmOps5CgJ0QMBGcYccMRnTnlut0c0GKeFM9R IVOViyxK1FTDeCL8SIdJFCMQ6u0IVgPIi1g8YOQQZUHB9fj9GYR3gUWmwVFtWCRp MuylkasnIsHXQMhWTGtfFK43f2pasr6UdYG+dEz2f68wzKwnZLS6+CbJgsqMopLF 7AkN5QNrpdCl0n1hhv3FPtuwRKZCVHK7KfM2TDjjqucgpijzgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOEoIM/jXOtngLHx7sP19pRayl4kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YmFm NmYwNi00NDcyLTRjNzktOGEwMS01YzMzOGQ2NGM0MDIvNGEyYzI3MWEtNjY5Mi0z MTc5LTk0MWEtMGQwODdkMjgwMzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGJhZjZmMDYtNDQ3Mi00Yzc5LThh MDEtNWMzMzhkNjRjNDAyLzhiYWY2ZjA2LTQ0NzItNGM3OS04YTAxLTVjMzM4ZDY0 YzQwMi5jcmwwHwYDVR0jBBgwFoAUldO1jA1dX4UZzY/6OfSCwjO7nRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YmFmNmYwNi00NDcyLTRjNzktOGEwMS01YzMz OGQ2NGM0MDIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4tAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABqMtdabOj8Z1pyJMjl/ST8S/lIzL+QCHuH37YPTM6mvWyv0zMXt s1HwQFyifGkhyE9Os6Ylh1c6/A7wMaOtRIWhyspjdjD+1cabgYh00ReQblwCKXUC V+XnBsZZppjEoSUsiNMKRuU2puzEgJpDz2o5QaUfTY+3dsw5hkJT5LOc3NgfMaqG v29iVSjLi4HFhveNt4i8J9UUuFT76dMbCfAs4hM09Dd4pzsdyeS9hNGihO0B0zcr jiZyebMHs8bEyx1RMAOeqHqKfEBN1kyWOdBncqZllmqFrVQDVDLrjuzvttLxI9Yc i9h4RS2DJqodUXTCzJ9OG0XK2ZiGJW8bSjE= -----END CERTIFICATE-----Generated at Wed Apr 30 08:28:42 2025 by rpki-client