$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee/b3c70e34-7e61-3890-a580-76881ecff6cc.roa File: b3c70e34-7e61-3890-a580-76881ecff6cc.roa (raw, json) Hash identifier: 6QQTHgZrGMYH5fBqAPt0Dw6usf9wWQ1VPVqv6rmrTQA= Subject key identifier: E2:C6:E9:AE:37:5E:F1:B3:9C:D8:95:F7:FF:B1:D6:1C:6A:CA:25:80 Certificate issuer: /CN=a6c28e56-4429-446d-9891-4fbd9fe90aee Certificate serial: 010D0C9F432858498E648E2239EAC909911E3380 Authority key identifier: 54:D8:49:B1:75:A5:1A:6C:FD:A1:45:F3:41:D6:E5:05:94:B2:88:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee/b3c70e34-7e61-3890-a580-76881ecff6cc.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 215274 IP address blocks: 2602:f8da::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee/a6c28e56-4429-446d-9891-4fbd9fe90aee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee/a6c28e56-4429-446d-9891-4fbd9fe90aee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:8e:22:39:ea:c9:09:91:1e:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6c28e56-4429-446d-9891-4fbd9fe90aee Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=3fbecd19-c4c5-4d7c-ad60-193e7fab7b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a9:6d:63:d7:2a:13:07:3b:25:40:3c:42:da: 81:e9:6d:ff:9a:35:7f:15:37:c7:26:c4:b0:ce:4f: 34:98:e9:5f:93:a8:78:bf:41:1f:95:ed:4b:46:f7: 44:d3:de:f1:06:10:19:db:f9:60:35:5e:d2:60:fe: 1b:0f:c1:71:b0:77:74:84:19:30:52:d2:d0:9b:2f: 5c:ee:27:cb:53:23:78:97:28:1e:a9:4f:61:3f:5f: a7:b8:fd:85:c4:03:46:8f:a9:9d:ec:65:0f:7b:dd: 05:7e:cb:8e:07:38:ab:5e:46:5a:90:24:7c:76:da: 84:24:b7:ca:75:8f:cc:97:50:cf:cd:b4:24:c2:6f: 4d:e5:e9:35:52:3f:b7:7b:50:73:17:09:98:68:5a: a4:78:6c:59:0b:ee:67:84:ea:a0:7d:ee:8a:4e:5b: f6:5b:81:dc:7b:bc:93:20:80:26:a7:6a:a6:f6:1a: e5:a0:fa:1c:b1:6c:74:cb:0b:25:30:3b:2c:32:86: 4d:c5:b7:cd:88:cb:3d:b6:d0:1b:bc:78:7e:f7:cb: 40:7d:0d:02:28:e6:66:f5:f1:5a:72:65:8d:b7:ff: aa:39:52:2a:be:3b:39:6e:3d:03:d3:e4:e5:19:a6: 18:56:d6:67:5f:ff:28:2b:2e:c0:d1:e1:e1:01:7d: 66:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C6:E9:AE:37:5E:F1:B3:9C:D8:95:F7:FF:B1:D6:1C:6A:CA:25:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee/b3c70e34-7e61-3890-a580-76881ecff6cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee/a6c28e56-4429-446d-9891-4fbd9fe90aee.crl X509v3 Authority Key Identifier: keyid:54:D8:49:B1:75:A5:1A:6C:FD:A1:45:F3:41:D6:E5:05:94:B2:88:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee.cer sbgp-ipAddrBlock: critical IPv6: 2602:f8da::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:c2:18:fc:17:e8:26:28:24:06:53:09:54:97:b9:e0:f1:ca: 59:d2:19:c8:e7:12:a4:77:da:9b:ce:f8:10:dd:98:29:a9:aa: b7:cd:94:a8:71:88:be:32:8d:2f:db:4a:68:83:39:18:23:5d: 88:26:0c:d9:4b:79:8c:48:a3:ad:42:95:f1:77:43:8a:87:31: 75:fa:1b:69:cd:80:7c:86:29:49:ad:24:63:a6:e3:f0:62:e1: 1d:ae:a1:d4:d0:d3:50:d9:5a:af:be:6d:0c:32:6a:a1:56:69: ea:45:3e:37:dd:7a:c2:8d:1e:d0:25:ea:20:fe:b0:9c:e3:05: cb:c4:91:6c:58:d3:91:f3:48:0e:3e:9c:36:ec:d3:e4:e8:41: 0f:2a:09:60:54:d6:62:0b:24:ad:a6:e8:21:70:d7:5a:2c:0f: d2:8c:42:19:0e:e0:26:02:89:33:7b:f6:41:96:22:1c:fe:df: bc:24:77:3c:a8:cd:07:7a:6d:67:ec:bc:e8:d7:eb:ea:62:64: f5:c2:46:80:e2:ed:bd:69:81:6d:36:57:6f:fb:55:61:8b:d3: db:2a:20:d2:14:81:b8:3d:2b:f7:ad:2d:4e:77:5e:1b:ca:42: 99:52:ce:f5:28:60:41:97:a1:00:3c:83:51:e9:1e:d7:fc:a5: ff:6f:c9:69 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmOZI4iOerJCZEeM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZjMjhlNTYtNDQyOS00NDZkLTk4OTEtNGZiZDlmZTkw YWVlMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk M2ZiZWNkMTktYzRjNS00ZDdjLWFkNjAtMTkzZTdmYWI3YjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6ltY9cqEwc7JUA8QtqB6W3/mjV/FTfHJsSw zk80mOlfk6h4v0Efle1LRvdE097xBhAZ2/lgNV7SYP4bD8FxsHd0hBkwUtLQmy9c 7ifLUyN4lygeqU9hP1+nuP2FxANGj6md7GUPe90FfsuOBzirXkZakCR8dtqEJLfK dY/Ml1DPzbQkwm9N5ek1Uj+3e1BzFwmYaFqkeGxZC+5nhOqgfe6KTlv2W4Hce7yT IIAmp2qm9hrloPocsWx0ywslMDssMoZNxbfNiMs9ttAbvHh+98tAfQ0CKOZm9fFa cmWNt/+qOVIqvjs5bj0D0+TlGaYYVtZnX/8oKy7A0eHhAX1mmwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOLG6a43XvGznNiV9/+x1hxqyiWAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hNmMy OGU1Ni00NDI5LTQ0NmQtOTg5MS00ZmJkOWZlOTBhZWUvYjNjNzBlMzQtN2U2MS0z ODkwLWE1ODAtNzY4ODFlY2ZmNmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTZjMjhlNTYtNDQyOS00NDZkLTk4 OTEtNGZiZDlmZTkwYWVlL2E2YzI4ZTU2LTQ0MjktNDQ2ZC05ODkxLTRmYmQ5ZmU5 MGFlZS5jcmwwHwYDVR0jBBgwFoAUVNhJsXWlGmz9oUXzQdblBZSyiEkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hNmMyOGU1Ni00NDI5LTQ0NmQtOTg5MS00ZmJk OWZlOTBhZWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL42gAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEApsIY/BfoJigkBlMJVJe54PHKWdIZyOcSpHfam874EN2YKamqt82U qHGIvjKNL9tKaIM5GCNdiCYM2Ut5jEijrUKV8XdDiocxdfobac2AfIYpSa0kY6bj 8GLhHa6h1NDTUNlar75tDDJqoVZp6kU+N916wo0e0CXqIP6wnOMFy8SRbFjTkfNI Dj6cNuzT5OhBDyoJYFTWYgskraboIXDXWiwP0oxCGQ7gJgKJM3v2QZYiHP7fvCR3 PKjNB3ptZ+y86Nfr6mJk9cJGgOLtvWmBbTZXb/tVYYvT2yog0hSBuD0r960tTnde G8pCmVLO9ShgQZehADyDUeke1/yl/2/JaQ== -----END CERTIFICATE-----Generated at Sun Apr 27 22:06:10 2025 by rpki-client