$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5d053f32-5485-34e5-9703-b389b2c5414d.roa File: 5d053f32-5485-34e5-9703-b389b2c5414d.roa (raw, json) Hash identifier: Jz5PkIzIwevYKLndo+kCdi7UXR5mY4r+kO7PkQuQ+RI= Subject key identifier: 29:2E:D4:2B:CD:E0:50:E0:6C:26:C4:50:1A:52:28:E4:4D:BD:35:5F Certificate issuer: /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f Certificate serial: 010D0C9F43285849287E6C98F819A95683DC7D60 Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5d053f32-5485-34e5-9703-b389b2c5414d.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 8987 IP address blocks: 2602:f9e7:26::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:6c:98:f8:19:a9:56:83:dc:7d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=d883421a-d237-4484-9ae6-ff80ab112021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:01:e2:f1:95:26:68:aa:fe:53:07:9e:f2:cf: 02:5c:02:fa:2e:28:08:34:2b:f7:64:42:2f:01:19: 96:b8:ca:4d:99:f6:7c:2d:25:fe:b6:0d:7a:33:30: a5:c8:94:c3:d1:9a:a0:b9:8d:56:25:2a:24:e7:2e: 01:bf:8c:94:1e:40:0c:96:b6:97:8e:dc:03:bd:78: 5c:91:e7:0b:81:3f:20:aa:a5:1f:57:24:82:7a:e4: 2d:9b:4c:c0:16:a2:32:6b:c1:d4:f6:97:0b:34:3c: d2:a0:7a:af:a5:30:2e:05:eb:98:53:b0:0b:32:35: ee:24:59:d5:46:9f:64:8e:8a:2c:9e:3a:54:f3:5e: 2d:dd:8b:f7:16:2b:88:07:4d:b6:a0:34:80:75:9c: f2:f5:00:14:ab:8c:cb:39:b8:04:4c:4d:7a:ab:94: 4b:03:a8:03:4d:2c:ed:e4:fc:88:4b:30:98:a6:2d: 97:03:3a:b2:a2:f2:f4:db:b0:2d:5c:9b:ec:07:b6: 13:7e:3a:e9:3c:01:39:ce:79:11:31:fe:ea:bd:8a: 84:18:a8:f7:42:59:9c:55:21:cf:53:a7:0e:52:ee: fd:9b:bb:0b:13:83:3f:be:d2:c9:e2:ed:d1:c9:e8: a3:e1:c9:cf:2a:fc:c8:b9:d1:01:de:0a:6e:99:ce: c3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2E:D4:2B:CD:E0:50:E0:6C:26:C4:50:1A:52:28:E4:4D:BD:35:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5d053f32-5485-34e5-9703-b389b2c5414d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl X509v3 Authority Key Identifier: keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9e7:26::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:e0:5b:d9:b7:0d:cd:14:65:4f:ad:24:14:43:13:80:d6:bd: 18:19:40:eb:b0:0f:9f:6d:9f:c4:3f:72:f3:c4:61:22:57:5d: e9:e9:1b:d2:ed:8a:07:04:5e:68:8e:e4:e2:18:dd:00:0d:2a: 5d:30:fc:83:eb:68:cf:76:61:8c:78:33:24:c4:15:bb:19:da: 76:80:f0:c3:fc:9f:a9:e9:11:bf:57:85:19:6d:79:aa:b0:bf: 8f:e0:36:a1:c0:67:f9:70:53:92:79:92:ab:96:98:a6:56:dd: cd:02:ea:76:a6:1b:db:e1:4e:f7:eb:41:53:1a:01:42:3a:bf: 20:cf:e3:6f:21:1f:df:cd:76:85:ce:81:e2:28:08:c8:82:86: 0a:49:9d:29:f6:7b:03:6b:ba:5c:22:51:04:ea:e9:89:cb:f3: a9:2f:69:d9:15:7c:92:1b:9b:9e:c0:b4:71:cb:ae:4d:10:5e: d3:24:f0:9a:1c:5f:99:e1:f3:20:62:bb:68:24:60:99:3a:22: af:74:63:d6:c2:b0:15:2c:5c:6c:50:90:a7:44:6c:be:b4:f4: 67:30:4b:b7:3d:3f:83:e0:a7:b2:62:3d:9a:7b:98:29:01:8a: 79:77:31:72:0a:58:19:f5:1a:78:b0:8c:db:26:a7:af:1d:c4: 7c:4d:97:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkofmyY+BmpVoPcfWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFkMDg2NWUtNzc4Ni00YzY2LTlmOTEtYmMxZjQ2ZjJj MzRmMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZDg4MzQyMWEtZDIzNy00NDg0LTlhZTYtZmY4MGFiMTEyMDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwHi8ZUmaKr+Uwee8s8CXAL6LigINCv3ZEIv ARmWuMpNmfZ8LSX+tg16MzClyJTD0ZqguY1WJSok5y4Bv4yUHkAMlraXjtwDvXhc kecLgT8gqqUfVySCeuQtm0zAFqIya8HU9pcLNDzSoHqvpTAuBeuYU7ALMjXuJFnV Rp9kjoosnjpU814t3Yv3FiuIB022oDSAdZzy9QAUq4zLObgETE16q5RLA6gDTSzt 5PyISzCYpi2XAzqyovL027AtXJvsB7YTfjrpPAE5znkRMf7qvYqEGKj3QlmcVSHP U6cOUu79m7sLE4M/vtLJ4u3Ryeij4cnPKvzIudEB3gpumc7DmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCku1CvN4FDgbCbEUBpSKORNvTVfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQw ODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFmNDZmMmMzNGYvNWQwNTNmMzItNTQ4NS0z NGU1LTk3MDMtYjM4OWIyYzU0MTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWFkMDg2NWUtNzc4Ni00YzY2LTlm OTEtYmMxZjQ2ZjJjMzRmLzVhZDA4NjVlLTc3ODYtNGM2Ni05ZjkxLWJjMWY0NmYy YzM0Zi5jcmwwHwYDVR0jBBgwFoAUOq+U75raoImJh13K6GCGyUDjDbgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQwODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFm NDZmMmMzNGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgL55wAm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIzgW9m3Dc0UZU+tJBRDE4DWvRgZQOuwD59tn8Q/cvPEYSJXXenp G9LtigcEXmiO5OIY3QANKl0w/IPraM92YYx4MyTEFbsZ2naA8MP8n6npEb9XhRlt eaqwv4/gNqHAZ/lwU5J5kquWmKZW3c0C6namG9vhTvfrQVMaAUI6vyDP428hH9/N doXOgeIoCMiChgpJnSn2ewNrulwiUQTq6YnL86kvadkVfJIbm57AtHHLrk0QXtMk 8JocX5nh8yBiu2gkYJk6Iq90Y9bCsBUsXGxQkKdEbL609GcwS7c9P4Pgp7JiPZp7 mCkBinl3MXIKWBn1GniwjNsmp68dxHxNl/0= -----END CERTIFICATE-----Generated at Sat Apr 26 16:15:56 2025 by rpki-client