$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/4e3ac80f-ec70-375b-829a-2ce166ed5e3b.roa File: 4e3ac80f-ec70-375b-829a-2ce166ed5e3b.roa (raw, json) Hash identifier: rwckfkAdHMIt6NA3uQ0U3rOCMpHqgTxwmOJXtikW290= Subject key identifier: DB:9E:95:24:87:49:C3:47:D0:7B:3F:3C:03:2F:F5:75:6E:5A:7A:56 Certificate issuer: /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Certificate serial: 010D0C9F4328584976A99607EA47637F862FE6B0 Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/4e3ac80f-ec70-375b-829a-2ce166ed5e3b.roa Signing time: Wed 09 Apr 2025 01:00:47 +0000 ROA not before: Wed 09 Apr 2025 01:00:47 +0000 ROA not after: Tue 08 Jul 2025 01:00:47 +0000 asID: 46733 IP address blocks: 2602:f9f4:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:76:a9:96:07:ea:47:63:7f:86:2f:e6:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Validity Not Before: Apr 9 01:00:47 2025 GMT Not After : Jul 8 01:00:47 2025 GMT Subject: CN=bf416202-fa4c-426d-85cd-dce4f627a735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:33:71:db:32:f1:99:6d:78:29:06:c9:2e:75: c3:e3:e5:5d:c9:9d:5c:37:12:95:e5:bc:94:d1:f9: 86:c8:3a:05:6e:ed:5e:9f:cf:c2:45:99:4c:c8:04: 19:ff:6f:28:4a:d4:96:77:30:b0:86:cf:c3:58:78: 63:02:c0:5d:22:66:1f:f4:52:24:47:df:3f:dd:45: 80:b4:e5:64:9c:e1:63:a6:b3:e4:37:f0:f4:a4:78: 8a:5a:51:3a:82:f3:67:19:eb:6b:80:bd:11:1c:8b: c1:38:3c:0a:f9:f5:ce:ad:a6:ed:40:6a:29:e3:b6: e1:bb:21:e9:b0:96:f9:0c:41:e3:b8:23:4b:53:46: 34:2a:7c:a0:3a:0c:6c:14:7c:46:69:9b:17:64:3a: 9d:89:b9:16:49:89:b2:39:56:38:6d:7e:da:4f:d8: 53:ed:28:c7:ca:98:60:04:78:13:75:d8:2c:64:08: 7f:3a:a3:28:a6:cd:bc:d4:69:1a:e6:92:78:53:9f: 2e:ad:49:b4:db:08:fa:d1:78:6e:0e:c7:77:b0:61: 62:44:9d:c1:48:fd:98:ad:cb:98:05:0f:80:31:25: c0:b4:bf:e3:44:4b:25:eb:3d:0d:b9:28:f8:9d:80: 26:37:c1:93:13:5c:75:c0:d6:c4:a7:81:65:85:5c: 59:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9E:95:24:87:49:C3:47:D0:7B:3F:3C:03:2F:F5:75:6E:5A:7A:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/4e3ac80f-ec70-375b-829a-2ce166ed5e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl X509v3 Authority Key Identifier: keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9f4:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:e2:b4:ce:f2:ed:2c:84:0a:81:3f:14:55:a5:71:1e:c4:0c: 5d:20:94:8a:37:d3:d4:0a:ae:86:20:51:46:73:aa:2f:a5:71: ae:ae:22:f7:3a:87:55:ec:70:7d:4f:7c:cf:b8:9d:54:fc:5e: 09:80:a3:60:1b:45:f1:67:f3:12:e4:92:02:6c:76:b7:f3:f1: ff:2c:50:94:7d:e5:35:b2:f5:04:1a:e1:30:db:88:6b:31:c2: 69:2a:80:4c:98:c7:26:50:94:df:5a:f2:91:cd:d3:07:48:24: 81:47:50:ec:42:d1:79:80:51:fb:d3:3f:2b:03:f5:77:ed:73: 67:7d:53:d6:e4:a3:c8:de:a5:91:aa:1c:fe:ca:98:ea:d2:08: 76:81:a8:3d:2b:ad:f1:61:b2:c0:71:f0:8d:1c:ed:a1:46:b0: ff:a3:60:64:e9:80:05:ed:e7:61:b3:60:4d:a0:7f:15:c5:dd: d7:60:99:88:9f:3e:da:d5:69:1c:7f:77:21:27:38:d9:3f:db: de:00:1f:cc:9c:44:ce:e0:8e:ee:4c:c5:50:8b:0c:07:56:fc: 32:6e:39:33:95:51:2b:72:f2:57:55:90:f4:19:db:da:54:04: a7:c8:19:3b:83:7d:a8:ff:30:14:13:04:5e:9b:da:a7:c3:d4: 6e:f6:3f:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl2qZYH6kdjf4Yv5rAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMyYThkOTUtMDI5MC00MjE4LTliMDgtZDE1N2U1ZjEy N2Y5MB4XDTI1MDQwOTAxMDA0N1oXDTI1MDcwODAxMDA0N1owLzEtMCsGA1UEAxMk YmY0MTYyMDItZmE0Yy00MjZkLTg1Y2QtZGNlNGY2MjdhNzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDNx2zLxmW14KQbJLnXD4+VdyZ1cNxKV5byU 0fmGyDoFbu1en8/CRZlMyAQZ/28oStSWdzCwhs/DWHhjAsBdImYf9FIkR98/3UWA tOVknOFjprPkN/D0pHiKWlE6gvNnGetrgL0RHIvBODwK+fXOrabtQGop47bhuyHp sJb5DEHjuCNLU0Y0KnygOgxsFHxGaZsXZDqdibkWSYmyOVY4bX7aT9hT7SjHyphg BHgTddgsZAh/OqMops281Gka5pJ4U58urUm02wj60XhuDsd3sGFiRJ3BSP2YrcuY BQ+AMSXAtL/jREsl6z0NuSj4nYAmN8GTE1x1wNbEp4FlhVxZJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNuelSSHScNH0Hs/PAMv9XVuWnpWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJh OGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3ZTVmMTI3ZjkvNGUzYWM4MGYtZWM3MC0z NzViLTgyOWEtMmNlMTY2ZWQ1ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGMyYThkOTUtMDI5MC00MjE4LTli MDgtZDE1N2U1ZjEyN2Y5LzhjMmE4ZDk1LTAyOTAtNDIxOC05YjA4LWQxNTdlNWYx MjdmOS5jcmwwHwYDVR0jBBgwFoAU2RRqJQvMvb5Gl37hbpq11jKC6Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJhOGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3 ZTVmMTI3ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL59AAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAbitM7y7SyECoE/FFWlcR7EDF0glIo309QKroYgUUZzqi+lca6u Ivc6h1XscH1PfM+4nVT8XgmAo2AbRfFn8xLkkgJsdrfz8f8sUJR95TWy9QQa4TDb iGsxwmkqgEyYxyZQlN9a8pHN0wdIJIFHUOxC0XmAUfvTPysD9Xftc2d9U9bko8je pZGqHP7KmOrSCHaBqD0rrfFhssBx8I0c7aFGsP+jYGTpgAXt52GzYE2gfxXF3ddg mYifPtrVaRx/dyEnONk/294AH8ycRM7gju5MxVCLDAdW/DJuOTOVUSty8ldVkPQZ 29pUBKfIGTuDfaj/MBQTBF6b2qfD1G72P2o= -----END CERTIFICATE-----Generated at Tue Apr 29 06:42:05 2025 by rpki-client