$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f8cef0a4-a68f-347b-bee6-17972ce290a9.roa File: f8cef0a4-a68f-347b-bee6-17972ce290a9.roa (raw, json) Hash identifier: mZ35aXZtRUSGNzNoHkcKu7jm8AA9XWlCdK+wdpbsby0= Subject key identifier: 2A:D6:77:24:E6:66:9D:00:47:52:02:D8:53:04:C0:A0:64:63:19:2D Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Certificate serial: 010D0C9F43285849912F2C70500A10C2E6861B20 Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f8cef0a4-a68f-347b-bee6-17972ce290a9.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 3477 IP address blocks: 2602:810:d000::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:2c:70:50:0a:10:c2:e6:86:1b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=d6ee8139-dbdb-4bef-98f6-6363feb377b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:96:01:e7:70:0d:10:56:a5:5d:79:2e:51:b2: dd:89:67:ce:72:c4:a7:34:8c:b2:5c:86:f0:b2:87: b0:1d:dc:35:95:b8:6f:c2:ee:2e:eb:97:85:df:51: b4:42:19:00:d8:0d:2b:90:0a:a3:1b:83:7f:39:ac: d0:47:5c:f3:76:2d:bc:23:51:d2:53:f4:ef:d5:dc: 64:31:34:0a:7c:ce:9c:a2:d8:47:30:12:80:9f:77: 29:7c:79:13:f7:45:c0:84:4f:54:6b:35:4e:5c:30: cf:50:66:08:82:8c:41:e0:1b:23:d4:99:f9:c2:8e: 36:95:2b:81:28:20:60:24:d4:01:05:ef:59:6c:1d: 6a:ee:78:e0:94:3a:73:7d:18:22:9b:78:7a:2a:07: 24:78:01:5a:95:85:57:e9:8b:a9:10:63:34:b2:81: 16:2a:4e:0b:2f:05:6b:97:78:5f:a2:98:af:1d:32: 39:42:d8:9a:66:60:08:a1:85:84:05:b7:24:2b:6e: c7:d2:da:9d:48:08:e6:3b:76:97:58:d1:8f:eb:b9: c0:4a:11:df:ab:a4:c0:25:69:00:a5:7c:31:0d:a5: bb:6d:78:2a:d2:cc:50:4b:70:01:59:64:67:6f:9d: 6f:6a:ed:2b:a6:4e:d7:f0:56:d6:89:de:20:68:da: 52:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D6:77:24:E6:66:9D:00:47:52:02:D8:53:04:C0:A0:64:63:19:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f8cef0a4-a68f-347b-bee6-17972ce290a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl X509v3 Authority Key Identifier: keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer sbgp-ipAddrBlock: critical IPv6: 2602:810:d000::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:40:e8:38:86:af:c2:ef:7f:25:5d:a3:15:8f:f7:61:07:fa: 5f:8e:cb:d1:d1:1a:b0:f2:fa:ff:6a:05:ce:78:3d:cf:a3:a8: 3b:51:20:45:ab:1d:fb:95:fc:63:ed:fd:81:9d:a0:3a:d1:bd: dd:f6:98:c4:e4:af:95:ff:e5:e9:5f:c7:ad:ac:18:af:31:f0: 20:c8:42:f4:60:72:dd:f6:03:d5:ed:cd:b5:60:91:c7:56:ac: 56:fe:31:34:81:a9:98:69:0d:73:07:59:c9:cf:81:a0:2f:ef: 1c:38:58:1a:5c:ed:52:d4:21:5e:a0:ec:e8:d4:9a:08:d7:4a: 61:21:2b:66:ea:93:62:db:52:3f:6b:89:f6:76:b2:48:8d:c2: 47:df:6f:26:a2:91:9e:5d:71:e7:60:a4:e4:70:ea:b7:95:a8: db:57:71:e7:b0:7d:95:15:22:c8:d3:82:f6:d2:bb:51:8a:94: ca:26:b8:43:98:02:8c:6c:9a:1c:3c:c6:04:61:dc:b0:91:6b: 88:6f:60:f7:b8:56:86:c5:a5:f9:e9:ed:f6:9d:c9:52:cc:bb: 88:16:f9:c7:da:c8:c4:58:38:24:04:5b:99:f5:a4:91:fb:ce: e9:22:0b:99:7c:b5:1e:fb:c8:9d:89:53:06:50:85:ec:c8:24: 27:f8:7a:af -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmRLyxwUAoQwuaGGyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5 Y2I1MB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk ZDZlZTgxMzktZGJkYi00YmVmLTk4ZjYtNjM2M2ZlYjM3N2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZYB53ANEFalXXkuUbLdiWfOcsSnNIyyXIbw soewHdw1lbhvwu4u65eF31G0QhkA2A0rkAqjG4N/OazQR1zzdi28I1HSU/Tv1dxk MTQKfM6cothHMBKAn3cpfHkT90XAhE9UazVOXDDPUGYIgoxB4Bsj1Jn5wo42lSuB KCBgJNQBBe9ZbB1q7njglDpzfRgim3h6KgckeAFalYVX6YupEGM0soEWKk4LLwVr l3hfopivHTI5QtiaZmAIoYWEBbckK27H0tqdSAjmO3aXWNGP67nAShHfq6TAJWkA pXwxDaW7bXgq0sxQS3ABWWRnb51vau0rpk7X8FbWid4gaNpSqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCrWdyTmZp0AR1IC2FMEwKBkYxktMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvZjhjZWYwYTQtYTY4Zi0z NDdiLWJlZTYtMTc5NzJjZTI5MGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2 ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl YzgzYjljYjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgIIENAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGpA6DiGr8LvfyVdoxWP92EH+l+Oy9HRGrDy+v9qBc54Pc+jqDtR IEWrHfuV/GPt/YGdoDrRvd32mMTkr5X/5elfx62sGK8x8CDIQvRgct32A9XtzbVg kcdWrFb+MTSBqZhpDXMHWcnPgaAv7xw4WBpc7VLUIV6g7OjUmgjXSmEhK2bqk2Lb Uj9rifZ2skiNwkffbyaikZ5dcedgpORw6reVqNtXceewfZUVIsjTgvbSu1GKlMom uEOYAoxsmhw8xgRh3LCRa4hvYPe4VobFpfnp7fadyVLMu4gW+cfayMRYOCQEW5n1 pJH7zukiC5l8tR77yJ2JUwZQhezIJCf4eq8= -----END CERTIFICATE-----Generated at Sun Apr 27 01:04:16 2025 by rpki-client