$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/d9f9acc9-c324-373e-a2c4-e4604f56d42e.roa File: d9f9acc9-c324-373e-a2c4-e4604f56d42e.roa (raw, json) Hash identifier: 9YUV+Pa1MAQC9yYPsDRI4AhWxsO2eM4SNZ12IO4FRWo= Subject key identifier: 13:A7:B4:7D:86:62:FC:18:D8:F7:AF:46:64:84:80:53:6F:7A:71:38 Certificate issuer: /CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0 Certificate serial: 010D0C9F43285849A1EF716E40E718061D122AF0 Authority key identifier: FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/d9f9acc9-c324-373e-a2c4-e4604f56d42e.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 11913 IP address blocks: 2602:816:3000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:71:6e:40:e7:18:06:1d:12:2a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=357dcf70-416e-4c61-8453-b83b565e26fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a2:72:79:92:5e:c9:63:73:0d:bb:fa:ce:1c: b4:d9:13:84:a6:f9:29:1a:92:41:8a:ad:51:00:27: da:65:3c:1f:17:f1:ce:26:3e:cc:5d:21:84:fa:0c: c0:6e:f2:01:77:3a:57:b3:ea:53:f6:3a:9e:cc:e8: f9:6a:3a:dc:7a:13:e6:65:55:87:07:19:5b:4a:11: 43:23:30:c9:ee:15:72:ca:59:f2:1c:3b:f2:be:fa: 6c:b0:f0:15:35:b6:a3:47:50:c8:37:16:3e:12:3f: 49:e7:21:61:91:60:d5:3f:ec:a8:88:ca:82:9f:32: 9f:c5:52:d6:b2:d1:ce:17:95:b6:59:9f:dd:9e:81: a8:f5:d1:49:75:4b:ae:68:2d:77:2c:a1:78:7c:01: d3:7a:0f:df:44:00:bc:2c:48:79:db:b3:0c:b3:b8: f7:b2:4e:39:70:61:f0:6e:fe:f6:9d:ed:67:15:8b: e0:df:18:71:3b:42:d3:a8:ac:56:41:d5:e4:08:f1: d6:d3:5e:02:2c:72:d1:f3:53:e3:cf:4e:23:9a:ba: c4:07:71:54:2e:43:10:6f:d7:e1:ab:9d:52:c5:54: e8:96:de:c6:f2:78:26:f0:cc:40:51:e7:c0:d1:72: 95:fc:01:a8:20:cf:41:cd:5f:74:66:e7:3c:e0:82: 57:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A7:B4:7D:86:62:FC:18:D8:F7:AF:46:64:84:80:53:6F:7A:71:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/d9f9acc9-c324-373e-a2c4-e4604f56d42e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.crl X509v3 Authority Key Identifier: keyid:FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer sbgp-ipAddrBlock: critical IPv6: 2602:816:3000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:f9:be:67:c9:7e:da:e4:20:e2:b8:d5:2d:8d:d8:19:ae:21: 44:76:eb:45:5c:96:50:a9:9d:13:81:05:4e:d2:6c:a8:f8:ab: ba:74:2c:4d:eb:50:e7:01:81:79:57:7c:6a:0a:ae:ab:5e:7c: 77:5b:f9:63:09:da:6c:ab:7f:a8:21:a6:4b:4a:fb:e2:31:a9: 96:9e:e8:53:6a:fe:54:e4:3b:a6:0c:74:39:f2:04:81:2e:62: c5:35:b0:f8:49:66:f9:5c:ea:23:20:f4:bb:8e:d6:0a:a0:b7: 69:66:05:90:01:a4:0c:3d:70:da:19:a2:b4:b7:4e:42:cb:43: 2e:54:d9:eb:32:d3:8b:d2:5c:bb:22:06:5a:75:41:8a:23:e0: ac:fe:ab:92:07:2e:04:fa:4f:78:e3:f9:94:52:24:c3:73:71: 44:19:12:c4:7d:13:00:51:54:a3:fc:fd:01:8d:bb:c8:97:63: 5b:e8:96:c2:28:88:2a:67:04:d4:51:0d:34:c7:b8:1e:f3:98: da:6f:c6:15:4e:51:a9:9d:12:a4:19:76:4a:cf:7d:f4:0b:1f: c6:8a:47:21:ad:6b:de:05:a9:f3:91:ee:0c:de:5b:d1:7d:15: 0c:c7:c8:8a:c6:e3:ad:0f:b5:a7:e1:0a:ac:a3:93:dc:97:6c: 01:92:9b:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh73FuQOcYBh0SKvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YzMTI5NmYtOGYyZi00MjY4LTg1OTktNGM0N2QyNWNm Y2YwMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk MzU3ZGNmNzAtNDE2ZS00YzYxLTg0NTMtYjgzYjU2NWUyNmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6JyeZJeyWNzDbv6zhy02ROEpvkpGpJBiq1R ACfaZTwfF/HOJj7MXSGE+gzAbvIBdzpXs+pT9jqezOj5ajrcehPmZVWHBxlbShFD IzDJ7hVyylnyHDvyvvpssPAVNbajR1DINxY+Ej9J5yFhkWDVP+yoiMqCnzKfxVLW stHOF5W2WZ/dnoGo9dFJdUuuaC13LKF4fAHTeg/fRAC8LEh527MMs7j3sk45cGHw bv72ne1nFYvg3xhxO0LTqKxWQdXkCPHW014CLHLR81Pjz04jmrrEB3FULkMQb9fh q51SxVTolt7G8ngm8MxAUefA0XKV/AGoIM9BzV90Zuc84IJX4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBOntH2GYvwY2PevRmSEgFNvenE4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjMx Mjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3ZDI1Y2ZjZjAvZDlmOWFjYzktYzMyNC0z NzNlLWEyYzQtZTQ2MDRmNTZkNDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2YzMTI5NmYtOGYyZi00MjY4LTg1 OTktNGM0N2QyNWNmY2YwL2NmMzEyOTZmLThmMmYtNDI2OC04NTk5LTRjNDdkMjVj ZmNmMC5jcmwwHwYDVR0jBBgwFoAU+roXSGw1zYqLPBZgxG+fWA4vXmQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjMxMjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3 ZDI1Y2ZjZjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIFjAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEP5vmfJftrkIOK41S2N2BmuIUR260VcllCpnROBBU7SbKj4q7p0 LE3rUOcBgXlXfGoKrqtefHdb+WMJ2myrf6ghpktK++IxqZae6FNq/lTkO6YMdDny BIEuYsU1sPhJZvlc6iMg9LuO1gqgt2lmBZABpAw9cNoZorS3TkLLQy5U2esy04vS XLsiBlp1QYoj4Kz+q5IHLgT6T3jj+ZRSJMNzcUQZEsR9EwBRVKP8/QGNu8iXY1vo lsIoiCpnBNRRDTTHuB7zmNpvxhVOUamdEqQZdkrPffQLH8aKRyGta94FqfOR7gze W9F9FQzHyIrG460PtafhCqyjk9yXbAGSm5g= -----END CERTIFICATE-----Generated at Tue Apr 29 23:15:43 2025 by rpki-client