$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/4889b0ec-0588-3cf2-9c0c-988be4398e1b.roa File: 4889b0ec-0588-3cf2-9c0c-988be4398e1b.roa (raw, json) Hash identifier: DBSD/AXziRboyBkkuBiiYQ30stUgcOAaQ+fpBRrhL4s= Subject key identifier: B5:E6:0D:9C:18:98:7D:D9:11:2B:DE:6A:68:4D:60:AF:02:E0:66:D4 Certificate issuer: /CN=98161ef7-249b-450b-ba6a-5819e613ed63 Certificate serial: 010D0C9F43285849DC8FD08DFBB350678BEB0380 Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/4889b0ec-0588-3cf2-9c0c-988be4398e1b.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 33020 IP address blocks: 2602:2b7:c30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:d0:8d:fb:b3:50:67:8b:eb:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=337f3c1c-b719-4573-aa4c-d895e0a8857c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fb:82:27:60:2d:c1:01:f5:99:b8:f8:97:86: 6a:68:1f:31:80:c5:53:f4:39:90:d6:d6:15:37:77: 21:88:07:7c:02:97:39:22:79:bf:32:25:e8:98:8d: c3:3b:5d:82:ac:88:ea:b6:7f:ff:fc:36:73:bf:09: db:0c:1a:4d:92:3f:97:93:a6:1e:0e:93:92:d6:2c: 97:3a:51:b8:c6:5c:b7:42:f4:59:37:e9:fb:af:ef: 67:19:26:38:e2:91:a3:d2:e7:56:3f:78:bf:41:8f: 6d:85:69:db:d1:52:c8:a6:e7:28:e7:69:97:ff:21: c4:03:22:79:9b:38:32:8e:0d:1e:4f:1b:74:23:2a: 2a:86:72:2b:39:7e:c5:44:67:24:d1:d5:6e:04:2b: 5c:f6:66:20:4e:dc:1d:0b:31:3f:09:d3:19:71:82: 3b:4e:fa:44:30:2d:79:79:3a:e6:e1:9e:7b:eb:cb: a1:ff:f8:e2:e4:8f:f4:49:f9:74:95:64:3c:75:40: 92:88:2c:25:eb:18:a9:de:2c:d4:e9:20:24:a7:0d: 5a:03:3d:01:73:e9:fc:cd:e7:9a:32:7f:71:da:fe: 69:4e:8f:5a:d9:8a:c3:6f:9f:42:d6:bd:36:11:2c: 25:86:bb:3c:c0:ed:0c:18:2b:07:22:02:bb:4b:f4: 67:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E6:0D:9C:18:98:7D:D9:11:2B:DE:6A:68:4D:60:AF:02:E0:66:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/4889b0ec-0588-3cf2-9c0c-988be4398e1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl X509v3 Authority Key Identifier: keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer sbgp-ipAddrBlock: critical IPv6: 2602:2b7:c30::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:0d:86:94:fa:79:57:a4:ba:66:fe:d2:0a:07:a5:df:b3:e2: 8a:3d:13:bb:75:74:f0:97:e1:37:5a:fb:96:8a:2a:ec:b2:33: d1:22:69:59:c1:5f:40:86:d3:b3:4e:fe:50:d4:f6:62:16:67: 4f:be:58:4b:f1:6a:9c:ff:89:75:f0:53:20:29:50:be:ec:85: a8:6e:cc:10:31:1d:8e:5b:af:12:40:32:71:20:40:40:62:0d: 27:8b:9d:1c:4c:2b:bd:9d:e9:76:ea:f6:d3:9e:59:10:96:88: 14:2c:e0:e0:46:06:cf:a7:6f:04:a6:37:29:3f:9f:65:c2:4e: 43:fd:3b:37:bf:ad:94:67:ac:ce:bc:49:99:95:c2:d0:70:3e: 47:09:1a:1e:ae:2a:ed:f3:2c:76:9f:51:05:a1:31:8b:2b:04: 06:3f:ff:64:fc:75:f4:38:67:77:fe:89:6d:00:37:2a:72:b6: 97:6e:31:02:27:34:be:22:72:d3:e8:bc:b0:24:62:60:99:bf: 45:0c:e7:03:db:c6:96:95:28:72:40:ba:8f:00:33:39:02:4a: 4f:f1:a4:8d:80:11:a9:45:00:ef:a3:cb:34:56:9f:7d:2d:71: 87:74:2f:28:67:e3:14:9a:28:20:f2:8a:9a:bb:2e:74:7c:43: 29:52:80:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEncj9CN+7NQZ4vrA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgxNjFlZjctMjQ5Yi00NTBiLWJhNmEtNTgxOWU2MTNl ZDYzMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk MzM3ZjNjMWMtYjcxOS00NTczLWFhNGMtZDg5NWUwYTg4NTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPuCJ2AtwQH1mbj4l4ZqaB8xgMVT9DmQ1tYV N3chiAd8Apc5Inm/MiXomI3DO12CrIjqtn///DZzvwnbDBpNkj+Xk6YeDpOS1iyX OlG4xly3QvRZN+n7r+9nGSY44pGj0udWP3i/QY9thWnb0VLIpuco52mX/yHEAyJ5 mzgyjg0eTxt0IyoqhnIrOX7FRGck0dVuBCtc9mYgTtwdCzE/CdMZcYI7TvpEMC15 eTrm4Z5768uh//ji5I/0Sfl0lWQ8dUCSiCwl6xip3izU6SAkpw1aAz0Bc+n8zeea Mn9x2v5pTo9a2YrDb59C1r02ESwlhrs8wO0MGCsHIgK7S/RnhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLXmDZwYmH3ZESveamhNYK8C4GbUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODE2 MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5ZTYxM2VkNjMvNDg4OWIwZWMtMDU4OC0z Y2YyLTljMGMtOTg4YmU0Mzk4ZTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTgxNjFlZjctMjQ5Yi00NTBiLWJh NmEtNTgxOWU2MTNlZDYzLzk4MTYxZWY3LTI0OWItNDUwYi1iYTZhLTU4MTllNjEz ZWQ2My5jcmwwHwYDVR0jBBgwFoAU1BnUREsRiVyMbWhl/etLT/KsGnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ODE2MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5 ZTYxM2VkNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICtwww MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAANhpT6eVekumb+0goHpd+z4oo9E7t1dPCX4Tda+5aKKuyyM9Ei aVnBX0CG07NO/lDU9mIWZ0++WEvxapz/iXXwUyApUL7shahuzBAxHY5brxJAMnEg QEBiDSeLnRxMK72d6Xbq9tOeWRCWiBQs4OBGBs+nbwSmNyk/n2XCTkP9Oze/rZRn rM68SZmVwtBwPkcJGh6uKu3zLHafUQWhMYsrBAY//2T8dfQ4Z3f+iW0ANypytpdu MQInNL4ictPovLAkYmCZv0UM5wPbxpaVKHJAuo8AMzkCSk/xpI2AEalFAO+jyzRW n30tcYd0Lyhn4xSaKCDyipq7LnR8QylSgA4= -----END CERTIFICATE-----Generated at Sat Jun 21 01:05:25 2025 by rpki-client