$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/4a9eb50d-2780-3043-b84e-a510d52cdef8.roa File: 4a9eb50d-2780-3043-b84e-a510d52cdef8.roa (raw, json) Hash identifier: ENU9cIKuxZ5x7ZZXdpzBEkku2UKz6U+RK0ZPPMVKdsw= Subject key identifier: 75:FB:F7:F3:90:1F:FC:35:64:CB:FE:43:E5:9B:01:65:FD:EC:12:27 Certificate issuer: /CN=98161ef7-249b-450b-ba6a-5819e613ed63 Certificate serial: 010D0C9F4328584973DEED0F48A88F4CD1CE4880 Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/4a9eb50d-2780-3043-b84e-a510d52cdef8.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 174 IP address blocks: 2602:2b7:100::/40 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:ed:0f:48:a8:8f:4c:d1:ce:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63 Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=446017f1-c21d-45d0-bc02-f5adc7bf6906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:62:72:f9:ba:82:1b:06:14:ce:d0:a3:ed:c0: cc:8d:4c:80:e0:db:d7:ed:c6:d9:ca:8b:80:8e:20: ac:08:85:08:e3:1f:28:ae:67:12:fb:fe:11:07:b4: ea:a0:68:2b:14:d4:d3:51:ab:cf:b0:65:ea:96:5f: a0:29:dd:56:fc:bf:90:2b:45:c3:ea:09:29:9e:71: ba:e8:81:64:7b:71:88:ef:e6:75:70:b4:38:15:83: 3d:fa:fa:39:75:eb:65:aa:d2:59:6b:55:cc:e4:da: dd:54:8d:81:57:4c:e3:a5:ff:63:64:a9:7c:29:51: 6d:a7:cd:c2:3d:c7:ed:db:e8:98:c9:b7:3a:ac:d5: 7e:c8:79:b1:e6:d6:be:25:1a:a3:ac:e8:fb:3c:ba: 46:cb:9f:4a:5f:31:d1:81:b3:0a:94:34:a4:40:c2: c9:7c:45:10:ce:82:50:dd:50:39:a5:99:2d:2d:66: e2:44:41:c1:89:b0:0d:5d:c9:cb:af:14:1b:1c:80: 13:0d:60:c8:01:33:2b:9b:69:8c:a6:78:78:9d:65: af:f9:be:0e:a3:cb:8d:cf:56:ac:a8:72:88:6d:2d: 7d:45:f8:82:de:ed:dd:d9:5d:a6:73:51:2f:16:72: 48:57:d7:46:80:f5:09:48:b8:fa:8e:56:4c:e0:a7: 5e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:FB:F7:F3:90:1F:FC:35:64:CB:FE:43:E5:9B:01:65:FD:EC:12:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/4a9eb50d-2780-3043-b84e-a510d52cdef8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl X509v3 Authority Key Identifier: keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer sbgp-ipAddrBlock: critical IPv6: 2602:2b7:100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:dd:d7:67:68:08:3a:a4:2c:e4:34:54:88:57:e4:17:7d:aa: 83:8f:49:43:76:19:ee:ce:6f:22:64:a8:00:91:4f:a5:e4:70: f7:0f:c0:41:b8:0a:7d:60:6d:4a:94:88:4d:fa:63:ea:2a:c2: 65:aa:b6:98:6e:90:44:35:c6:87:53:86:29:c6:34:26:94:e9: ba:57:6f:e4:fd:44:b1:4c:ce:6a:37:cc:31:1e:2d:da:5c:ff: 68:db:80:1d:d5:59:5e:de:9f:51:86:4b:fa:f4:24:c1:e1:a4: 52:4f:ea:8b:ec:f2:5b:12:53:e6:fd:5d:1e:3a:39:e2:a9:15: 25:ed:b8:2e:a1:ea:47:36:89:0c:aa:b5:e2:dc:9b:5d:32:cd: 63:ec:39:b0:f8:d9:15:f4:78:c1:5d:4d:83:fd:5c:8e:c9:73: 50:8b:51:db:ba:41:fb:50:68:d8:31:db:8a:45:c8:e9:42:eb: 66:9e:56:64:f7:f1:57:66:58:95:61:02:68:29:34:8a:1a:77: 7e:0f:1d:b2:25:36:5b:4e:ff:dd:f9:aa:c8:37:ee:65:08:1d: c1:7c:b8:ee:a9:63:1b:a9:a7:25:92:99:b5:b4:86:2c:a6:b9: c3:0a:57:ce:6d:e1:95:fd:bc:27:0c:05:23:56:44:95:a6:ab: 52:55:35:f6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElz3u0PSKiPTNHOSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgxNjFlZjctMjQ5Yi00NTBiLWJhNmEtNTgxOWU2MTNl ZDYzMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk NDQ2MDE3ZjEtYzIxZC00NWQwLWJjMDItZjVhZGM3YmY2OTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWJy+bqCGwYUztCj7cDMjUyA4NvX7cbZyouA jiCsCIUI4x8ormcS+/4RB7TqoGgrFNTTUavPsGXqll+gKd1W/L+QK0XD6gkpnnG6 6IFke3GI7+Z1cLQ4FYM9+vo5detlqtJZa1XM5NrdVI2BV0zjpf9jZKl8KVFtp83C Pcft2+iYybc6rNV+yHmx5ta+JRqjrOj7PLpGy59KXzHRgbMKlDSkQMLJfEUQzoJQ 3VA5pZktLWbiREHBibANXcnLrxQbHIATDWDIATMrm2mMpnh4nWWv+b4Oo8uNz1as qHKIbS19RfiC3u3d2V2mc1EvFnJIV9dGgPUJSLj6jlZM4Kde2QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHX79/OQH/w1ZMv+Q+WbAWX97BInMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODE2 MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5ZTYxM2VkNjMvNGE5ZWI1MGQtMjc4MC0z MDQzLWI4NGUtYTUxMGQ1MmNkZWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTgxNjFlZjctMjQ5Yi00NTBiLWJh NmEtNTgxOWU2MTNlZDYzLzk4MTYxZWY3LTI0OWItNDUwYi1iYTZhLTU4MTllNjEz ZWQ2My5jcmwwHwYDVR0jBBgwFoAU1BnUREsRiVyMbWhl/etLT/KsGnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ODE2MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5 ZTYxM2VkNjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgICtwEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGN3XZ2gIOqQs5DRUiFfkF32qg49JQ3YZ7s5vImSoAJFPpeRw9w/A QbgKfWBtSpSITfpj6irCZaq2mG6QRDXGh1OGKcY0JpTpuldv5P1EsUzOajfMMR4t 2lz/aNuAHdVZXt6fUYZL+vQkweGkUk/qi+zyWxJT5v1dHjo54qkVJe24LqHqRzaJ DKq14tybXTLNY+w5sPjZFfR4wV1Ng/1cjslzUItR27pB+1Bo2DHbikXI6ULrZp5W ZPfxV2ZYlWECaCk0ihp3fg8dsiU2W07/3fmqyDfuZQgdwXy47qljG6mnJZKZtbSG LKa5wwpXzm3hlf28JwwFI1ZElaarUlU19g== -----END CERTIFICATE-----Generated at Sat Apr 26 13:33:45 2025 by rpki-client