$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/bdce47b8-ec27-3c19-a907-2136e106515f.roa File: bdce47b8-ec27-3c19-a907-2136e106515f.roa (raw, json) Hash identifier: a2pVSvGpKtz6RCEA4b8hHIurtsUnRgJJ+v9MAkz3Ik8= Subject key identifier: 22:97:3E:E2:86:59:B7:DF:3C:0C:D7:F5:7F:42:76:7B:DF:D3:37:A1 Certificate issuer: /CN=4ee37184-86de-48c9-af35-5d102d140fa6 Certificate serial: 010D0C9F432858499CE07F84253721353A5CB080 Authority key identifier: CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/bdce47b8-ec27-3c19-a907-2136e106515f.roa Signing time: Tue 22 Apr 2025 17:32:16 +0000 ROA not before: Tue 22 Apr 2025 17:32:16 +0000 ROA not after: Mon 21 Jul 2025 17:32:16 +0000 asID: 401538 IP address blocks: 2602:f766:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:e0:7f:84:25:37:21:35:3a:5c:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee37184-86de-48c9-af35-5d102d140fa6 Validity Not Before: Apr 22 17:32:16 2025 GMT Not After : Jul 21 17:32:16 2025 GMT Subject: CN=3532163d-a3f5-4af7-8aa0-0eb75af9dd46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:36:4b:12:9b:50:ec:49:2d:bf:9d:6a:22:16: 02:5c:8c:a9:70:8f:14:43:69:4e:fb:73:82:dc:c4: af:c6:4a:1f:61:e4:80:f9:d7:48:bb:27:08:4b:8d: ec:59:d4:74:11:dc:8b:f2:60:aa:ef:9d:2b:dc:a5: f1:d5:60:9c:f4:81:1b:a5:60:56:66:17:f0:8d:b6: f6:1f:81:72:45:34:08:2b:7d:92:d6:3d:0b:ef:1d: 78:b6:de:de:a2:cc:10:7e:c9:33:8e:57:9d:e2:d5: 7a:e2:dd:47:47:f7:64:21:ac:ae:32:1b:0c:a0:9d: dc:29:cb:17:99:ce:9c:35:1d:5b:3d:7d:ff:65:e3: 17:03:7f:37:3e:9c:c6:7f:f8:58:0d:9e:e5:60:ea: bd:17:4f:ff:3d:bc:ab:a0:5e:e4:d7:56:e8:26:6f: db:0f:75:82:cf:db:9d:4f:7c:93:35:8e:ca:4a:fb: 9c:58:4a:74:38:72:f4:87:d4:78:3e:58:c6:35:7f: bb:87:2b:71:ec:0a:c6:35:bd:c3:46:c5:6a:24:4d: 20:f2:01:d6:14:d0:1b:b4:e0:b7:db:ca:27:3e:57: 13:c8:b3:39:89:95:89:08:c5:a4:89:31:e7:f4:31: 22:cd:31:7d:04:28:d0:32:87:f5:d6:57:ac:f3:39: 62:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:97:3E:E2:86:59:B7:DF:3C:0C:D7:F5:7F:42:76:7B:DF:D3:37:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/bdce47b8-ec27-3c19-a907-2136e106515f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl X509v3 Authority Key Identifier: keyid:CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer sbgp-ipAddrBlock: critical IPv6: 2602:f766:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:45:0d:9b:12:f9:ab:d9:5e:5a:e8:a7:ae:ab:59:3a:23:2d: 26:47:1c:e6:79:d1:0c:09:70:f3:b8:bd:e4:83:24:b3:dd:03: 3f:a1:50:29:c9:7f:98:6d:3c:ab:61:7a:d6:d8:af:d5:ec:65: 39:02:bc:61:26:fc:93:70:61:24:75:6c:13:2c:bd:2e:e4:d1: f6:06:c9:6f:5d:12:7a:44:6c:3d:fb:fb:89:4f:47:e1:cc:17: d4:c2:6b:e6:6c:ca:c9:9a:ec:27:01:1d:38:e0:21:8c:29:fc: 65:c0:a3:1f:61:50:c4:0a:24:42:f3:94:c5:97:7f:e8:24:02: 61:24:66:0d:24:2e:0d:f5:f7:32:57:20:98:df:50:c9:97:df: 4e:0a:6d:eb:7e:06:4d:11:6b:57:61:46:41:48:d1:cd:59:9c: 00:9b:9d:bf:a3:a2:fb:63:d8:a7:87:4f:28:75:0f:34:1e:a5: b6:09:c8:48:22:3f:0c:90:cd:25:71:d5:3e:35:34:c5:cf:ac: 06:2d:ca:b4:b9:1f:b3:66:25:ff:6f:5b:0e:c3:6d:2b:7d:b0: da:fe:a7:bc:ab:b0:7f:e5:5d:ca:64:a9:60:30:ca:cf:3b:be: b1:7e:87:d5:1d:ea:30:a8:6e:1d:4d:37:3d:99:c8:cf:06:31: d9:11:da:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmc4H+EJTchNTpcsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVlMzcxODQtODZkZS00OGM5LWFmMzUtNWQxMDJkMTQw ZmE2MB4XDTI1MDQyMjE3MzIxNloXDTI1MDcyMTE3MzIxNlowLzEtMCsGA1UEAxMk MzUzMjE2M2QtYTNmNS00YWY3LThhYTAtMGViNzVhZjlkZDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzZLEptQ7Ektv51qIhYCXIypcI8UQ2lO+3OC 3MSvxkofYeSA+ddIuycIS43sWdR0EdyL8mCq750r3KXx1WCc9IEbpWBWZhfwjbb2 H4FyRTQIK32S1j0L7x14tt7eoswQfskzjled4tV64t1HR/dkIayuMhsMoJ3cKcsX mc6cNR1bPX3/ZeMXA383PpzGf/hYDZ7lYOq9F0//PbyroF7k11boJm/bD3WCz9ud T3yTNY7KSvucWEp0OHL0h9R4PljGNX+7hytx7ArGNb3DRsVqJE0g8gHWFNAbtOC3 28onPlcTyLM5iZWJCMWkiTHn9DEizTF9BCjQMof11les8zliPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCKXPuKGWbffPAzX9X9Cdnvf0zehMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80ZWUz NzE4NC04NmRlLTQ4YzktYWYzNS01ZDEwMmQxNDBmYTYvYmRjZTQ3YjgtZWMyNy0z YzE5LWE5MDctMjEzNmUxMDY1MTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNGVlMzcxODQtODZkZS00OGM5LWFm MzUtNWQxMDJkMTQwZmE2LzRlZTM3MTg0LTg2ZGUtNDhjOS1hZjM1LTVkMTAyZDE0 MGZhNi5jcmwwHwYDVR0jBBgwFoAUzO2fuO7Sl7dYq+gKqtPIy9hM0Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80ZWUzNzE4NC04NmRlLTQ4YzktYWYzNS01ZDEw MmQxNDBmYTYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3ZgAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGVFDZsS+avZXlrop66rWTojLSZHHOZ50QwJcPO4veSDJLPdAz+h UCnJf5htPKthetbYr9XsZTkCvGEm/JNwYSR1bBMsvS7k0fYGyW9dEnpEbD37+4lP R+HMF9TCa+Zsysma7CcBHTjgIYwp/GXAox9hUMQKJELzlMWXf+gkAmEkZg0kLg31 9zJXIJjfUMmX304Kbet+Bk0Ra1dhRkFI0c1ZnACbnb+jovtj2KeHTyh1DzQepbYJ yEgiPwyQzSVx1T41NMXPrAYtyrS5H7NmJf9vWw7DbSt9sNr+p7yrsH/lXcpkqWAw ys87vrF+h9Ud6jCobh1NNz2ZyM8GMdkR2tQ= -----END CERTIFICATE-----Generated at Tue Apr 29 18:41:55 2025 by rpki-client