$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/49fab721-ee4d-39f7-95aa-244180f7663d.roa File: 49fab721-ee4d-39f7-95aa-244180f7663d.roa (raw, json) Hash identifier: foP+r702Qj1CtRF+Z33MgcDQOZ6w3lcE1xkSDXdSDrI= Subject key identifier: AE:A4:53:B0:14:56:9C:E5:4F:55:46:E9:E4:F3:88:46:B7:87:5E:53 Certificate issuer: /CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec Certificate serial: 010D0C9F43285849EBEA526564DD8160469C2880 Authority key identifier: AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/49fab721-ee4d-39f7-95aa-244180f7663d.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 19468 IP address blocks: 2602:f76f::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:52:65:64:dd:81:60:46:9c:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=2cf6ac7f-c8ca-4efd-87b6-e97f60d00f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d0:40:30:b1:36:31:d4:b9:b2:6e:5b:0f:c9: ff:47:7f:39:f2:b9:af:98:f3:23:f5:5b:71:90:6e: 67:58:46:ea:bc:d1:ba:ba:3c:00:4a:2d:e5:c4:e3: f2:6a:25:f8:ee:02:72:a1:ea:e0:29:50:8c:1c:1a: 75:30:cd:6c:37:25:51:01:fd:63:0b:15:76:1c:d9: 9d:62:0f:eb:1e:33:a3:8a:24:d2:21:e3:28:a8:45: c3:76:2f:6a:25:59:6a:7c:f4:fe:26:49:f4:e0:c7: cb:85:2b:9e:7c:99:ac:98:58:39:54:49:53:a7:e9: c5:77:83:b9:9e:9d:39:60:48:fd:d3:bd:0b:aa:17: 7c:00:7d:1c:2f:43:06:dc:a0:07:d1:54:db:9d:5a: 1e:29:db:5b:fd:3b:8a:31:ad:b5:22:5b:c4:53:d9: 48:a1:14:04:05:16:f4:41:ec:e8:4a:f2:53:c7:cd: 8f:c0:04:34:3c:15:1a:92:08:a9:46:1e:3c:18:27: 02:1c:d1:2c:8e:17:a2:18:dd:a1:03:31:91:28:6b: c2:04:b0:14:9e:c8:d8:a0:b4:01:51:27:18:25:82: e1:29:71:13:01:6f:24:f5:8a:1b:46:35:f2:f4:ce: 9c:a5:c3:66:09:1a:aa:89:42:7d:b5:ef:70:74:03: 1f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A4:53:B0:14:56:9C:E5:4F:55:46:E9:E4:F3:88:46:B7:87:5E:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/49fab721-ee4d-39f7-95aa-244180f7663d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl X509v3 Authority Key Identifier: keyid:AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer sbgp-ipAddrBlock: critical IPv6: 2602:f76f::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:08:25:1f:87:ea:da:5b:73:2f:8a:a2:74:2a:ab:fb:bd:ee: c5:8c:f2:68:fd:4d:c0:64:be:2c:ea:c9:e1:a5:e3:ad:78:fb: 3d:60:72:ca:8b:40:8a:22:59:2f:1e:aa:85:d5:0f:59:28:23: df:6e:96:4d:65:03:49:ad:a4:35:93:c5:32:a9:9f:bd:bf:4a: fb:54:7f:04:c8:8f:1d:4c:35:f8:d1:f2:cb:fa:f3:cf:9a:ba: 85:aa:6e:f7:10:ae:73:9c:64:8e:78:87:7e:32:65:b9:44:2a: 83:fa:da:b4:79:2d:30:fc:e9:a1:cd:f2:fc:f5:54:91:78:31: dc:4a:d1:44:e1:1d:44:10:b9:63:f6:47:a3:5e:95:15:20:b8: d2:60:e8:35:bc:4d:b6:ca:da:7a:dd:cf:22:37:62:29:7a:da: 26:b1:27:cb:4a:77:3b:0b:ee:fa:70:ae:f2:44:3b:19:58:dd: 29:b0:7d:01:01:26:00:ca:e5:76:eb:e4:62:0f:10:9b:2f:d9: 0a:c1:35:e8:11:08:39:76:62:a2:90:f3:ab:fb:a2:5f:97:3b: e5:80:92:1b:f2:3e:13:51:6f:23:96:a1:33:7f:6d:a8:de:d9: 32:91:67:df:92:13:c5:2d:35:7a:66:1e:a2:5c:03:e0:d2:82: 8f:c6:6e:ad -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnr6lJlZN2BYEacKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQyZjA0NGYtZTliYS00ODI3LWFmZDYtOGUwMWQzMjNk M2VjMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk MmNmNmFjN2YtYzhjYS00ZWZkLTg3YjYtZTk3ZjYwZDAwZjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNBAMLE2MdS5sm5bD8n/R3858rmvmPMj9Vtx kG5nWEbqvNG6ujwASi3lxOPyaiX47gJyoergKVCMHBp1MM1sNyVRAf1jCxV2HNmd Yg/rHjOjiiTSIeMoqEXDdi9qJVlqfPT+Jkn04MfLhSuefJmsmFg5VElTp+nFd4O5 np05YEj9070Lqhd8AH0cL0MG3KAH0VTbnVoeKdtb/TuKMa21IlvEU9lIoRQEBRb0 QezoSvJTx82PwAQ0PBUakgipRh48GCcCHNEsjheiGN2hAzGRKGvCBLAUnsjYoLQB UScYJYLhKXETAW8k9YobRjXy9M6cpcNmCRqqiUJ9te9wdAMfVQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFK6kU7AUVpzlT1VG6eTziEa3h15TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZDJm MDQ0Zi1lOWJhLTQ4MjctYWZkNi04ZTAxZDMyM2QzZWMvNDlmYWI3MjEtZWU0ZC0z OWY3LTk1YWEtMjQ0MTgwZjc2NjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGQyZjA0NGYtZTliYS00ODI3LWFm ZDYtOGUwMWQzMjNkM2VjLzhkMmYwNDRmLWU5YmEtNDgyNy1hZmQ2LThlMDFkMzIz ZDNlYy5jcmwwHwYDVR0jBBgwFoAUrz/k2ClXna6bUuLf0YKrjPqEU9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZDJmMDQ0Zi1lOWJhLTQ4MjctYWZkNi04ZTAx ZDMyM2QzZWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3bwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAggglH4fq2ltzL4qidCqr+73uxYzyaP1NwGS+LOrJ4aXjrXj7PWBy yotAiiJZLx6qhdUPWSgj326WTWUDSa2kNZPFMqmfvb9K+1R/BMiPHUw1+NHyy/rz z5q6hapu9xCuc5xkjniHfjJluUQqg/ratHktMPzpoc3y/PVUkXgx3ErRROEdRBC5 Y/ZHo16VFSC40mDoNbxNtsraet3PIjdiKXraJrEny0p3Owvu+nCu8kQ7GVjdKbB9 AQEmAMrlduvkYg8Qmy/ZCsE16BEIOXZiopDzq/uiX5c75YCSG/I+E1FvI5ahM39t qN7ZMpFn35ITxS01emYeolwD4NKCj8ZurQ== -----END CERTIFICATE-----Generated at Sun Jun 15 16:44:04 2025 by rpki-client