$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/22cf0846-fd39-3926-8f9b-709b5a41a148.roa File: 22cf0846-fd39-3926-8f9b-709b5a41a148.roa (raw, json) Hash identifier: N2tHN/Sml4rckEZ+5m21fyXz7QIc4F5c2jmFzRsBI7Q= Subject key identifier: 48:DB:28:6A:9A:9D:4C:7F:3E:F7:A1:02:E8:CE:11:40:66:0C:89:E8 Certificate issuer: /CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8 Certificate serial: 010D0C9F43285849AEDBD83DBD3D85184B0D2520 Authority key identifier: C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/22cf0846-fd39-3926-8f9b-709b5a41a148.roa Signing time: Tue 29 Apr 2025 04:07:26 +0000 ROA not before: Tue 29 Apr 2025 04:07:26 +0000 ROA not after: Mon 28 Jul 2025 04:07:26 +0000 asID: 209481 IP address blocks: 2602:f93b:400::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:db:d8:3d:bd:3d:85:18:4b:0d:25:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8 Validity Not Before: Apr 29 04:07:26 2025 GMT Not After : Jul 28 04:07:26 2025 GMT Subject: CN=3796541e-ea15-4769-b412-44dc7fe5a100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:11:f4:68:bc:6a:2f:41:e4:d4:b6:e2:50:09: 6e:f2:32:d4:d4:28:bf:37:b2:61:32:64:1c:95:96: 22:be:fd:f8:28:1d:b7:51:3d:a4:e8:a3:0c:fe:5d: 98:7e:80:7b:b5:63:46:35:1f:63:36:b2:84:31:d9: ca:c7:bb:8f:a3:60:d9:7e:a8:7f:a4:47:14:3a:92: 4e:6e:42:9c:ef:7f:2e:97:86:03:49:03:dc:c4:8a: 39:ee:05:88:26:0e:40:ea:bf:58:1e:f8:4a:75:30: 89:6c:43:71:4f:66:be:8b:51:52:b0:ff:37:cd:d3: fe:33:b0:6f:9a:5d:9a:c2:11:19:37:d6:91:51:a1: 69:2e:2b:28:0d:33:04:d0:25:15:69:09:e0:71:1f: 6f:ad:61:20:6e:19:9a:47:7b:56:9a:1c:f9:ab:2c: ba:05:3f:9c:17:58:79:d1:77:14:b6:b5:fc:1a:45: 51:b1:41:ef:ee:33:4b:e7:53:41:2d:f9:e8:cb:d4: dd:9a:28:c2:89:bb:5c:66:b3:b1:83:42:ec:89:8d: 7a:37:f0:65:06:b8:58:cb:68:3d:ec:22:e2:13:37: 35:7b:d4:a9:b7:64:fa:c0:d1:0f:e0:26:c5:1f:23: 6f:f5:13:ff:8f:ae:2f:6c:93:04:07:7c:bd:f7:f9: 02:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DB:28:6A:9A:9D:4C:7F:3E:F7:A1:02:E8:CE:11:40:66:0C:89:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/22cf0846-fd39-3926-8f9b-709b5a41a148.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl X509v3 Authority Key Identifier: keyid:C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer sbgp-ipAddrBlock: critical IPv6: 2602:f93b:400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:73:93:76:80:1d:ac:69:f0:88:24:a0:99:2a:b5:6d:24:f0: e9:91:b6:55:04:73:13:62:f3:87:da:69:63:91:14:d7:2d:b6: 83:2a:b3:41:87:c6:84:e9:da:a6:32:05:86:ec:16:c4:2b:d5: f3:7b:e4:4b:1f:6f:f2:62:69:ef:b1:21:15:53:54:94:c5:25: 78:95:55:95:e3:14:83:6b:ef:c9:ea:79:7a:59:90:59:34:9a: c4:f2:cb:03:f6:fd:aa:d3:45:64:0d:95:22:39:8e:c1:78:bd: 36:fb:06:36:14:d9:5b:b9:6c:ae:20:3a:b4:c8:c6:7f:24:89: 05:4e:bf:27:f9:d9:38:b2:47:08:e5:73:c5:ed:9e:fe:63:2c: fc:1a:b2:1b:90:a8:57:72:81:f0:72:6c:ca:61:45:1e:c1:d2: 9d:89:a8:f1:fe:ba:69:9b:a5:cf:1f:b0:4f:bc:ce:65:8f:95: 09:65:28:c7:8e:cb:42:d8:f3:39:89:bd:39:91:2c:14:61:b4: e7:a4:7e:eb:1b:61:cc:42:6a:4c:ae:43:63:5a:f8:21:88:5d: 9d:d2:be:6b:bc:a8:2d:bb:41:6c:58:33:9c:d2:9b:0b:f0:6a: 68:1d:64:f5:6b:da:0e:59:8e:f8:76:bf:56:cd:29:df:da:1f: 7c:1b:18:55 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmu29g9vT2FGEsNJSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdlYzJkYTUtNTRmZS00ZDdhLThiMDYtMTU4ODc0Nzdj MmU4MB4XDTI1MDQyOTA0MDcyNloXDTI1MDcyODA0MDcyNlowLzEtMCsGA1UEAxMk Mzc5NjU0MWUtZWExNS00NzY5LWI0MTItNDRkYzdmZTVhMTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihH0aLxqL0Hk1LbiUAlu8jLU1Ci/N7JhMmQc lZYivv34KB23UT2k6KMM/l2YfoB7tWNGNR9jNrKEMdnKx7uPo2DZfqh/pEcUOpJO bkKc738ul4YDSQPcxIo57gWIJg5A6r9YHvhKdTCJbENxT2a+i1FSsP83zdP+M7Bv ml2awhEZN9aRUaFpLisoDTME0CUVaQngcR9vrWEgbhmaR3tWmhz5qyy6BT+cF1h5 0XcUtrX8GkVRsUHv7jNL51NBLfnoy9TdmijCibtcZrOxg0LsiY16N/BlBrhYy2g9 7CLiEzc1e9Spt2T6wNEP4CbFHyNv9RP/j64vbJMEB3y99/kCsQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEjbKGqanUx/PvehAujOEUBmDInoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xN2Vj MmRhNS01NGZlLTRkN2EtOGIwNi0xNTg4NzQ3N2MyZTgvMjJjZjA4NDYtZmQzOS0z OTI2LThmOWItNzA5YjVhNDFhMTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMTdlYzJkYTUtNTRmZS00ZDdhLThi MDYtMTU4ODc0NzdjMmU4LzE3ZWMyZGE1LTU0ZmUtNGQ3YS04YjA2LTE1ODg3NDc3 YzJlOC5jcmwwHwYDVR0jBBgwFoAUyPPC9itSfvJd8ScSn/7szOwOiEswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xN2VjMmRhNS01NGZlLTRkN2EtOGIwNi0xNTg4 NzQ3N2MyZTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgL5OwQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAiXOTdoAdrGnwiCSgmSq1bSTw6ZG2VQRzE2Lzh9ppY5EU1y22gyqz QYfGhOnapjIFhuwWxCvV83vkSx9v8mJp77EhFVNUlMUleJVVleMUg2vvyep5elmQ WTSaxPLLA/b9qtNFZA2VIjmOwXi9NvsGNhTZW7lsriA6tMjGfySJBU6/J/nZOLJH COVzxe2e/mMs/BqyG5CoV3KB8HJsymFFHsHSnYmo8f66aZulzx+wT7zOZY+VCWUo x47LQtjzOYm9OZEsFGG056R+6xthzEJqTK5DY1r4IYhdndK+a7yoLbtBbFgznNKb C/BqaB1k9WvaDlmO+Ha/Vs0p39offBsYVQ== -----END CERTIFICATE-----Generated at Wed May 7 10:46:42 2025 by rpki-client