$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/b9fe9136-6711-31b6-a248-652d58c6a9e1.roa File: b9fe9136-6711-31b6-a248-652d58c6a9e1.roa (raw, json) Hash identifier: RcHUE1FU/bxDnPmfu1KERsklKMSvGNa6wCYhs5tGcb0= Subject key identifier: 25:E1:16:56:58:56:74:E9:21:19:83:FF:D2:02:3D:7B:3D:26:5D:F8 Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Certificate serial: 010D0C9F43285849C0A4EE2BED0A566A5B952100 Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/b9fe9136-6711-31b6-a248-652d58c6a9e1.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 33039 IP address blocks: 2602:f95c:88::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:ee:2b:ed:0a:56:6a:5b:95:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=5ff41da4-c669-4d3e-b6c5-6ac42885d199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9b:02:ef:76:90:0c:34:7a:8f:8b:df:db:7b: 7a:fe:64:68:05:f4:72:bb:b4:22:61:88:52:b6:c5: 53:e0:3f:17:7c:b0:13:d3:06:40:a2:17:4e:a2:a8: ea:ea:0d:79:a9:45:8a:55:f7:13:00:48:b1:50:b1: 08:74:c5:f2:3e:28:7f:11:78:69:4e:49:61:0b:bb: 3d:02:0d:6d:86:6c:9d:7a:e0:33:f8:3b:c7:4b:dc: 03:57:3c:fc:3c:05:ce:67:53:0e:2d:ea:93:58:19: e5:68:22:97:6d:79:67:b9:0b:f5:95:ee:68:fa:e1: 65:f2:a3:fc:dd:ba:04:c1:f7:b0:55:f6:23:32:c9: ea:98:3f:8d:19:44:f0:47:7d:93:74:12:0e:6e:db: 64:b9:12:4e:e5:6b:55:f9:56:8e:53:33:f6:af:d6: 46:e8:39:d1:a4:5d:44:b7:a8:02:05:5d:b5:c6:0d: f0:2d:01:85:49:da:6c:c1:2d:13:c4:0f:08:e9:b8: 6a:2e:12:2c:a3:15:42:b6:7d:c1:4d:0d:0f:b5:71: 3f:40:17:a8:27:13:1a:11:1b:21:ad:71:58:21:79: eb:78:70:ef:1d:54:ec:80:e2:d4:47:27:72:2f:53: 95:86:eb:90:77:40:25:73:cc:3b:0c:e3:d7:f2:05: ea:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E1:16:56:58:56:74:E9:21:19:83:FF:D2:02:3D:7B:3D:26:5D:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/b9fe9136-6711-31b6-a248-652d58c6a9e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl X509v3 Authority Key Identifier: keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer sbgp-ipAddrBlock: critical IPv6: 2602:f95c:88::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:aa:5a:76:18:06:0e:68:30:fa:68:a7:4d:48:37:32:e9:21: 59:5a:ff:a3:5e:b9:a3:0f:2e:36:f4:e7:c2:0f:4f:c1:db:5b: a0:2f:f2:f7:fe:da:01:9b:7f:05:d2:79:79:33:4b:68:fd:a6: 2b:bc:f3:32:09:b0:10:e1:d4:2c:c2:74:86:d8:57:07:e7:8f: 9c:9e:f4:90:75:9b:c3:52:c0:52:72:82:9b:60:25:7c:da:13: 60:da:97:e5:c1:a9:92:49:bf:6c:4b:37:a7:37:84:08:f2:10: 39:12:03:be:c0:d6:ea:95:8f:b7:5e:25:4e:81:88:d8:4c:11: 50:6e:c7:f1:60:14:a0:e1:10:aa:e5:ae:6e:32:e3:c5:6c:8e: c9:15:29:a1:3c:99:55:d3:63:fb:cc:1f:32:50:17:75:24:3c: 51:65:53:0c:cf:07:49:cc:13:5c:b5:20:5f:20:19:67:53:49: e8:16:c1:b5:b0:af:b8:f0:b1:4c:ac:60:28:80:e9:a0:86:3a: ad:3c:31:21:6a:e3:d7:84:80:87:b6:58:47:29:eb:20:9d:c5: 89:d1:1f:e7:f2:b0:4b:8e:b8:25:1f:fd:6f:7b:6a:7e:98:90: fe:3b:05:01:64:42:ef:c8:6c:62:11:78:fe:e2:19:2f:e8:ce: 7d:cc:97:06 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnApO4r7QpWaluVIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNjNzhkNjAtMzRlYi00ZmVkLThlMjUtOTI1Yjk1YTMw YzhlMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk NWZmNDFkYTQtYzY2OS00ZDNlLWI2YzUtNmFjNDI4ODVkMTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5sC73aQDDR6j4vf23t6/mRoBfRyu7QiYYhS tsVT4D8XfLAT0wZAohdOoqjq6g15qUWKVfcTAEixULEIdMXyPih/EXhpTklhC7s9 Ag1thmydeuAz+DvHS9wDVzz8PAXOZ1MOLeqTWBnlaCKXbXlnuQv1le5o+uFl8qP8 3boEwfewVfYjMsnqmD+NGUTwR32TdBIObttkuRJO5WtV+VaOUzP2r9ZG6DnRpF1E t6gCBV21xg3wLQGFSdpswS0TxA8I6bhqLhIsoxVCtn3BTQ0PtXE/QBeoJxMaERsh rXFYIXnreHDvHVTsgOLURydyL1OVhuuQd0Alc8w7DOPX8gXqJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCXhFlZYVnTpIRmD/9ICPXs9Jl34MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zM2M3 OGQ2MC0zNGViLTRmZWQtOGUyNS05MjViOTVhMzBjOGUvYjlmZTkxMzYtNjcxMS0z MWI2LWEyNDgtNjUyZDU4YzZhOWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzNjNzhkNjAtMzRlYi00ZmVkLThl MjUtOTI1Yjk1YTMwYzhlLzMzYzc4ZDYwLTM0ZWItNGZlZC04ZTI1LTkyNWI5NWEz MGM4ZS5jcmwwHwYDVR0jBBgwFoAUX2UlsGmXIYLm4tORRne6XDPT4EEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zM2M3OGQ2MC0zNGViLTRmZWQtOGUyNS05MjVi OTVhMzBjOGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5XACI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHKqWnYYBg5oMPpop01INzLpIVla/6NeuaMPLjb058IPT8HbW6Av 8vf+2gGbfwXSeXkzS2j9piu88zIJsBDh1CzCdIbYVwfnj5ye9JB1m8NSwFJygptg JXzaE2Dal+XBqZJJv2xLN6c3hAjyEDkSA77A1uqVj7deJU6BiNhMEVBux/FgFKDh EKrlrm4y48VsjskVKaE8mVXTY/vMHzJQF3UkPFFlUwzPB0nME1y1IF8gGWdTSegW wbWwr7jwsUysYCiA6aCGOq08MSFq49eEgIe2WEcp6yCdxYnRH+fysEuOuCUf/W97 an6YkP47BQFkQu/IbGIReP7iGS/ozn3MlwY= -----END CERTIFICATE-----Generated at Sat May 10 09:44:38 2025 by rpki-client