$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/023a5a3d-a728-3257-beba-74d8f2fe97c2.roa File: 023a5a3d-a728-3257-beba-74d8f2fe97c2.roa (raw, json) Hash identifier: i3zwquXHxBD5Gdpy+327m2TbwKCU2EMhJ+LDxJOQVfg= Subject key identifier: 6A:2C:6E:F5:DC:26:96:3B:21:6C:EA:D2:05:2A:22:28:DE:0A:36:0C Certificate issuer: /CN=4e15d598-623b-4ab3-ad43-b720fb599027 Certificate serial: 010D0C9F43285849AD1A01E5E849960B78E1F200 Authority key identifier: B0:0B:40:9A:14:8B:AE:3F:03:86:25:50:26:AB:3F:80:15:AD:E5:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/023a5a3d-a728-3257-beba-74d8f2fe97c2.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 401280 IP address blocks: 2602:f932::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/4e15d598-623b-4ab3-ad43-b720fb599027.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/4e15d598-623b-4ab3-ad43-b720fb599027.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:01:e5:e8:49:96:0b:78:e1:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e15d598-623b-4ab3-ad43-b720fb599027 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=b34d875d-49f0-48df-87b4-675fa0e9e699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3d:60:b7:84:01:c3:bc:3b:e5:3d:dc:18:b2: c3:5f:53:18:dd:52:a0:fa:89:b0:4d:30:96:60:e0: f4:a1:b5:0b:ff:4e:c2:63:27:35:bb:a4:d6:02:a1: 5f:cc:2b:f8:f6:50:3e:35:cf:dc:ed:fd:bf:f6:51: 38:46:f0:c2:89:4d:ff:14:07:ba:ba:5e:9f:9b:57: 70:f9:0e:5e:6b:00:b5:38:a3:85:92:97:59:32:44: 82:08:45:f1:f9:f4:67:11:78:79:f7:98:e6:c2:c9: 74:20:e6:55:ac:8e:f9:01:28:eb:c6:62:6c:87:7a: e0:a9:ba:c4:0f:ff:cb:2b:d0:f5:40:60:68:f7:0a: e9:29:0a:25:0a:a0:2e:4d:80:8c:52:6b:e7:58:3b: d3:41:12:e9:0b:63:1f:c6:66:86:12:39:8a:26:1b: c3:b5:1d:27:a9:65:aa:b5:a6:07:a2:f3:e3:3d:da: 4e:5c:ad:77:0b:19:12:43:9e:d1:1c:bb:85:33:7d: 0f:80:ac:7a:45:b4:a0:d9:3f:c5:86:2c:4b:ed:fa: 5d:fb:ed:c9:73:9e:fa:de:d1:3b:78:b1:dc:af:1d: ef:69:c8:1c:c8:a2:24:e5:2d:d1:ad:db:d8:72:d1: 1b:2e:82:88:bd:6d:ba:56:17:f4:ef:76:1a:d2:29: 9f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2C:6E:F5:DC:26:96:3B:21:6C:EA:D2:05:2A:22:28:DE:0A:36:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/023a5a3d-a728-3257-beba-74d8f2fe97c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/4e15d598-623b-4ab3-ad43-b720fb599027.crl X509v3 Authority Key Identifier: keyid:B0:0B:40:9A:14:8B:AE:3F:03:86:25:50:26:AB:3F:80:15:AD:E5:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027.cer sbgp-ipAddrBlock: critical IPv6: 2602:f932::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:7d:bb:9f:ab:80:77:f0:b7:7a:94:7d:0c:31:1d:ef:fe:ab: 64:8b:d2:a5:0e:84:f0:1a:ef:73:3c:39:98:3a:ad:fe:e6:10: 72:fe:8a:29:ff:42:7b:25:61:2f:df:9e:78:e2:9b:4f:60:9a: 08:77:df:51:b6:2c:c5:f4:81:89:43:ba:77:1b:34:06:2e:a4: 82:03:a5:52:ab:e8:45:46:12:5d:6c:2f:2f:c5:71:42:7f:21: 9f:74:74:49:f9:ec:81:91:62:0e:00:47:24:52:b8:19:86:65: bd:1f:5d:78:e9:a1:f0:4c:87:2a:88:60:42:ad:92:ff:cf:4a: 32:44:36:04:cf:6e:71:bb:d5:cc:10:84:b6:15:4a:81:c9:b3: 4b:9b:94:73:9f:b1:9a:ac:ac:f0:91:9d:c3:9f:ae:37:20:ef: 6b:81:b5:73:58:80:e5:fb:a5:57:95:6d:b9:21:62:c4:d7:10: 56:a7:e3:d3:7a:7b:8f:b5:5c:3f:b4:23:ad:1b:78:f6:7a:e5: bc:3a:78:b4:4f:09:66:ea:81:0c:37:c7:3c:ba:37:73:34:97: fb:67:f5:db:ba:12:2d:1b:50:da:ce:14:a0:0e:f5:d6:c1:35: ec:7b:cf:29:bd:96:9f:18:be:b7:f4:b3:0a:cb:69:00:27:e5: 48:58:61:3b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmtGgHl6EmWC3jh8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUxNWQ1OTgtNjIzYi00YWIzLWFkNDMtYjcyMGZiNTk5 MDI3MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk YjM0ZDg3NWQtNDlmMC00OGRmLTg3YjQtNjc1ZmEwZTllNjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT1gt4QBw7w75T3cGLLDX1MY3VKg+omwTTCW YOD0obUL/07CYyc1u6TWAqFfzCv49lA+Nc/c7f2/9lE4RvDCiU3/FAe6ul6fm1dw +Q5eawC1OKOFkpdZMkSCCEXx+fRnEXh595jmwsl0IOZVrI75ASjrxmJsh3rgqbrE D//LK9D1QGBo9wrpKQolCqAuTYCMUmvnWDvTQRLpC2MfxmaGEjmKJhvDtR0nqWWq taYHovPjPdpOXK13CxkSQ57RHLuFM30PgKx6RbSg2T/FhixL7fpd++3Jc5763tE7 eLHcrx3vacgcyKIk5S3RrdvYctEbLoKIvW26Vhf073Ya0imfyQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGosbvXcJpY7IWzq0gUqIijeCjYMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80ZTE1 ZDU5OC02MjNiLTRhYjMtYWQ0My1iNzIwZmI1OTkwMjcvMDIzYTVhM2QtYTcyOC0z MjU3LWJlYmEtNzRkOGYyZmU5N2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGUxNWQ1OTgtNjIzYi00YWIzLWFk NDMtYjcyMGZiNTk5MDI3LzRlMTVkNTk4LTYyM2ItNGFiMy1hZDQzLWI3MjBmYjU5 OTAyNy5jcmwwHwYDVR0jBBgwFoAUsAtAmhSLrj8DhiVQJqs/gBWt5YowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80ZTE1ZDU5OC02MjNiLTRhYjMtYWQ0My1iNzIw ZmI1OTkwMjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5MgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGn27n6uAd/C3epR9DDEd7/6rZIvSpQ6E8Brvczw5mDqt/uYQcv6K Kf9CeyVhL9+eeOKbT2CaCHffUbYsxfSBiUO6dxs0Bi6kggOlUqvoRUYSXWwvL8Vx Qn8hn3R0SfnsgZFiDgBHJFK4GYZlvR9deOmh8EyHKohgQq2S/89KMkQ2BM9ucbvV zBCEthVKgcmzS5uUc5+xmqys8JGdw5+uNyDva4G1c1iA5fulV5VtuSFixNcQVqfj 03p7j7VcP7QjrRt49nrlvDp4tE8JZuqBDDfHPLo3czSX+2f127oSLRtQ2s4UoA71 1sE17HvPKb2Wnxi+t/SzCstpACflSFhhOw== -----END CERTIFICATE-----Generated at Sat May 10 20:29:46 2025 by rpki-client