$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/36906e46-bec5-3393-be66-d1b8539c5d00.roa File: 36906e46-bec5-3393-be66-d1b8539c5d00.roa (raw, json) Hash identifier: fJkIIcimYWGoSE7FGT/4ZJK3jZKSbGqHw6ijbLLf4ko= Subject key identifier: 9F:F4:DD:BB:B6:99:B4:CE:BA:E0:DA:75:5E:13:83:C8:74:30:A6:BB Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Certificate serial: 010D0C9F43285849B57A0F7E57076894F4BFA100 Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/36906e46-bec5-3393-be66-d1b8539c5d00.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 400226 IP address blocks: 2602:fc05::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:0f:7e:57:07:68:94:f4:bf:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=213d0e23-d5c6-45e4-ac87-9dd6c7107c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1d:ab:43:63:9a:66:67:18:94:30:53:42:a5: 2a:94:24:6d:e7:9a:54:bb:b1:69:dc:73:e0:64:f5: fb:93:46:4c:0d:82:4e:ea:5c:c4:0e:2f:2f:ae:e0: 49:98:33:8d:b0:87:9b:f1:56:70:d6:c0:83:9b:52: 06:16:e9:4f:ec:06:50:bc:a3:93:ec:47:8c:de:56: 42:f5:60:f9:ad:c0:22:ec:f8:c9:a2:f6:b9:a8:0d: f0:4a:6f:b8:c3:a2:be:3e:11:c5:02:eb:38:b1:6c: 3f:e1:2a:09:15:15:bb:d2:8c:4b:b1:79:c5:92:c7: e7:1e:7c:80:d1:e3:a3:72:8a:90:dd:06:72:2e:a4: ff:02:e7:c2:c8:12:3a:d9:fd:16:94:d0:cc:1b:dc: a2:d3:c1:13:3a:d6:ad:0e:2f:45:ca:5e:a8:57:c1: 3b:02:cc:ea:c7:6e:43:0e:58:cf:b7:02:38:f1:e6: 2a:d5:14:ae:1f:f1:65:d4:ee:6d:65:00:84:4f:03: e8:fb:b3:a6:29:43:d4:7d:c7:22:1b:18:23:f2:af: 19:0a:0a:e4:43:58:2f:56:86:a0:c8:9f:c8:1a:04: b0:d1:17:7f:27:38:1c:b7:c0:99:80:1a:ac:58:77: ec:a2:96:d7:ea:d9:a9:4f:31:d3:0c:27:94:be:42: 0e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F4:DD:BB:B6:99:B4:CE:BA:E0:DA:75:5E:13:83:C8:74:30:A6:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/36906e46-bec5-3393-be66-d1b8539c5d00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl X509v3 Authority Key Identifier: keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc05::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:97:6b:b8:45:7f:97:b4:cf:95:12:2e:ad:89:8b:cb:33:bd: ea:e0:a9:be:7d:e1:4d:64:88:4b:6e:55:c7:ad:f6:e7:a8:1c: 75:82:24:a3:d5:dc:21:72:4b:5d:9f:20:71:4a:e5:20:30:96: 65:7a:0a:3d:3e:0d:9e:36:c9:17:35:80:ef:ea:63:52:ae:40: 45:34:50:b6:b1:00:03:90:a4:95:c5:40:d7:b3:1e:55:92:be: 25:30:1b:b9:4a:a7:68:41:fb:d6:18:6f:d2:2a:f2:08:82:a1: 69:5b:4e:2f:75:ea:dd:e7:1c:29:0f:cd:9f:81:9e:fa:0f:64: c6:77:8f:54:56:d0:ab:0e:92:bf:06:27:b9:f1:f2:b8:40:75: 1e:12:85:7d:91:f6:32:b3:2d:81:e9:c6:c5:d9:67:5c:dc:5d: 42:c5:28:ab:e2:22:8d:6a:30:2b:50:6e:ac:3d:39:31:72:9f: 33:36:91:f7:1b:37:43:c6:d8:28:10:cc:f3:0b:e3:19:db:b8: 8c:81:09:44:78:76:a0:f1:c6:b3:7e:9e:5f:67:3c:b0:d8:3d: 80:80:dc:38:f5:63:ed:1a:4a:ed:20:a2:04:20:1d:12:cb:0d: 36:d1:a4:7d:e4:da:46:92:26:6e:99:81:2f:3e:4b:e5:27:91: d3:53:e0:ea -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEm1eg9+VwdolPS/oQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkzM2FmNzAtZmFlNC00NGM2LTllNDItMmI5ZWRhM2Mx ZTBlMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk MjEzZDBlMjMtZDVjNi00NWU0LWFjODctOWRkNmM3MTA3YzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix2rQ2OaZmcYlDBTQqUqlCRt55pUu7Fp3HPg ZPX7k0ZMDYJO6lzEDi8vruBJmDONsIeb8VZw1sCDm1IGFulP7AZQvKOT7EeM3lZC 9WD5rcAi7PjJova5qA3wSm+4w6K+PhHFAus4sWw/4SoJFRW70oxLsXnFksfnHnyA 0eOjcoqQ3QZyLqT/AufCyBI62f0WlNDMG9yi08ETOtatDi9Fyl6oV8E7Aszqx25D DljPtwI48eYq1RSuH/Fl1O5tZQCETwPo+7OmKUPUfcciGxgj8q8ZCgrkQ1gvVoag yJ/IGgSw0Rd/Jzgct8CZgBqsWHfsopbX6tmpTzHTDCeUvkIOeQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJ/03bu2mbTOuuDadV4Tg8h0MKa7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OTMz YWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjllZGEzYzFlMGUvMzY5MDZlNDYtYmVjNS0z MzkzLWJlNjYtZDFiODUzOWM1ZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTkzM2FmNzAtZmFlNC00NGM2LTll NDItMmI5ZWRhM2MxZTBlLzU5MzNhZjcwLWZhZTQtNDRjNi05ZTQyLTJiOWVkYTNj MWUwZS5jcmwwHwYDVR0jBBgwFoAUX0piry7HhCrgxdrmtpTYiRdP1RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OTMzYWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjll ZGEzYzFlMGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL8BQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAuZdruEV/l7TPlRIurYmLyzO96uCpvn3hTWSIS25Vx63256gcdYIk o9XcIXJLXZ8gcUrlIDCWZXoKPT4NnjbJFzWA7+pjUq5ARTRQtrEAA5CklcVA17Me VZK+JTAbuUqnaEH71hhv0iryCIKhaVtOL3Xq3eccKQ/Nn4Ge+g9kxnePVFbQqw6S vwYnufHyuEB1HhKFfZH2MrMtgenGxdlnXNxdQsUoq+IijWowK1BurD05MXKfMzaR 9xs3Q8bYKBDM8wvjGdu4jIEJRHh2oPHGs36eX2c8sNg9gIDcOPVj7RpK7SCiBCAd EssNNtGkfeTaRpImbpmBLz5L5SeR01Pg6g== -----END CERTIFICATE-----Generated at Mon May 12 18:39:27 2025 by rpki-client