$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/b96d661d-151e-3e40-92d8-32407e1e3c9a.roa File: b96d661d-151e-3e40-92d8-32407e1e3c9a.roa (raw, json) Hash identifier: OPaDXrNxmROo3CDVroW/C97Us9v5FbtliqY5zz91XgQ= Subject key identifier: 69:AA:1E:45:04:B3:B8:EE:E7:94:C7:06:A4:6D:76:BA:B9:FB:A6:C2 Certificate issuer: /CN=380e678f-a53e-4fa7-8c2f-15f6fca7c8f9 Certificate serial: 010D0C9F43285849955F2381CE4F7FF7B9984620 Authority key identifier: 71:E2:18:12:C7:06:61:45:DF:F7:A1:DA:01:23:23:5A:5C:02:E9:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/b96d661d-151e-3e40-92d8-32407e1e3c9a.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 53616 IP address blocks: 2602:fa67::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:23:81:ce:4f:7f:f7:b9:98:46:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=380e678f-a53e-4fa7-8c2f-15f6fca7c8f9 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=bc78ecef-dbd8-48b3-b080-da2d390e5dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d4:a4:8f:8d:e5:ca:80:d1:a6:63:3f:1c:d0: bf:d0:c2:cf:f4:09:22:fe:d6:b3:2e:1c:6d:32:6a: 9b:bf:59:7c:da:2f:3b:86:b7:3e:9e:1f:6a:0e:ce: f3:24:1c:36:e0:7c:d8:2a:a7:83:e5:d2:47:6b:4f: 22:44:91:4e:36:58:c4:ce:84:e2:1e:74:a3:33:cb: cf:88:b2:5e:80:13:5e:76:9c:68:c5:4e:2d:b1:fd: 69:cb:45:47:35:8e:d6:dd:38:20:c4:03:8f:85:53: ae:be:26:c0:97:61:a2:0d:5d:bb:f7:52:c1:1d:ef: e0:42:f4:c0:02:f9:20:36:52:b1:36:bf:18:78:15: 28:c3:77:bf:a5:d8:10:fc:ac:53:4d:42:fd:45:c6: 27:23:46:c6:25:88:e7:a8:f2:45:83:84:de:96:96: 24:5b:10:3b:87:00:0c:39:18:a6:86:ed:ea:df:0f: 88:fa:a4:77:84:19:0b:b1:bb:d4:6d:a6:3b:a0:32: fc:40:da:04:fa:b5:10:0f:52:9e:6b:0a:01:5a:11: ef:61:9e:38:c9:3f:e3:70:8f:f0:2a:64:0e:58:e6: 35:8b:cd:6f:fb:a8:e0:d9:19:58:56:c8:3c:bb:12: 1d:14:de:93:9d:1d:4f:fa:5a:54:d1:57:79:8b:66: 3e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AA:1E:45:04:B3:B8:EE:E7:94:C7:06:A4:6D:76:BA:B9:FB:A6:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/b96d661d-151e-3e40-92d8-32407e1e3c9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.crl X509v3 Authority Key Identifier: keyid:71:E2:18:12:C7:06:61:45:DF:F7:A1:DA:01:23:23:5A:5C:02:E9:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa67::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:2f:08:a2:ac:6c:2f:1d:21:54:e3:73:a1:de:13:a9:4f:fc: 0e:29:08:3a:44:08:a1:09:46:8f:51:bb:ba:8b:d3:14:35:4a: 91:bf:94:8a:67:aa:e4:9a:fa:2f:24:75:5a:a3:e2:ca:24:52: 9a:f7:ee:17:db:84:ca:6a:55:0a:17:c1:d0:45:54:46:32:03: 67:c2:15:0a:8d:ae:48:67:0e:70:33:0c:61:22:c7:3b:10:eb: a2:09:fd:82:15:37:1a:30:4a:60:22:d8:0a:d9:27:06:17:b7: 36:36:4c:68:a0:59:31:0f:9c:5f:35:3f:f8:fd:7e:48:54:a3: 6b:41:a5:e0:eb:87:49:76:0d:ff:47:e5:58:6f:22:2f:43:eb: e9:bd:ec:ad:95:e6:60:b7:22:c0:8b:2b:13:73:64:2b:fd:cf: ce:52:21:de:50:d7:23:c8:b6:f2:e7:4f:6c:bb:b4:25:df:fd: 50:7e:45:25:b3:64:1a:62:d3:73:e1:e7:a1:f2:61:24:b6:4f: 30:ff:74:0b:b8:68:2e:aa:63:97:74:db:e8:ea:9c:5b:a6:fc: 13:2f:e2:2e:fd:1c:61:55:7d:d9:89:71:4c:63:40:15:c6:c7: 9f:94:4e:78:e2:44:99:e0:71:d8:96:3f:b8:94:a8:65:70:5c: 8e:77:c2:d0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmVXyOBzk9/97mYRiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzgwZTY3OGYtYTUzZS00ZmE3LThjMmYtMTVmNmZjYTdj OGY5MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk YmM3OGVjZWYtZGJkOC00OGIzLWIwODAtZGEyZDM5MGU1ZGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tSkj43lyoDRpmM/HNC/0MLP9Aki/tazLhxt Mmqbv1l82i87hrc+nh9qDs7zJBw24HzYKqeD5dJHa08iRJFONljEzoTiHnSjM8vP iLJegBNedpxoxU4tsf1py0VHNY7W3TggxAOPhVOuvibAl2GiDV2791LBHe/gQvTA AvkgNlKxNr8YeBUow3e/pdgQ/KxTTUL9RcYnI0bGJYjnqPJFg4TelpYkWxA7hwAM ORimhu3q3w+I+qR3hBkLsbvUbaY7oDL8QNoE+rUQD1KeawoBWhHvYZ44yT/jcI/w KmQOWOY1i81v+6jg2RlYVsg8uxIdFN6TnR1P+lpU0Vd5i2Y+MQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGmqHkUEs7ju55THBqRtdrq5+6bCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zODBl Njc4Zi1hNTNlLTRmYTctOGMyZi0xNWY2ZmNhN2M4ZjkvYjk2ZDY2MWQtMTUxZS0z ZTQwLTkyZDgtMzI0MDdlMWUzYzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzgwZTY3OGYtYTUzZS00ZmE3LThj MmYtMTVmNmZjYTdjOGY5LzM4MGU2NzhmLWE1M2UtNGZhNy04YzJmLTE1ZjZmY2E3 YzhmOS5jcmwwHwYDVR0jBBgwFoAUceIYEscGYUXf96HaASMjWlwC6WUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zODBlNjc4Zi1hNTNlLTRmYTctOGMyZi0xNWY2 ZmNhN2M4ZjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL6ZwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEApy8IoqxsLx0hVONzod4TqU/8DikIOkQIoQlGj1G7uovTFDVKkb+U imeq5Jr6LyR1WqPiyiRSmvfuF9uEympVChfB0EVURjIDZ8IVCo2uSGcOcDMMYSLH OxDrogn9ghU3GjBKYCLYCtknBhe3NjZMaKBZMQ+cXzU/+P1+SFSja0Gl4OuHSXYN /0flWG8iL0Pr6b3srZXmYLciwIsrE3NkK/3PzlIh3lDXI8i28udPbLu0Jd/9UH5F JbNkGmLTc+HnofJhJLZPMP90C7hoLqpjl3Tb6OqcW6b8Ey/iLv0cYVV92YlxTGNA FcbHn5ROeOJEmeBx2JY/uJSoZXBcjnfC0A== -----END CERTIFICATE-----Generated at Wed May 7 07:22:11 2025 by rpki-client