$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/5f062dab-e944-3517-9d6b-a4c49d1df4db.roa File: 5f062dab-e944-3517-9d6b-a4c49d1df4db.roa (raw, json) Hash identifier: qziMmy+pUmp6KS2AnNdpYHTrVVd5UHyeXSJku9Td+fY= Subject key identifier: CF:E6:D0:77:3C:56:54:7E:49:5F:BC:10:15:C5:E5:82:63:29:F8:93 Certificate issuer: /CN=e4f064d0-9017-41e7-be21-c7b9883020d5 Certificate serial: 010D0C9F432858499BB84472E6BD6363E48E3040 Authority key identifier: 6A:6A:F6:74:83:1C:DA:7D:F3:92:B7:07:1A:A1:BE:0F:70:63:82:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/5f062dab-e944-3517-9d6b-a4c49d1df4db.roa Signing time: Tue 22 Apr 2025 07:35:24 +0000 ROA not before: Tue 22 Apr 2025 07:35:24 +0000 ROA not after: Mon 21 Jul 2025 07:35:24 +0000 asID: 21903 IP address blocks: 2602:fa6d:31::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9b:b8:44:72:e6:bd:63:63:e4:8e:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4f064d0-9017-41e7-be21-c7b9883020d5 Validity Not Before: Apr 22 07:35:24 2025 GMT Not After : Jul 21 07:35:24 2025 GMT Subject: CN=eb6612c2-674c-4fc0-9b1f-df0508bbd0d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:98:2b:7d:96:5b:77:6f:e1:09:29:b5:b7:6e: 8c:d0:56:b8:76:20:99:04:aa:31:b5:48:36:33:29: 2e:63:91:31:62:01:6c:48:5c:8a:72:4d:43:95:d2: 40:1f:7f:f2:f2:84:1b:1c:74:83:fe:5b:50:c5:53: c9:dd:b1:8d:95:aa:dc:de:8a:d8:b3:91:60:8a:c3: 21:8c:8a:7d:16:14:9b:98:2a:85:90:66:6f:bd:be: 46:e6:16:ca:3f:47:62:a1:70:9a:fc:12:a5:2e:3c: 8b:bb:a2:9b:2f:48:56:ed:ae:81:e4:81:af:84:fa: 53:b2:3a:c4:73:e2:84:1a:15:73:8e:c3:c2:9c:e8: ac:a1:81:9f:74:47:1c:52:01:3e:3a:69:d0:ee:e0: 64:91:7c:8e:54:49:64:38:53:27:df:e7:08:5c:94: 25:f6:4a:77:d1:77:f6:05:03:a8:0f:2b:22:11:30: 7a:02:cc:d4:91:0b:dc:40:67:3f:ab:f5:19:d0:41: 3b:92:04:b1:c7:00:87:60:06:24:a6:25:f7:96:69: 29:ae:dc:3c:c0:e9:75:58:2e:17:26:aa:9d:f4:67: 3a:18:9f:28:91:da:f8:77:7e:84:5e:90:f9:db:2a: f1:58:54:ca:95:3d:5f:26:f1:2b:f1:39:c8:0f:9d: 51:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E6:D0:77:3C:56:54:7E:49:5F:BC:10:15:C5:E5:82:63:29:F8:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/5f062dab-e944-3517-9d6b-a4c49d1df4db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.crl X509v3 Authority Key Identifier: keyid:6A:6A:F6:74:83:1C:DA:7D:F3:92:B7:07:1A:A1:BE:0F:70:63:82:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa6d:31::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:8b:84:99:d7:61:1b:b8:de:98:bd:d0:fe:7d:ae:1e:46:6b: 00:7f:7f:6f:c5:9d:51:63:6a:a5:4d:bc:99:4b:72:54:da:18: 6f:e7:42:7a:c1:a2:81:02:15:c6:99:b0:29:83:ac:73:aa:18: 7c:49:a6:55:7a:dd:c0:8a:02:93:9a:20:59:eb:5c:71:7f:d1: 57:57:4a:a2:0f:39:28:68:30:57:e6:a1:16:30:63:20:55:ec: 0d:b7:4a:67:fb:77:a6:6d:79:d7:b5:1f:e4:6a:bd:d1:4f:88: c6:49:9f:db:a6:46:7f:33:a3:bf:b8:52:5e:ca:de:87:9f:5d: 07:71:24:d1:b9:ce:e0:99:06:5b:ea:f5:ed:dc:7e:9e:ff:f2: 19:ee:ab:98:2c:a2:6e:bc:24:2c:88:3f:e7:25:23:db:e5:a1: a2:ea:5c:ef:4c:00:c4:f9:b0:29:d2:7c:0a:59:b7:e4:31:2e: 36:0e:a8:a7:01:94:fa:34:8d:e9:9c:8d:7a:db:97:14:e7:17: e3:d4:8e:85:1d:4e:03:ea:b0:d8:68:bc:5e:93:e8:bb:2c:e0: d2:93:28:d4:df:e2:9a:c1:4c:87:03:92:e3:c3:15:cb:e5:77: e2:d0:93:f2:a4:f1:c2:8f:5d:76:5a:b4:3f:57:d7:f5:6f:98: 34:32:6e:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmbuERy5r1jY+SOMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRmMDY0ZDAtOTAxNy00MWU3LWJlMjEtYzdiOTg4MzAy MGQ1MB4XDTI1MDQyMjA3MzUyNFoXDTI1MDcyMTA3MzUyNFowLzEtMCsGA1UEAxMk ZWI2NjEyYzItNjc0Yy00ZmMwLTliMWYtZGYwNTA4YmJkMGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZgrfZZbd2/hCSm1t26M0Fa4diCZBKoxtUg2 MykuY5ExYgFsSFyKck1DldJAH3/y8oQbHHSD/ltQxVPJ3bGNlarc3orYs5FgisMh jIp9FhSbmCqFkGZvvb5G5hbKP0dioXCa/BKlLjyLu6KbL0hW7a6B5IGvhPpTsjrE c+KEGhVzjsPCnOisoYGfdEccUgE+OmnQ7uBkkXyOVElkOFMn3+cIXJQl9kp30Xf2 BQOoDysiETB6AszUkQvcQGc/q/UZ0EE7kgSxxwCHYAYkpiX3lmkprtw8wOl1WC4X Jqqd9Gc6GJ8okdr4d36EXpD52yrxWFTKlT1fJvEr8TnID51RIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM/m0Hc8VlR+SV+8EBXF5YJjKfiTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lNGYw NjRkMC05MDE3LTQxZTctYmUyMS1jN2I5ODgzMDIwZDUvNWYwNjJkYWItZTk0NC0z NTE3LTlkNmItYTRjNDlkMWRmNGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTRmMDY0ZDAtOTAxNy00MWU3LWJl MjEtYzdiOTg4MzAyMGQ1L2U0ZjA2NGQwLTkwMTctNDFlNy1iZTIxLWM3Yjk4ODMw MjBkNS5jcmwwHwYDVR0jBBgwFoAUamr2dIMc2n3zkrcHGqG+D3BjgpcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lNGYwNjRkMC05MDE3LTQxZTctYmUyMS1jN2I5 ODgzMDIwZDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6bQAx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEOLhJnXYRu43pi90P59rh5GawB/f2/FnVFjaqVNvJlLclTaGG/n QnrBooECFcaZsCmDrHOqGHxJplV63cCKApOaIFnrXHF/0VdXSqIPOShoMFfmoRYw YyBV7A23Smf7d6Ztede1H+RqvdFPiMZJn9umRn8zo7+4Ul7K3oefXQdxJNG5zuCZ Blvq9e3cfp7/8hnuq5gsom68JCyIP+clI9vloaLqXO9MAMT5sCnSfApZt+QxLjYO qKcBlPo0jemcjXrblxTnF+PUjoUdTgPqsNhovF6T6Lss4NKTKNTf4prBTIcDkuPD Fcvld+LQk/Kk8cKPXXZatD9X1/VvmDQybsg= -----END CERTIFICATE-----Generated at Mon May 5 17:30:55 2025 by rpki-client