$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/3d7cf9ed-a044-32ff-8cec-e0066d17c0f0.roa File: 3d7cf9ed-a044-32ff-8cec-e0066d17c0f0.roa (raw, json) Hash identifier: /MScF2lu/B5N6sC0/tzCPO40kttcViKfJvCDsv9Tkm4= Subject key identifier: F0:6F:3A:F4:BB:DB:A7:A5:7A:7C:55:A0:45:74:B2:71:27:78:FD:0F Certificate issuer: /CN=8c1e504b-f881-4524-a98f-2a623e4a476d Certificate serial: 010D0C9F43285849BDDA28BA2E1EE8949B111D00 Authority key identifier: B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/3d7cf9ed-a044-32ff-8cec-e0066d17c0f0.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 396952 IP address blocks: 2602:fec2::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:28:ba:2e:1e:e8:94:9b:11:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1e504b-f881-4524-a98f-2a623e4a476d Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=84857f8a-a0d4-4520-8c67-eae6c6075e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bf:ad:fd:88:04:1a:55:ec:5c:cd:6b:06:65: 8b:20:ee:d5:c6:d8:35:f8:a7:75:d5:0c:dd:e8:6f: fd:e2:38:04:2f:03:03:72:87:c2:c7:05:6a:10:f5: 90:64:94:bb:91:56:fa:60:c7:cd:89:43:6b:26:b1: 36:72:d7:1f:37:d8:9a:2e:db:97:0e:c6:28:2d:93: 47:c3:66:82:69:a8:2f:ec:56:cf:30:4d:1f:07:58: 7e:ce:11:e5:e5:46:59:84:10:8c:77:25:b3:ba:d6: 0a:46:35:03:52:aa:df:ff:94:20:63:7a:70:b3:1f: 64:9a:ad:8a:d8:6d:4f:31:40:13:b3:66:55:24:b5: b4:1d:dc:1f:01:bc:c6:0d:07:2a:78:b7:41:46:a1: 3d:65:ff:db:16:43:35:44:bd:da:8f:28:4c:4f:fc: 44:00:eb:76:87:7a:e7:57:10:60:7c:89:89:b2:3a: 5b:d2:21:22:a4:13:89:90:01:4f:40:c5:f0:4e:0d: c6:6b:3a:51:72:b5:5e:47:10:ab:cf:e4:3b:f3:57: a4:da:0e:53:0c:e2:13:75:87:46:0c:53:0e:e4:ad: 14:fd:9a:b3:89:08:8e:90:a3:50:3f:2d:f4:86:79: cd:01:3d:3c:39:86:20:96:3f:52:79:01:67:ce:53: f7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6F:3A:F4:BB:DB:A7:A5:7A:7C:55:A0:45:74:B2:71:27:78:FD:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/3d7cf9ed-a044-32ff-8cec-e0066d17c0f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl X509v3 Authority Key Identifier: keyid:B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer sbgp-ipAddrBlock: critical IPv6: 2602:fec2::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:10:48:cd:d6:dc:60:1f:ce:84:02:c8:d2:6c:87:5e:74:9e: 75:50:e9:6b:51:e3:fa:c3:49:dd:b7:ff:25:0a:c0:90:26:51: 7e:91:95:a7:d9:38:fa:fe:ec:51:9f:42:af:db:cd:8d:45:f5: a0:9d:a1:01:0f:87:e6:a5:af:90:b4:ad:81:32:fd:68:f7:4d: 05:e2:b7:04:3d:83:34:79:e1:3a:4f:89:16:c1:b5:e1:3c:ed: ca:0c:33:12:38:15:86:e3:6a:ef:db:1d:ff:51:bf:6d:c1:c6: 28:c1:ef:34:cb:d6:08:3b:58:01:71:52:1e:f8:78:ba:d4:03: 53:dd:5b:35:66:39:3d:39:21:d7:cb:ba:d5:68:39:12:ad:0c: 7c:12:eb:e9:61:c0:af:7b:39:70:71:38:ce:96:12:74:da:76: 81:2e:dc:50:3f:ae:ba:36:da:58:c9:6c:20:4e:d0:73:bb:22: 3f:75:38:71:21:da:57:eb:a2:51:91:48:70:5a:58:27:8a:34: bf:d5:d2:15:61:a0:d0:d8:ec:fc:1a:8e:b6:c9:32:0e:8c:35: 8e:e8:43:cb:c2:60:d5:e4:59:65:d6:0d:40:10:c0:9f:47:0d: 30:dc:1b:55:2c:71:ab:95:9b:a1:58:4c:95:30:26:50:91:dd: e3:b7:e1:9d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm92ii6Lh7olJsRHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZTUwNGItZjg4MS00NTI0LWE5OGYtMmE2MjNlNGE0 NzZkMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ODQ4NTdmOGEtYTBkNC00NTIwLThjNjctZWFlNmM2MDc1ZTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr+t/YgEGlXsXM1rBmWLIO7Vxtg1+Kd11Qzd 6G/94jgELwMDcofCxwVqEPWQZJS7kVb6YMfNiUNrJrE2ctcfN9iaLtuXDsYoLZNH w2aCaagv7FbPME0fB1h+zhHl5UZZhBCMdyWzutYKRjUDUqrf/5QgY3pwsx9kmq2K 2G1PMUATs2ZVJLW0HdwfAbzGDQcqeLdBRqE9Zf/bFkM1RL3ajyhMT/xEAOt2h3rn VxBgfImJsjpb0iEipBOJkAFPQMXwTg3GazpRcrVeRxCrz+Q781ek2g5TDOITdYdG DFMO5K0U/ZqziQiOkKNQPy30hnnNAT08OYYglj9SeQFnzlP3GwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPBvOvS726elenxVoEV0snEneP0PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YzFl NTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYyM2U0YTQ3NmQvM2Q3Y2Y5ZWQtYTA0NC0z MmZmLThjZWMtZTAwNjZkMTdjMGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGMxZTUwNGItZjg4MS00NTI0LWE5 OGYtMmE2MjNlNGE0NzZkLzhjMWU1MDRiLWY4ODEtNDUyNC1hOThmLTJhNjIzZTRh NDc2ZC5jcmwwHwYDVR0jBBgwFoAUuQRCw8+VQmCHza4q1ILHTtwYGN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YzFlNTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYy M2U0YTQ3NmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL+wjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCEEEjN1txgH86EAsjSbIdedJ51UOlrUeP6w0ndt/8lCsCQJlF+kZWn 2Tj6/uxRn0Kv282NRfWgnaEBD4fmpa+QtK2BMv1o900F4rcEPYM0eeE6T4kWwbXh PO3KDDMSOBWG42rv2x3/Ub9twcYowe80y9YIO1gBcVIe+Hi61ANT3Vs1Zjk9OSHX y7rVaDkSrQx8EuvpYcCvezlwcTjOlhJ02naBLtxQP666NtpYyWwgTtBzuyI/dThx IdpX66JRkUhwWlgnijS/1dIVYaDQ2Oz8Go62yTIOjDWO6EPLwmDV5Fll1g1AEMCf Rw0w3BtVLHGrlZuhWEyVMCZQkd3jt+Gd -----END CERTIFICATE-----Generated at Wed May 14 12:09:14 2025 by rpki-client