$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/3dfe514e-fdc8-3a3e-8a80-5db3e5e6ccb0.roa File: 3dfe514e-fdc8-3a3e-8a80-5db3e5e6ccb0.roa (raw, json) Hash identifier: yAh7HFcaI5Zbf3N3LlDrj00cjyTCfsVA7oXfNveSsKg= Subject key identifier: 94:DB:8C:6E:41:81:43:7A:A1:27:1F:75:67:90:6A:1F:1A:F8:EA:B8 Certificate issuer: /CN=c04d5752-0429-45a3-a347-607b7dc70707 Certificate serial: 010D0C9F43285849B57A135DDA9575E252E5AF80 Authority key identifier: 9A:BF:C2:54:66:DF:73:F4:CD:FE:24:4F:FD:AA:10:9E:13:7B:0B:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/3dfe514e-fdc8-3a3e-8a80-5db3e5e6ccb0.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 32668 IP address blocks: 2602:f86a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/c04d5752-0429-45a3-a347-607b7dc70707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/c04d5752-0429-45a3-a347-607b7dc70707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:13:5d:da:95:75:e2:52:e5:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c04d5752-0429-45a3-a347-607b7dc70707 Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=b9382cdc-9a49-4a86-8563-0289a5389d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:93:b5:d6:91:2a:56:0a:36:bd:28:9d:07:bb: 51:7d:a0:b9:25:f0:b1:a7:89:9c:2b:bb:70:a6:32: 9b:a9:f2:03:6d:e2:9b:a3:94:d6:16:38:ab:50:4f: 5e:1a:8e:0d:95:55:17:5a:c8:b1:49:e1:73:7e:a5: 40:8d:1a:a4:af:4b:b7:38:35:03:3e:76:d7:63:7e: 3b:52:64:62:a3:fd:dc:26:c0:28:18:01:d8:bc:3e: 0b:de:80:67:be:9c:52:35:eb:f7:c0:e7:45:9d:9d: 93:97:54:68:1a:8d:b3:eb:59:25:24:2e:87:ff:5c: 08:b2:84:16:eb:be:fe:41:4e:24:16:f8:8e:ce:20: 9c:89:66:2d:1a:47:d9:96:15:17:98:a9:4a:ea:db: 5b:43:24:d6:a8:8f:4b:a7:7a:8c:cc:58:fe:6e:42: 25:7f:59:41:20:7a:e7:66:83:a4:02:2f:60:15:e3: 44:ca:b2:f2:4a:76:99:bd:9e:28:1b:fe:93:55:94: d0:98:95:d7:a3:aa:71:95:e9:29:09:82:d1:62:8e: 6b:39:ef:62:b8:bd:7d:b1:87:c6:37:18:52:7a:d2: e0:64:44:85:f6:b1:0e:94:ff:10:ac:12:2e:5a:dc: 67:e9:80:4e:4c:5d:18:d1:a0:7c:e3:06:f2:ed:eb: 91:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DB:8C:6E:41:81:43:7A:A1:27:1F:75:67:90:6A:1F:1A:F8:EA:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/3dfe514e-fdc8-3a3e-8a80-5db3e5e6ccb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/c04d5752-0429-45a3-a347-607b7dc70707.crl X509v3 Authority Key Identifier: keyid:9A:BF:C2:54:66:DF:73:F4:CD:FE:24:4F:FD:AA:10:9E:13:7B:0B:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707.cer sbgp-ipAddrBlock: critical IPv6: 2602:f86a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:c0:48:11:41:23:81:64:92:3f:01:98:41:88:30:b6:b2:26: d0:65:ef:49:9d:da:88:d7:a2:6c:fa:01:87:d0:ef:f7:c6:22: ee:a9:cd:87:1b:38:48:09:91:73:7c:6c:e9:26:88:41:e8:fa: 3f:5e:cc:a3:6c:b7:6a:f1:c5:e0:01:09:24:1f:ef:a0:f2:72: 9d:4e:13:57:ba:76:17:91:87:6a:83:22:eb:a6:87:f3:f0:45: 22:1d:1d:45:e2:7a:e6:71:a3:70:7c:cd:63:66:77:9c:4c:80: da:63:7a:04:31:7d:70:d9:3f:33:b7:e1:d6:50:f5:8a:52:65: 7a:89:6d:53:1b:ba:e2:95:62:09:48:f6:61:97:b6:ca:e6:b8: ac:a1:92:26:a7:a2:a1:87:3b:ea:2f:47:02:9d:cc:9e:be:a2: f6:c0:5f:d8:8a:7b:0e:e3:99:33:61:4b:dc:87:69:2d:f6:78: 72:a0:17:9e:5c:29:78:da:81:5b:55:dd:c8:9e:7c:b3:e1:90: f0:96:d4:86:a2:e0:61:b0:3b:65:3a:b1:88:de:c4:93:3c:20: 03:db:3b:1c:c1:3a:d5:96:3a:8a:6d:80:bf:57:03:15:36:40: 26:9e:d3:01:73:be:b4:2e:ce:73:c5:87:b7:02:bb:0c:98:05: e1:8c:6b:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm1ehNd2pV14lLlr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA0ZDU3NTItMDQyOS00NWEzLWEzNDctNjA3YjdkYzcw NzA3MB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk YjkzODJjZGMtOWE0OS00YTg2LTg1NjMtMDI4OWE1Mzg5ZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZO11pEqVgo2vSidB7tRfaC5JfCxp4mcK7tw pjKbqfIDbeKbo5TWFjirUE9eGo4NlVUXWsixSeFzfqVAjRqkr0u3ODUDPnbXY347 UmRio/3cJsAoGAHYvD4L3oBnvpxSNev3wOdFnZ2Tl1RoGo2z61klJC6H/1wIsoQW 677+QU4kFviOziCciWYtGkfZlhUXmKlK6ttbQyTWqI9Lp3qMzFj+bkIlf1lBIHrn ZoOkAi9gFeNEyrLySnaZvZ4oG/6TVZTQmJXXo6pxlekpCYLRYo5rOe9iuL19sYfG NxhSetLgZESF9rEOlP8QrBIuWtxn6YBOTF0Y0aB84wby7euRIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJTbjG5BgUN6oScfdWeQah8a+Oq4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jMDRk NTc1Mi0wNDI5LTQ1YTMtYTM0Ny02MDdiN2RjNzA3MDcvM2RmZTUxNGUtZmRjOC0z YTNlLThhODAtNWRiM2U1ZTZjY2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzA0ZDU3NTItMDQyOS00NWEzLWEz NDctNjA3YjdkYzcwNzA3L2MwNGQ1NzUyLTA0MjktNDVhMy1hMzQ3LTYwN2I3ZGM3 MDcwNy5jcmwwHwYDVR0jBBgwFoAUmr/CVGbfc/TN/iRP/aoQnhN7Cw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jMDRkNTc1Mi0wNDI5LTQ1YTMtYTM0Ny02MDdi N2RjNzA3MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4agAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGfASBFBI4Fkkj8BmEGIMLayJtBl70md2ojXomz6AYfQ7/fGIu6p zYcbOEgJkXN8bOkmiEHo+j9ezKNst2rxxeABCSQf76Dycp1OE1e6dheRh2qDIuum h/PwRSIdHUXieuZxo3B8zWNmd5xMgNpjegQxfXDZPzO34dZQ9YpSZXqJbVMbuuKV YglI9mGXtsrmuKyhkianoqGHO+ovRwKdzJ6+ovbAX9iKew7jmTNhS9yHaS32eHKg F55cKXjagVtV3ciefLPhkPCW1Iai4GGwO2U6sYjexJM8IAPbOxzBOtWWOoptgL9X AxU2QCae0wFzvrQuznPFh7cCuwyYBeGMa00= -----END CERTIFICATE-----Generated at Sat May 10 14:48:52 2025 by rpki-client