$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c7cf8b1d-dbcb-31b0-85ac-f21982c684bb.roa File: c7cf8b1d-dbcb-31b0-85ac-f21982c684bb.roa (raw, json) Hash identifier: JQxZtCHghCI9HfoZBrMH+WhNnmoDDTcnbM441lUK3Us= Subject key identifier: 70:1A:6C:91:61:ED:EB:19:2A:5B:39:E7:DA:3E:97:F0:2D:93:E1:3A Certificate issuer: /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Certificate serial: 010D0C9F43285849BF3F65857B3BDDFBAED79940 Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c7cf8b1d-dbcb-31b0-85ac-f21982c684bb.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 38047 IP address blocks: 2602:f83b:886::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:65:85:7b:3b:dd:fb:ae:d7:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=af931510-e42e-4a0a-b7cc-cab8a11352ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d8:b8:07:26:d6:74:26:61:49:7f:60:f3:3f: f6:8d:28:13:9b:75:c8:4d:df:91:3e:ab:c7:8d:30: ad:dc:77:44:12:24:c4:d3:9e:6c:7e:80:48:41:4d: c2:c2:f8:3e:da:c6:78:f7:d1:40:3d:3a:48:29:01: 00:1c:2c:c0:5d:7f:5a:30:52:59:b7:3a:88:bb:fb: b5:48:30:2d:47:c8:06:45:d2:4a:46:c7:e3:95:84: 42:4e:3d:42:f8:16:9c:d8:2b:20:0b:1a:52:e3:6f: 6f:a2:35:e4:40:3f:82:3e:ed:fe:86:f0:e1:35:f7: 4b:b0:33:d8:07:8b:35:0d:df:b2:21:3e:71:a0:6f: 9a:c8:52:9b:65:1a:4d:2c:8a:7c:3c:7d:c4:b9:20: 64:58:c0:a9:23:ef:ca:51:69:65:94:09:53:42:0a: c4:86:f5:22:25:51:8e:12:7f:0d:92:bc:00:52:64: 6c:fd:c6:33:9e:18:4e:e2:f5:8b:f5:39:8d:0b:8f: f4:33:bc:8a:1c:4b:36:a4:4e:99:f5:17:39:36:38: af:9a:78:f3:9c:5a:3c:78:00:b8:dc:62:f8:4d:24: f6:bc:d4:1e:83:cf:6b:56:9f:92:48:fe:0b:9b:79: 72:98:36:d1:9c:6c:a6:b7:20:9d:6f:d6:a8:9c:98: 12:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1A:6C:91:61:ED:EB:19:2A:5B:39:E7:DA:3E:97:F0:2D:93:E1:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c7cf8b1d-dbcb-31b0-85ac-f21982c684bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl X509v3 Authority Key Identifier: keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer sbgp-ipAddrBlock: critical IPv6: 2602:f83b:886::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:99:82:72:a1:3d:fa:ba:11:5f:4e:16:e1:dd:22:27:98:5e: 1d:68:4c:32:8b:a8:8f:7a:9f:87:03:d8:00:3a:8b:3b:4f:19: dc:32:47:41:56:1e:31:11:2d:7d:1f:fb:04:52:9e:c9:4c:56: ef:ad:a8:73:aa:19:bf:1d:e6:c8:3d:cb:7d:ef:8f:bf:d9:65: 5d:33:e0:89:1c:c8:a2:12:dd:7d:fd:a6:ca:84:88:2d:8e:60: c6:9d:65:65:dd:b3:f7:a4:19:04:c3:0e:b8:9c:fe:ef:cc:cf: 0e:79:dc:0c:a8:6f:73:10:4e:d7:6e:43:e7:09:31:e0:b1:6c: 8e:de:6c:95:ff:c1:9f:f0:8b:e1:3e:af:f4:4e:a4:23:2c:80: 53:86:81:a2:48:3f:d7:f8:b9:de:8d:86:9a:fd:1f:5c:6b:db: 11:05:22:a9:d7:77:8e:6c:75:c9:85:8f:4f:f7:3e:7c:c7:f7: fa:9b:21:15:f5:69:cd:80:97:6a:41:e6:f9:88:d2:76:9d:47: c7:e8:60:da:fe:a4:1f:cd:47:07:b4:2b:10:9d:d7:8e:dc:c0: bf:85:6d:4e:37:1c:48:4c:52:cc:07:80:8f:81:b0:83:3f:53: 98:3f:6d:84:0d:d0:80:98:cd:ef:27:61:29:23:dc:cd:5f:8f: 2c:56:cd:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm/P2WFezvd+67XmUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg5OGMxMjItYjk4ZS00Y2U0LTk1YjQtZmU1ZjI1ZmRk MjYxMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk YWY5MzE1MTAtZTQyZS00YTBhLWI3Y2MtY2FiOGExMTM1MmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ni4BybWdCZhSX9g8z/2jSgTm3XITd+RPqvH jTCt3HdEEiTE055sfoBIQU3Cwvg+2sZ499FAPTpIKQEAHCzAXX9aMFJZtzqIu/u1 SDAtR8gGRdJKRsfjlYRCTj1C+Bac2CsgCxpS429vojXkQD+CPu3+hvDhNfdLsDPY B4s1Dd+yIT5xoG+ayFKbZRpNLIp8PH3EuSBkWMCpI+/KUWlllAlTQgrEhvUiJVGO En8NkrwAUmRs/cYznhhO4vWL9TmNC4/0M7yKHEs2pE6Z9Rc5NjivmnjznFo8eAC4 3GL4TST2vNQeg89rVp+SSP4Lm3lymDbRnGymtyCdb9aonJgS0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHAabJFh7esZKls559o+l/Atk+E6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4 YzEyMi1iOThlLTRjZTQtOTViNC1mZTVmMjVmZGQyNjEvYzdjZjhiMWQtZGJjYi0z MWIwLTg1YWMtZjIxOTgyYzY4NGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzg5OGMxMjItYjk4ZS00Y2U0LTk1 YjQtZmU1ZjI1ZmRkMjYxL2M4OThjMTIyLWI5OGUtNGNlNC05NWI0LWZlNWYyNWZk ZDI2MS5jcmwwHwYDVR0jBBgwFoAUv70ixlKUaZvmLUeXzBvNm78uNLwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4YzEyMi1iOThlLTRjZTQtOTViNC1mZTVm MjVmZGQyNjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4OwiG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAqZgnKhPfq6EV9OFuHdIieYXh1oTDKLqI96n4cD2AA6iztPGdwy R0FWHjERLX0f+wRSnslMVu+tqHOqGb8d5sg9y33vj7/ZZV0z4IkcyKIS3X39psqE iC2OYMadZWXds/ekGQTDDric/u/Mzw553Ayob3MQTtduQ+cJMeCxbI7ebJX/wZ/w i+E+r/ROpCMsgFOGgaJIP9f4ud6Nhpr9H1xr2xEFIqnXd45sdcmFj0/3PnzH9/qb IRX1ac2Al2pB5vmI0nadR8foYNr+pB/NRwe0KxCd147cwL+FbU43HEhMUswHgI+B sIM/U5g/bYQN0ICYze8nYSkj3M1fjyxWzbI= -----END CERTIFICATE-----Generated at Sat May 10 20:20:37 2025 by rpki-client