$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/10a98a9b-b733-37e9-901d-63dd77533c16.roa File: 10a98a9b-b733-37e9-901d-63dd77533c16.roa (raw, json) Hash identifier: 4asIZmauP5y2/mwtRDdFTM3S6hat8j04NKujHFwDmaw= Subject key identifier: 7F:2A:FD:0C:54:EA:85:95:7C:58:C0:AF:F8:0E:C9:1C:DA:C6:4F:A9 Certificate issuer: /CN=3f8ce937-b65c-4889-8a3c-145d71949e14 Certificate serial: 010D0C9F43285849BDDA289437190DAF86748640 Authority key identifier: 73:7A:94:97:DE:E3:83:C1:8B:9D:50:15:D3:04:28:51:E9:B6:B8:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/10a98a9b-b733-37e9-901d-63dd77533c16.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 149522 IP address blocks: 2602:f829::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:28:94:37:19:0d:af:86:74:86:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ce937-b65c-4889-8a3c-145d71949e14 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=d5a9924c-c3e5-46ed-aa23-a05e2e5f0415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9f:5e:ad:8c:ce:66:9c:86:58:45:41:ea:6f: 7d:4a:b4:13:0b:aa:32:92:66:da:e4:3a:4f:d3:48: 65:71:1d:5a:9f:05:e2:39:3c:f2:14:a1:f3:17:d0: 4b:82:b1:21:66:c5:a3:ae:8e:83:cf:97:2f:c7:5e: 35:ef:9d:1a:9b:cc:eb:e7:77:71:57:3c:4c:18:bb: 43:d7:b4:03:92:77:7b:9a:6b:e8:2a:62:8f:11:55: b1:42:ef:19:3a:86:44:6d:bb:a0:95:68:a1:80:89: 4e:8b:9c:a0:40:74:99:31:56:70:56:fb:e2:eb:e5: f5:82:82:49:27:07:06:c7:59:d3:dd:8f:7b:f0:7b: 18:4f:d4:bf:95:77:04:f5:aa:95:24:af:35:d4:88: b1:5d:14:d9:0b:dc:cf:f0:37:d1:88:2e:a4:cd:41: 8e:12:90:2f:62:2a:d3:ab:ae:8a:59:28:6b:de:c7: e2:a8:72:b2:f7:84:e5:9f:3f:3f:72:8e:0f:fe:aa: 93:9b:67:0e:6c:09:77:17:9e:27:8a:fd:6a:d8:19: 9b:08:1f:a7:be:ac:ee:7b:83:91:66:b7:a0:4e:ce: db:8f:95:cc:8e:f3:a0:04:d2:06:f9:9c:f4:52:64: 8d:c7:36:2b:5b:98:a6:3e:be:69:1b:20:d2:df:34: db:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:2A:FD:0C:54:EA:85:95:7C:58:C0:AF:F8:0E:C9:1C:DA:C6:4F:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/10a98a9b-b733-37e9-901d-63dd77533c16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.crl X509v3 Authority Key Identifier: keyid:73:7A:94:97:DE:E3:83:C1:8B:9D:50:15:D3:04:28:51:E9:B6:B8:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer sbgp-ipAddrBlock: critical IPv6: 2602:f829::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ca:82:dd:3e:b1:ac:1f:e7:73:1f:34:79:a0:d3:08:fd:85: be:42:5a:70:0e:1a:05:1f:68:ed:42:9a:40:6e:9f:47:bc:ec: 15:f9:79:3e:fb:ab:37:e1:6a:ea:58:3c:71:cd:34:42:10:04: b4:a7:b5:85:e3:33:a4:3a:0c:d5:97:63:fb:80:65:95:aa:c4: 5c:b5:a2:b9:59:11:2e:af:83:b8:0e:43:d1:e5:fe:24:36:7b: d3:fb:30:89:66:42:e8:33:75:16:d5:b9:bd:1f:bb:50:08:54: 29:a0:02:88:41:8f:cb:ab:7f:34:82:cb:f7:5a:22:2a:d6:d9: c0:b8:c2:d2:5d:16:bb:1b:30:f2:81:83:f3:bc:74:9c:9f:2d: 09:0f:3b:20:44:67:a2:66:c3:c3:7c:61:bf:13:dc:47:a4:3f: c8:d9:5b:72:dd:6e:24:bd:1c:df:73:34:78:0d:0e:3c:16:e0: 8c:6a:22:7d:a5:a9:9d:40:fc:2f:07:8a:1c:64:92:28:16:c0: f9:c8:1b:d0:19:50:11:e9:b7:ee:b5:df:32:20:06:a3:b9:12: 60:96:28:51:6e:c2:f1:30:33:e4:1e:45:55:17:68:12:6f:88: ba:cd:51:83:cf:8c:a4:1f:8d:2d:50:a4:ca:fe:09:c1:0b:3f: b2:fa:34:4f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm92iiUNxkNr4Z0hkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4Y2U5MzctYjY1Yy00ODg5LThhM2MtMTQ1ZDcxOTQ5 ZTE0MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ZDVhOTkyNGMtYzNlNS00NmVkLWFhMjMtYTA1ZTJlNWYwNDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ9erYzOZpyGWEVB6m99SrQTC6oykmba5DpP 00hlcR1anwXiOTzyFKHzF9BLgrEhZsWjro6Dz5cvx141750am8zr53dxVzxMGLtD 17QDknd7mmvoKmKPEVWxQu8ZOoZEbbuglWihgIlOi5ygQHSZMVZwVvvi6+X1goJJ JwcGx1nT3Y978HsYT9S/lXcE9aqVJK811IixXRTZC9zP8DfRiC6kzUGOEpAvYirT q66KWShr3sfiqHKy94Tlnz8/co4P/qqTm2cObAl3F54niv1q2BmbCB+nvqzue4OR ZregTs7bj5XMjvOgBNIG+Zz0UmSNxzYrW5imPr5pGyDS3zTbTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH8q/QxU6oWVfFjAr/gOyRzaxk+pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zZjhj ZTkzNy1iNjVjLTQ4ODktOGEzYy0xNDVkNzE5NDllMTQvMTBhOThhOWItYjczMy0z N2U5LTkwMWQtNjNkZDc3NTMzYzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2Y4Y2U5MzctYjY1Yy00ODg5LThh M2MtMTQ1ZDcxOTQ5ZTE0LzNmOGNlOTM3LWI2NWMtNDg4OS04YTNjLTE0NWQ3MTk0 OWUxNC5jcmwwHwYDVR0jBBgwFoAUc3qUl97jg8GLnVAV0wQoUem2uAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zZjhjZTkzNy1iNjVjLTQ4ODktOGEzYy0xNDVk NzE5NDllMTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL4KQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAADKgt0+sawf53MfNHmg0wj9hb5CWnAOGgUfaO1CmkBun0e87BX5 eT77qzfhaupYPHHNNEIQBLSntYXjM6Q6DNWXY/uAZZWqxFy1orlZES6vg7gOQ9Hl /iQ2e9P7MIlmQugzdRbVub0fu1AIVCmgAohBj8urfzSCy/daIirW2cC4wtJdFrsb MPKBg/O8dJyfLQkPOyBEZ6Jmw8N8Yb8T3EekP8jZW3LdbiS9HN9zNHgNDjwW4Ixq In2lqZ1A/C8HihxkkigWwPnIG9AZUBHpt+613zIgBqO5EmCWKFFuwvEwM+QeRVUX aBJviLrNUYPPjKQfjS1QpMr+CcELP7L6NE8= -----END CERTIFICATE-----Generated at Thu May 8 19:02:09 2025 by rpki-client