$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/a05e816d-14ac-367c-876a-ed9f65d71b90.roa File: a05e816d-14ac-367c-876a-ed9f65d71b90.roa (raw, json) Hash identifier: 4/055W+HIWTN6fXh4v6ejEW9a9/qDr6DHutcC5DbzUc= Subject key identifier: A0:C9:F3:B8:B9:A0:5E:F7:7A:2B:30:42:97:12:79:C7:3F:AF:88:C0 Certificate issuer: /CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814 Certificate serial: 010D0C9F43285849BDDA22958B28EC1BD12F8280 Authority key identifier: AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/a05e816d-14ac-367c-876a-ed9f65d71b90.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 35008 IP address blocks: 2602:2d5::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:22:95:8b:28:ec:1b:d1:2f:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=3f8cac21-9db3-46c5-94b2-9c3aef30d9b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3b:0f:a4:53:1c:4e:d3:12:05:71:e6:86:37: 52:06:55:8b:e0:e5:56:72:48:8a:2b:d1:a3:e0:c0: 02:fa:64:e4:d4:f9:35:29:ec:1a:2b:9a:ec:bd:42: 67:c6:a3:52:6d:1d:16:90:93:85:27:f7:e0:db:bb: 38:aa:0e:c1:07:6a:6f:09:57:12:a1:5e:bf:e2:2f: c8:43:e5:3b:ca:a0:64:e7:2b:d0:02:77:8b:df:e6: 58:7a:3c:22:e8:79:a6:0f:3e:82:ff:28:87:00:c9: b9:ae:71:9e:63:4b:d0:81:fd:ff:5f:d5:13:50:ff: 4b:b4:80:1f:2a:fb:b0:1f:7f:22:bb:91:8e:2c:7b: 01:4b:2c:21:4b:86:23:78:90:79:03:b2:c7:9d:51: 01:c5:1a:4d:a8:9d:9a:6e:86:f0:f1:86:ee:b0:40: a6:f9:57:fb:70:dd:69:39:11:52:f2:73:d0:5b:6f: ec:5f:67:c0:59:f6:22:2b:6e:d1:50:ea:47:1c:f7: 6a:4e:9a:19:0a:72:42:85:41:f0:3d:7c:48:8d:f0: 7f:fa:6a:c2:ca:15:57:cb:e6:87:1f:14:e2:db:1a: 8b:d0:c0:37:f1:40:dd:25:89:2c:ca:ce:42:1d:7b: 39:80:52:4a:e4:e3:90:73:3f:fa:ee:95:fa:66:be: 17:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C9:F3:B8:B9:A0:5E:F7:7A:2B:30:42:97:12:79:C7:3F:AF:88:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/a05e816d-14ac-367c-876a-ed9f65d71b90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl X509v3 Authority Key Identifier: keyid:AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer sbgp-ipAddrBlock: critical IPv6: 2602:2d5::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:18:97:cc:38:43:1f:ae:cb:4f:78:0a:b9:bc:f6:68:77:86: f7:cc:79:ad:7c:44:9a:33:ba:78:eb:bb:89:6f:b5:a1:19:75: 0c:5d:73:55:c7:6c:8c:94:ea:33:0f:11:0d:fd:7f:d1:0d:a1: 9f:cd:97:9a:87:aa:3d:2f:b8:01:b5:42:61:f7:ee:d9:fe:a5: 0f:93:15:b2:b2:a6:ae:b0:9d:7d:c0:15:ff:24:0d:96:77:40: af:21:ad:de:c9:3d:5f:16:5a:f9:27:a1:79:7f:d5:3b:d9:e9: 74:08:c2:59:a5:51:d3:90:bf:08:a1:28:6d:13:67:99:07:65: ce:b3:bf:62:3e:87:b0:50:be:bb:e6:f7:b5:cd:9f:1f:0f:14: f2:c9:c7:b2:eb:58:7d:eb:a7:14:b3:82:00:50:9c:9b:1e:e8: 12:90:58:83:9c:53:61:2a:4e:40:8b:89:38:8e:54:69:f6:f7: 26:2c:47:f2:eb:f0:01:ab:9f:f3:16:70:da:10:39:31:2d:3e: 01:89:7e:19:5a:2b:b3:01:bf:15:6e:8a:c8:83:80:1f:58:88: 31:ed:c3:e6:38:e9:b1:fe:cd:50:64:a4:d7:92:8e:c1:35:c2: 43:23:69:69:bc:93:a0:c2:e8:1b:9d:02:64:76:11:45:98:41: 29:1b:ff:70 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEm92iKViyjsG9EvgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YxYjVhYTktZmM1YS00ZmI3LTg5MmQtMGZhYmY5YjYz ODE0MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk M2Y4Y2FjMjEtOWRiMy00NmM1LTk0YjItOWMzYWVmMzBkOWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDsPpFMcTtMSBXHmhjdSBlWL4OVWckiKK9Gj 4MAC+mTk1Pk1KewaK5rsvUJnxqNSbR0WkJOFJ/fg27s4qg7BB2pvCVcSoV6/4i/I Q+U7yqBk5yvQAneL3+ZYejwi6HmmDz6C/yiHAMm5rnGeY0vQgf3/X9UTUP9LtIAf KvuwH38iu5GOLHsBSywhS4YjeJB5A7LHnVEBxRpNqJ2abobw8YbusECm+Vf7cN1p ORFS8nPQW2/sX2fAWfYiK27RUOpHHPdqTpoZCnJChUHwPXxIjfB/+mrCyhVXy+aH HxTi2xqL0MA38UDdJYksys5CHXs5gFJK5OOQcz/67pX6Zr4XfQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKDJ87i5oF73eiswQpcSecc/r4jAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZjFi NWFhOS1mYzVhLTRmYjctODkyZC0wZmFiZjliNjM4MTQvYTA1ZTgxNmQtMTRhYy0z NjdjLTg3NmEtZWQ5ZjY1ZDcxYjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2YxYjVhYTktZmM1YS00ZmI3LTg5 MmQtMGZhYmY5YjYzODE0LzNmMWI1YWE5LWZjNWEtNGZiNy04OTJkLTBmYWJmOWI2 MzgxNC5jcmwwHwYDVR0jBBgwFoAUrloX1F4ZJ5TObM909xhdmFWLzZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZjFiNWFhOS1mYzVhLTRmYjctODkyZC0wZmFi ZjliNjM4MTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIC1QAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALRiXzDhDH67LT3gKubz2aHeG98x5rXxEmjO6eOu7iW+1oRl1DF1z VcdsjJTqMw8RDf1/0Q2hn82XmoeqPS+4AbVCYffu2f6lD5MVsrKmrrCdfcAV/yQN lndAryGt3sk9XxZa+SeheX/VO9npdAjCWaVR05C/CKEobRNnmQdlzrO/Yj6HsFC+ u+b3tc2fHw8U8snHsutYfeunFLOCAFCcmx7oEpBYg5xTYSpOQIuJOI5Uafb3JixH 8uvwAauf8xZw2hA5MS0+AYl+GVorswG/FW6KyIOAH1iIMe3D5jjpsf7NUGSk15KO wTXCQyNpabyToMLoG50CZHYRRZhBKRv/cA== -----END CERTIFICATE-----Generated at Tue May 6 07:50:27 2025 by rpki-client