$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1/a17e17bd-2e17-3231-bee0-626c5aa412d3.roa File: a17e17bd-2e17-3231-bee0-626c5aa412d3.roa (raw, json) Hash identifier: LuC8lyuDrntE+G2gOQSB+3JBO3ZTA2WvB5QHgDMYpSQ= Subject key identifier: 42:2C:2A:30:18:AF:BB:E2:F1:52:50:77:A1:A9:0A:A3:C8:A2:9C:F5 Certificate issuer: /CN=24664a36-96dd-46d7-9d91-bebf99797af1 Certificate serial: 010D0C9F4328584975445BCF481231AFAAD27DC0 Authority key identifier: 1B:72:32:4D:98:F7:CD:39:96:E6:96:F3:69:22:0E:02:99:E0:5D:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1/a17e17bd-2e17-3231-bee0-626c5aa412d3.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 33760 IP address blocks: 2602:2e1::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1/24664a36-96dd-46d7-9d91-bebf99797af1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1/24664a36-96dd-46d7-9d91-bebf99797af1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:5b:cf:48:12:31:af:aa:d2:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24664a36-96dd-46d7-9d91-bebf99797af1 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=205c7f97-4136-4f1d-b270-c7bb484b0189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:21:87:d8:82:2e:17:c4:be:56:9b:07:16:e1: bc:7e:fb:c0:12:e4:76:5b:37:b3:81:ff:7b:fd:b7: f6:fe:81:2b:e5:d2:03:5a:c3:35:7a:59:cd:4f:5f: 9e:50:99:7c:53:bd:e2:ef:36:04:07:e1:4c:4f:a4: 4e:cd:87:6f:ad:ea:ad:48:b6:4a:42:24:c5:24:e9: 50:09:f6:c8:b9:c0:df:63:38:89:54:e9:f4:34:67: ab:ad:61:3a:c6:8e:3f:9e:c8:9c:5f:0c:40:f5:4d: ce:39:1a:6f:d0:a5:cf:87:d7:b7:13:c4:f4:9c:c4: 03:6f:be:9b:5d:e4:33:97:ab:10:09:f9:88:11:bf: 9c:59:0e:b2:35:7f:ed:d9:70:29:ac:d6:66:69:fd: ef:9a:19:51:06:39:54:7f:2b:e4:b6:1a:d3:a2:4f: 57:83:ae:df:a3:ae:1c:d3:d1:6e:a3:9d:11:44:5d: 0d:7b:8e:3d:69:5f:13:93:ee:ff:4f:79:4e:74:9b: 4f:33:85:98:07:5f:f0:af:e8:f8:98:01:fe:2d:dc: cf:a1:5b:b3:ad:1f:8f:10:2d:bc:c8:76:e9:23:49: ba:98:7c:d6:bc:79:00:3a:6e:04:76:76:14:06:76: 7d:bd:fb:e7:df:69:6e:cd:3e:6d:95:dd:d9:c8:29: 92:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2C:2A:30:18:AF:BB:E2:F1:52:50:77:A1:A9:0A:A3:C8:A2:9C:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1/a17e17bd-2e17-3231-bee0-626c5aa412d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1/24664a36-96dd-46d7-9d91-bebf99797af1.crl X509v3 Authority Key Identifier: keyid:1B:72:32:4D:98:F7:CD:39:96:E6:96:F3:69:22:0E:02:99:E0:5D:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1.cer sbgp-ipAddrBlock: critical IPv6: 2602:2e1::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:6a:71:60:50:5a:b9:d8:4b:59:8f:ae:3e:de:f8:0b:b8:00: 46:c0:7c:2e:9a:82:ec:34:05:59:cb:58:a3:90:19:87:57:0a: 30:28:4c:de:1f:43:7e:14:91:83:b1:52:02:66:41:44:5d:d1: 87:42:ff:47:0f:67:bc:10:30:67:ef:58:28:4c:a2:ec:26:0c: 57:be:b9:04:82:9e:bf:c7:52:3f:d7:68:0f:a8:ba:d2:4e:90: ed:d5:12:3a:12:71:28:9c:b2:41:e3:ee:c9:04:a8:22:50:6f: 73:8f:17:7b:4b:b5:ee:33:6d:56:af:15:9b:5b:06:25:59:dc: 50:a0:c6:46:0d:4f:79:6c:a5:92:1d:fb:ad:9d:6c:5b:d8:59: f1:3e:8d:d9:46:d1:42:3f:d7:7d:9f:a3:d5:bf:f4:4d:ec:14: 53:98:45:69:9f:7f:2d:56:f3:c5:53:73:37:d9:04:a6:b3:cd: c3:9b:4e:0f:f7:95:14:8f:c3:e9:66:f9:25:42:2b:29:8b:7c: 5b:45:56:89:cc:cd:82:ff:ca:a6:96:46:e2:05:03:60:45:b7: 28:9b:07:3c:c1:12:6f:3f:a9:04:c3:53:b5:69:fe:03:13:31: da:3e:9c:4e:be:b1:91:4b:93:5e:ae:51:ac:66:45:7d:ed:1b: 83:7a:b4:7d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEl1RFvPSBIxr6rSfcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ2NjRhMzYtOTZkZC00NmQ3LTlkOTEtYmViZjk5Nzk3 YWYxMB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk MjA1YzdmOTctNDEzNi00ZjFkLWIyNzAtYzdiYjQ4NGIwMTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCGH2IIuF8S+VpsHFuG8fvvAEuR2Wzezgf97 /bf2/oEr5dIDWsM1elnNT1+eUJl8U73i7zYEB+FMT6ROzYdvreqtSLZKQiTFJOlQ CfbIucDfYziJVOn0NGerrWE6xo4/nsicXwxA9U3OORpv0KXPh9e3E8T0nMQDb76b XeQzl6sQCfmIEb+cWQ6yNX/t2XAprNZmaf3vmhlRBjlUfyvkthrTok9Xg67fo64c 09Fuo50RRF0Ne449aV8Tk+7/T3lOdJtPM4WYB1/wr+j4mAH+LdzPoVuzrR+PEC28 yHbpI0m6mHzWvHkAOm4EdnYUBnZ9vfvn32luzT5tld3ZyCmSbQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEIsKjAYr7vi8VJQd6GpCqPIopz1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNDY2 NGEzNi05NmRkLTQ2ZDctOWQ5MS1iZWJmOTk3OTdhZjEvYTE3ZTE3YmQtMmUxNy0z MjMxLWJlZTAtNjI2YzVhYTQxMmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjQ2NjRhMzYtOTZkZC00NmQ3LTlk OTEtYmViZjk5Nzk3YWYxLzI0NjY0YTM2LTk2ZGQtNDZkNy05ZDkxLWJlYmY5OTc5 N2FmMS5jcmwwHwYDVR0jBBgwFoAUG3IyTZj3zTmW5pbzaSIOApngXa4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yNDY2NGEzNi05NmRkLTQ2ZDctOWQ5MS1iZWJm OTk3OTdhZjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIC4QAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZWpxYFBaudhLWY+uPt74C7gARsB8LpqC7DQFWctYo5AZh1cKMChM 3h9DfhSRg7FSAmZBRF3Rh0L/Rw9nvBAwZ+9YKEyi7CYMV765BIKev8dSP9doD6i6 0k6Q7dUSOhJxKJyyQePuyQSoIlBvc48Xe0u17jNtVq8Vm1sGJVncUKDGRg1PeWyl kh37rZ1sW9hZ8T6N2UbRQj/XfZ+j1b/0TewUU5hFaZ9/LVbzxVNzN9kEprPNw5tO D/eVFI/D6Wb5JUIrKYt8W0VWiczNgv/KppZG4gUDYEW3KJsHPMESbz+pBMNTtWn+ AxMx2j6cTr6xkUuTXq5RrGZFfe0bg3q0fQ== -----END CERTIFICATE-----Generated at Sat May 10 17:56:30 2025 by rpki-client