$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/7c33a304-1a62-32e5-90c8-e6647ca6d200.roa File: 7c33a304-1a62-32e5-90c8-e6647ca6d200.roa (raw, json) Hash identifier: dcOIlqZplRFygBH40PPMHcMRw/03W0yzPMw81BD2yHo= Subject key identifier: 84:57:7B:FC:6F:4A:55:94:A2:99:5F:88:CC:C9:76:32:69:EA:55:19 Certificate issuer: /CN=98161ef7-249b-450b-ba6a-5819e613ed63 Certificate serial: 010D0C9F43285849BDDA1F72AC396F444EB31900 Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/7c33a304-1a62-32e5-90c8-e6647ca6d200.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 21738 IP address blocks: 2602:2b7:40::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:1f:72:ac:39:6f:44:4e:b3:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=c8e82d36-e1cb-42e8-a233-11dd0a8d8ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b1:e0:ac:04:ac:92:bc:1e:46:97:19:62:f5: 62:de:2c:af:ef:23:83:e1:41:73:e5:31:2c:bb:aa: e4:22:8f:8b:c5:e8:20:bc:7f:d3:90:2a:a8:c7:99: f4:49:14:7c:01:ef:ba:4d:1d:03:b3:9f:85:bb:30: 74:b4:00:b2:00:f4:41:f1:5c:c4:01:f9:78:b6:f9: cc:92:40:88:e4:1c:46:57:63:a1:c8:d0:85:41:56: 7f:e6:d6:34:5a:c9:4a:70:1f:eb:d0:c1:84:b6:1d: 44:78:6c:e3:a6:48:95:be:bd:99:f5:06:24:00:ad: 69:08:79:7e:48:ed:b4:33:06:c3:e4:85:ca:a2:13: 27:c7:0d:0d:a7:df:7f:85:77:ab:02:43:e1:bd:4c: 61:dd:dc:0b:10:f6:d8:25:99:00:19:d9:d2:d5:98: 02:ba:bb:93:17:15:4b:b6:35:42:76:28:ce:0a:53: db:d2:e4:47:de:24:aa:b7:70:6b:c1:88:97:0c:08: 17:b9:fc:6a:bc:74:01:d1:9e:d1:99:fc:4a:2f:fb: f2:c3:29:66:ed:d5:b4:f9:06:07:47:f2:8f:05:90: 19:30:d6:1b:f5:dd:66:20:5e:b9:ec:53:55:17:e8: 57:5b:30:44:0e:f7:78:e5:10:da:10:0d:c4:8b:81: 65:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:57:7B:FC:6F:4A:55:94:A2:99:5F:88:CC:C9:76:32:69:EA:55:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/7c33a304-1a62-32e5-90c8-e6647ca6d200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl X509v3 Authority Key Identifier: keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer sbgp-ipAddrBlock: critical IPv6: 2602:2b7:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:4c:24:f9:71:02:01:1c:da:af:49:f9:9d:cf:be:5b:bb:95: 24:46:69:5c:e4:ae:fc:33:49:94:2a:9d:c5:c5:56:71:ed:77: 01:af:9a:ab:b7:cc:b5:5f:11:e7:e9:fa:c6:fb:97:9c:03:4d: 3c:f2:51:76:6f:be:76:59:9e:94:5d:aa:77:a8:a4:fc:1c:ad: 29:f9:31:69:c6:fd:95:17:53:c4:00:03:26:2b:1c:e2:e8:c2: 0a:28:da:c1:7b:5a:10:a6:eb:b8:4b:7b:d4:c8:b5:fe:63:fb: b1:f7:d4:14:8f:24:39:7e:b6:aa:99:7b:82:f8:38:60:01:c4: e4:a6:5a:55:96:59:da:1f:e0:93:ff:ce:10:82:ec:b8:93:92: 6b:53:9a:51:cc:dc:a1:8f:df:a3:ed:c0:17:99:ff:1a:3a:b5: 98:6e:c8:99:fe:55:69:48:8c:86:6f:19:47:07:21:f4:c0:4d: 90:c5:9c:06:8e:1c:17:f6:3d:ee:38:a5:b9:97:3f:42:31:94: ee:f7:8e:ed:c8:55:33:aa:fa:99:f3:f4:15:78:71:6a:d7:d4: cf:36:87:ab:19:cb:9d:f9:68:96:d9:78:5d:bd:56:91:78:3a: ac:0b:69:50:e8:bc:21:05:03:9d:9f:1d:d7:99:86:fe:0e:41: a0:6a:2f:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm92h9yrDlvRE6zGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgxNjFlZjctMjQ5Yi00NTBiLWJhNmEtNTgxOWU2MTNl ZDYzMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk YzhlODJkMzYtZTFjYi00MmU4LWEyMzMtMTFkZDBhOGQ4ZWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7HgrASskrweRpcZYvVi3iyv7yOD4UFz5TEs u6rkIo+LxeggvH/TkCqox5n0SRR8Ae+6TR0Ds5+FuzB0tACyAPRB8VzEAfl4tvnM kkCI5BxGV2OhyNCFQVZ/5tY0WslKcB/r0MGEth1EeGzjpkiVvr2Z9QYkAK1pCHl+ SO20MwbD5IXKohMnxw0Np99/hXerAkPhvUxh3dwLEPbYJZkAGdnS1ZgCuruTFxVL tjVCdijOClPb0uRH3iSqt3BrwYiXDAgXufxqvHQB0Z7RmfxKL/vywylm7dW0+QYH R/KPBZAZMNYb9d1mIF657FNVF+hXWzBEDvd45RDaEA3Ei4FlPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIRXe/xvSlWUoplfiMzJdjJp6lUZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODE2 MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5ZTYxM2VkNjMvN2MzM2EzMDQtMWE2Mi0z MmU1LTkwYzgtZTY2NDdjYTZkMjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTgxNjFlZjctMjQ5Yi00NTBiLWJh NmEtNTgxOWU2MTNlZDYzLzk4MTYxZWY3LTI0OWItNDUwYi1iYTZhLTU4MTllNjEz ZWQ2My5jcmwwHwYDVR0jBBgwFoAU1BnUREsRiVyMbWhl/etLT/KsGnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ODE2MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5 ZTYxM2VkNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICtwBA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADVMJPlxAgEc2q9J+Z3Pvlu7lSRGaVzkrvwzSZQqncXFVnHtdwGv mqu3zLVfEefp+sb7l5wDTTzyUXZvvnZZnpRdqneopPwcrSn5MWnG/ZUXU8QAAyYr HOLowgoo2sF7WhCm67hLe9TItf5j+7H31BSPJDl+tqqZe4L4OGABxOSmWlWWWdof 4JP/zhCC7LiTkmtTmlHM3KGP36PtwBeZ/xo6tZhuyJn+VWlIjIZvGUcHIfTATZDF nAaOHBf2Pe44pbmXP0IxlO73ju3IVTOq+pnz9BV4cWrX1M82h6sZy535aJbZeF29 VpF4OqwLaVDovCEFA52fHdeZhv4OQaBqLwk= -----END CERTIFICATE-----Generated at Sun May 11 14:39:49 2025 by rpki-client