$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/9d2a61c9-bb18-3eb9-8d6e-dcce3306e07b.roa File: 9d2a61c9-bb18-3eb9-8d6e-dcce3306e07b.roa (raw, json) Hash identifier: aJDNqtExop/IDDu+fqTGa8cxP/6/xSy5YLiHFwVzh2g= Subject key identifier: 96:00:BF:FC:64:13:42:D6:2E:04:EB:74:16:DC:1A:DD:19:0A:55:F9 Certificate issuer: /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Certificate serial: 010D0C9F43285849BB0F72081D63418D277C0DD8 Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/9d2a61c9-bb18-3eb9-8d6e-dcce3306e07b.roa Signing time: Sat 03 May 2025 13:01:01 +0000 ROA not before: Sat 03 May 2025 13:01:01 +0000 ROA not after: Fri 01 Aug 2025 13:01:01 +0000 asID: 63139 IP address blocks: 2602:fa80:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bb:0f:72:08:1d:63:41:8d:27:7c:0d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Validity Not Before: May 3 13:01:01 2025 GMT Not After : Aug 1 13:01:01 2025 GMT Subject: CN=38a50500-6a5f-47aa-b141-2a9e4c4aa664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:26:56:99:25:4f:64:0a:c7:ea:d8:b1:aa:2f: 79:52:a0:8a:29:41:d0:30:52:e5:2c:6c:da:a0:3b: 06:58:76:da:7f:06:3e:de:7c:30:49:07:ff:dc:62: 35:84:23:f3:22:ae:2c:66:39:8c:a2:ad:57:af:ae: 1f:ee:0e:d6:97:e8:c0:a9:d9:32:83:ad:c0:59:d0: f3:a1:1d:08:de:07:9a:e8:9c:2a:e4:d9:00:a8:a0: 1b:e5:22:d7:4e:6a:13:ef:2d:0b:d0:02:cb:f3:ad: 8e:81:96:2f:df:58:13:27:90:f3:25:cd:88:0e:8a: b4:a7:2a:38:07:21:33:f0:65:f7:6b:90:1f:27:57: 45:eb:d3:8a:07:73:e4:42:80:75:5f:48:e6:a2:14: a4:94:97:98:31:84:8f:81:dc:66:29:67:45:0c:65: 40:d2:98:cd:cf:52:7d:d0:f7:29:3b:85:3b:38:0e: b9:ed:e6:ea:9a:a7:3a:d7:df:03:fd:f7:db:68:38: e1:02:af:e3:68:45:cb:20:f0:b7:6a:a2:86:11:cf: 5a:b9:68:89:94:17:3b:36:60:74:bd:1b:74:b2:2c: 09:78:2f:3f:38:f2:5f:be:43:db:3e:f2:2a:44:66: b6:65:a9:b2:b3:35:bb:5d:b7:3e:10:d1:4b:53:c7: 85:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:00:BF:FC:64:13:42:D6:2E:04:EB:74:16:DC:1A:DD:19:0A:55:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/9d2a61c9-bb18-3eb9-8d6e-dcce3306e07b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl X509v3 Authority Key Identifier: keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa80:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:87:2d:8d:c6:3d:d9:b7:93:68:40:1f:e3:dd:48:18:01:0c: 5c:e8:2f:c2:0c:79:74:48:85:ff:f3:5e:98:0e:29:93:2b:62: 8b:a1:5d:20:53:89:e6:d8:1d:25:a5:3b:32:bb:79:82:45:b6: fe:64:5d:18:db:d6:99:0c:5d:3b:3b:81:45:4e:80:41:14:9e: 9b:03:3b:83:b2:21:a3:e6:67:c2:12:cc:3e:af:2f:9a:4a:44: 04:67:a0:7a:38:03:41:44:ff:99:df:70:94:4c:3c:34:9d:0b: e7:ef:ec:9b:87:f3:46:f6:a6:7f:05:e2:79:b4:ec:9f:c7:d3: cd:3e:5d:29:12:1f:0c:36:89:fc:5d:f0:e7:e9:63:89:92:d4: c6:ab:53:01:76:c8:09:5a:ff:2a:ca:16:cf:16:a7:90:da:9a: cb:12:87:8e:9a:12:12:28:c9:e3:f0:8b:5f:07:56:77:d0:ea: a1:06:e4:dc:74:cc:f0:2f:e3:5e:50:0e:8a:69:71:51:4c:54: de:be:94:b0:0d:d3:49:38:e1:31:ff:68:d2:a7:05:ae:71:e7: d7:9a:54:44:a4:c6:c2:66:b4:cf:6e:08:9a:4a:fd:1a:7a:e9: b8:32:10:89:92:08:36:7b:62:c2:e1:39:de:18:3a:83:f2:d5: fc:b9:e5:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm7D3IIHWNBjSd8DdgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM1ZmVmZDctZjJlNS00MTZjLTkzMmEtMGQ1MmQ0MzBj M2NkMB4XDTI1MDUwMzEzMDEwMVoXDTI1MDgwMTEzMDEwMVowLzEtMCsGA1UEAxMk MzhhNTA1MDAtNmE1Zi00N2FhLWIxNDEtMmE5ZTRjNGFhNjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSZWmSVPZArH6tixqi95UqCKKUHQMFLlLGza oDsGWHbafwY+3nwwSQf/3GI1hCPzIq4sZjmMoq1Xr64f7g7Wl+jAqdkyg63AWdDz oR0I3gea6Jwq5NkAqKAb5SLXTmoT7y0L0ALL862OgZYv31gTJ5DzJc2IDoq0pyo4 ByEz8GX3a5AfJ1dF69OKB3PkQoB1X0jmohSklJeYMYSPgdxmKWdFDGVA0pjNz1J9 0PcpO4U7OA657ebqmqc6198D/ffbaDjhAq/jaEXLIPC3aqKGEc9auWiJlBc7NmB0 vRt0siwJeC8/OPJfvkPbPvIqRGa2ZamyszW7Xbc+ENFLU8eFzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJYAv/xkE0LWLgTrdBbcGt0ZClX5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMzVm ZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUyZDQzMGMzY2QvOWQyYTYxYzktYmIxOC0z ZWI5LThkNmUtZGNjZTMzMDZlMDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjM1ZmVmZDctZjJlNS00MTZjLTkz MmEtMGQ1MmQ0MzBjM2NkL2IzNWZlZmQ3LWYyZTUtNDE2Yy05MzJhLTBkNTJkNDMw YzNjZC5jcmwwHwYDVR0jBBgwFoAUZ091vhrEcuxX36Z5sp6D+bELf9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMzVmZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUy ZDQzMGMzY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6gAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ2HLY3GPdm3k2hAH+PdSBgBDFzoL8IMeXRIhf/zXpgOKZMrYouh XSBTiebYHSWlOzK7eYJFtv5kXRjb1pkMXTs7gUVOgEEUnpsDO4OyIaPmZ8ISzD6v L5pKRARnoHo4A0FE/5nfcJRMPDSdC+fv7JuH80b2pn8F4nm07J/H080+XSkSHww2 ifxd8OfpY4mS1MarUwF2yAla/yrKFs8Wp5DamssSh46aEhIoyePwi18HVnfQ6qEG 5Nx0zPAv415QDoppcVFMVN6+lLAN00k44TH/aNKnBa5x59eaVESkxsJmtM9uCJpK /Rp66bgyEImSCDZ7YsLhOd4YOoPy1fy55Xo= -----END CERTIFICATE-----Generated at Sat May 10 20:12:51 2025 by rpki-client