$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/6b1686d9-67b7-3c91-956b-3820802adc55.roa File: 6b1686d9-67b7-3c91-956b-3820802adc55.roa (raw, json) Hash identifier: DGviLz5EJt2TFbsoJBWehP2wJ9Tz1M++6AC6oPT8gLI= Subject key identifier: 40:28:00:F5:EB:5F:11:C8:E4:2A:52:32:99:E7:0D:6D:42:5C:5D:C8 Certificate issuer: /CN=37df7b6b-4b0b-49ae-b674-a5a88d9280f4 Certificate serial: 010D0C9F43285849A089CC6E2A7B210568708800 Authority key identifier: C2:87:47:C5:56:BF:DA:59:33:08:2B:B6:1B:8A:14:6B:15:F3:23:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/6b1686d9-67b7-3c91-956b-3820802adc55.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 398862 IP address blocks: 2602:f98e::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:cc:6e:2a:7b:21:05:68:70:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37df7b6b-4b0b-49ae-b674-a5a88d9280f4 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=ca9b5525-2d4b-4bfd-ae10-c4c13022a8c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3d:02:f0:b8:f3:2f:bb:4f:e4:38:d4:d9:25: 68:ec:d9:47:ac:1a:15:d6:fd:00:33:e3:1f:5e:e3: cd:22:61:5e:d5:c3:a1:81:84:19:b9:7b:62:7a:73: 78:3e:b0:79:20:8b:37:75:19:9a:ea:15:25:b8:90: 7c:06:87:05:e3:55:37:e3:21:70:24:3f:8a:35:15: 23:23:ed:11:cf:32:12:90:2e:f5:ec:2b:58:dc:ba: 20:6f:21:e9:8a:b6:b1:a0:71:65:f6:03:de:12:26: 57:3a:53:a9:0e:0d:03:62:af:72:2b:f2:3e:ac:d3: 9d:ec:33:ce:79:b7:62:91:73:4c:a2:3b:50:21:4b: ac:76:6c:af:df:bf:bc:65:48:10:42:c1:1a:b5:3b: d8:56:2b:45:fd:e0:e0:bb:18:89:6e:75:ee:d6:d4: ec:6e:dd:14:c2:b5:ca:0e:cd:f7:96:8a:da:c3:d0: c6:94:2f:05:2c:4e:b4:1e:3d:fd:9f:94:49:df:1b: fc:a2:4a:2c:7a:2c:6e:c5:7e:fe:a3:a3:3c:16:01: df:d2:9a:d6:33:bd:93:43:a7:86:20:00:51:83:91: 39:63:34:ca:35:db:6d:87:82:63:db:27:14:96:73: 8d:72:0f:ef:72:fa:f2:d3:c5:89:aa:1e:25:58:e5: 2d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:28:00:F5:EB:5F:11:C8:E4:2A:52:32:99:E7:0D:6D:42:5C:5D:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/6b1686d9-67b7-3c91-956b-3820802adc55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.crl X509v3 Authority Key Identifier: keyid:C2:87:47:C5:56:BF:DA:59:33:08:2B:B6:1B:8A:14:6B:15:F3:23:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.cer sbgp-ipAddrBlock: critical IPv6: 2602:f98e::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:9f:1d:f6:b5:79:a5:3a:cd:99:da:d1:11:cb:3e:65:a6:99: 1e:33:2d:fc:4a:9f:58:88:aa:1f:aa:a7:b7:a8:42:d9:c2:4c: 4e:ef:60:0f:b5:a0:22:10:58:00:c4:21:32:e7:ec:b1:61:59: 0a:e2:f5:b2:26:57:cc:1a:d2:7d:27:7a:b0:8f:ed:60:8a:94: 20:b3:71:89:91:88:b4:bd:96:b4:6d:66:c8:8a:59:ca:4b:e0: 6e:c5:89:a9:33:15:0a:88:1f:83:64:e7:e8:74:16:03:3b:74: 88:29:09:2b:eb:36:45:cd:c2:26:c6:2b:0f:5d:1a:12:1f:7f: 4f:57:96:ce:36:b7:c5:f9:0f:e2:29:bd:f5:3c:de:ae:ad:27: 21:18:ef:95:dc:3c:8d:75:cf:c1:40:58:1e:92:01:14:47:92: 3d:53:ae:b9:4a:6a:3a:77:e9:fa:2a:a2:46:23:7b:91:72:d5: 48:0c:4b:2f:75:80:f7:f5:ac:9f:8d:56:74:1d:5b:2c:67:86: 4e:71:28:33:36:5e:59:35:c7:4d:01:26:ad:f4:ce:42:a3:cd: bc:c9:a8:c3:16:f3:49:db:be:43:dc:2f:c0:e5:8d:d8:b2:b7: e7:16:7c:b2:30:10:e4:22:17:cd:d5:b6:a9:85:25:b4:e2:70: bb:d4:d7:c5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmgicxuKnshBWhwiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzdkZjdiNmItNGIwYi00OWFlLWI2NzQtYTVhODhkOTI4 MGY0MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk Y2E5YjU1MjUtMmQ0Yi00YmZkLWFlMTAtYzRjMTMwMjJhOGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz0C8LjzL7tP5DjU2SVo7NlHrBoV1v0AM+Mf XuPNImFe1cOhgYQZuXtienN4PrB5IIs3dRma6hUluJB8BocF41U34yFwJD+KNRUj I+0RzzISkC717CtY3LogbyHpiraxoHFl9gPeEiZXOlOpDg0DYq9yK/I+rNOd7DPO ebdikXNMojtQIUusdmyv37+8ZUgQQsEatTvYVitF/eDguxiJbnXu1tTsbt0UwrXK Ds33loraw9DGlC8FLE60Hj39n5RJ3xv8okoseixuxX7+o6M8FgHf0prWM72TQ6eG IABRg5E5YzTKNdtth4Jj2ycUlnONcg/vcvry08WJqh4lWOUtgwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEAoAPXrXxHI5CpSMpnnDW1CXF3IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zN2Rm N2I2Yi00YjBiLTQ5YWUtYjY3NC1hNWE4OGQ5MjgwZjQvNmIxNjg2ZDktNjdiNy0z YzkxLTk1NmItMzgyMDgwMmFkYzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzdkZjdiNmItNGIwYi00OWFlLWI2 NzQtYTVhODhkOTI4MGY0LzM3ZGY3YjZiLTRiMGItNDlhZS1iNjc0LWE1YTg4ZDky ODBmNC5jcmwwHwYDVR0jBBgwFoAUwodHxVa/2lkzCCu2G4oUaxXzI+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zN2RmN2I2Yi00YjBiLTQ5YWUtYjY3NC1hNWE4 OGQ5MjgwZjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5jgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAIZ8d9rV5pTrNmdrREcs+ZaaZHjMt/EqfWIiqH6qnt6hC2cJMTu9g D7WgIhBYAMQhMufssWFZCuL1siZXzBrSfSd6sI/tYIqUILNxiZGItL2WtG1myIpZ ykvgbsWJqTMVCogfg2Tn6HQWAzt0iCkJK+s2Rc3CJsYrD10aEh9/T1eWzja3xfkP 4im99Tzerq0nIRjvldw8jXXPwUBYHpIBFEeSPVOuuUpqOnfp+iqiRiN7kXLVSAxL L3WA9/Wsn41WdB1bLGeGTnEoMzZeWTXHTQEmrfTOQqPNvMmowxbzSdu+Q9wvwOWN 2LK35xZ8sjAQ5CIXzdW2qYUltOJwu9TXxQ== -----END CERTIFICATE-----Generated at Sun May 11 21:17:26 2025 by rpki-client