$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/5c528b39-6eda-34af-a855-7283d61168cd.roa File: 5c528b39-6eda-34af-a855-7283d61168cd.roa (raw, json) Hash identifier: 4NyrdvFz6KKxFcxxdGh+BO+l6ZvWajoE1P5CSzaaaao= Subject key identifier: 8B:3F:C3:97:30:99:F3:0A:0E:CD:8A:01:AE:4C:22:24:3D:5D:7F:81 Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F432858499AF48B8F42141C59AA6EC580 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/5c528b39-6eda-34af-a855-7283d61168cd.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 400097 IP address blocks: 2606:3d40:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:8b:8f:42:14:1c:59:aa:6e:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=e752acad-9d05-42a2-8bb5-a9f4f726a4c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b4:e3:9f:96:8a:28:8c:96:c8:9e:f3:c4:7e: a5:fc:7f:1b:b0:f2:6f:f4:74:a0:c0:05:4c:11:d9: 78:22:0a:9c:52:4f:bf:a4:e2:cb:e6:ec:1a:28:a6: f3:8d:1c:41:83:2f:19:8c:c1:19:1e:50:64:f5:fe: 46:fe:b5:93:ed:3b:d1:c1:da:3f:90:c6:e1:5b:9c: 2c:53:10:21:ea:02:98:8c:1c:80:3a:9f:d6:12:88: ca:c4:b4:1e:ea:cc:d2:16:07:df:8e:20:5a:dc:45: ee:61:29:3d:1f:93:ac:c3:47:68:6a:73:13:08:07: 2d:7e:86:d4:56:f8:30:d3:e2:1f:61:c6:7b:d4:45: c2:1b:63:e2:09:03:97:e4:78:34:22:2d:15:90:74: 57:6a:7f:2e:80:44:f1:d5:02:35:c9:33:10:e6:49: 4c:28:6b:7f:97:78:db:4c:ed:e9:a7:de:53:f5:b6: de:fa:38:27:f4:e0:77:ec:95:e6:75:09:ae:69:9e: 84:e9:73:20:18:c2:94:c3:ad:4f:f3:24:df:ea:97: b8:d5:43:f5:dc:a7:fb:23:00:84:3f:4e:e4:77:3a: fe:b0:40:44:a9:48:1d:56:8c:57:3d:d3:ae:bc:c2: 65:92:23:0a:8e:2b:16:1f:9c:a0:50:1d:cf:ab:c1: 82:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3F:C3:97:30:99:F3:0A:0E:CD:8A:01:AE:4C:22:24:3D:5D:7F:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/5c528b39-6eda-34af-a855-7283d61168cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:f7:d3:8f:ce:f6:7a:ab:11:ed:b0:0b:92:2d:7c:8f:36:0a: ba:ca:e3:89:4b:0d:44:27:18:f4:97:fa:e7:64:ac:83:d8:86: 60:b0:71:62:91:b7:6c:a0:b5:f3:23:63:2e:97:0d:c5:9e:33: b6:58:e1:1b:1b:b6:2c:7f:d5:af:69:47:09:e7:9e:52:66:df: 0e:36:48:01:3b:31:aa:e5:4b:89:1e:2d:05:86:f4:f8:d9:35: bd:bf:fc:0a:c5:1b:4d:84:58:39:4d:b1:54:07:cb:96:7c:12: 6f:d2:20:49:c6:65:60:73:af:34:fa:6c:85:69:23:76:11:eb: 9e:39:bc:32:68:25:c3:3e:82:1e:ff:a6:77:e9:c4:f0:72:e0: 6c:16:3a:ef:41:41:b8:2d:27:b6:ac:de:7a:bc:cd:0e:37:a0: cb:41:57:93:1b:56:23:62:19:fa:62:26:7c:6c:e9:1b:ac:49: aa:84:aa:ea:82:07:e3:50:5f:76:3e:f5:4b:76:cf:47:2b:a0: 73:e0:f7:62:4e:43:1e:10:34:5e:24:c8:9e:bd:fc:ce:0c:cd: 79:a5:30:a1:3d:fa:ae:c5:14:09:ae:2f:bb:ac:c4:bc:dc:b2: 5b:03:fd:bf:53:b7:42:b7:95:f6:c1:0a:4d:8a:42:0d:45:31: 46:3a:95:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEma9IuPQhQcWapuxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZTc1MmFjYWQtOWQwNS00MmEyLThiYjUtYTlmNGY3MjZhNGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLTjn5aKKIyWyJ7zxH6l/H8bsPJv9HSgwAVM Edl4IgqcUk+/pOLL5uwaKKbzjRxBgy8ZjMEZHlBk9f5G/rWT7TvRwdo/kMbhW5ws UxAh6gKYjByAOp/WEojKxLQe6szSFgffjiBa3EXuYSk9H5Osw0doanMTCActfobU Vvgw0+IfYcZ71EXCG2PiCQOX5Hg0Ii0VkHRXan8ugETx1QI1yTMQ5klMKGt/l3jb TO3pp95T9bbe+jgn9OB37JXmdQmuaZ6E6XMgGMKUw61P8yTf6pe41UP13Kf7IwCE P07kdzr+sEBEqUgdVoxXPdOuvMJlkiMKjisWH5ygUB3Pq8GC1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIs/w5cwmfMKDs2KAa5MIiQ9XX+BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvNWM1MjhiMzktNmVkYS0z NGFmLWE4NTUtNzI4M2Q2MTE2OGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QEAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEP304/O9nqrEe2wC5ItfI82CrrK44lLDUQnGPSX+udkrIPYhmCw cWKRt2ygtfMjYy6XDcWeM7ZY4Rsbtix/1a9pRwnnnlJm3w42SAE7MarlS4keLQWG 9PjZNb2//ArFG02EWDlNsVQHy5Z8Em/SIEnGZWBzrzT6bIVpI3YR6545vDJoJcM+ gh7/pnfpxPBy4GwWOu9BQbgtJ7as3nq8zQ43oMtBV5MbViNiGfpiJnxs6RusSaqE quqCB+NQX3Y+9Ut2z0croHPg92JOQx4QNF4kyJ69/M4MzXmlMKE9+q7FFAmuL7us xLzcslsD/b9Tt0K3lfbBCk2KQg1FMUY6lf4= -----END CERTIFICATE-----Generated at Mon Apr 28 04:21:46 2025 by rpki-client