$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/cac652c0-f97c-3a05-8b92-830135242f0a.roa File: cac652c0-f97c-3a05-8b92-830135242f0a.roa (raw, json) Hash identifier: 4tcxnuV1LH0LcU3+PS2n1vryON9Vkh6cz1P6JNYxiu4= Subject key identifier: B9:0D:75:8C:D0:93:56:FD:D4:29:2F:21:65:6E:36:A2:A2:CC:DA:AF Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F432858499AF4722C8C8EEDB569485080 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/cac652c0-f97c-3a05-8b92-830135242f0a.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 400097 IP address blocks: 2606:3d40:5d05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:72:2c:8c:8e:ed:b5:69:48:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=22ec92c2-7901-458e-ac3b-bfa56d433d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d9:3b:44:e4:fa:25:e7:1a:ea:6f:80:9e:d6: 35:5b:dd:13:01:eb:97:f9:ef:c8:9e:c1:ce:8c:b2: 8a:7a:1c:1e:1b:91:d9:15:61:dd:39:49:05:0b:26: 6b:eb:b9:c3:37:d8:9c:f2:80:88:17:5f:9c:7a:ab: 41:d2:42:bb:ff:aa:52:9f:fb:1c:6f:76:05:55:01: 9d:c7:81:d1:25:51:4a:20:24:d8:0a:58:60:94:f9: 38:28:9f:78:ab:ea:80:3d:09:f7:de:0c:c3:45:63: b7:d5:ee:3d:d0:c0:a3:a9:88:60:0d:b0:44:67:e6: b2:0f:cd:1b:9a:82:9a:09:25:61:07:50:5d:bd:4b: 84:b1:ea:28:8e:97:49:b7:7c:28:78:29:37:a3:23: 7a:80:53:de:1d:58:64:20:0a:e9:d0:2c:cc:e8:3e: 01:37:3f:13:0a:38:29:a0:91:cc:3c:d9:83:82:45: 57:71:c9:42:04:8e:88:cf:0b:40:29:1f:00:5f:3e: 66:ce:d3:d2:a7:ab:57:7c:55:8b:35:9c:53:24:e0: c1:2f:4e:c7:9c:61:86:02:80:28:01:d5:71:aa:22: 29:e8:17:7f:04:2b:a6:4c:53:ec:4d:91:e6:ca:e1: 00:b7:41:6f:da:09:69:cd:74:7c:39:03:af:e8:01: 53:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0D:75:8C:D0:93:56:FD:D4:29:2F:21:65:6E:36:A2:A2:CC:DA:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/cac652c0-f97c-3a05-8b92-830135242f0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:5d05::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:dc:a5:41:e3:11:dd:21:3f:7d:ea:e2:e7:91:82:ce:5c:07: 13:8b:eb:3a:19:e5:67:fe:7c:cf:7d:7c:6b:40:3e:cf:88:e2: a4:62:4b:5b:1f:1d:4e:d9:f3:e3:d4:2e:6d:ec:95:2a:c2:0d: 1f:f9:bd:7d:9e:67:45:9b:55:23:72:e0:a3:01:6a:02:d5:5c: 5a:d4:28:d4:31:42:93:9d:21:b1:42:e4:75:fb:f2:4d:fd:02: d3:b7:d8:18:a3:63:b5:8e:47:ae:92:25:a0:82:c0:90:fd:38: 0f:a0:7d:45:b9:80:a9:92:7f:80:7f:73:53:09:fd:c8:65:6a: a4:bd:e5:92:5e:30:51:b9:9e:54:31:93:b1:5c:26:0e:25:e8: db:e2:75:7a:11:48:5a:8a:94:42:a0:8f:0f:87:fc:51:c1:09: 73:13:33:30:5e:40:4f:f8:1b:89:f4:23:eb:b9:03:d8:ce:35: c5:a7:24:35:57:cd:a7:75:26:f5:17:07:6f:7f:94:b2:b6:5c: bf:70:c9:fb:e1:40:e9:9c:f6:24:50:52:4d:76:06:f0:0b:83: cc:4d:29:2f:60:cf:55:26:ce:75:1b:f1:4c:39:20:da:8a:e3: 47:c6:8a:cd:7e:1c:7a:19:57:a6:5e:69:52:3b:16:71:30:01: 16:8f:aa:8f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEma9HIsjI7ttWlIUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MjJlYzkyYzItNzkwMS00NThlLWFjM2ItYmZhNTZkNDMzZDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNk7ROT6Jeca6m+AntY1W90TAeuX+e/InsHO jLKKehweG5HZFWHdOUkFCyZr67nDN9ic8oCIF1+ceqtB0kK7/6pSn/scb3YFVQGd x4HRJVFKICTYClhglPk4KJ94q+qAPQn33gzDRWO31e490MCjqYhgDbBEZ+ayD80b moKaCSVhB1BdvUuEseoojpdJt3woeCk3oyN6gFPeHVhkIArp0CzM6D4BNz8TCjgp oJHMPNmDgkVXcclCBI6IzwtAKR8AXz5mztPSp6tXfFWLNZxTJODBL07HnGGGAoAo AdVxqiIp6Bd/BCumTFPsTZHmyuEAt0Fv2glpzXR8OQOv6AFTYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLkNdYzQk1b91CkvIWVuNqKizNqvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvY2FjNjUyYzAtZjk3Yy0z YTA1LThiOTItODMwMTM1MjQyZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QF0F MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE/cpUHjEd0hP33q4ueRgs5cBxOL6zoZ5Wf+fM99fGtAPs+I4qRi S1sfHU7Z8+PULm3slSrCDR/5vX2eZ0WbVSNy4KMBagLVXFrUKNQxQpOdIbFC5HX7 8k39AtO32BijY7WOR66SJaCCwJD9OA+gfUW5gKmSf4B/c1MJ/chlaqS95ZJeMFG5 nlQxk7FcJg4l6NvidXoRSFqKlEKgjw+H/FHBCXMTMzBeQE/4G4n0I+u5A9jONcWn JDVXzad1JvUXB29/lLK2XL9wyfvhQOmc9iRQUk12BvALg8xNKS9gz1UmznUb8Uw5 INqK40fGis1+HHoZV6ZeaVI7FnEwARaPqo8= -----END CERTIFICATE-----Generated at Mon Apr 28 18:23:14 2025 by rpki-client