$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/ea26638a-da24-3af0-88f1-df23cd94335f.roa File: ea26638a-da24-3af0-88f1-df23cd94335f.roa (raw, json) Hash identifier: F7ycbKf33LKdMiI3f4ePsSwYKAHSvPdea90y8uyiLiQ= Subject key identifier: 9A:F8:C5:8D:5F:7A:72:07:AE:45:E8:18:2A:7E:17:A9:1B:BC:DC:B0 Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F43285849780F08DA6F849481C52CB280 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/ea26638a-da24-3af0-88f1-df23cd94335f.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 400097 IP address blocks: 2606:3d40:d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:08:da:6f:84:94:81:c5:2c:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=5da175e7-e6ba-4e5e-8aae-04b0ff358cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b0:c5:ff:68:8b:0e:25:e9:95:09:90:75:08: 6f:ee:a6:ab:cc:b7:74:6c:d3:f4:4e:bd:cf:db:47: 80:50:a1:45:eb:8b:45:08:6f:04:4a:64:d1:a3:66: 92:16:0f:15:94:c3:76:0b:fc:ff:d7:08:53:44:34: a0:89:b3:6e:ac:77:09:42:f3:3b:5f:3b:26:c1:a0: 17:72:72:ac:c2:be:e5:4e:e9:0e:92:30:8c:ef:ee: 80:0c:bc:75:84:7c:c0:e5:28:58:71:45:64:71:04: 15:93:55:11:9a:6d:d7:45:f8:97:0b:33:af:ea:b1: fc:54:f0:fa:78:30:68:83:ee:f6:37:02:a5:dc:3d: 48:43:e8:72:0f:9c:57:f7:6b:44:e9:54:4a:36:11: 8e:42:32:97:d6:54:ba:e1:d8:23:35:c0:88:65:b4: 91:83:6f:dd:6c:8e:12:f3:63:95:ee:d2:c1:b6:ee: ec:08:1b:4e:e7:68:b9:a9:53:ce:df:fd:55:d4:f6: c6:fc:fd:6d:a0:c3:a3:c0:8f:a5:c3:4e:0c:c2:a7: 1c:17:3e:c7:d6:46:fe:ac:59:28:3f:d9:a3:5c:fb: 48:0d:b1:3e:54:68:02:75:5d:a7:54:15:6d:86:f8: 5b:86:30:6e:dd:de:b0:14:f0:4b:8b:23:64:06:59: 20:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F8:C5:8D:5F:7A:72:07:AE:45:E8:18:2A:7E:17:A9:1B:BC:DC:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/ea26638a-da24-3af0-88f1-df23cd94335f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:74:25:86:7d:92:41:79:8a:71:0f:cb:6d:c2:8f:b2:0f:94: b9:66:9e:09:21:d2:d5:4d:78:80:86:15:62:84:df:e2:19:b0: c6:7d:d9:32:4c:2c:66:d6:de:44:d3:5d:5a:69:a9:92:e6:00: 74:ae:fc:b2:03:1d:3d:f4:ff:e7:c1:2e:72:92:b8:7c:a7:0a: ad:a4:62:15:10:3f:a0:60:fd:52:cf:3c:99:d4:0a:c5:65:25: ee:8e:aa:20:c0:65:44:6b:0c:93:7a:1a:ce:a4:21:70:1a:81: 4d:77:cf:26:e5:c3:7a:23:d2:b9:d6:02:58:d9:ae:28:90:5d: 7e:58:f3:ca:7b:04:de:09:6e:dc:a6:cd:01:65:03:05:b6:e9: 4f:31:f5:f7:b2:1d:45:7c:19:f6:b5:b5:ec:cf:e0:07:8e:dd: 32:e5:e4:fc:57:4b:80:7a:be:84:46:ef:0c:84:ea:99:d7:c9: 27:7a:97:02:50:a9:5f:e6:16:9e:49:82:71:9a:dc:51:80:6b: bf:ff:71:71:1d:25:c5:f3:39:14:cd:57:3f:a0:06:da:c2:d7: bb:7c:60:69:83:0f:1e:49:d7:e2:ea:e4:41:2c:42:c8:20:5c: 47:bd:46:36:3c:fa:df:84:ba:7c:68:dc:d2:e5:71:9f:a4:16: d9:3d:68:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl4Dwjab4SUgcUssoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk NWRhMTc1ZTctZTZiYS00ZTVlLThhYWUtMDRiMGZmMzU4Y2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLDF/2iLDiXplQmQdQhv7qarzLd0bNP0Tr3P 20eAUKFF64tFCG8ESmTRo2aSFg8VlMN2C/z/1whTRDSgibNurHcJQvM7XzsmwaAX cnKswr7lTukOkjCM7+6ADLx1hHzA5ShYcUVkcQQVk1URmm3XRfiXCzOv6rH8VPD6 eDBog+72NwKl3D1IQ+hyD5xX92tE6VRKNhGOQjKX1lS64dgjNcCIZbSRg2/dbI4S 82OV7tLBtu7sCBtO52i5qVPO3/1V1PbG/P1toMOjwI+lw04MwqccFz7H1kb+rFko P9mjXPtIDbE+VGgCdV2nVBVthvhbhjBu3d6wFPBLiyNkBlkgRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJr4xY1fenIHrkXoGCp+F6kbvNywMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvZWEyNjYzOGEtZGEyNC0z YWYwLTg4ZjEtZGYyM2NkOTQzMzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QAAN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKt0JYZ9kkF5inEPy23Cj7IPlLlmngkh0tVNeICGFWKE3+IZsMZ9 2TJMLGbW3kTTXVppqZLmAHSu/LIDHT30/+fBLnKSuHynCq2kYhUQP6Bg/VLPPJnU CsVlJe6OqiDAZURrDJN6Gs6kIXAagU13zyblw3oj0rnWAljZriiQXX5Y88p7BN4J btymzQFlAwW26U8x9feyHUV8Gfa1tezP4AeO3TLl5PxXS4B6voRG7wyE6pnXySd6 lwJQqV/mFp5JgnGa3FGAa7//cXEdJcXzORTNVz+gBtrC17t8YGmDDx5J1+Lq5EEs QsggXEe9RjY8+t+Eunxo3NLlcZ+kFtk9aGE= -----END CERTIFICATE-----Generated at Sun Apr 27 19:14:14 2025 by rpki-client