$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2aca9835-2362-3d49-9ba5-59ad5b0f72a5.roa File: 2aca9835-2362-3d49-9ba5-59ad5b0f72a5.roa (raw, json) Hash identifier: 87rJvE73TTXJWukyQnbcGeTiT6D23hdHFZ/1Jni+P4E= Subject key identifier: D8:38:39:15:1F:02:80:51:16:FB:6F:BF:1C:C7:4E:45:6F:C0:37:AE Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F432858497279ABCA83D975A1EEA40400 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2aca9835-2362-3d49-9ba5-59ad5b0f72a5.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 5769 IP address blocks: 2607:fa4c::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:ab:ca:83:d9:75:a1:ee:a4:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=10ed87b0-d682-43e5-8bd4-c7f766703ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:19:22:e9:46:6d:6c:44:c1:12:6f:6c:c4:d3: d0:29:9d:ef:f4:81:85:1c:8f:31:40:36:47:32:4c: db:c7:42:87:11:78:ec:d9:e2:9d:81:f1:54:f6:8b: 15:95:aa:86:6b:d0:02:91:61:ad:9b:ce:e4:fa:a4: 24:3f:a2:d3:b8:87:81:d9:a6:e9:f2:6b:27:60:2a: 96:fb:b4:71:ab:27:b3:20:d5:d2:57:8b:af:2d:d4: f9:50:97:61:1e:2e:df:98:1e:69:d9:de:cf:5a:ce: ee:e6:7a:40:bc:e3:6e:0c:52:6a:dc:dd:97:76:aa: 35:6e:59:14:aa:c3:fa:77:4b:41:45:19:43:2b:7b: 27:d2:2e:89:0a:7c:4f:93:6a:d2:b7:ca:38:4c:5c: ff:44:bf:53:95:b4:6a:2e:82:8d:a2:84:dd:60:32: 3a:2b:bb:fc:99:fc:18:f7:92:c1:ba:9d:3e:7a:11: 35:42:40:c2:16:30:2e:82:59:07:aa:2a:ec:e7:57: f2:bf:5d:a3:20:01:ac:9e:cb:23:0d:9b:15:40:c1: df:99:cf:f7:eb:a5:be:fd:89:4a:c6:20:77:d9:67: b2:c0:fa:48:e8:1b:d1:ea:75:6b:df:c2:61:a5:1a: 6a:78:1f:75:82:40:ec:5e:8f:22:70:8b:9f:8e:61: 77:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:38:39:15:1F:02:80:51:16:FB:6F:BF:1C:C7:4E:45:6F:C0:37:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2aca9835-2362-3d49-9ba5-59ad5b0f72a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv6: 2607:fa4c::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:d0:ce:d0:f3:a3:f5:5e:7d:46:ea:22:93:14:5b:8b:f8:6f: cb:8c:40:15:d3:00:f8:cd:5a:02:1c:3a:c7:68:3f:bd:83:7d: 70:f5:88:c1:14:04:9b:31:89:2b:0a:d7:52:4e:c1:4b:88:83: cb:01:c9:52:35:e1:05:25:a3:d9:df:93:40:03:43:20:9a:da: 40:b8:d8:b3:60:1c:c8:00:f9:78:c5:d4:66:86:96:20:1d:5b: 01:ab:6d:a1:b5:46:83:74:c7:35:93:8f:71:b0:c5:e1:d0:39: b1:f7:df:f1:50:96:7f:44:0a:04:39:8b:b9:16:a1:5c:45:b7: c9:c8:60:85:1d:82:1e:54:fa:5a:f7:7f:da:f8:02:ec:23:c4: 92:a7:34:e4:05:1c:aa:a9:3a:12:07:9e:c7:f0:3a:d7:47:bb: f9:8e:86:c3:99:95:8c:0a:d6:63:81:2a:3c:de:ce:33:04:51: ae:45:78:43:e6:90:f8:87:63:de:2c:6d:a3:93:0a:5d:db:2d: aa:c3:9c:60:5d:78:9c:4a:61:4a:31:a6:a8:21:71:83:d1:d0: d2:75:e9:27:7e:c7:e1:ea:ac:de:a0:43:ae:b0:1e:4f:76:4c: 31:38:e6:0c:20:36:2e:54:84:54:e4:31:b5:cc:1a:3e:74:80: 34:81:73:3b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElyeavKg9l1oe6kBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk MTBlZDg3YjAtZDY4Mi00M2U1LThiZDQtYzdmNzY2NzAzZWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihki6UZtbETBEm9sxNPQKZ3v9IGFHI8xQDZH Mkzbx0KHEXjs2eKdgfFU9osVlaqGa9ACkWGtm87k+qQkP6LTuIeB2abp8msnYCqW +7RxqyezINXSV4uvLdT5UJdhHi7fmB5p2d7PWs7u5npAvONuDFJq3N2Xdqo1blkU qsP6d0tBRRlDK3sn0i6JCnxPk2rSt8o4TFz/RL9TlbRqLoKNooTdYDI6K7v8mfwY 95LBup0+ehE1QkDCFjAuglkHqirs51fyv12jIAGsnssjDZsVQMHfmc/366W+/YlK xiB32WeywPpI6BvR6nVr38JhpRpqeB91gkDsXo8icIufjmF3XQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNg4ORUfAoBRFvtvvxzHTkVvwDeuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvMmFjYTk4MzUtMjM2Mi0z ZDQ5LTliYTUtNTlhZDViMGY3MmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf6TDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB/0M7Q86P1Xn1G6iKTFFuL+G/LjEAV0wD4zVoCHDrHaD+9g31w9YjB FASbMYkrCtdSTsFLiIPLAclSNeEFJaPZ35NAA0MgmtpAuNizYBzIAPl4xdRmhpYg HVsBq22htUaDdMc1k49xsMXh0Dmx99/xUJZ/RAoEOYu5FqFcRbfJyGCFHYIeVPpa 93/a+ALsI8SSpzTkBRyqqToSB57H8DrXR7v5jobDmZWMCtZjgSo83s4zBFGuRXhD 5pD4h2PeLG2jkwpd2y2qw5xgXXicSmFKMaaoIXGD0dDSdeknfsfh6qzeoEOusB5P dkwxOOYMIDYuVIRU5DG1zBo+dIA0gXM7 -----END CERTIFICATE-----Generated at Wed Apr 30 03:21:14 2025 by rpki-client