$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb/d9cabc14-4364-3de8-8171-d7d6081657c7.roa File: d9cabc14-4364-3de8-8171-d7d6081657c7.roa (raw, json) Hash identifier: Ak2Wiks2tX9GU2hh/qQVts6i0qYet0/8nky+WcUTfyU= Subject key identifier: 7D:4A:FD:6A:F3:45:19:AF:BC:A9:EE:1F:E8:85:30:F7:59:3E:1C:EB Certificate issuer: /CN=72f56d1d-6f40-4e54-b467-65c3bb8f12bb Certificate serial: 010D0C9F432858497C3EEBED64C8526037A97400 Authority key identifier: BD:CA:DE:94:F2:56:FE:7D:DD:66:E4:C0:CB:B1:19:17:5D:66:44:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb/d9cabc14-4364-3de8-8171-d7d6081657c7.roa Signing time: Fri 11 Apr 2025 01:00:48 +0000 ROA not before: Fri 11 Apr 2025 01:00:48 +0000 ROA not after: Thu 10 Jul 2025 01:00:48 +0000 asID: 22898 IP address blocks: 2604:5b80::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb/72f56d1d-6f40-4e54-b467-65c3bb8f12bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb/72f56d1d-6f40-4e54-b467-65c3bb8f12bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:3e:eb:ed:64:c8:52:60:37:a9:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72f56d1d-6f40-4e54-b467-65c3bb8f12bb Validity Not Before: Apr 11 01:00:48 2025 GMT Not After : Jul 10 01:00:48 2025 GMT Subject: CN=e73a7156-c49b-4265-9b1e-31fe2de30ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:06:7f:8a:60:68:45:22:ea:11:14:0e:37:fe: f4:e0:cc:87:b0:d8:e6:30:9c:1d:67:44:1d:3e:c1: 1f:69:3d:75:d2:43:16:ab:1d:2f:8b:ce:db:ab:6b: 88:a0:06:ab:e4:cf:8c:fd:d6:e2:23:00:dd:b0:3e: 7a:8a:9c:35:6d:48:ba:70:15:8f:25:73:ee:40:e3: d1:bc:b0:90:57:75:52:20:4e:d0:ef:cf:65:7f:d1: 2c:4e:55:c1:37:06:ed:c3:8d:bd:8b:25:33:b5:63: 28:61:74:0d:34:1c:d7:09:91:61:fc:88:52:24:0d: 1d:df:56:05:82:3f:8a:ae:4b:54:33:0f:f9:f9:97: d5:17:a3:d5:d9:7f:30:ed:70:8c:9a:f8:74:3d:92: 5a:3a:4a:30:2b:6b:03:62:33:16:6b:21:aa:90:14: c6:aa:5e:92:99:bd:00:b8:b0:76:a1:da:2f:a1:16: ed:c2:61:36:41:8b:e8:8e:66:30:10:17:58:f8:69: 41:55:22:9b:d0:17:c3:ad:0d:11:4f:a0:7f:30:72: 7a:42:ce:37:92:a1:d9:71:a8:70:03:ef:53:ca:cd: f6:31:65:ef:63:10:3c:5b:45:12:84:2e:26:58:fd: fe:d5:68:a7:32:20:6d:a9:cd:da:72:66:b9:5e:e4: 01:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4A:FD:6A:F3:45:19:AF:BC:A9:EE:1F:E8:85:30:F7:59:3E:1C:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb/d9cabc14-4364-3de8-8171-d7d6081657c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb/72f56d1d-6f40-4e54-b467-65c3bb8f12bb.crl X509v3 Authority Key Identifier: keyid:BD:CA:DE:94:F2:56:FE:7D:DD:66:E4:C0:CB:B1:19:17:5D:66:44:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb.cer sbgp-ipAddrBlock: critical IPv6: 2604:5b80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:d9:cb:3c:19:4c:fb:9a:51:ad:22:05:5d:b6:2f:ed:2e:f7: 0f:e6:3d:75:54:1a:6f:7d:26:8b:85:a6:cf:43:d0:8b:d3:7f: 04:10:c3:21:a4:50:f8:c2:79:b4:97:76:05:3c:a9:98:10:80: f3:a9:fc:da:26:41:bb:41:0d:5d:7f:54:0e:3b:b9:df:01:28: 46:b2:e8:0e:9c:eb:29:be:f7:70:58:40:32:fa:0f:a6:28:1b: 29:4e:b6:e1:aa:2c:70:c0:4d:c8:12:6e:8e:57:cc:b7:72:5d: 06:72:32:ae:10:1e:2b:43:dd:0d:70:ea:d0:81:89:7f:7f:bf: 12:52:3f:96:2c:2a:11:e1:cc:89:58:b2:dd:d8:b6:db:00:24: 33:f1:75:c1:48:82:e7:00:84:c5:09:7b:f6:65:9b:cc:2e:e3: 79:fb:1c:1f:44:3d:7c:40:17:f2:bd:65:2e:f4:d6:3b:4b:6a: 8a:53:f2:1a:f1:56:f0:cc:fa:19:bc:5f:ee:21:a2:a7:7e:c5: df:3b:07:54:65:2b:1e:be:d8:99:8a:5c:1a:b4:7f:b1:15:d3: 5a:50:72:ad:1d:bd:d6:36:e5:77:9e:52:6d:36:ce:02:22:80: 8b:e6:7e:c0:7c:60:eb:89:37:48:4a:ff:d5:ff:e9:6a:c7:f9: 31:0a:a8:ce -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEl8PuvtZMhSYDepdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzJmNTZkMWQtNmY0MC00ZTU0LWI0NjctNjVjM2JiOGYx MmJiMB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk ZTczYTcxNTYtYzQ5Yi00MjY1LTliMWUtMzFmZTJkZTMwYWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAZ/imBoRSLqERQON/704MyHsNjmMJwdZ0Qd PsEfaT110kMWqx0vi87bq2uIoAar5M+M/dbiIwDdsD56ipw1bUi6cBWPJXPuQOPR vLCQV3VSIE7Q789lf9EsTlXBNwbtw429iyUztWMoYXQNNBzXCZFh/IhSJA0d31YF gj+KrktUMw/5+ZfVF6PV2X8w7XCMmvh0PZJaOkowK2sDYjMWayGqkBTGql6Smb0A uLB2odovoRbtwmE2QYvojmYwEBdY+GlBVSKb0BfDrQ0RT6B/MHJ6Qs43kqHZcahw A+9Tys32MWXvYxA8W0UShC4mWP3+1WinMiBtqc3acma5XuQB9QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH1K/WrzRRmvvKnuH+iFMPdZPhzrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83MmY1 NmQxZC02ZjQwLTRlNTQtYjQ2Ny02NWMzYmI4ZjEyYmIvZDljYWJjMTQtNDM2NC0z ZGU4LTgxNzEtZDdkNjA4MTY1N2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzJmNTZkMWQtNmY0MC00ZTU0LWI0 NjctNjVjM2JiOGYxMmJiLzcyZjU2ZDFkLTZmNDAtNGU1NC1iNDY3LTY1YzNiYjhm MTJiYi5jcmwwHwYDVR0jBBgwFoAUvcrelPJW/n3dZuTAy7EZF11mRAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83MmY1NmQxZC02ZjQwLTRlNTQtYjQ2Ny02NWMz YmI4ZjEyYmIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRbgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCm2cs8GUz7mlGtIgVdti/tLvcP5j11VBpvfSaLhabPQ9CL038EEMMh pFD4wnm0l3YFPKmYEIDzqfzaJkG7QQ1df1QOO7nfAShGsugOnOspvvdwWEAy+g+m KBspTrbhqixwwE3IEm6OV8y3cl0GcjKuEB4rQ90NcOrQgYl/f78SUj+WLCoR4cyJ WLLd2LbbACQz8XXBSILnAITFCXv2ZZvMLuN5+xwfRD18QBfyvWUu9NY7S2qKU/Ia 8VbwzPoZvF/uIaKnfsXfOwdUZSsevtiZilwatH+xFdNaUHKtHb3WNuV3nlJtNs4C IoCL5n7AfGDriTdISv/V/+lqx/kxCqjO -----END CERTIFICATE-----Generated at Mon Apr 28 03:57:09 2025 by rpki-client