$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d99677f4-5448-3beb-b2f9-1ba38110ec7e.roa File: d99677f4-5448-3beb-b2f9-1ba38110ec7e.roa (raw, json) Hash identifier: /f2V1z0ZI2yIoQUAZJsgsirwquJsG/5qgiHWfrVCdg8= Subject key identifier: 63:97:5E:E4:B3:9D:AE:FB:7C:90:EB:9E:3A:3F:6C:ED:DA:2E:66:D1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F775D821A15CDA7F4BDE50 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d99677f4-5448-3beb-b2f9-1ba38110ec7e.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 2601:400:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:75:d8:21:a1:5c:da:7f:4b:de:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=5e820375-adef-46a9-a3a7-7f586bafaf1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1e:9e:bb:bf:a5:dc:64:91:05:95:fc:41:58: d8:02:67:2b:77:25:eb:42:16:c2:5a:75:4f:86:65: 23:24:80:d4:ab:35:ab:ea:f3:d0:e9:c0:c7:d2:f0: 19:71:db:44:f0:5c:88:b4:1b:05:0b:ee:06:d6:da: 72:f3:b1:4d:f1:c3:53:3e:01:99:f7:14:cf:fe:96: 86:3e:6f:30:38:c8:1f:4f:44:e7:e9:0f:e0:94:24: c6:be:5c:64:fb:e1:38:31:b9:91:4e:e2:de:f5:93: bc:07:3d:8e:c5:6c:11:4e:6f:8f:52:ae:28:7b:c9: 81:44:c2:89:64:73:bd:10:19:ed:da:e9:88:da:77: 03:89:17:82:21:b5:23:ec:c8:a5:9d:09:d6:bf:14: de:0c:f0:e1:bf:93:c1:43:23:2f:22:26:e3:0f:f5: c4:ee:e8:fc:9f:4c:59:3a:82:70:c1:52:f2:22:9d: 77:91:44:d5:a4:d0:35:a8:85:cd:7e:ac:7c:50:1a: 4c:91:ae:b7:71:58:6d:ac:dc:18:c6:c2:57:fc:4a: dc:18:78:f1:eb:a5:6a:c2:dc:08:cf:d2:f9:91:db: 62:21:bc:8b:b9:62:0f:78:28:dc:36:e3:a3:76:b5: 4b:79:78:fb:c1:b7:2e:fd:df:ed:d6:2a:22:bd:b7: 17:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:97:5E:E4:B3:9D:AE:FB:7C:90:EB:9E:3A:3F:6C:ED:DA:2E:66:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d99677f4-5448-3beb-b2f9-1ba38110ec7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:400:8000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:cf:0a:7a:01:78:bf:46:4c:0c:21:85:0b:80:85:5e:fb:d5: 51:0d:6b:d6:b7:1f:a3:2c:0d:6e:b1:df:86:63:94:09:d5:7f: 40:ea:73:ef:c1:0b:fc:8c:1f:8e:5f:3e:37:d0:24:45:39:30: 6e:f4:65:2b:e2:ad:96:81:91:d6:9a:1e:63:99:07:7e:59:f1: c9:87:61:67:d7:e0:be:03:3e:18:4d:32:c2:0f:93:02:d2:3d: 5b:aa:ad:fb:fd:3e:af:c9:c1:b9:8d:bb:12:a6:98:e4:a7:a4: 3e:c3:14:27:ab:b7:bb:2b:ca:29:4e:37:6c:c7:45:3c:98:aa: ba:e2:36:19:cb:61:d9:73:bc:6b:26:b3:81:37:ee:83:ba:fa: b8:da:86:67:1b:a8:c3:37:d3:bb:9c:e9:df:1f:c2:57:da:c7: c8:d5:73:8f:bc:a2:87:7c:34:33:dc:18:7c:3f:c6:e7:83:0a: d8:3c:df:ee:b9:4f:f1:92:c0:30:78:74:2a:08:72:41:d8:7b: 3b:dc:5b:b8:f4:d3:ad:01:6f:ba:f3:40:07:10:a9:80:36:a3: f3:fc:0a:74:5c:97:db:b6:6c:10:74:15:ec:54:ae:a7:13:84: 93:f4:ce:f4:c8:c5:ec:f6:64:30:25:72:a9:f6:4c:20:c1:f7: 06:b9:b5:14 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEj093XYIaFc2n9L3lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NWU4MjAzNzUtYWRlZi00NmE5LWEzYTctN2Y1ODZiYWZhZjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB6eu7+l3GSRBZX8QVjYAmcrdyXrQhbCWnVP hmUjJIDUqzWr6vPQ6cDH0vAZcdtE8FyItBsFC+4G1tpy87FN8cNTPgGZ9xTP/paG Pm8wOMgfT0Tn6Q/glCTGvlxk++E4MbmRTuLe9ZO8Bz2OxWwRTm+PUq4oe8mBRMKJ ZHO9EBnt2umI2ncDiReCIbUj7MilnQnWvxTeDPDhv5PBQyMvIibjD/XE7uj8n0xZ OoJwwVLyIp13kUTVpNA1qIXNfqx8UBpMka63cVhtrNwYxsJX/ErcGHjx66VqwtwI z9L5kdtiIbyLuWIPeCjcNuOjdrVLeXj7wbcu/d/t1ioivbcXWQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGOXXuSzna77fJDrnjo/bO3aLmbRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDk5Njc3ZjQtNTQ0OC0z YmViLWIyZjktMWJhMzgxMTBlYzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEEAIAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAgc8KegF4v0ZMDCGFC4CFXvvVUQ1r1rcfoywNbrHfhmOUCdV/QOpz 78EL/Iwfjl8+N9AkRTkwbvRlK+KtloGR1poeY5kHflnxyYdhZ9fgvgM+GE0ywg+T AtI9W6qt+/0+r8nBuY27EqaY5KekPsMUJ6u3uyvKKU43bMdFPJiquuI2Gcth2XO8 ayazgTfug7r6uNqGZxuowzfTu5zp3x/CV9rHyNVzj7yih3w0M9wYfD/G54MK2Dzf 7rlP8ZLAMHh0KghyQdh7O9xbuPTTrQFvuvNABxCpgDaj8/wKdFyX27ZsEHQV7FSu pxOEk/TO9MjF7PZkMCVyqfZMIMH3Brm1FA== -----END CERTIFICATE-----Generated at Mon Apr 28 00:54:41 2025 by rpki-client