$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fbaa1e81-f0ba-3c94-ad29-aca4a58fcfb2.roa File: fbaa1e81-f0ba-3c94-ad29-aca4a58fcfb2.roa (raw, json) Hash identifier: Df/cQMBuuRbAYNAXZjpYHVKwnhn4EGxZm515R8UPJZE= Subject key identifier: 6A:06:62:3F:D7:FD:35:53:E0:3B:B7:DC:C9:3B:DA:5D:93:01:FA:86 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285849A4BAD8EB416D0327D65CF980 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fbaa1e81-f0ba-3c94-ad29-aca4a58fcfb2.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 2620:0:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d8:eb:41:6d:03:27:d6:5c:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=9e8d8964-86f2-4828-87f3-cab33ff0e121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c0:ee:7e:2f:7f:4f:a0:bf:2c:83:cd:df:13: 64:4e:c7:47:6f:d2:93:ef:15:37:2e:9f:d1:18:4f: ab:5b:fb:6f:4e:ca:3a:b2:95:72:34:fe:13:61:f0: ea:e2:54:47:7b:80:23:53:4e:6a:71:f9:1c:d8:36: c0:97:65:cb:9e:77:9a:b3:e5:81:90:14:c8:81:49: f9:5b:c7:72:06:27:7b:9d:5d:00:a3:66:95:d3:48: 16:51:d4:43:0c:91:b1:ed:9d:74:01:24:49:50:ba: 2e:64:55:5a:c1:8f:8b:cd:69:cc:30:f4:94:d5:40: 25:c5:19:68:15:b0:08:5b:30:ac:30:1c:29:ab:d4: 31:16:68:04:60:42:ba:13:7a:4e:ca:11:21:fe:c7: c4:50:32:aa:ae:02:c2:ad:36:82:08:35:e1:83:56: 26:50:fc:0d:dc:a8:7b:56:47:bb:22:5d:a1:dc:89: b7:b2:3d:22:a6:ca:24:29:cf:c7:f1:ce:d2:e1:6a: be:6d:db:93:29:9b:8c:ac:09:52:d0:47:2b:1e:da: 41:d7:e6:d0:4e:8f:53:82:56:78:79:cc:53:33:21: 10:1d:f5:05:4d:33:75:6c:c3:67:16:da:44:6e:66: b9:4b:1f:e6:51:d4:70:b1:cb:8e:87:0a:92:f5:e6: 54:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:06:62:3F:D7:FD:35:53:E0:3B:B7:DC:C9:3B:DA:5D:93:01:FA:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fbaa1e81-f0ba-3c94-ad29-aca4a58fcfb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:1000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:58:0d:8d:f6:7c:d2:81:7f:c1:62:b0:b6:13:6d:e0:d8:93: 47:24:b6:7a:ff:bc:7a:83:f5:47:44:68:3f:85:3a:40:97:24: 75:ed:96:c8:34:da:b8:33:bb:a4:83:4a:b9:5c:24:5d:ce:c1: fa:74:3f:b2:bc:af:b3:97:cb:6a:53:94:79:5d:02:99:e0:0e: 05:fb:be:9a:17:f1:e4:8c:3f:28:95:6f:5b:38:9c:42:45:9c: 8e:e0:09:da:4c:e3:57:0c:4a:6c:2b:c1:57:e1:a7:7b:17:51: e9:cd:eb:4f:ec:3d:cb:13:cb:c8:01:92:57:2c:10:8d:d4:6d: 13:df:35:bc:97:93:53:fe:33:a0:eb:28:b6:4b:bb:10:c9:ef: 97:7a:9d:87:f4:ca:1b:b8:87:a1:ba:a6:a5:d2:05:bb:44:8c: 79:cd:61:33:88:63:bd:1f:b9:9e:00:ac:2c:f8:fd:37:bc:12: 79:93:e6:ec:6e:6a:f7:30:5b:96:5e:66:e7:68:0e:05:73:d9: 5a:dc:54:e4:b1:1c:dd:aa:4a:bf:25:75:7a:0a:ac:12:57:8a: ea:32:b6:64:b8:3a:bb:1f:ee:ee:bf:1f:59:54:b4:06:aa:e5: cf:1a:d3:75:81:a4:d3:66:09:7f:2d:cc:c8:e5:1e:7a:57:a4: 28:19:d1:a5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmkutjrQW0DJ9Zc+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OWU4ZDg5NjQtODZmMi00ODI4LTg3ZjMtY2FiMzNmZjBlMTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMDufi9/T6C/LIPN3xNkTsdHb9KT7xU3Lp/R GE+rW/tvTso6spVyNP4TYfDq4lRHe4AjU05qcfkc2DbAl2XLnneas+WBkBTIgUn5 W8dyBid7nV0Ao2aV00gWUdRDDJGx7Z10ASRJULouZFVawY+LzWnMMPSU1UAlxRlo FbAIWzCsMBwpq9QxFmgEYEK6E3pOyhEh/sfEUDKqrgLCrTaCCDXhg1YmUPwN3Kh7 Vke7Il2h3Im3sj0ipsokKc/H8c7S4Wq+bduTKZuMrAlS0EcrHtpB1+bQTo9TglZ4 ecxTMyEQHfUFTTN1bMNnFtpEbma5Sx/mUdRwscuOhwqS9eZUaQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGoGYj/X/TVT4Du33Mk72l2TAfqGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZmJhYTFlODEtZjBiYS0z Yzk0LWFkMjktYWNhNGE1OGZjZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiAAABAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEASlgNjfZ80oF/wWKwthNt4NiTRyS2ev+8eoP1R0RoP4U6QJckde2W yDTauDO7pINKuVwkXc7B+nQ/sryvs5fLalOUeV0CmeAOBfu+mhfx5Iw/KJVvWzic QkWcjuAJ2kzjVwxKbCvBV+GnexdR6c3rT+w9yxPLyAGSVywQjdRtE981vJeTU/4z oOsotku7EMnvl3qdh/TKG7iHobqmpdIFu0SMec1hM4hjvR+5ngCsLPj9N7wSeZPm 7G5q9zBbll5m52gOBXPZWtxU5LEc3apKvyV1egqsEleK6jK2ZLg6ux/u7r8fWVS0 BqrlzxrTdYGk02YJfy3MyOUeelekKBnRpQ== -----END CERTIFICATE-----Generated at Sun Apr 27 07:02:20 2025 by rpki-client