$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c9a0ab5-c41f-4507-b7ef-3e98ce834eb4/cd4959c5-a312-3fba-81cf-5bff1ad4cac3.roa File: cd4959c5-a312-3fba-81cf-5bff1ad4cac3.roa (raw, json) Hash identifier: BX46G4mLtziJgv8hMWKcINDPoMpDNE4hKQO/ZuMt4eI= Subject key identifier: 42:AC:DC:F7:55:7F:4F:2C:BF:21:EA:D8:46:90:11:7D:92:44:16:DE Certificate issuer: /CN=1c9a0ab5-c41f-4507-b7ef-3e98ce834eb4 Certificate serial: 010D0C9F43285849ED4FD5964E3E8B3C1BED6C00 Authority key identifier: 2D:EB:37:DF:99:28:BA:A0:94:DE:39:2A:33:A6:41:B0:38:D8:6D:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c9a0ab5-c41f-4507-b7ef-3e98ce834eb4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c9a0ab5-c41f-4507-b7ef-3e98ce834eb4/cd4959c5-a312-3fba-81cf-5bff1ad4cac3.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 25185 IP address blocks: 2607:7dc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c9a0ab5-c41f-4507-b7ef-3e98ce834eb4/1c9a0ab5-c41f-4507-b7ef-3e98ce834eb4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c9a0ab5-c41f-4507-b7ef-3e98ce834eb4/1c9a0ab5-c41f-4507-b7ef-3e98ce834eb4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c9a0ab5-c41f-4507-b7ef-3e98ce834eb4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:d5:96:4e:3e:8b:3c:1b:ed:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c9a0ab5-c41f-4507-b7ef-3e98ce834eb4 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=8943e24d-8a67-4ef5-8502-5ca978d6dacc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:56:b6:70:3f:a7:b4:b9:9f:7a:2e:80:a3:17: 6f:aa:1d:ab:0d:e0:2d:60:fa:f8:c7:0d:90:de:c3: 8e:d5:bf:cd:02:0c:0b:a2:c9:fa:a8:1a:ea:0f:fd: 49:5e:84:29:32:5f:d3:94:38:f4:06:ee:fd:74:8c: ed:6c:21:41:4f:c3:18:a5:8a:f3:a2:3e:4b:5a:cc: c6:9f:64:bb:13:09:51:e8:8f:88:c0:a9:50:15:17: 31:f6:77:0d:02:9d:70:b6:c4:8a:d3:35:f5:f8:d7: d9:70:d3:81:49:21:f5:4c:22:98:92:e8:83:d3:e9: 2b:98:11:df:ed:ea:2f:f3:25:a8:86:86:fc:c1:13: 09:0e:9b:22:d3:e8:d7:00:41:ce:96:38:27:71:cd: ac:93:25:50:56:ad:0d:6d:8e:47:88:ca:0e:55:ae: 23:95:9b:14:51:19:ff:2c:9c:24:3b:a4:38:06:83: 97:1e:14:b8:cf:8a:35:37:c5:00:f2:3f:e4:4c:29: c1:cc:43:b1:27:1c:65:18:b1:63:d7:82:8e:a2:85: 14:0b:08:b5:3d:13:a6:1b:d9:35:ce:a3:65:dc:f7: 70:b0:7d:17:63:72:8c:72:df:e9:e0:38:ba:45:c4: 40:77:a9:5f:e0:64:24:25:4e:5a:f4:c1:7e:fe:6c: 6e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AC:DC:F7:55:7F:4F:2C:BF:21:EA:D8:46:90:11:7D:92:44:16:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c9a0ab5-c41f-4507-b7ef-3e98ce834eb4/cd4959c5-a312-3fba-81cf-5bff1ad4cac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c9a0ab5-c41f-4507-b7ef-3e98ce834eb4/1c9a0ab5-c41f-4507-b7ef-3e98ce834eb4.crl X509v3 Authority Key Identifier: keyid:2D:EB:37:DF:99:28:BA:A0:94:DE:39:2A:33:A6:41:B0:38:D8:6D:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c9a0ab5-c41f-4507-b7ef-3e98ce834eb4.cer sbgp-ipAddrBlock: critical IPv6: 2607:7dc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:68:e9:4e:0d:a1:e1:df:d0:92:7f:86:04:73:4c:37:2f:5b: f4:18:9a:8d:08:99:83:e6:8f:5b:73:12:4d:c2:ba:46:0d:85: 5f:a1:d6:e1:3e:37:8b:ab:bb:c0:14:cd:ee:86:6d:45:c1:ac: fb:c2:bf:54:09:38:4d:58:3b:c1:c7:ad:f4:a6:44:dc:a2:ef: 1a:1c:45:60:29:3e:9c:dd:5f:bd:8f:9e:bf:70:3a:72:90:0f: 9a:2d:f4:77:08:4f:07:12:37:5f:2e:c4:54:64:5c:b6:fe:a6: 78:d8:ac:31:b6:91:be:f6:3b:61:fe:63:fc:f1:e9:33:c2:18: 62:ef:22:78:50:55:fb:ab:59:a3:51:e4:f6:77:dd:ac:11:e3: 86:ac:3e:06:81:2a:dd:16:24:69:f8:87:67:56:99:7b:d7:2b: 22:4d:a5:8e:b6:f7:6f:21:a1:bd:08:db:af:5c:5a:d0:62:21: 37:c1:70:6a:d4:ed:0c:6e:aa:b9:2d:97:12:77:35:b4:a3:26: af:39:08:65:ea:14:f8:98:56:fc:49:14:66:9e:29:f0:08:e6: fd:a4:87:11:6f:c5:cd:ce:bc:26:59:90:e8:5c:96:2c:82:9b: d5:c9:c3:a6:e0:03:de:d6:fe:0b:ab:33:45:17:8b:bd:f4:63: 33:6b:f9:aa -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEntT9WWTj6LPBvtbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM5YTBhYjUtYzQxZi00NTA3LWI3ZWYtM2U5OGNlODM0 ZWI0MB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk ODk0M2UyNGQtOGE2Ny00ZWY1LTg1MDItNWNhOTc4ZDZkYWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5la2cD+ntLmfei6Aoxdvqh2rDeAtYPr4xw2Q 3sOO1b/NAgwLosn6qBrqD/1JXoQpMl/TlDj0Bu79dIztbCFBT8MYpYrzoj5LWszG n2S7EwlR6I+IwKlQFRcx9ncNAp1wtsSK0zX1+NfZcNOBSSH1TCKYkuiD0+krmBHf 7eov8yWohob8wRMJDpsi0+jXAEHOljgncc2skyVQVq0NbY5HiMoOVa4jlZsUURn/ LJwkO6Q4BoOXHhS4z4o1N8UA8j/kTCnBzEOxJxxlGLFj14KOooUUCwi1PROmG9k1 zqNl3PdwsH0XY3KMct/p4Di6RcRAd6lf4GQkJU5a9MF+/mxu+wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEKs3PdVf08svyHq2EaQEX2SRBbeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xYzlh MGFiNS1jNDFmLTQ1MDctYjdlZi0zZTk4Y2U4MzRlYjQvY2Q0OTU5YzUtYTMxMi0z ZmJhLTgxY2YtNWJmZjFhZDRjYWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWM5YTBhYjUtYzQxZi00NTA3LWI3 ZWYtM2U5OGNlODM0ZWI0LzFjOWEwYWI1LWM0MWYtNDUwNy1iN2VmLTNlOThjZTgz NGViNC5jcmwwHwYDVR0jBBgwFoAULes335kouqCU3jkqM6ZBsDjYbeQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xYzlhMGFiNS1jNDFmLTQ1MDctYjdlZi0zZTk4 Y2U4MzRlYjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgd9wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAPaOlODaHh39CSf4YEc0w3L1v0GJqNCJmD5o9bcxJNwrpGDYVfodbh PjeLq7vAFM3uhm1Fwaz7wr9UCThNWDvBx630pkTcou8aHEVgKT6c3V+9j56/cDpy kA+aLfR3CE8HEjdfLsRUZFy2/qZ42KwxtpG+9jth/mP88ekzwhhi7yJ4UFX7q1mj UeT2d92sEeOGrD4GgSrdFiRp+IdnVpl71ysiTaWOtvdvIaG9CNuvXFrQYiE3wXBq 1O0Mbqq5LZcSdzW0oyavOQhl6hT4mFb8SRRmninwCOb9pIcRb8XNzrwmWZDoXJYs gpvVycOm4APe1v4LqzNFF4u99GMza/mq -----END CERTIFICATE-----Generated at Sun Jun 15 16:56:23 2025 by rpki-client