$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0ec5dc92-60dd-3a61-b89c-f705dbad6162.roa File: 0ec5dc92-60dd-3a61-b89c-f705dbad6162.roa (raw, json) Hash identifier: IGxfDf57Og92x6L2EDg6vaePgIhO3E+NJNF7qDKBFfg= Subject key identifier: 0B:FF:98:DB:B1:69:14:D9:FD:A1:9C:02:25:74:09:9C:0A:A8:67:47 Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F4328584993F9DD51BA8003228F015230 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0ec5dc92-60dd-3a61-b89c-f705dbad6162.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 4213 IP address blocks: 2604:4040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:dd:51:ba:80:03:22:8f:01:52:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=4f515b68-b7e2-4633-a450-053546bf211c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f3:4c:23:58:5e:32:d5:8a:93:f4:c4:2d:ac: a1:bf:55:d8:a9:85:8e:cd:66:88:53:52:10:cf:db: 0c:ef:6d:7e:2d:cb:bb:fa:49:7d:e2:39:60:27:cf: be:0d:47:3d:75:35:df:45:cb:ca:49:36:da:aa:06: 0d:38:e4:0e:40:01:7a:b2:87:7a:36:cb:41:9c:65: 4a:19:55:f6:2b:79:61:ac:54:2d:dc:b2:4f:db:39: 16:1b:e7:38:97:26:d3:d6:35:b9:14:8c:49:bb:7c: 32:ac:1f:8a:5d:15:0d:00:fc:79:39:a7:3e:de:cb: b6:99:bf:ca:cb:7f:04:33:43:76:af:39:38:4f:55: b3:10:f8:59:8b:ec:02:bf:d8:f0:2f:68:59:2a:b5: 2b:2d:38:32:bd:c9:f2:6c:17:4f:e2:59:23:42:b4: 60:3a:82:84:4e:48:3d:d7:98:0d:1a:c3:8c:e2:c7: 0c:43:53:8e:64:54:f9:8c:01:e9:91:31:ec:86:62: e8:d8:22:b0:97:b5:59:78:5c:4a:61:d3:9f:6b:2c: 76:c5:0c:51:0a:f7:19:94:72:f8:4b:da:da:1d:2e: 13:a9:90:4c:46:4b:a1:a3:f0:d8:b5:16:6f:eb:36: 55:8b:75:77:92:78:32:29:cf:0d:53:d9:59:fe:e8: a2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:FF:98:DB:B1:69:14:D9:FD:A1:9C:02:25:74:09:9C:0A:A8:67:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0ec5dc92-60dd-3a61-b89c-f705dbad6162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv6: 2604:4040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:43:37:4c:63:dd:9d:95:41:d5:57:78:21:a8:a7:8e:d1:f0: 47:a8:d8:c4:ce:42:7a:06:1b:8d:64:34:2e:9a:db:7a:bd:07: d0:32:08:86:33:48:60:c0:1c:52:6b:5c:00:5c:7b:d4:25:31: db:b7:c5:cb:29:e2:f7:2b:a1:03:75:72:59:4e:37:2c:ee:95: 2c:d2:a6:94:25:78:66:b7:20:92:7b:26:a8:e5:ae:c4:29:77: 36:1e:3d:aa:13:d6:ba:16:c8:7b:9c:ec:fd:29:6f:72:97:3e: df:3b:38:1c:1d:3c:d6:93:11:73:48:05:60:bc:cd:12:c1:af: 60:02:04:7a:92:46:2b:1c:1b:a6:65:da:e6:19:91:2d:9f:05: 4c:93:4e:9d:10:14:95:ce:ea:23:a6:13:e9:f4:62:4c:b4:0a: 3f:d7:84:fc:bc:73:16:9d:98:67:e4:35:31:b4:4e:7a:38:7b: 96:38:83:b9:22:94:e7:85:3a:55:80:0d:aa:84:4e:c9:6f:a7: 1a:5f:22:d8:a6:7e:04:4e:34:df:a9:09:a6:d0:07:ad:e0:50: ff:ab:0e:6d:a8:e8:9d:a0:66:ca:9c:0e:10:63:1f:8a:87:f3: fa:64:2e:8b:54:58:d9:e6:2a:c9:42:27:17:d5:61:5f:dc:72: 93:3f:fe:13 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmT+d1RuoADIo8BUjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk NGY1MTViNjgtYjdlMi00NjMzLWE0NTAtMDUzNTQ2YmYyMTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPNMI1heMtWKk/TELayhv1XYqYWOzWaIU1IQ z9sM721+Lcu7+kl94jlgJ8++DUc9dTXfRcvKSTbaqgYNOOQOQAF6sod6NstBnGVK GVX2K3lhrFQt3LJP2zkWG+c4lybT1jW5FIxJu3wyrB+KXRUNAPx5Oac+3su2mb/K y38EM0N2rzk4T1WzEPhZi+wCv9jwL2hZKrUrLTgyvcnybBdP4lkjQrRgOoKETkg9 15gNGsOM4scMQ1OOZFT5jAHpkTHshmLo2CKwl7VZeFxKYdOfayx2xQxRCvcZlHL4 S9raHS4TqZBMRkuho/DYtRZv6zZVi3V3kngyKc8NU9lZ/uiiKQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAv/mNuxaRTZ/aGcAiV0CZwKqGdHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvMGVjNWRjOTItNjBkZC0z YTYxLWI4OWMtZjcwNWRiYWQ2MTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRAQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQANQzdMY92dlUHVV3ghqKeO0fBHqNjEzkJ6BhuNZDQumtt6vQfQMgiG M0hgwBxSa1wAXHvUJTHbt8XLKeL3K6EDdXJZTjcs7pUs0qaUJXhmtyCSeyao5a7E KXc2Hj2qE9a6Fsh7nOz9KW9ylz7fOzgcHTzWkxFzSAVgvM0Swa9gAgR6kkYrHBum ZdrmGZEtnwVMk06dEBSVzuojphPp9GJMtAo/14T8vHMWnZhn5DUxtE56OHuWOIO5 IpTnhTpVgA2qhE7Jb6caXyLYpn4ETjTfqQmm0Aet4FD/qw5tqOidoGbKnA4QYx+K h/P6ZC6LVFjZ5irJQicX1WFf3HKTP/4T -----END CERTIFICATE-----Generated at Sat Apr 26 20:57:23 2025 by rpki-client