$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa File: 0f4421e9-f24b-3fb4-80a3-278119725959.roa (raw, json) Hash identifier: JRor1xgKBD+MC/+eQmpq18/oLrngXppGHryP4Vy5Tu0= Subject key identifier: 42:91:13:CF:D3:97:E3:DB:D7:E1:20:29:44:FF:82:75:DF:3C:0C:10 Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F4328584993F9DD6DF386ABAA8D395100 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 4213 IP address blocks: 2607:f820::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:dd:6d:f3:86:ab:aa:8d:39:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=2d0e5338-73fc-4e83-bb53-3b371dc6818e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8d:eb:8a:36:0b:b2:f8:80:03:f0:7f:f1:15: ea:05:66:ba:a5:f5:0c:1c:6b:45:71:3d:bc:b7:49: a1:85:e6:31:e9:76:e0:6f:ae:66:c4:cf:61:0b:77: a4:0a:81:88:d1:28:a5:ca:49:86:87:89:60:d2:46: 35:35:af:df:ec:db:1d:d8:a5:bd:26:67:18:33:0a: f3:e6:94:20:19:2c:1a:75:3f:db:38:40:74:06:5e: 84:d5:1e:9d:78:32:a8:c3:4e:36:ab:49:f9:29:5c: 0f:26:66:65:6c:d0:1c:b7:ee:8f:80:1d:65:b4:2f: 6e:94:13:94:35:d2:c0:b8:9e:1b:2b:d3:82:5f:68: b8:23:cb:03:79:2d:28:bd:82:bd:58:45:5e:b1:83: 6d:30:c4:e3:29:e5:5d:7c:fa:c3:bf:8d:03:3b:d7: f6:cc:82:80:58:5a:f2:42:b5:4a:33:a7:4c:4c:3b: 28:13:07:98:81:a9:06:6d:0c:71:d1:e7:53:a1:d5: 99:b8:66:e7:72:15:e2:ae:2b:fe:8e:13:93:3d:ba: 04:95:ec:a1:8b:cd:72:6f:12:37:c7:ad:8e:c4:12: 00:0d:67:9c:6a:3c:ad:9e:ec:c5:b1:bf:69:fb:27: 96:69:93:04:de:5a:06:f0:92:52:f0:ed:83:d6:24: d1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:91:13:CF:D3:97:E3:DB:D7:E1:20:29:44:FF:82:75:DF:3C:0C:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv6: 2607:f820::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:66:ff:72:a9:70:5a:c5:a3:59:48:ce:80:6f:e0:62:25:a1: 95:a0:b9:eb:8a:21:85:8c:16:9d:d1:79:e8:e3:2d:99:50:65: 96:98:80:2c:ee:b1:56:87:0a:5d:8d:ad:fe:6a:35:bc:c6:3e: 2d:25:e6:d7:83:a7:01:2e:2d:c1:7a:7a:e5:4d:b8:c0:5c:4a: 25:8f:6d:f0:ad:0c:75:8c:29:05:94:3d:98:3f:df:f6:2a:2a: 82:35:4f:4c:07:1a:76:59:0e:6c:21:cb:46:13:43:6e:11:ae: 00:fc:df:d7:42:39:34:e9:e7:4b:f2:c7:4e:1e:18:21:52:a8: f4:26:2f:01:c3:9e:9e:76:b5:4d:7f:5d:90:84:a7:14:4f:6d: 52:92:c1:46:9d:51:07:2b:98:0b:da:97:81:ee:be:67:db:9b: 44:cb:3f:03:4f:7d:f7:9c:6c:66:a0:f1:5f:c0:56:08:14:ef: 2d:08:80:01:57:f7:f4:0a:ef:73:98:97:d7:3f:2f:d0:75:e2: 43:15:c7:59:77:38:e3:b4:00:66:37:a2:80:cd:83:62:b8:a5: c0:25:44:03:9f:40:cd:a1:18:a9:27:a4:7b:64:c3:30:fa:bd: a6:e9:28:78:4e:b6:4d:fc:ee:aa:34:c9:e0:fd:b3:60:47:d6: f5:38:26:97 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmT+d1t84arqo05UQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk MmQwZTUzMzgtNzNmYy00ZTgzLWJiNTMtM2IzNzFkYzY4MThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhY3rijYLsviAA/B/8RXqBWa6pfUMHGtFcT28 t0mhheYx6Xbgb65mxM9hC3ekCoGI0SilykmGh4lg0kY1Na/f7Nsd2KW9JmcYMwrz 5pQgGSwadT/bOEB0Bl6E1R6deDKow042q0n5KVwPJmZlbNAct+6PgB1ltC9ulBOU NdLAuJ4bK9OCX2i4I8sDeS0ovYK9WEVesYNtMMTjKeVdfPrDv40DO9f2zIKAWFry QrVKM6dMTDsoEweYgakGbQxx0edTodWZuGbnchXiriv+jhOTPboEleyhi81ybxI3 x62OxBIADWecajytnuzFsb9p+yeWaZME3loG8JJS8O2D1iTRQQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEKRE8/Tl+Pb1+EgKUT/gnXfPAwQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvMGY0NDIxZTktZjI0Yi0z ZmI0LTgwYTMtMjc4MTE5NzI1OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf4IDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQARZv9yqXBaxaNZSM6Ab+BiJaGVoLnriiGFjBad0Xno4y2ZUGWWmIAs 7rFWhwpdja3+ajW8xj4tJebXg6cBLi3BenrlTbjAXEolj23wrQx1jCkFlD2YP9/2 KiqCNU9MBxp2WQ5sIctGE0NuEa4A/N/XQjk06edL8sdOHhghUqj0Ji8Bw56edrVN f12QhKcUT21SksFGnVEHK5gL2peB7r5n25tEyz8DT333nGxmoPFfwFYIFO8tCIAB V/f0Cu9zmJfXPy/QdeJDFcdZdzjjtABmN6KAzYNiuKXAJUQDn0DNoRipJ6R7ZMMw +r2m6Sh4TrZN/O6qNMng/bNgR9b1OCaX -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:06 2025 by rpki-client