$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5035ba57-51dc-4236-9c7b-a50de543037c/99573561-9852-3d94-add7-2e0af0d7d22a.roa File: 99573561-9852-3d94-add7-2e0af0d7d22a.roa (raw, json) Hash identifier: km14UgA/UbLJU+WAZ/gh6BEttxfkgtt3q4MXf69cZxo= Subject key identifier: 23:E7:76:12:CD:53:82:83:BC:F6:08:99:A2:B9:A1:09:8D:20:A3:29 Certificate issuer: /CN=5035ba57-51dc-4236-9c7b-a50de543037c Certificate serial: 010D0C9F432858497114320D886EF1D3B7506000 Authority key identifier: 7F:B8:49:DA:3F:20:5C:C7:E5:5B:D6:86:82:42:3B:19:37:28:F0:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5035ba57-51dc-4236-9c7b-a50de543037c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5035ba57-51dc-4236-9c7b-a50de543037c/99573561-9852-3d94-add7-2e0af0d7d22a.roa Signing time: Mon 07 Apr 2025 01:00:47 +0000 ROA not before: Mon 07 Apr 2025 01:00:47 +0000 ROA not after: Sun 06 Jul 2025 01:00:47 +0000 asID: 7850 IP address blocks: 2605:3bc0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5035ba57-51dc-4236-9c7b-a50de543037c/5035ba57-51dc-4236-9c7b-a50de543037c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5035ba57-51dc-4236-9c7b-a50de543037c/5035ba57-51dc-4236-9c7b-a50de543037c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5035ba57-51dc-4236-9c7b-a50de543037c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:71:14:32:0d:88:6e:f1:d3:b7:50:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5035ba57-51dc-4236-9c7b-a50de543037c Validity Not Before: Apr 7 01:00:47 2025 GMT Not After : Jul 6 01:00:47 2025 GMT Subject: CN=ff1542d3-0847-4b62-9c8d-9aec7a90d654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2a:e9:3f:3b:23:94:a5:c2:b4:e8:bf:fe:3d: b1:4d:f4:01:af:28:72:fb:31:19:ac:ce:08:6b:ee: 0d:0d:ef:f8:0b:1b:d9:60:0f:c7:d8:11:9b:fb:41: de:4f:06:e5:4f:72:76:39:76:02:b6:71:3e:60:c6: 98:eb:83:fb:30:cd:25:23:23:70:13:70:6f:e6:2a: 71:f7:ca:e1:92:d8:8c:d9:a5:bb:61:e1:65:00:5b: 9b:3c:99:c9:de:86:51:6a:32:9b:19:52:e2:9b:59: 2d:fe:2e:f8:20:06:89:bf:09:a7:8e:7a:88:1f:37: ab:c4:36:0d:dd:10:19:31:fe:77:1c:d3:b9:06:e6: d6:8a:d2:75:28:9f:ac:4c:b9:cf:70:5b:7a:ee:45: 82:12:e0:80:06:8d:8d:58:ef:7d:d3:50:77:fb:da: 19:b3:c6:4d:5a:c6:f1:34:13:2f:d9:f7:0d:b8:a8: 7b:bf:87:b7:cd:75:57:4c:99:4e:64:94:26:25:e7: e7:fb:a6:eb:1b:01:8e:88:60:5b:38:ff:41:b8:0a: eb:bd:c4:6f:7f:db:f5:d4:65:74:79:f5:f2:9a:ae: 2e:aa:90:cd:64:2a:8c:55:5e:13:40:e4:6a:d8:3b: d2:a7:5a:f2:4f:06:9b:31:f1:61:cf:b0:a8:ee:4b: 82:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E7:76:12:CD:53:82:83:BC:F6:08:99:A2:B9:A1:09:8D:20:A3:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5035ba57-51dc-4236-9c7b-a50de543037c/99573561-9852-3d94-add7-2e0af0d7d22a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5035ba57-51dc-4236-9c7b-a50de543037c/5035ba57-51dc-4236-9c7b-a50de543037c.crl X509v3 Authority Key Identifier: keyid:7F:B8:49:DA:3F:20:5C:C7:E5:5B:D6:86:82:42:3B:19:37:28:F0:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5035ba57-51dc-4236-9c7b-a50de543037c.cer sbgp-ipAddrBlock: critical IPv6: 2605:3bc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:ae:4e:c1:79:ad:43:ab:6a:11:d6:65:9f:b1:a5:f8:a6:70: 5f:8d:95:ca:c1:20:09:bc:14:39:2a:74:05:b3:12:5b:5b:a7: 52:d8:6b:d5:7e:9a:a9:31:02:f6:57:ab:de:73:17:af:cc:80: f3:a6:e9:54:57:e3:93:b6:c6:81:29:e4:da:77:d5:b4:b3:20: a6:cc:e8:6b:a0:b7:04:d5:93:13:24:19:e2:08:42:ad:a6:16: e4:df:d9:38:9d:82:1a:88:5c:1d:08:73:d4:8e:21:24:3e:f1: 19:1e:21:73:d8:e6:a2:e3:c1:9d:ea:aa:62:ce:71:fb:7c:0b: ca:b2:f1:68:0b:df:ba:31:ea:f7:0e:db:e5:ad:5f:4c:df:fe: 60:25:0e:11:1a:39:a3:2c:db:8a:0a:dd:7c:a1:9d:16:1e:04: 9b:90:b5:48:33:65:e0:9e:57:cc:38:02:ea:b9:9d:c6:a0:3b: d2:9c:bb:61:82:ed:67:6b:0c:dc:04:24:bb:09:4d:74:d8:53: da:e4:5c:05:e1:47:88:69:dc:00:e5:ee:61:f8:cd:89:7d:15: bd:55:ba:39:b7:fb:85:2f:14:d0:af:70:8e:56:db:7c:02:50: b8:00:e0:80:5a:2d:f6:56:52:8b:ed:1f:d9:13:8e:bb:a9:f1: 89:7b:2e:56 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElxFDINiG7x07dQYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAzNWJhNTctNTFkYy00MjM2LTljN2ItYTUwZGU1NDMw MzdjMB4XDTI1MDQwNzAxMDA0N1oXDTI1MDcwNjAxMDA0N1owLzEtMCsGA1UEAxMk ZmYxNTQyZDMtMDg0Ny00YjYyLTljOGQtOWFlYzdhOTBkNjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSrpPzsjlKXCtOi//j2xTfQBryhy+zEZrM4I a+4NDe/4CxvZYA/H2BGb+0HeTwblT3J2OXYCtnE+YMaY64P7MM0lIyNwE3Bv5ipx 98rhktiM2aW7YeFlAFubPJnJ3oZRajKbGVLim1kt/i74IAaJvwmnjnqIHzerxDYN 3RAZMf53HNO5BubWitJ1KJ+sTLnPcFt67kWCEuCABo2NWO9901B3+9oZs8ZNWsbx NBMv2fcNuKh7v4e3zXVXTJlOZJQmJefn+6brGwGOiGBbOP9BuArrvcRvf9v11GV0 efXymq4uqpDNZCqMVV4TQORq2DvSp1ryTwabMfFhz7Co7kuCUQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCPndhLNU4KDvPYImaK5oQmNIKMpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81MDM1 YmE1Ny01MWRjLTQyMzYtOWM3Yi1hNTBkZTU0MzAzN2MvOTk1NzM1NjEtOTg1Mi0z ZDk0LWFkZDctMmUwYWYwZDdkMjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTAzNWJhNTctNTFkYy00MjM2LTlj N2ItYTUwZGU1NDMwMzdjLzUwMzViYTU3LTUxZGMtNDIzNi05YzdiLWE1MGRlNTQz MDM3Yy5jcmwwHwYDVR0jBBgwFoAUf7hJ2j8gXMflW9aGgkI7GTco8K0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81MDM1YmE1Ny01MWRjLTQyMzYtOWM3Yi1hNTBk ZTU0MzAzN2MuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgU7wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBbrk7Bea1Dq2oR1mWfsaX4pnBfjZXKwSAJvBQ5KnQFsxJbW6dS2GvV fpqpMQL2V6vecxevzIDzpulUV+OTtsaBKeTad9W0syCmzOhroLcE1ZMTJBniCEKt phbk39k4nYIaiFwdCHPUjiEkPvEZHiFz2Oai48Gd6qpiznH7fAvKsvFoC9+6Mer3 DtvlrV9M3/5gJQ4RGjmjLNuKCt18oZ0WHgSbkLVIM2XgnlfMOALquZ3GoDvSnLth gu1nawzcBCS7CU102FPa5FwF4UeIadwA5e5h+M2JfRW9Vbo5t/uFLxTQr3COVtt8 AlC4AOCAWi32VlKL7R/ZE467qfGJey5W -----END CERTIFICATE-----Generated at Tue Apr 29 07:11:16 2025 by rpki-client