$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/82e546db-2ee7-3746-a4b8-5528ff26ec78.roa File: 82e546db-2ee7-3746-a4b8-5528ff26ec78.roa (raw, json) Hash identifier: 7bkowipZoTZlHXS1ju96c8tfESahrXhSfjqfAHv+p5c= Subject key identifier: 2E:85:FB:6A:13:FD:E7:76:59:8C:68:8B:B9:4D:5F:84:78:FC:52:0F Certificate issuer: /CN=b824dfb2-be33-4946-af95-2296acd823af Certificate serial: 010D0C9F4328584908817A123A947B614268F500 Authority key identifier: 39:D0:91:2E:FD:E1:4C:F5:51:46:22:F2:90:82:4D:17:A0:6C:85:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/82e546db-2ee7-3746-a4b8-5528ff26ec78.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 10737 IP address blocks: 2607:4940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:7a:12:3a:94:7b:61:42:68:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b824dfb2-be33-4946-af95-2296acd823af Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=5c1a568a-9a65-49a9-9fb0-8aa0024d09b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:66:4e:2d:b3:56:9e:e4:a3:26:02:79:ad:c6: 3e:21:3c:eb:2f:8e:b1:2d:de:3a:f0:d5:af:dd:00: 5c:31:4a:cb:11:72:f8:f5:c5:07:4a:71:4d:ed:8c: 0f:f2:37:75:c4:e4:19:ac:71:e7:5d:db:51:aa:0e: 87:a8:64:f1:0b:ea:48:8e:5f:9e:ab:67:ef:be:fb: 57:2a:42:c2:38:d7:33:39:56:3b:37:95:c8:2d:07: b8:8b:08:94:5e:9c:cc:2e:0c:85:16:d5:53:92:48: 40:88:16:67:c4:25:be:22:2b:84:c1:f9:6c:21:b4: b4:47:9e:03:dd:4f:38:e0:f2:8e:48:7b:65:9f:59: aa:47:28:c5:f3:f6:c3:c9:a1:90:f0:11:57:cd:3f: 0d:14:f6:4b:bc:86:1b:a9:8c:c8:40:16:e4:d3:5d: 37:bf:4a:38:f0:f6:96:3c:4a:9f:66:a5:be:9d:5b: f7:24:95:01:8c:7d:0d:95:c3:f5:86:9b:74:17:67: f1:69:22:cc:3d:b5:e4:d1:96:6a:8f:ea:67:4e:49: 0d:7d:df:00:d1:3d:68:d0:40:71:bd:6c:75:d2:8f: 62:5c:df:95:c7:ee:2e:15:87:b6:0e:6b:fd:9b:10: f7:cd:6e:f9:33:e7:06:9f:ac:20:bd:ab:24:bd:f3: 3e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:85:FB:6A:13:FD:E7:76:59:8C:68:8B:B9:4D:5F:84:78:FC:52:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/82e546db-2ee7-3746-a4b8-5528ff26ec78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.crl X509v3 Authority Key Identifier: keyid:39:D0:91:2E:FD:E1:4C:F5:51:46:22:F2:90:82:4D:17:A0:6C:85:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af.cer sbgp-ipAddrBlock: critical IPv6: 2607:4940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:53:7c:7f:4e:e4:22:29:58:c6:23:df:45:ef:6d:3d:23:b7: 67:c4:b3:25:c6:27:eb:a8:2a:1f:af:32:22:aa:37:41:32:3e: 46:a3:ab:36:06:ae:fa:c1:66:54:01:57:38:60:87:89:b2:7f: 6a:77:1f:7c:a2:26:71:e8:4b:1a:0d:e9:20:8c:a3:3f:17:09: e9:07:f2:dc:aa:c3:24:08:95:3b:7d:f6:68:f0:0e:5d:c2:50: 18:e3:0d:16:55:d3:f8:fd:ee:26:23:72:fc:09:31:17:d1:2b: 82:a7:1d:af:c5:16:cd:50:aa:26:45:bb:16:6d:79:b4:8b:28: c7:6f:4c:bf:a1:4e:17:b9:3e:57:e7:5d:ce:c7:a5:2a:d5:3e: 42:76:fe:1f:72:d0:09:7a:59:63:d0:5e:7d:da:69:e3:20:a0: d6:fe:6f:56:87:63:cf:a8:70:82:4a:85:1f:73:23:c5:2b:ef: 66:d3:bb:b6:7c:d3:53:22:fe:d0:e6:ad:82:13:85:66:79:de: c7:f7:80:a4:c0:8d:e3:b2:44:9f:38:a7:d8:48:7f:e6:ec:cb: 25:63:ce:ff:40:30:2e:d8:04:ad:82:bd:6c:25:7d:c6:b8:ae: 3c:96:aa:aa:03:16:e2:bb:0e:f9:1b:12:66:5d:bb:7c:d5:b1: eb:dc:de:af -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkIgXoSOpR7YUJo9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjgyNGRmYjItYmUzMy00OTQ2LWFmOTUtMjI5NmFjZDgy M2FmMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NWMxYTU2OGEtOWE2NS00OWE5LTlmYjAtOGFhMDAyNGQwOWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmZOLbNWnuSjJgJ5rcY+ITzrL46xLd468NWv 3QBcMUrLEXL49cUHSnFN7YwP8jd1xOQZrHHnXdtRqg6HqGTxC+pIjl+eq2fvvvtX KkLCONczOVY7N5XILQe4iwiUXpzMLgyFFtVTkkhAiBZnxCW+IiuEwflsIbS0R54D 3U844PKOSHtln1mqRyjF8/bDyaGQ8BFXzT8NFPZLvIYbqYzIQBbk0103v0o48PaW PEqfZqW+nVv3JJUBjH0NlcP1hpt0F2fxaSLMPbXk0ZZqj+pnTkkNfd8A0T1o0EBx vWx10o9iXN+Vx+4uFYe2Dmv9mxD3zW75M+cGn6wgvaskvfM++QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC6F+2oT/ed2WYxoi7lNX4R4/FIPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iODI0 ZGZiMi1iZTMzLTQ5NDYtYWY5NS0yMjk2YWNkODIzYWYvODJlNTQ2ZGItMmVlNy0z NzQ2LWE0YjgtNTUyOGZmMjZlYzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjgyNGRmYjItYmUzMy00OTQ2LWFm OTUtMjI5NmFjZDgyM2FmL2I4MjRkZmIyLWJlMzMtNDk0Ni1hZjk1LTIyOTZhY2Q4 MjNhZi5jcmwwHwYDVR0jBBgwFoAUOdCRLv3hTPVRRiLykIJNF6Bsha4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iODI0ZGZiMi1iZTMzLTQ5NDYtYWY5NS0yMjk2 YWNkODIzYWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdJQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAvU3x/TuQiKVjGI99F7209I7dnxLMlxifrqCofrzIiqjdBMj5Go6s2 Bq76wWZUAVc4YIeJsn9qdx98oiZx6EsaDekgjKM/FwnpB/LcqsMkCJU7ffZo8A5d wlAY4w0WVdP4/e4mI3L8CTEX0SuCpx2vxRbNUKomRbsWbXm0iyjHb0y/oU4XuT5X 513Ox6Uq1T5Cdv4fctAJellj0F592mnjIKDW/m9Wh2PPqHCCSoUfcyPFK+9m07u2 fNNTIv7Q5q2CE4Vmed7H94CkwI3jskSfOKfYSH/m7MslY87/QDAu2AStgr1sJX3G uK48lqqqAxbiuw75GxJmXbt81bHr3N6v -----END CERTIFICATE-----Generated at Mon Apr 28 08:32:21 2025 by rpki-client