$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/acc95f0f-c9b2-36f1-9fd1-d28a6cb928ee.roa File: acc95f0f-c9b2-36f1-9fd1-d28a6cb928ee.roa (raw, json) Hash identifier: wSRKtZe02Ti3HaU3WZvaQAnQ3h0ifM1MOnFQavBdT0E= Subject key identifier: 58:7B:48:59:90:94:E6:18:4B:51:14:42:11:AD:9E:07:B1:DA:62:78 Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F43285849A354809BA86DB70080C21480 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/acc95f0f-c9b2-36f1-9fd1-d28a6cb928ee.roa Signing time: Fri 25 Apr 2025 01:00:47 +0000 ROA not before: Fri 25 Apr 2025 01:00:47 +0000 ROA not after: Thu 24 Jul 2025 01:00:47 +0000 asID: 394002 IP address blocks: 2604:7340::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:54:80:9b:a8:6d:b7:00:80:c2:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Apr 25 01:00:47 2025 GMT Not After : Jul 24 01:00:47 2025 GMT Subject: CN=0c495e6a-10d3-487c-b865-112b6ab0a80b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:71:33:b3:4f:10:71:50:3b:50:c8:e5:15:bf: 4f:ac:68:a4:75:4e:6b:86:f5:92:75:28:43:12:df: 01:b0:87:b5:d7:03:3f:72:54:43:3e:00:0e:73:a6: a7:f4:96:c7:6c:c3:e5:76:28:72:fd:20:98:14:22: eb:5e:59:b3:0a:4d:30:12:f4:e4:69:08:68:08:b7: 71:0c:55:bd:a0:11:f7:5d:07:19:6a:8b:05:9d:4a: 42:6a:44:b7:27:2c:48:5d:90:b3:17:59:4c:bf:66: 5d:09:78:58:7e:92:1c:9b:40:d0:4d:7f:61:4d:10: db:62:9b:f9:46:e7:f6:dc:f9:28:a6:e6:b7:7d:97: 96:9f:ef:f1:ad:00:09:13:a2:c8:4b:28:cb:6b:a0: 61:02:ed:b3:31:79:5a:5e:64:e8:a9:59:15:d2:e6: d0:59:36:50:46:64:80:7a:cb:ad:8a:7a:17:ae:de: a1:d2:3f:3a:a5:80:6a:19:48:70:84:62:e3:c0:85: 1c:aa:c3:60:9c:63:ec:27:10:84:6f:5e:2a:b3:de: cc:cc:02:33:e0:c6:86:81:bb:8e:a7:47:ae:d1:25: b4:1c:ab:0c:62:3c:49:27:16:f9:ed:e2:dc:01:1c: b8:9a:e9:24:89:8c:2c:30:99:a0:00:8a:11:12:29: ce:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7B:48:59:90:94:E6:18:4B:51:14:42:11:AD:9E:07:B1:DA:62:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/acc95f0f-c9b2-36f1-9fd1-d28a6cb928ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv6: 2604:7340::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:90:6c:12:37:61:a2:3a:ef:3f:b3:90:f2:4c:3d:d0:20:96: 85:ca:ca:34:81:eb:b6:4c:ea:4a:49:88:0e:6e:08:08:fb:30: 0c:7d:81:64:09:b8:46:f5:ac:63:67:f1:85:34:a8:0c:c9:47: b8:7a:af:a2:c8:43:78:69:09:ae:0b:22:9a:27:23:1d:a0:c9: 63:1a:67:9c:f1:d9:ce:16:aa:39:6d:dc:8f:39:c2:25:79:4d: 4f:33:2d:00:3f:d6:42:99:6e:2b:d0:3a:50:55:8e:a9:fa:f4: 00:34:ed:74:ff:4c:58:9a:11:ee:fa:ff:ab:7e:2c:ac:5f:e5: a9:6c:f6:2a:be:f3:17:ad:b6:ab:0c:7a:99:d1:e9:25:c3:ad: c9:e4:de:34:1a:bc:99:cb:17:4a:03:36:cb:d5:68:65:1c:34: ae:e6:b0:76:b2:27:5d:d7:83:74:e3:c8:66:11:35:03:05:74: 2f:56:fe:ae:a4:59:a7:2f:a7:7a:70:98:c9:6f:14:e6:fc:bb: 9b:d8:c8:c9:43:81:0d:93:6e:e7:98:ec:d2:24:12:1a:22:77: da:ff:64:5f:17:92:db:7c:8f:3f:91:35:13:be:fc:3b:a6:0c: f5:0c:be:87:9f:87:81:1f:c7:dc:0c:36:4d:65:9e:55:d2:77: d4:8e:33:5d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmjVICbqG23AIDCFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI1MDQyNTAxMDA0N1oXDTI1MDcyNDAxMDA0N1owLzEtMCsGA1UEAxMk MGM0OTVlNmEtMTBkMy00ODdjLWI4NjUtMTEyYjZhYjBhODBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHEzs08QcVA7UMjlFb9PrGikdU5rhvWSdShD Et8BsIe11wM/clRDPgAOc6an9JbHbMPldihy/SCYFCLrXlmzCk0wEvTkaQhoCLdx DFW9oBH3XQcZaosFnUpCakS3JyxIXZCzF1lMv2ZdCXhYfpIcm0DQTX9hTRDbYpv5 Ruf23Pkopua3fZeWn+/xrQAJE6LISyjLa6BhAu2zMXlaXmToqVkV0ubQWTZQRmSA esutinoXrt6h0j86pYBqGUhwhGLjwIUcqsNgnGPsJxCEb14qs97MzAIz4MaGgbuO p0eu0SW0HKsMYjxJJxb57eLcARy4mukkiYwsMJmgAIoREinOZQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFh7SFmQlOYYS1EUQhGtngex2mJ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvYWNjOTVmMGYtYzliMi0z NmYxLTlmZDEtZDI4YTZjYjkyOGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRzQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBckGwSN2GiOu8/s5DyTD3QIJaFyso0geu2TOpKSYgObggI+zAMfYFk CbhG9axjZ/GFNKgMyUe4eq+iyEN4aQmuCyKaJyMdoMljGmec8dnOFqo5bdyPOcIl eU1PMy0AP9ZCmW4r0DpQVY6p+vQANO10/0xYmhHu+v+rfiysX+WpbPYqvvMXrbar DHqZ0eklw63J5N40GryZyxdKAzbL1WhlHDSu5rB2sidd14N048hmETUDBXQvVv6u pFmnL6d6cJjJbxTm/Lub2MjJQ4ENk27nmOzSJBIaInfa/2RfF5LbfI8/kTUTvvw7 pgz1DL6Hn4eBH8fcDDZNZZ5V0nfUjjNd -----END CERTIFICATE-----Generated at Thu May 1 02:52:28 2025 by rpki-client