$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c9f8d48a-c9f1-3ad8-a2b9-48e540a2f909.roa File: c9f8d48a-c9f1-3ad8-a2b9-48e540a2f909.roa (raw, json) Hash identifier: zPqR02+653PcKakq5Mr3mC6VqL+39vz2IWM7kL6v64g= Subject key identifier: D2:4F:1C:66:D5:87:76:6B:7E:8D:C5:53:BB:A4:34:CD:84:D7:9E:FC Certificate issuer: /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Certificate serial: 010D0C9F432858491D7177A5508CD64F7FF6BB20 Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c9f8d48a-c9f1-3ad8-a2b9-48e540a2f909.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 6939 IP address blocks: 2604:ebc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:77:a5:50:8c:d6:4f:7f:f6:bb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=87a4d166-1f87-4315-9b7e-733bc6fd3085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6b:b5:83:d9:db:0d:c4:1a:0b:74:20:3c:e2: d0:a4:85:bc:86:e7:7d:6f:6b:e0:24:1e:66:31:1b: 66:4c:4e:b2:27:8a:7c:f0:2f:6b:e2:c4:8c:fc:ab: be:b3:d4:7b:d0:4a:07:83:ee:e4:7b:b4:d2:98:95: c4:bc:67:18:14:37:05:0d:8f:ce:cb:d6:8f:52:35: f6:5a:7f:32:3a:5a:6b:a4:99:1d:64:fd:15:37:65: ed:39:4c:ec:e3:d1:85:63:55:c3:ac:18:54:f6:4e: f8:27:d2:a7:03:b5:6c:d7:c9:77:66:31:9d:06:7e: f9:58:bd:22:36:21:06:86:c1:db:a8:7a:40:da:78: 72:c0:d1:da:b9:69:4c:ed:3d:d0:44:d8:a1:be:ca: 27:29:c6:5f:40:9e:22:e4:08:5a:73:16:f8:1e:ae: e3:42:1f:f2:fe:a0:a4:35:64:50:b6:7a:21:ba:ec: 65:7e:e6:29:30:86:a8:7a:63:d7:e9:cb:37:e0:cf: 1c:80:6d:c3:b2:45:a6:79:65:6c:76:ef:f3:10:80: 51:46:84:1b:6f:73:a1:32:db:02:54:cb:3b:f0:90: 9a:78:94:59:8c:14:72:3c:bf:b6:d4:21:ed:94:fb: d4:46:82:24:ef:9f:87:75:0e:ee:b9:a5:c0:4e:0a: 69:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4F:1C:66:D5:87:76:6B:7E:8D:C5:53:BB:A4:34:CD:84:D7:9E:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c9f8d48a-c9f1-3ad8-a2b9-48e540a2f909.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl X509v3 Authority Key Identifier: keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer sbgp-ipAddrBlock: critical IPv6: 2604:ebc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:9a:07:ca:bb:15:db:20:e6:da:b7:e0:21:f7:a0:80:d6:e3: a2:8c:fe:fc:22:84:67:89:22:7c:17:b6:6c:ef:ab:d1:99:26: f2:d9:4f:83:65:9e:e9:80:3c:7e:ef:24:c5:df:74:f7:ed:07: 28:8c:da:69:3a:c8:4e:45:54:70:a9:3a:82:e6:f5:5b:64:29: 65:6a:9e:72:82:af:5a:4c:53:96:d6:81:b0:f9:c1:e9:99:5f: e8:a4:10:60:27:ce:3f:2e:79:b9:00:00:04:b5:bf:a4:69:07: ac:ec:f6:c3:b4:70:d7:86:01:46:a2:38:f4:2f:2d:cf:3f:49: d0:1f:a4:41:a6:49:57:bc:6a:f5:aa:78:35:ca:34:16:34:94: 3c:ea:dc:c7:3e:20:54:05:4c:e5:f7:e8:90:da:15:90:bc:25: ce:3a:cf:af:d3:36:ab:14:7e:94:f0:d5:fc:68:8f:44:a6:0c: 7f:ee:4f:1a:28:ec:2c:96:ab:c1:55:cd:49:3e:e2:6f:b4:ca: 70:7b:ae:44:b9:c0:78:d9:2d:11:d2:1e:34:f2:7b:b6:dc:62: c6:dc:b5:b5:e6:1a:29:43:d9:db:30:9e:4b:c4:6a:09:f7:e2: 43:9e:a3:ec:ca:10:90:11:b1:56:73:d0:f4:77:5c:b4:8d:df: 23:bf:90:ca -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkdcXelUIzWT3/2uyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzExZjE5Y2MtMzQ0ZS00OGM1LWExZjEtNDc1OTNhYTU2 YjBkMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk ODdhNGQxNjYtMWY4Ny00MzE1LTliN2UtNzMzYmM2ZmQzMDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimu1g9nbDcQaC3QgPOLQpIW8hud9b2vgJB5m MRtmTE6yJ4p88C9r4sSM/Ku+s9R70EoHg+7ke7TSmJXEvGcYFDcFDY/Oy9aPUjX2 Wn8yOlprpJkdZP0VN2XtOUzs49GFY1XDrBhU9k74J9KnA7Vs18l3ZjGdBn75WL0i NiEGhsHbqHpA2nhywNHauWlM7T3QRNihvsonKcZfQJ4i5Ahacxb4Hq7jQh/y/qCk NWRQtnohuuxlfuYpMIaoemPX6cs34M8cgG3DskWmeWVsdu/zEIBRRoQbb3OhMtsC VMs78JCaeJRZjBRyPL+21CHtlPvURoIk75+HdQ7uuaXATgppNQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNJPHGbVh3Zrfo3FU7ukNM2E1578MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFm MTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5M2FhNTZiMGQvYzlmOGQ0OGEtYzlmMS0z YWQ4LWEyYjktNDhlNTQwYTJmOTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzExZjE5Y2MtMzQ0ZS00OGM1LWEx ZjEtNDc1OTNhYTU2YjBkLzMxMWYxOWNjLTM0NGUtNDhjNS1hMWYxLTQ3NTkzYWE1 NmIwZC5jcmwwHwYDVR0jBBgwFoAUTdZg5uF1ESmUCvKCwba2rQLZYH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFmMTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5 M2FhNTZiMGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTrwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCamgfKuxXbIObat+Ah96CA1uOijP78IoRniSJ8F7Zs76vRmSby2U+D ZZ7pgDx+7yTF33T37QcojNppOshORVRwqTqC5vVbZCllap5ygq9aTFOW1oGw+cHp mV/opBBgJ84/Lnm5AAAEtb+kaQes7PbDtHDXhgFGojj0Ly3PP0nQH6RBpklXvGr1 qng1yjQWNJQ86tzHPiBUBUzl9+iQ2hWQvCXOOs+v0zarFH6U8NX8aI9Epgx/7k8a KOwslqvBVc1JPuJvtMpwe65EucB42S0R0h408nu23GLG3LW15hopQ9nbMJ5LxGoJ 9+JDnqPsyhCQEbFWc9D0d1y0jd8jv5DK -----END CERTIFICATE-----Generated at Mon Apr 28 06:10:38 2025 by rpki-client