$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/e5d9b7b7-221f-3eee-b52b-b8f95c278eb1.roa File: e5d9b7b7-221f-3eee-b52b-b8f95c278eb1.roa (raw, json) Hash identifier: L/rzsrYV7oMbqqonHbgL1tHbE2Xt+K3+rbbQb8yah38= Subject key identifier: 29:E0:E9:1C:27:7F:9B:75:A7:78:C9:94:78:62:5E:90:5A:46:5B:B0 Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Certificate serial: 010D0C9F432858492183B88C83A429118074D280 Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/e5d9b7b7-221f-3eee-b52b-b8f95c278eb1.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 6597 IP address blocks: 2607:f948::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:b8:8c:83:a4:29:11:80:74:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=40a610ea-f689-4ddc-90ce-2f985a805472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d4:5c:91:45:34:e0:0b:23:c7:8e:73:67:b5: e9:21:9f:ca:1d:1e:c7:93:95:65:a1:3d:8d:01:c7: 1f:aa:0c:c4:03:db:bd:2d:c9:7e:7b:c7:ce:4a:8b: b6:24:60:bd:43:bc:3d:00:57:04:54:fc:df:cb:a4: 88:33:26:65:3f:c0:a1:42:16:8a:5a:43:c3:81:71: 62:65:64:35:e9:38:fe:c0:42:56:b3:27:dd:9c:99: 1e:01:b9:96:54:25:f0:3c:3b:88:7d:a7:fb:92:a1: 23:96:67:71:8a:af:48:12:f4:76:eb:22:eb:72:8d: d1:b4:4d:e6:49:c4:8b:32:32:e5:d9:4f:e2:13:b8: cb:f7:c5:f0:e3:8e:c0:9d:e2:52:4f:a0:d4:83:51: 10:3a:fd:b6:5f:13:f6:4d:1c:19:9e:4d:63:f3:53: d8:db:bb:71:89:de:6d:bb:00:fd:9c:ab:c5:6f:d9: 62:21:06:74:9b:b7:63:19:df:47:4a:0a:1f:4e:a2: a6:42:5e:eb:c0:63:05:11:65:da:da:11:5a:fc:4a: 21:79:6b:76:5b:07:c9:f8:07:d4:52:82:1a:7c:d7: 59:d4:10:c8:bc:65:09:4c:a5:8c:71:bf:a8:ff:71: 7d:2c:0f:b1:51:c1:15:71:89:71:c4:e8:bf:f9:fa: 0e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E0:E9:1C:27:7F:9B:75:A7:78:C9:94:78:62:5E:90:5A:46:5B:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/e5d9b7b7-221f-3eee-b52b-b8f95c278eb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl X509v3 Authority Key Identifier: keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer sbgp-ipAddrBlock: critical IPv6: 2607:f948::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:21:75:4d:ad:59:0b:7a:49:aa:1d:fa:61:4d:fe:62:ee:ea: d1:2f:0e:72:a3:86:f5:00:bf:99:93:0e:0a:61:ff:6d:db:88: 7c:b7:35:ec:45:4f:c3:b9:be:eb:99:62:6b:d2:a0:5c:e8:7e: 96:70:18:b9:53:bd:55:20:fb:91:0b:a9:03:0c:b4:7d:73:11: d1:95:0c:20:ac:fb:83:cd:80:f9:08:b8:82:38:f5:26:c2:62: f9:1a:55:dd:c8:ff:7d:5c:c4:fc:9e:30:c0:7e:1d:8a:f0:90: ea:cd:5a:44:a9:fc:ef:0e:a2:b2:5e:cf:e4:69:e9:2b:33:ea: 56:6f:92:07:c1:24:ae:22:07:cc:c9:b4:aa:7a:34:ee:c0:1c: c6:58:bb:72:e4:b7:56:86:ee:52:21:74:57:09:ed:08:86:03: bc:ea:87:04:c5:44:db:ff:91:3b:b0:a8:1a:0a:da:76:c2:d3: a0:7b:8e:29:76:62:34:da:f0:00:15:e7:dc:a8:40:09:22:a6: 63:03:3a:a3:40:ea:47:fd:ce:00:56:e7:e1:8d:42:de:1b:a0: ca:71:cc:87:19:24:4e:f9:51:56:13:5b:ce:09:90:b0:5d:21: b1:78:9b:2c:94:2d:9d:d3:bb:e8:c4:32:ca:ce:ea:39:ff:30: c1:ea:bc:57 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkhg7iMg6QpEYB00oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0ZDcxMDUtZDliZC00ZWU0LWI5NTgtMmU5OTAyZDVl Yjk3MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NDBhNjEwZWEtZjY4OS00ZGRjLTkwY2UtMmY5ODVhODA1NDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutRckUU04Asjx45zZ7XpIZ/KHR7Hk5VloT2N AccfqgzEA9u9Lcl+e8fOSou2JGC9Q7w9AFcEVPzfy6SIMyZlP8ChQhaKWkPDgXFi ZWQ16Tj+wEJWsyfdnJkeAbmWVCXwPDuIfaf7kqEjlmdxiq9IEvR26yLrco3RtE3m ScSLMjLl2U/iE7jL98Xw447AneJST6DUg1EQOv22XxP2TRwZnk1j81PY27txid5t uwD9nKvFb9liIQZ0m7djGd9HSgofTqKmQl7rwGMFEWXa2hFa/EoheWt2WwfJ+AfU UoIafNdZ1BDIvGUJTKWMcb+o/3F9LA+xUcEVcYlxxOi/+foO9wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCng6Rwnf5t1p3jJlHhiXpBaRluwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRk NzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5MDJkNWViOTcvZTVkOWI3YjctMjIxZi0z ZWVlLWI1MmItYjhmOTVjMjc4ZWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2I0ZDcxMDUtZDliZC00ZWU0LWI5 NTgtMmU5OTAyZDVlYjk3LzNiNGQ3MTA1LWQ5YmQtNGVlNC1iOTU4LTJlOTkwMmQ1 ZWI5Ny5jcmwwHwYDVR0jBBgwFoAUrPgBtzCVI7GVWIX/ouTrJrmfYzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRkNzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5 MDJkNWViOTcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf5SDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAoIXVNrVkLekmqHfphTf5i7urRLw5yo4b1AL+Zkw4KYf9t24h8tzXs RU/Dub7rmWJr0qBc6H6WcBi5U71VIPuRC6kDDLR9cxHRlQwgrPuDzYD5CLiCOPUm wmL5GlXdyP99XMT8njDAfh2K8JDqzVpEqfzvDqKyXs/kaekrM+pWb5IHwSSuIgfM ybSqejTuwBzGWLty5LdWhu5SIXRXCe0IhgO86ocExUTb/5E7sKgaCtp2wtOge44p dmI02vAAFefcqEAJIqZjAzqjQOpH/c4AVufhjULeG6DKccyHGSRO+VFWE1vOCZCw XSGxeJsslC2d07voxDLKzuo5/zDB6rxX -----END CERTIFICATE-----Generated at Tue Apr 29 16:22:12 2025 by rpki-client