$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fa4ed464-29b3-3452-bdd9-6844fb4db9e1.roa File: fa4ed464-29b3-3452-bdd9-6844fb4db9e1.roa (raw, json) Hash identifier: MeDVFTRcTOHTATyPfU1Al7ESUj3Gd3FnqDdEqIdmAHQ= Subject key identifier: 23:FF:46:6E:0B:16:5A:EA:F3:9C:67:DE:A3:28:0E:A6:5A:E8:7F:F5 Certificate issuer: /CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829 Certificate serial: 010D0C9F432858491246A66648A950E19A401600 Authority key identifier: 22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fa4ed464-29b3-3452-bdd9-6844fb4db9e1.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 0 IP address blocks: 2607:3000::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:a6:66:48:a9:50:e1:9a:40:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=bd9cf913-89d5-4767-a3c7-372a34759960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:91:f3:25:30:c3:55:d6:5e:8c:23:36:6a:74: 73:32:db:fb:5e:42:22:f5:70:ff:55:c3:0e:d5:91: c4:20:df:2d:23:6a:62:00:31:1b:7b:ca:08:be:8f: 17:ca:c4:02:50:19:d4:38:de:d2:d6:85:72:2f:f1: 76:78:79:11:69:d5:87:f9:23:d7:32:fb:54:4f:55: 92:7c:3b:33:5e:39:c8:4f:64:4f:31:72:9c:aa:9c: 48:fa:c7:ba:1d:df:b2:d5:e2:a1:94:08:40:82:0d: a6:f6:b3:63:79:6b:f5:e1:32:3e:51:af:39:d9:d2: 82:31:f5:2b:f5:4f:a9:e5:c2:85:0b:00:58:2b:a3: 8c:eb:77:82:64:91:c3:fa:74:20:45:26:26:d7:3b: 06:64:1b:4e:e3:fd:e5:93:7a:85:a9:ff:3f:99:2f: 33:44:6d:b0:d0:2a:77:74:7b:c2:ac:4d:94:89:6f: cd:45:6b:78:43:16:11:dd:88:e4:35:fd:cc:60:e4: 78:c2:2e:60:7b:2b:d3:c3:19:95:93:e5:4d:e4:cd: 6e:ef:f9:d3:d6:65:c2:18:01:7a:03:80:20:75:d3: 77:9e:17:58:3a:c9:6b:fe:59:97:f1:02:94:c0:b8: 70:1f:26:89:3e:86:18:76:24:a8:92:fb:13:26:97: f8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FF:46:6E:0B:16:5A:EA:F3:9C:67:DE:A3:28:0E:A6:5A:E8:7F:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fa4ed464-29b3-3452-bdd9-6844fb4db9e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl X509v3 Authority Key Identifier: keyid:22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer sbgp-ipAddrBlock: critical IPv6: 2607:3000::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:5e:b8:3e:d3:ed:24:19:d8:c9:28:02:fb:f2:36:38:6f:c8: 75:57:b0:0d:79:bc:3c:3f:66:6e:5f:ce:d9:e8:16:bc:50:66: 84:03:ab:9c:5f:12:92:9e:c1:9c:b1:f6:90:63:91:b8:59:50: 7b:fd:a2:80:7b:23:c5:34:23:e5:95:c6:ec:47:f6:28:ff:4d: 09:58:74:a0:8d:63:3e:a2:04:73:13:2b:94:ef:ab:d1:67:a3: db:dd:ed:8c:af:d4:9d:fd:06:f3:91:1b:a4:e2:b6:01:7f:1e: 1a:5d:6b:a7:53:a4:d7:83:fd:88:41:ee:51:c3:97:de:48:80: 69:35:10:99:a2:b4:92:6c:ed:b7:3a:56:15:e6:4b:b1:70:bb: 11:e5:d1:92:20:2c:f6:8d:40:77:1e:de:01:b6:4e:7a:49:46: 51:e1:a2:49:27:68:97:b9:ed:70:4f:85:ae:27:06:64:ae:cb: 89:47:17:19:c0:1c:bb:9e:b6:aa:9c:63:3c:1a:31:58:a0:93: a3:cf:96:09:de:46:35:2c:54:ff:26:eb:6b:aa:e1:41:aa:d2: 3e:fd:41:03:3d:77:b2:78:02:04:8f:e0:2e:cf:5f:7d:54:63: 7d:fb:29:1a:31:d4:18:07:f8:e2:54:92:bc:e4:7f:bc:e3:48: a0:3c:ac:60 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkSRqZmSKlQ4ZpAFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAxN2NlZDUtNmUwMy00YzIwLTllYjItY2FhNTdhMmY3 ODI5MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YmQ5Y2Y5MTMtODlkNS00NzY3LWEzYzctMzcyYTM0NzU5OTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJHzJTDDVdZejCM2anRzMtv7XkIi9XD/VcMO 1ZHEIN8tI2piADEbe8oIvo8XysQCUBnUON7S1oVyL/F2eHkRadWH+SPXMvtUT1WS fDszXjnIT2RPMXKcqpxI+se6Hd+y1eKhlAhAgg2m9rNjeWv14TI+Ua852dKCMfUr 9U+p5cKFCwBYK6OM63eCZJHD+nQgRSYm1zsGZBtO4/3lk3qFqf8/mS8zRG2w0Cp3 dHvCrE2UiW/NRWt4QxYR3YjkNf3MYOR4wi5geyvTwxmVk+VN5M1u7/nT1mXCGAF6 A4AgddN3nhdYOslr/lmX8QKUwLhwHyaJPoYYdiSokvsTJpf4NQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCP/Rm4LFlrq85xn3qMoDqZa6H/1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MDE3 Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1N2EyZjc4MjkvZmE0ZWQ0NjQtMjliMy0z NDUyLWJkZDktNjg0NGZiNGRiOWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTAxN2NlZDUtNmUwMy00YzIwLTll YjItY2FhNTdhMmY3ODI5LzUwMTdjZWQ1LTZlMDMtNGMyMC05ZWIyLWNhYTU3YTJm NzgyOS5jcmwwHwYDVR0jBBgwFoAUIr6PGmFUenj3XYro0kCXNLfsebEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MDE3Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1 N2EyZjc4MjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcwADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAVXrg+0+0kGdjJKAL78jY4b8h1V7ANebw8P2ZuX87Z6Ba8UGaEA6uc XxKSnsGcsfaQY5G4WVB7/aKAeyPFNCPllcbsR/Yo/00JWHSgjWM+ogRzEyuU76vR Z6Pb3e2Mr9Sd/QbzkRuk4rYBfx4aXWunU6TXg/2IQe5Rw5feSIBpNRCZorSSbO23 OlYV5kuxcLsR5dGSICz2jUB3Ht4Btk56SUZR4aJJJ2iXue1wT4WuJwZkrsuJRxcZ wBy7nraqnGM8GjFYoJOjz5YJ3kY1LFT/JutrquFBqtI+/UEDPXeyeAIEj+Auz199 VGN9+ykaMdQYB/jiVJK85H+840igPKxg -----END CERTIFICATE-----Generated at Sat Apr 26 12:55:36 2025 by rpki-client