$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/ef514d7f-7e6c-395e-a7f6-46da966e06c6.roa File: ef514d7f-7e6c-395e-a7f6-46da966e06c6.roa (raw, json) Hash identifier: ANyz/8Q5cq61PcKfXCqc4UAau+mFk4Vjmkw6HvAPQK0= Subject key identifier: 8F:7F:03:47:00:AE:B3:C9:DA:A2:41:C0:FB:53:94:C2:D7:5D:BE:BF Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F432858494B6408B8A2732D4E5598D2E0 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/ef514d7f-7e6c-395e-a7f6-46da966e06c6.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 11232 IP address blocks: 2604:7a00::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:08:b8:a2:73:2d:4e:55:98:d2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=3b943c56-8f1f-4339-b83b-82aedb2304a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:31:ad:97:22:19:d1:36:1e:fa:ca:ce:85:0a: 1e:1f:c7:4c:7a:b4:96:d3:e0:c8:fc:90:b9:3e:53: 08:12:80:b2:51:9c:9d:19:c6:23:1b:68:49:2a:b7: d6:2c:ab:26:7d:c1:78:95:2a:ec:21:7f:0a:a7:b5: 09:b0:d7:5f:d6:df:68:8f:2f:0a:d0:c0:d6:e9:d1: 96:7b:3d:5c:b6:e5:74:c5:73:ee:62:28:31:ba:9a: ae:69:c8:35:f3:f2:b2:89:d7:e1:f3:88:ec:42:ce: 0d:89:1e:3b:dd:bf:26:d5:b6:25:5a:58:b2:b9:6d: 4f:14:c1:61:c1:34:e7:7e:2f:3b:f5:c2:80:e0:7b: 6a:1d:ef:55:b0:c8:ce:16:4f:7b:72:71:98:29:d2: 6f:a6:7b:9f:46:9c:83:02:dc:29:ef:64:f3:7f:44: 33:47:a7:e2:e3:a5:d3:7a:d8:c6:b4:d1:b7:e5:b6: 83:08:e2:20:7b:7d:a4:5c:8f:2f:72:2f:b4:9f:30: 49:8b:fb:98:10:f0:b7:1f:65:fe:e5:07:cc:c4:ca: 72:72:6c:98:5a:e1:0b:57:13:11:34:56:7c:46:ec: 31:bc:8b:78:59:bc:17:5d:03:c8:1f:30:21:1f:7d: 60:0b:27:14:22:01:9c:55:d9:f5:ed:28:9f:ee:62: 89:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7F:03:47:00:AE:B3:C9:DA:A2:41:C0:FB:53:94:C2:D7:5D:BE:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/ef514d7f-7e6c-395e-a7f6-46da966e06c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv6: 2604:7a00::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:72:e5:0a:ec:4c:0f:12:64:27:2f:bb:bb:e5:06:ef:5c:a2: a3:64:6c:31:ab:6d:5f:70:9a:ad:32:84:85:ed:33:5d:f1:7c: 17:64:86:a9:4a:5a:1c:33:13:4b:4c:88:71:73:c9:fa:20:9f: 42:55:e4:19:6a:79:02:5b:34:67:e6:26:29:b9:0b:c4:0a:31: a5:a5:fd:10:25:48:13:40:8e:7c:0e:30:21:8a:8a:79:f1:d7: 83:e4:c5:e8:44:72:7f:ba:ae:b8:51:78:98:d1:fc:72:56:fc: 17:6a:73:0f:28:b1:ec:28:11:f6:d7:79:d9:3c:98:95:be:f1: 09:e2:26:cc:4c:83:7e:d2:ba:16:1a:f9:39:14:d9:ae:3b:6d: 42:71:8e:2c:98:32:f3:b4:3d:64:42:ae:9d:f9:0e:c0:30:a2: f8:1d:57:45:69:4b:71:0c:b7:19:fa:1d:0b:65:ae:12:8b:f7: 2b:f1:71:c1:48:95:51:11:11:6e:48:9c:7c:f8:2f:db:58:94: ed:4d:19:4b:e2:af:31:f1:7a:05:3a:ae:5d:00:0a:02:26:0c: 8a:94:cd:27:52:e6:0f:68:50:da:fa:0b:2d:44:97:b2:33:58: 1b:98:bc:fa:5c:da:67:09:b5:54:0f:bb:c0:b7:a6:23:b8:a1: e8:97:13:78 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElLZAi4onMtTlWY0uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk M2I5NDNjNTYtOGYxZi00MzM5LWI4M2ItODJhZWRiMjMwNGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDGtlyIZ0TYe+srOhQoeH8dMerSW0+DI/JC5 PlMIEoCyUZydGcYjG2hJKrfWLKsmfcF4lSrsIX8Kp7UJsNdf1t9ojy8K0MDW6dGW ez1ctuV0xXPuYigxupquacg18/Kyidfh84jsQs4NiR473b8m1bYlWliyuW1PFMFh wTTnfi879cKA4HtqHe9VsMjOFk97cnGYKdJvpnufRpyDAtwp72Tzf0QzR6fi46XT etjGtNG35baDCOIge32kXI8vci+0nzBJi/uYEPC3H2X+5QfMxMpycmyYWuELVxMR NFZ8RuwxvIt4WbwXXQPIHzAhH31gCycUIgGcVdn17Sif7mKJ6wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI9/A0cArrPJ2qJBwPtTlMLXXb6/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZWY1MTRkN2YtN2U2Yy0z OTVlLWE3ZjYtNDZkYTk2NmUwNmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgR6ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQClcuUK7EwPEmQnL7u75QbvXKKjZGwxq21fcJqtMoSF7TNd8XwXZIap SlocMxNLTIhxc8n6IJ9CVeQZankCWzRn5iYpuQvECjGlpf0QJUgTQI58DjAhiop5 8deD5MXoRHJ/uq64UXiY0fxyVvwXanMPKLHsKBH213nZPJiVvvEJ4ibMTIN+0roW Gvk5FNmuO21CcY4smDLztD1kQq6d+Q7AMKL4HVdFaUtxDLcZ+h0LZa4Si/cr8XHB SJVRERFuSJx8+C/bWJTtTRlL4q8x8XoFOq5dAAoCJgyKlM0nUuYPaFDa+gstRJey M1gbmLz6XNpnCbVUD7vAt6YjuKHolxN4 -----END CERTIFICATE-----Generated at Mon Apr 28 01:07:35 2025 by rpki-client