$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/fdb7d79b-8caa-37cb-a97b-0a2767b34ea5.roa File: fdb7d79b-8caa-37cb-a97b-0a2767b34ea5.roa (raw, json) Hash identifier: 7LhMIx24BhpQ2iKKIhI3RX6mu0BGq0iJxJ9Fq0GLBmU= Subject key identifier: 71:36:EA:BD:16:3E:A2:6A:DA:51:12:26:B9:61:33:05:35:0E:44:56 Certificate issuer: /CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4 Certificate serial: 010D0C9F432858498E6481845E342C4D02C621C0 Authority key identifier: 19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/fdb7d79b-8caa-37cb-a97b-0a2767b34ea5.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 16509 IP address blocks: 2606:a440:4::/48 maxlen: 48 2606:a440:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:81:84:5e:34:2c:4d:02:c6:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=495fb940-eb76-4e6c-9e0f-8da3dfec75a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9d:24:ee:ce:1c:e4:9f:ed:c3:2e:38:40:08: fc:ef:21:90:4e:26:b2:12:70:4a:7f:64:99:b6:ed: 40:74:ba:52:9f:96:f2:81:b9:48:29:36:b3:1a:c7: 50:68:ff:02:c4:a3:13:c0:da:d9:6d:c0:10:d9:36: eb:11:2d:36:da:eb:5e:d2:8a:0e:2b:b6:49:90:a1: 52:bd:5d:2c:b7:db:91:41:16:be:bb:f8:a2:66:c2: 2c:61:ca:ea:46:96:d4:c8:61:29:72:2c:85:de:94: fa:2e:f3:45:27:37:1e:d1:36:aa:6f:d1:b2:fe:ab: 49:35:2e:c0:3c:cc:76:a7:17:45:7a:82:0a:57:3f: c5:cf:46:76:2d:08:cc:bf:15:f8:1c:30:69:56:31: c0:35:0e:1d:9b:53:74:b2:fb:a0:0a:d2:ec:75:56: 7f:47:e1:9e:43:ad:c3:98:e6:7a:d7:35:3a:04:83: e1:b8:c4:97:00:92:e7:a8:02:6c:22:7f:bf:f3:75: cb:6a:d2:a4:6e:b8:50:e5:08:76:f8:88:4c:7c:4d: 46:1d:05:1f:53:f1:2d:85:1b:18:63:64:3e:db:99: e7:3f:cb:2a:15:b5:f5:97:5d:da:76:21:63:5b:62: 32:2a:b1:b3:df:7c:fa:93:f1:b7:e7:31:86:c4:c6: 0c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:36:EA:BD:16:3E:A2:6A:DA:51:12:26:B9:61:33:05:35:0E:44:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/fdb7d79b-8caa-37cb-a97b-0a2767b34ea5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.crl X509v3 Authority Key Identifier: keyid:19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer sbgp-ipAddrBlock: critical IPv6: 2606:a440:4::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:55:cb:97:cd:49:34:ac:24:2e:ed:32:4e:e4:f1:ea:0a:cc: 88:e9:f2:15:e3:f1:6c:e7:c7:4d:b8:12:51:aa:da:90:c0:00: 32:55:c1:06:8e:2b:d9:f2:ac:53:2f:41:8b:27:01:b2:99:77: 73:b5:00:3d:9a:3b:71:c1:2f:9b:aa:13:10:7e:58:c1:2d:de: bb:30:90:99:be:32:36:a0:b8:2f:f9:f7:04:53:61:91:56:b7: 80:5c:09:4e:54:eb:ea:f3:c3:f3:ca:4a:a7:cb:9e:a9:26:5d: 37:90:2a:d0:ff:77:9f:c2:8d:3a:f6:90:d9:29:f0:e2:ab:e2: c9:a7:5d:34:39:a9:3f:63:13:56:e5:da:8d:d8:72:d4:31:70: 06:ba:36:b6:a4:e7:36:46:2f:15:44:4c:02:8f:56:93:2f:f6: c3:75:a9:54:79:2a:d2:51:0b:71:6d:4d:09:8f:d1:28:5c:14: 70:58:99:69:56:b6:9f:be:f3:2c:25:87:05:08:8b:ab:dc:bf: 52:b2:0e:7b:cc:d5:5f:8b:df:42:c5:2e:37:00:1f:ee:c8:86: a5:ac:db:0f:bf:5d:b1:76:93:61:6a:2d:5b:2d:51:cf:03:90: 55:32:da:4c:ef:3c:6f:a8:e3:e2:36:90:5f:61:22:7b:32:62: 9c:db:99:26 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmOZIGEXjQsTQLGIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJiODNhZTctNTJiNi00NWI0LTkyYzktYzEyZjdiYjAw OWY0MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk NDk1ZmI5NDAtZWI3Ni00ZTZjLTllMGYtOGRhM2RmZWM3NWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1J0k7s4c5J/twy44QAj87yGQTiayEnBKf2SZ tu1AdLpSn5bygblIKTazGsdQaP8CxKMTwNrZbcAQ2TbrES022ute0ooOK7ZJkKFS vV0st9uRQRa+u/iiZsIsYcrqRpbUyGEpciyF3pT6LvNFJzce0Taqb9Gy/qtJNS7A PMx2pxdFeoIKVz/Fz0Z2LQjMvxX4HDBpVjHANQ4dm1N0svugCtLsdVZ/R+GeQ63D mOZ61zU6BIPhuMSXAJLnqAJsIn+/83XLatKkbrhQ5Qh2+IhMfE1GHQUfU/EthRsY Y2Q+25nnP8sqFbX1l13adiFjW2IyKrGz33z6k/G35zGGxMYMAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHE26r0WPqJq2lESJrlhMwU1DkRWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMmI4 M2FlNy01MmI2LTQ1YjQtOTJjOS1jMTJmN2JiMDA5ZjQvZmRiN2Q3OWItOGNhYS0z N2NiLWE5N2ItMGEyNzY3YjM0ZWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTJiODNhZTctNTJiNi00NWI0LTky YzktYzEyZjdiYjAwOWY0L2EyYjgzYWU3LTUyYjYtNDViNC05MmM5LWMxMmY3YmIw MDlmNC5jcmwwHwYDVR0jBBgwFoAUGQyTcZ0vFU2+EnGstbx1yAMoDiswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMmI4M2FlNy01MmI2LTQ1YjQtOTJjOS1jMTJm N2JiMDA5ZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgakQAAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFFVy5fNSTSsJC7tMk7k8eoKzIjp8hXj8Wznx024ElGq2pDAADJV wQaOK9nyrFMvQYsnAbKZd3O1AD2aO3HBL5uqExB+WMEt3rswkJm+MjaguC/59wRT YZFWt4BcCU5U6+rzw/PKSqfLnqkmXTeQKtD/d5/CjTr2kNkp8OKr4smnXTQ5qT9j E1bl2o3YctQxcAa6Nrak5zZGLxVETAKPVpMv9sN1qVR5KtJRC3FtTQmP0ShcFHBY mWlWtp++8ywlhwUIi6vcv1KyDnvM1V+L30LFLjcAH+7IhqWs2w+/XbF2k2FqLVst Uc8DkFUy2kzvPG+o4+I2kF9hInsyYpzbmSY= -----END CERTIFICATE-----Generated at Sat Apr 26 21:45:58 2025 by rpki-client