$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/c299288c-7614-30cd-a6e7-c56fc746d67e.roa File: c299288c-7614-30cd-a6e7-c56fc746d67e.roa (raw, json) Hash identifier: 6CgRilwi1Wj873cSYqDYp2ZOQQJEbT5otKxerSu8hsQ= Subject key identifier: AD:33:11:17:82:7A:57:BA:84:E7:0C:34:8E:C8:99:3B:16:E4:0B:C5 Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F43285849AA4F730EC33C1FB7E1FA3D00 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/c299288c-7614-30cd-a6e7-c56fc746d67e.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 33322 IP address blocks: 2607:fbb0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:73:0e:c3:3c:1f:b7:e1:fa:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=73bbc857-295d-4d64-97fa-a01e57e26bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3b:21:7d:24:6b:d8:2a:a1:84:4d:c5:ec:cc: 95:1e:6b:19:8d:c2:6c:31:5e:e0:aa:8a:f8:38:38: 37:7a:61:99:3a:2d:66:b3:e8:f1:68:60:28:83:24: aa:0c:53:a4:6e:ca:42:56:51:38:cd:d4:59:cd:a4: 82:09:a1:fe:36:00:d3:4b:f2:56:29:80:fe:eb:67: 01:d5:4c:ce:e7:cf:60:b2:90:54:bd:2e:72:4a:c8: e2:d0:f9:03:60:2b:0d:3a:d4:dc:07:39:47:d0:26: 77:ff:b6:50:c9:51:23:a1:fe:6c:9b:97:17:cc:18: 1e:9f:16:10:92:e8:a3:5e:a8:c6:82:7b:45:e0:55: 51:81:a2:36:9a:da:24:fa:23:3f:9e:e0:56:cb:9c: 1b:a0:35:a4:42:8c:ed:c2:ac:7b:e5:7e:e4:81:36: b6:83:b0:af:b3:a7:22:a2:19:23:92:2b:0c:e0:4a: 11:f7:42:17:ed:b2:1e:6e:e8:de:45:0d:ff:63:83: 8d:6f:24:44:d8:89:21:8d:f4:6d:ec:1b:3b:54:a2: 75:93:76:6e:6c:12:1a:4a:69:8d:68:be:29:ca:82: 51:f3:66:d4:ef:8b:1f:5f:82:cc:d7:4c:28:f0:23: 3c:aa:be:f2:ef:9c:66:af:c3:10:7e:d7:47:5c:15: 57:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:33:11:17:82:7A:57:BA:84:E7:0C:34:8E:C8:99:3B:16:E4:0B:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/c299288c-7614-30cd-a6e7-c56fc746d67e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv6: 2607:fbb0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:9f:80:04:dd:5d:cb:6b:41:b1:f3:66:6e:d0:9c:a7:51:55: 56:d9:31:a8:13:60:bb:71:b3:b8:e9:99:4f:be:74:0e:ae:af: b5:78:cf:f8:90:d5:a4:7e:7f:89:dc:fb:9f:2a:8e:23:2a:e4: 6f:38:3c:9c:17:93:9f:15:17:88:25:fe:91:0f:b0:ee:3e:c4: a6:d7:8b:58:fd:e4:ad:bf:69:0c:1d:b6:db:29:12:69:e9:a9: 5a:b8:1c:64:28:e7:a1:09:32:28:e6:a9:c2:3f:f7:47:5a:d7: c5:a6:42:c9:cd:0e:05:42:dc:54:a3:e4:93:6f:d7:94:2a:c9: ae:8a:9a:f9:9b:e0:77:2c:55:5f:9b:07:77:3b:7a:b2:63:e2: 19:0c:38:c5:bb:73:b3:39:a0:f2:be:22:4c:04:cd:44:ab:c8: c5:53:15:bd:7f:d9:6a:f5:04:c4:d6:6c:f3:70:7e:4c:5e:b2: 52:31:63:d6:9b:9e:e5:37:c4:9a:fe:1e:eb:32:ac:44:f2:a6: 65:39:2b:bb:58:c0:f5:bd:f4:f9:63:d4:46:aa:49:41:78:9b: a5:21:f5:83:2e:df:0b:3b:83:0b:4b:68:3d:22:27:7a:99:ee: ef:77:f8:24:9d:f7:2c:73:5f:ff:55:6c:a6:86:44:47:9a:15: 0a:d7:73:8b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmqT3MOwzwft+H6PQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk NzNiYmM4NTctMjk1ZC00ZDY0LTk3ZmEtYTAxZTU3ZTI2YmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjshfSRr2CqhhE3F7MyVHmsZjcJsMV7gqor4 ODg3emGZOi1ms+jxaGAogySqDFOkbspCVlE4zdRZzaSCCaH+NgDTS/JWKYD+62cB 1UzO589gspBUvS5ySsji0PkDYCsNOtTcBzlH0CZ3/7ZQyVEjof5sm5cXzBgenxYQ kuijXqjGgntF4FVRgaI2mtok+iM/nuBWy5wboDWkQoztwqx75X7kgTa2g7Cvs6ci ohkjkisM4EoR90IX7bIebujeRQ3/Y4ONbyRE2IkhjfRt7Bs7VKJ1k3ZubBIaSmmN aL4pyoJR82bU74sfX4LM10wo8CM8qr7y75xmr8MQftdHXBVX7wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK0zEReCele6hOcMNI7ImTsW5AvFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvYzI5OTI4OGMtNzYxNC0z MGNkLWE2ZTctYzU2ZmM3NDZkNjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf7sDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA6n4AE3V3La0Gx82Zu0JynUVVW2TGoE2C7cbO46ZlPvnQOrq+1eM/4 kNWkfn+J3PufKo4jKuRvODycF5OfFReIJf6RD7DuPsSm14tY/eStv2kMHbbbKRJp 6alauBxkKOehCTIo5qnCP/dHWtfFpkLJzQ4FQtxUo+STb9eUKsmuipr5m+B3LFVf mwd3O3qyY+IZDDjFu3OzOaDyviJMBM1Eq8jFUxW9f9lq9QTE1mzzcH5MXrJSMWPW m57lN8Sa/h7rMqxE8qZlOSu7WMD1vfT5Y9RGqklBeJulIfWDLt8LO4MLS2g9Iid6 me7vd/gknfcsc1//VWymhkRHmhUK13OL -----END CERTIFICATE-----Generated at Tue Apr 29 16:23:52 2025 by rpki-client