$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/4d778317-bfa9-32da-b5ef-d588603e5ac9.roa File: 4d778317-bfa9-32da-b5ef-d588603e5ac9.roa (raw, json) Hash identifier: I/ERqhb53s/AbvaoO2wt/A4ib52JEZ2MfUDMo+Z4gZY= Subject key identifier: 49:C8:53:3E:D7:EA:92:0B:FF:E8:E1:DA:49:EF:84:7A:E5:2D:5B:55 Certificate issuer: /CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Certificate serial: 010D0C9F432858493243D6FAC884270D4E542600 Authority key identifier: 71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/4d778317-bfa9-32da-b5ef-d588603e5ac9.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 397026 IP address blocks: 2604:f840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:d6:fa:c8:84:27:0d:4e:54:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=1cf21ef8-01b9-4c82-a527-e38cf926189a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ca:6e:0f:00:8d:23:ae:18:a7:84:d7:7c:c9: 66:a3:1c:67:53:73:61:f5:24:e3:d8:d9:f3:42:cf: a9:d6:08:1f:5a:87:23:18:76:3f:7e:f7:c7:28:77: ac:46:09:d2:be:16:47:b3:f5:c6:56:cb:5b:d7:a7: 37:45:d2:e4:e8:84:4f:7b:1e:53:64:92:b0:35:f3: c4:da:1f:21:35:17:66:1a:11:9c:85:18:a3:ed:c8: 1a:ee:21:a7:2c:12:73:38:75:41:36:e4:93:68:b2: 64:dc:78:85:02:6c:2e:ac:bd:eb:7b:2b:aa:f4:63: da:4c:38:d7:90:73:c6:d6:44:12:a8:e1:4a:f6:f3: e9:3a:ee:fa:58:80:0a:bc:2d:a2:85:6a:2f:19:40: 4e:78:38:46:ac:78:a4:76:82:6f:b8:2b:d7:71:fa: ce:88:b8:ff:bb:b4:16:f2:3d:ef:4a:34:a5:4e:5c: 16:1a:42:5a:41:12:39:9f:51:ed:c1:d6:91:79:c2: b1:cd:cb:d7:86:56:a5:6e:49:be:5b:c5:c7:13:fc: 9c:95:02:19:a9:05:89:34:f2:2e:94:15:67:2a:1d: b4:a5:df:90:60:df:0d:3b:8b:fb:55:94:67:3d:40: 4a:91:8b:e4:55:22:f2:5b:20:be:bd:9a:95:02:b7: 62:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C8:53:3E:D7:EA:92:0B:FF:E8:E1:DA:49:EF:84:7A:E5:2D:5B:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/4d778317-bfa9-32da-b5ef-d588603e5ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl X509v3 Authority Key Identifier: keyid:71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer sbgp-ipAddrBlock: critical IPv6: 2604:f840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:93:3d:0a:5b:b4:10:c8:5b:c0:b8:98:d6:d4:21:1a:2d:6e: 34:0f:60:cb:12:64:54:96:b5:d2:23:98:d5:ab:f1:81:d5:78: 2b:bf:5b:a2:45:2c:00:88:ad:70:2b:76:7c:7f:28:e5:19:1a: ae:f0:e4:34:54:ab:7f:d2:d5:2a:b9:61:4c:7a:7b:20:e1:e4: 2e:7a:ba:a0:88:be:66:36:40:77:5e:0f:0a:7d:75:6b:90:66: 6b:44:6d:57:fc:a1:20:ec:fd:99:4e:7b:02:3b:18:c4:ca:04: 4d:c8:d0:64:b5:aa:54:04:18:26:f7:ec:87:c5:5f:0d:1d:d5: 43:78:ec:c8:19:f1:ad:51:be:32:90:79:5b:b2:36:ba:78:9a: 14:e1:82:f5:5d:c3:1f:7f:0d:e0:30:40:e2:c6:53:52:10:ad: 53:8a:b0:41:c6:1c:bd:21:5e:81:31:8a:e3:28:c4:0c:36:d2: e3:c9:63:5f:e1:e7:e4:ca:60:97:e2:a2:e4:39:2b:6f:c7:9d: b5:2a:8f:ac:81:99:c6:a5:94:f8:3e:9e:e1:f2:2e:7c:72:af: ea:81:ac:d0:96:36:02:33:1a:40:7a:0c:11:2d:b6:d9:3d:3b: cf:88:5f:d6:00:29:79:bc:dd:d4:99:fc:73:e8:ca:c4:5f:0f: cd:dc:2f:39 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkyQ9b6yIQnDU5UJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY4Y2ZiNzYtZDNjZi00ZGE2LWJmZTAtMzYxZDc3NTBj OTAyMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk MWNmMjFlZjgtMDFiOS00YzgyLWE1MjctZTM4Y2Y5MjYxODlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8puDwCNI64Yp4TXfMlmoxxnU3Nh9STj2Nnz Qs+p1ggfWocjGHY/fvfHKHesRgnSvhZHs/XGVstb16c3RdLk6IRPex5TZJKwNfPE 2h8hNRdmGhGchRij7cga7iGnLBJzOHVBNuSTaLJk3HiFAmwurL3reyuq9GPaTDjX kHPG1kQSqOFK9vPpOu76WIAKvC2ihWovGUBOeDhGrHikdoJvuCvXcfrOiLj/u7QW 8j3vSjSlTlwWGkJaQRI5n1HtwdaRecKxzcvXhlalbkm+W8XHE/yclQIZqQWJNPIu lBVnKh20pd+QYN8NO4v7VZRnPUBKkYvkVSLyWyC+vZqVArdi6QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEnIUz7X6pIL/+jh2knvhHrlLVtVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhj ZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFkNzc1MGM5MDIvNGQ3NzgzMTctYmZhOS0z MmRhLWI1ZWYtZDU4ODYwM2U1YWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmY4Y2ZiNzYtZDNjZi00ZGE2LWJm ZTAtMzYxZDc3NTBjOTAyL2ZmOGNmYjc2LWQzY2YtNGRhNi1iZmUwLTM2MWQ3NzUw YzkwMi5jcmwwHwYDVR0jBBgwFoAUcTf+y8F0P+MrRxupXh6iaicOSMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhjZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFk Nzc1MGM5MDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT4QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAtkz0KW7QQyFvAuJjW1CEaLW40D2DLEmRUlrXSI5jVq/GB1Xgrv1ui RSwAiK1wK3Z8fyjlGRqu8OQ0VKt/0tUquWFMensg4eQuerqgiL5mNkB3Xg8KfXVr kGZrRG1X/KEg7P2ZTnsCOxjEygRNyNBktapUBBgm9+yHxV8NHdVDeOzIGfGtUb4y kHlbsja6eJoU4YL1XcMffw3gMEDixlNSEK1TirBBxhy9IV6BMYrjKMQMNtLjyWNf 4efkymCX4qLkOStvx521Ko+sgZnGpZT4Pp7h8i58cq/qgazQljYCMxpAegwRLbbZ PTvPiF/WACl5vN3Umfxz6MrEXw/N3C85 -----END CERTIFICATE-----Generated at Wed Apr 30 02:51:42 2025 by rpki-client