$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/25dfc76c-b579-36f8-95b3-a1b22bcff809.roa File: 25dfc76c-b579-36f8-95b3-a1b22bcff809.roa (raw, json) Hash identifier: RviBkkVS+ZQgySreCQnNONj56Wp+4Mgmvd3nXzQC5aU= Subject key identifier: BD:79:F6:E1:15:31:20:D1:E2:7A:67:61:2E:B8:F7:27:EE:B9:A4:26 Certificate issuer: /CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f Certificate serial: 010D0C9F43285849393E78961DA7E71E5CDCC840 Authority key identifier: E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/25dfc76c-b579-36f8-95b3-a1b22bcff809.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 0 IP address blocks: 2001:504:100::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:78:96:1d:a7:e7:1e:5c:dc:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=276ed66e-7967-43af-a753-1f178966ce1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2b:7d:08:07:65:35:3d:25:a6:f5:ee:61:62: 96:64:7e:71:47:6d:2c:37:bf:0d:2d:db:50:c3:e2: 85:25:af:41:c7:b0:de:87:f8:23:fa:d8:a5:57:41: cd:00:af:4b:f8:12:7f:de:44:b5:4a:de:4f:83:95: 30:7e:c7:65:59:48:7a:c6:40:bd:1b:3a:51:38:6b: 73:42:f8:06:06:7d:06:2e:dd:43:d7:b3:f4:0e:32: 4c:0f:9f:f4:a5:c3:ad:6d:52:c4:c6:f2:37:56:f2: 37:d1:4d:06:97:54:a6:ba:99:08:ab:fc:8e:24:9f: 1f:b4:ca:30:b5:5d:b1:ef:83:04:d4:18:9a:96:c0: 0b:70:ab:2f:a7:fc:8b:b1:a3:fe:ab:12:d4:59:6b: 57:a6:2b:f6:c5:c5:3b:29:b4:a0:31:65:4a:c9:9a: 10:95:4f:a4:80:d5:d3:05:9f:d6:8d:1b:b5:3b:56: 25:fe:c1:f4:bf:99:b7:78:ae:14:41:2c:0d:f0:e9: 2b:62:6f:19:9e:a0:c5:38:f7:d8:57:ad:ab:b7:d4: 1f:28:10:fd:4a:ca:b8:ca:7c:d9:78:03:77:09:0b: f0:4d:28:bd:c6:59:29:62:05:6b:72:aa:d8:92:af: c9:dd:10:f5:b1:fd:cd:90:d9:b1:3f:a5:c6:2d:eb: 12:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:79:F6:E1:15:31:20:D1:E2:7A:67:61:2E:B8:F7:27:EE:B9:A4:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/25dfc76c-b579-36f8-95b3-a1b22bcff809.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl X509v3 Authority Key Identifier: keyid:E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:33:59:b6:79:59:cf:46:e6:a4:bf:43:08:fe:d1:dc:a5:50: 5c:7d:91:2d:1e:59:76:a1:02:db:41:61:7e:7e:63:cc:33:20: 60:1b:46:36:e1:42:f7:89:fb:ed:b2:62:01:fd:dc:5a:24:81: 5e:8a:8f:d7:48:2b:2c:7e:db:61:59:47:55:ae:7f:c6:1d:3f: ac:48:ce:29:f8:23:45:9a:30:b2:81:18:f3:06:96:0a:ad:9e: bc:8b:c0:75:95:5c:08:03:44:4d:d8:27:b0:22:b7:e4:73:d1: 32:0a:45:a2:d2:5e:d3:c1:e0:a6:f9:1d:0c:d9:7d:5b:82:b0: 86:92:e4:d6:e8:e7:61:ca:5f:d9:b3:37:4f:95:9a:9c:ef:cb: 6c:cc:17:d8:33:7d:59:33:91:65:79:ed:f2:7d:02:5c:ad:f4: bf:a7:53:4e:58:3f:9a:6a:bb:89:ab:57:d7:9f:2b:a5:b8:88: e6:51:7c:67:17:af:a8:53:08:7c:65:61:15:9a:f7:3c:76:a6: 1d:c2:5d:33:8a:5e:4e:c7:d8:fc:85:f9:4b:34:4b:80:7f:91: 70:93:60:89:8b:fc:25:f1:f7:4e:cd:d9:07:6f:29:77:e2:57: c8:87:47:c1:25:db:71:0c:77:7e:e7:7c:b7:48:3e:6c:40:13: 9f:00:84:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk5PniWHafnHlzcyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE2MTFlZjEtMTk1ZS00OTU4LWE2YWMtZjRhMWQyY2Q4 YzhmMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk Mjc2ZWQ2NmUtNzk2Ny00M2FmLWE3NTMtMWYxNzg5NjZjZTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5St9CAdlNT0lpvXuYWKWZH5xR20sN78NLdtQ w+KFJa9Bx7Deh/gj+tilV0HNAK9L+BJ/3kS1St5Pg5UwfsdlWUh6xkC9GzpROGtz QvgGBn0GLt1D17P0DjJMD5/0pcOtbVLExvI3VvI30U0Gl1SmupkIq/yOJJ8ftMow tV2x74ME1BialsALcKsvp/yLsaP+qxLUWWtXpiv2xcU7KbSgMWVKyZoQlU+kgNXT BZ/WjRu1O1Yl/sH0v5m3eK4UQSwN8OkrYm8ZnqDFOPfYV62rt9QfKBD9Ssq4ynzZ eAN3CQvwTSi9xlkpYgVrcqrYkq/J3RD1sf3NkNmxP6XGLesSFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL159uEVMSDR4npnYS649yfuuaQmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yYTYx MWVmMS0xOTVlLTQ5NTgtYTZhYy1mNGExZDJjZDhjOGYvMjVkZmM3NmMtYjU3OS0z NmY4LTk1YjMtYTFiMjJiY2ZmODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmE2MTFlZjEtMTk1ZS00OTU4LWE2 YWMtZjRhMWQyY2Q4YzhmLzJhNjExZWYxLTE5NWUtNDk1OC1hNmFjLWY0YTFkMmNk OGM4Zi5jcmwwHwYDVR0jBBgwFoAU58NNkhO9kN6+mFO2dWGXhlsnRk0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yYTYxMWVmMS0xOTVlLTQ5NTgtYTZhYy1mNGEx ZDJjZDhjOGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHwzWbZ5Wc9G5qS/Qwj+0dylUFx9kS0eWXahAttBYX5+Y8wzIGAb RjbhQveJ++2yYgH93FokgV6Kj9dIKyx+22FZR1Wuf8YdP6xIzin4I0WaMLKBGPMG lgqtnryLwHWVXAgDRE3YJ7Ait+Rz0TIKRaLSXtPB4Kb5HQzZfVuCsIaS5Nbo52HK X9mzN0+Vmpzvy2zMF9gzfVkzkWV57fJ9Alyt9L+nU05YP5pqu4mrV9efK6W4iOZR fGcXr6hTCHxlYRWa9zx2ph3CXTOKXk7H2PyF+Us0S4B/kXCTYImL/CXx907N2Qdv KXfiV8iHR8El23EMd37nfLdIPmxAE58AhPg= -----END CERTIFICATE-----Generated at Sat Apr 26 12:49:02 2025 by rpki-client