$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/bbf82c8f-d97d-31b5-8719-70a7cd0dc080.roa File: bbf82c8f-d97d-31b5-8719-70a7cd0dc080.roa (raw, json) Hash identifier: 7xyvgJk5IdmAv1zZv7Qx2dDVPcaoD9j4EZEipgU/YcI= Subject key identifier: 61:D7:3E:D4:84:4A:38:68:13:29:71:62:0F:5A:DF:59:2F:36:9D:94 Certificate issuer: /CN=12c922f5-d2fe-44e3-9541-84c46c7d8348 Certificate serial: 010D0C9F43285849A8E9E39B9CEAD31BB7F141C0 Authority key identifier: FE:0C:D9:11:19:4F:6E:44:88:68:AF:D9:E1:AB:4D:8C:46:77:42:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/bbf82c8f-d97d-31b5-8719-70a7cd0dc080.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 36221 IP address blocks: 2607:f7c8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:e3:9b:9c:ea:d3:1b:b7:f1:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c922f5-d2fe-44e3-9541-84c46c7d8348 Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=22fa1406-788e-4085-b694-f1a7e7001cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:da:79:45:2a:ca:6d:6c:c0:e9:cc:e9:3c:7e: d0:3f:db:c2:0c:d6:4d:e2:01:db:52:2a:5f:13:12: 05:c0:66:30:39:84:30:e6:6d:4e:ae:e3:bb:27:ed: 69:c4:51:f1:9c:1a:e7:4b:1b:85:69:2e:49:ec:e5: 3d:c3:1b:ca:50:b9:0f:c3:93:ac:7b:6e:44:92:fd: 1a:11:ad:61:f1:54:df:36:88:e3:71:59:11:a1:0e: f3:80:77:7c:17:80:89:ef:a0:ac:68:74:03:f0:af: 63:05:d4:45:82:29:a0:df:f6:5a:38:38:ae:eb:9a: e7:90:5e:e5:7f:60:77:7b:4c:79:0d:b7:cb:7c:24: 09:9d:50:42:31:f4:70:d5:92:a6:16:3f:a4:f4:8f: 1f:45:c9:6c:1d:2a:0f:41:f4:5d:76:c1:2a:ed:f7: 53:e3:9a:c5:7f:51:d0:88:c9:4e:af:93:ae:b2:98: ea:b7:9c:63:ab:fc:9d:01:71:89:c2:1e:b2:fe:00: 23:c1:ea:ae:f7:cf:1d:ac:88:c6:5e:bf:e1:bb:74: 85:1c:c1:67:b6:bd:0f:7e:a7:97:67:42:e3:48:6a: e7:b9:67:6f:25:c0:c7:eb:e7:c1:40:6b:1d:c6:d6: 90:e3:56:a3:c0:3a:65:db:6c:ac:2c:86:18:ff:6b: 39:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D7:3E:D4:84:4A:38:68:13:29:71:62:0F:5A:DF:59:2F:36:9D:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/bbf82c8f-d97d-31b5-8719-70a7cd0dc080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.crl X509v3 Authority Key Identifier: keyid:FE:0C:D9:11:19:4F:6E:44:88:68:AF:D9:E1:AB:4D:8C:46:77:42:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348.cer sbgp-ipAddrBlock: critical IPv6: 2607:f7c8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:48:34:60:96:6d:dc:0d:03:6a:71:a7:00:cb:03:14:c1:b7: 5b:8f:f9:d8:4e:05:dc:fd:a4:6d:0a:19:4f:ad:1d:9f:21:7f: a5:13:7a:ee:ac:7d:27:75:c7:1f:7c:2f:80:34:9d:31:de:5f: 4e:2b:2c:14:8a:0c:c0:53:98:73:00:d3:05:b0:90:10:d9:2a: b7:5d:44:18:34:6f:a2:7a:23:a6:15:2e:70:84:1b:b6:15:1d: 7f:cc:f5:ea:83:70:97:8d:94:94:ae:18:f1:54:ad:36:7d:aa: 1a:f0:83:83:68:e5:e4:fc:81:ea:82:a1:05:d9:77:a8:5e:7d: 14:b6:66:c3:68:aa:ec:bf:74:bc:a2:a5:e7:85:9c:22:74:6c: 0b:6d:30:cd:c3:0c:d0:b0:7f:96:aa:79:f3:3a:da:24:31:7f: 57:c3:22:d3:c8:10:62:5f:6d:b6:63:83:27:b1:33:57:e3:ff: a1:35:0d:ef:64:f6:8a:a1:d7:c9:64:51:4d:5d:3c:07:f7:7f: 83:dd:07:82:b9:fe:1b:b2:c7:82:82:73:fd:63:d0:2f:78:14: bd:42:81:26:81:01:63:4a:36:5c:89:0c:2a:b8:c2:e4:b7:0a: 69:5b:55:a9:00:d4:22:7a:cb:02:9b:95:50:c4:f8:d3:5d:7e: d2:12:b9:b7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmo6eObnOrTG7fxQcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTJjOTIyZjUtZDJmZS00NGUzLTk1NDEtODRjNDZjN2Q4 MzQ4MB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk MjJmYTE0MDYtNzg4ZS00MDg1LWI2OTQtZjFhN2U3MDAxY2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNp5RSrKbWzA6czpPH7QP9vCDNZN4gHbUipf ExIFwGYwOYQw5m1OruO7J+1pxFHxnBrnSxuFaS5J7OU9wxvKULkPw5Ose25Ekv0a Ea1h8VTfNojjcVkRoQ7zgHd8F4CJ76CsaHQD8K9jBdRFgimg3/ZaODiu65rnkF7l f2B3e0x5DbfLfCQJnVBCMfRw1ZKmFj+k9I8fRclsHSoPQfRddsEq7fdT45rFf1HQ iMlOr5Ouspjqt5xjq/ydAXGJwh6y/gAjwequ988drIjGXr/hu3SFHMFntr0PfqeX Z0LjSGrnuWdvJcDH6+fBQGsdxtaQ41ajwDpl22ysLIYY/2s5UQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGHXPtSESjhoEylxYg9a31kvNp2UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMmM5 MjJmNS1kMmZlLTQ0ZTMtOTU0MS04NGM0NmM3ZDgzNDgvYmJmODJjOGYtZDk3ZC0z MWI1LTg3MTktNzBhN2NkMGRjMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTJjOTIyZjUtZDJmZS00NGUzLTk1 NDEtODRjNDZjN2Q4MzQ4LzEyYzkyMmY1LWQyZmUtNDRlMy05NTQxLTg0YzQ2Yzdk ODM0OC5jcmwwHwYDVR0jBBgwFoAU/gzZERlPbkSIaK/Z4atNjEZ3QrcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMmM5MjJmNS1kMmZlLTQ0ZTMtOTU0MS04NGM0 NmM3ZDgzNDguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf3yDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCASDRglm3cDQNqcacAywMUwbdbj/nYTgXc/aRtChlPrR2fIX+lE3ru rH0ndccffC+ANJ0x3l9OKywUigzAU5hzANMFsJAQ2Sq3XUQYNG+ieiOmFS5whBu2 FR1/zPXqg3CXjZSUrhjxVK02faoa8IODaOXk/IHqgqEF2XeoXn0UtmbDaKrsv3S8 oqXnhZwidGwLbTDNwwzQsH+WqnnzOtokMX9XwyLTyBBiX222Y4MnsTNX4/+hNQ3v ZPaKodfJZFFNXTwH93+D3QeCuf4bsseCgnP9Y9AveBS9QoEmgQFjSjZciQwquMLk twppW1WpANQiessCm5VQxPjTXX7SErm3 -----END CERTIFICATE-----Generated at Mon Apr 28 15:06:54 2025 by rpki-client