$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/9e7b8c97-188f-3dbd-aff6-3e46671902a5.roa File: 9e7b8c97-188f-3dbd-aff6-3e46671902a5.roa (raw, json) Hash identifier: qcz8pB4Fk4w1vY9KPbmq8npYXIxvH/h5Jrkgn1PtrhQ= Subject key identifier: BB:4A:4E:C2:0B:B0:98:84:4B:B8:AE:4D:BA:FA:E0:3F:61:60:2A:CE Certificate issuer: /CN=39812a66-44de-45e0-a65d-fd3a7673a954 Certificate serial: 010D0C9F4328584953C44661B8BA5B2680BD9700 Authority key identifier: 8C:B9:CD:61:0D:4D:2F:72:85:2B:F0:01:D2:9B:B9:E9:9D:DF:98:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/9e7b8c97-188f-3dbd-aff6-3e46671902a5.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 396422 IP address blocks: 2607:39c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/39812a66-44de-45e0-a65d-fd3a7673a954.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/39812a66-44de-45e0-a65d-fd3a7673a954.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:46:61:b8:ba:5b:26:80:bd:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39812a66-44de-45e0-a65d-fd3a7673a954 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=6799927a-a2d4-4736-a37a-fbd854ce17b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d3:b7:9a:cd:0f:b7:4a:39:b6:26:0f:d0:d6: 8f:cf:ae:b1:6d:b7:91:14:e3:24:67:13:1f:67:e8: 32:ef:a1:26:e0:20:1a:ea:8d:71:fd:c8:63:19:36: c9:05:ed:d8:77:4c:58:91:0e:fd:a9:ae:7e:10:6a: ed:f3:94:58:fb:10:55:3d:2a:3c:34:a3:40:71:c9: d0:5c:50:2b:39:78:4f:36:7a:84:6c:b6:49:aa:36: 64:b5:99:0f:6a:30:f9:4a:43:2d:2a:45:af:a0:99: e9:3a:ce:22:2b:c8:19:55:97:e5:39:2b:91:e6:6e: a1:6a:74:41:55:e4:0e:78:b8:33:ab:4c:0b:a9:1c: 8b:4b:15:19:0d:cc:1b:a6:f5:68:b2:bc:7e:77:00: 12:98:28:33:9a:c6:65:e5:e7:f8:07:f4:bf:0a:7c: 29:90:55:ed:1f:69:9e:ac:e7:0d:b5:94:85:ca:c5: c0:23:c0:80:5f:b1:91:6f:81:7b:4f:76:ab:06:48: 29:b0:d8:af:03:03:8b:97:b1:80:6f:a4:67:e2:7d: 83:b8:78:22:4b:73:d4:8e:6b:10:15:2f:23:37:c8: 79:5d:8e:7f:33:08:52:17:fd:a7:ce:21:7e:ce:3e: eb:34:5f:3d:c7:99:b2:65:b5:24:08:98:3c:54:aa: 59:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4A:4E:C2:0B:B0:98:84:4B:B8:AE:4D:BA:FA:E0:3F:61:60:2A:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/9e7b8c97-188f-3dbd-aff6-3e46671902a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/39812a66-44de-45e0-a65d-fd3a7673a954.crl X509v3 Authority Key Identifier: keyid:8C:B9:CD:61:0D:4D:2F:72:85:2B:F0:01:D2:9B:B9:E9:9D:DF:98:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954.cer sbgp-ipAddrBlock: critical IPv6: 2607:39c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:ba:a7:2f:fc:48:68:b3:30:3a:fb:e1:41:cd:7b:b3:f3:aa: 0e:0b:b4:50:96:79:5f:0b:12:a9:3e:28:52:d8:cd:67:34:71: 0e:37:08:d2:29:18:03:76:66:c5:47:9f:d4:2b:84:54:38:a3: 9d:45:ff:0d:27:04:66:c1:2f:e1:52:e6:4c:fe:29:f7:5c:01: cd:fe:35:1b:5f:10:b3:c2:f2:f6:88:54:a5:0d:c2:af:85:2c: 12:b2:ba:53:9d:32:3e:00:03:e6:9f:90:30:20:d7:47:32:7c: 8c:79:02:f5:7c:a4:69:c0:83:48:e2:b4:98:de:f9:57:a2:80: 57:02:b8:7e:87:37:a9:cc:82:84:f9:7c:3f:df:a8:4e:5b:ea: 0a:68:80:f2:cf:6d:f3:9c:89:08:56:c3:b0:a6:db:d8:a2:b4: d0:26:4f:c9:e2:27:34:c7:a9:b8:ad:30:18:da:d4:eb:1d:6b: 59:a2:e0:f2:84:8e:63:70:bf:42:05:cf:d2:e7:0b:51:0a:a3: c2:92:df:c6:f1:e9:ad:11:5a:ad:4f:62:00:bf:95:6b:41:20: 16:0d:60:ca:17:81:76:06:00:4b:7e:11:79:a2:0b:14:ec:14: b0:26:c4:6d:fc:d7:78:69:ef:d7:d6:a8:5e:0e:a3:58:81:83: 1c:b4:ff:f4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElTxEZhuLpbJoC9lwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk4MTJhNjYtNDRkZS00NWUwLWE2NWQtZmQzYTc2NzNh OTU0MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk Njc5OTkyN2EtYTJkNC00NzM2LWEzN2EtZmJkODU0Y2UxN2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9O3ms0Pt0o5tiYP0NaPz66xbbeRFOMkZxMf Z+gy76Em4CAa6o1x/chjGTbJBe3Yd0xYkQ79qa5+EGrt85RY+xBVPSo8NKNAccnQ XFArOXhPNnqEbLZJqjZktZkPajD5SkMtKkWvoJnpOs4iK8gZVZflOSuR5m6hanRB VeQOeLgzq0wLqRyLSxUZDcwbpvVosrx+dwASmCgzmsZl5ef4B/S/CnwpkFXtH2me rOcNtZSFysXAI8CAX7GRb4F7T3arBkgpsNivAwOLl7GAb6Rn4n2DuHgiS3PUjmsQ FS8jN8h5XY5/MwhSF/2nziF+zj7rNF89x5myZbUkCJg8VKpZCQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLtKTsILsJiES7iuTbr64D9hYCrOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zOTgx MmE2Ni00NGRlLTQ1ZTAtYTY1ZC1mZDNhNzY3M2E5NTQvOWU3YjhjOTctMTg4Zi0z ZGJkLWFmZjYtM2U0NjY3MTkwMmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzk4MTJhNjYtNDRkZS00NWUwLWE2 NWQtZmQzYTc2NzNhOTU0LzM5ODEyYTY2LTQ0ZGUtNDVlMC1hNjVkLWZkM2E3Njcz YTk1NC5jcmwwHwYDVR0jBBgwFoAUjLnNYQ1NL3KFK/AB0pu56Z3fmIcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zOTgxMmE2Ni00NGRlLTQ1ZTAtYTY1ZC1mZDNh NzY3M2E5NTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgc5wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB7uqcv/EhoszA6++FBzXuz86oOC7RQlnlfCxKpPihS2M1nNHEONwjS KRgDdmbFR5/UK4RUOKOdRf8NJwRmwS/hUuZM/in3XAHN/jUbXxCzwvL2iFSlDcKv hSwSsrpTnTI+AAPmn5AwINdHMnyMeQL1fKRpwINI4rSY3vlXooBXArh+hzepzIKE +Xw/36hOW+oKaIDyz23znIkIVsOwptvYorTQJk/J4ic0x6m4rTAY2tTrHWtZouDy hI5jcL9CBc/S5wtRCqPCkt/G8emtEVqtT2IAv5VrQSAWDWDKF4F2BgBLfhF5ogsU 7BSwJsRt/Nd4ae/X1qheDqNYgYMctP/0 -----END CERTIFICATE-----Generated at Mon Apr 28 13:51:20 2025 by rpki-client