$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/ae2c5b0f-33fb-3ffe-b7ad-c483856d4224.roa File: ae2c5b0f-33fb-3ffe-b7ad-c483856d4224.roa (raw, json) Hash identifier: h6IEyeug2G60061d4Glrr8jxfo1SkpSrEfWtEVatPCU= Subject key identifier: 0E:CC:FD:52:C1:68:C0:DA:D8:E9:96:B3:2D:F0:3D:56:93:6A:68:8D Certificate issuer: /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf Certificate serial: 010D0C9F432858492CAE9C0A47EADF4CBBE29B00 Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/ae2c5b0f-33fb-3ffe-b7ad-c483856d4224.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 397041 IP address blocks: 2604:f740:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:9c:0a:47:ea:df:4c:bb:e2:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=5295e7da-2881-4293-a4c5-51a017fb063c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:65:49:f5:dc:0a:a2:b7:c2:07:a6:82:53:5e: 15:c1:f5:79:c7:77:c4:af:1b:30:43:95:dc:97:dd: 10:45:d9:4c:b5:d5:48:54:59:9d:11:80:ed:47:7d: 1e:63:9e:69:8d:90:1e:94:35:4e:ed:ba:25:58:b9: f9:c5:27:38:ac:31:07:01:c9:d6:6f:14:f6:49:75: 96:88:af:3a:c5:6a:f7:87:44:49:0e:39:40:12:e6: 2e:42:b5:68:13:16:85:ca:78:14:56:42:5b:fb:a6: e5:12:57:13:7e:8e:4f:f5:de:8f:f2:9a:cd:dc:14: 56:9d:17:95:4d:81:eb:d3:6d:a3:cb:37:7b:c0:85: 73:6e:b3:4e:3b:b4:78:9f:9d:d7:5c:ad:70:26:0d: 38:b5:e2:6d:a3:c6:a4:d7:1b:30:d3:f7:93:08:27: 06:9a:c5:91:b2:c8:cb:cc:f6:43:5f:72:ad:d2:11: e1:0d:30:91:7b:ac:d9:f3:59:a3:4f:31:9f:1a:3a: 31:1b:c2:0d:bd:1f:ac:ab:61:80:5f:8c:c1:9f:f1: 4f:c0:22:b9:98:27:83:62:0b:6d:58:0d:38:47:7c: 8c:e2:f6:5b:0d:39:01:a2:dc:1d:21:1a:cd:3e:bb: c3:01:18:bd:77:79:b0:22:d5:7a:43:30:41:54:a3: c9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CC:FD:52:C1:68:C0:DA:D8:E9:96:B3:2D:F0:3D:56:93:6A:68:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/ae2c5b0f-33fb-3ffe-b7ad-c483856d4224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl X509v3 Authority Key Identifier: keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer sbgp-ipAddrBlock: critical IPv6: 2604:f740:100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:f7:6a:f7:1c:e1:93:4f:f8:65:3e:45:43:fc:a4:49:1a:da: b4:b0:9a:9b:2a:59:5f:4f:52:72:04:5d:8c:d1:4b:a9:5b:1d: bd:41:6e:5b:2c:23:df:3b:39:a6:78:2c:ee:6c:c6:3b:26:b7: 34:9b:56:a3:ee:63:7a:92:62:62:84:66:0c:5e:ca:73:13:5d: fd:fe:d2:7c:79:d7:97:6b:bd:7c:b5:87:8e:54:fe:bb:74:67: 74:bc:13:a2:0c:e4:e3:46:f7:14:59:8e:a2:eb:ce:1c:15:93: a3:7d:d3:2e:a6:30:0d:9d:43:5e:62:27:90:f6:09:94:05:b4: 0b:e8:0b:3f:2f:51:43:b7:ce:08:1d:7e:7f:52:2a:de:fa:1a: 6a:9d:5f:20:f5:7a:75:af:d5:b3:08:53:c7:27:1a:bd:6a:14: 93:98:51:5b:d8:83:17:b0:a0:fa:16:35:8f:d4:22:60:0a:83: a3:4f:36:4d:03:3a:f6:87:87:7a:70:9d:89:71:5d:e0:22:18: e2:2e:ac:30:93:ba:bd:93:6d:af:c6:8c:6f:dc:4c:ae:dc:c5: a1:6f:8e:b5:ea:7c:15:89:c8:38:11:a0:9e:54:5b:96:df:17: c6:7b:b3:67:2d:ac:bd:81:89:6d:62:69:78:5a:4d:bd:f6:eb: 10:6f:43:e4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEksrpwKR+rfTLvimwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTJiNzllYzAtZGMzYi00YWUwLWFjOWEtYmU1ZTQ0MGNm M2JmMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NTI5NWU3ZGEtMjg4MS00MjkzLWE0YzUtNTFhMDE3ZmIwNjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomVJ9dwKorfCB6aCU14VwfV5x3fErxswQ5Xc l90QRdlMtdVIVFmdEYDtR30eY55pjZAelDVO7bolWLn5xSc4rDEHAcnWbxT2SXWW iK86xWr3h0RJDjlAEuYuQrVoExaFyngUVkJb+6blElcTfo5P9d6P8prN3BRWnReV TYHr022jyzd7wIVzbrNOO7R4n53XXK1wJg04teJto8ak1xsw0/eTCCcGmsWRssjL zPZDX3Kt0hHhDTCRe6zZ81mjTzGfGjoxG8INvR+sq2GAX4zBn/FPwCK5mCeDYgtt WA04R3yM4vZbDTkBotwdIRrNPrvDARi9d3mwItV6QzBBVKPJbQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFA7M/VLBaMDa2OmWsy3wPVaTamiNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMmI3 OWVjMC1kYzNiLTRhZTAtYWM5YS1iZTVlNDQwY2YzYmYvYWUyYzViMGYtMzNmYi0z ZmZlLWI3YWQtYzQ4Mzg1NmQ0MjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTJiNzllYzAtZGMzYi00YWUwLWFj OWEtYmU1ZTQ0MGNmM2JmLzEyYjc5ZWMwLWRjM2ItNGFlMC1hYzlhLWJlNWU0NDBj ZjNiZi5jcmwwHwYDVR0jBBgwFoAUCSgDghQhqZyoQ+WjADdHhNEkZ1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xMmI3OWVjMC1kYzNiLTRhZTAtYWM5YS1iZTVl NDQwY2YzYmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgT3QAEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAhvdq9xzhk0/4ZT5FQ/ykSRratLCamypZX09ScgRdjNFLqVsdvUFu Wywj3zs5pngs7mzGOya3NJtWo+5jepJiYoRmDF7KcxNd/f7SfHnXl2u9fLWHjlT+ u3RndLwTogzk40b3FFmOouvOHBWTo33TLqYwDZ1DXmInkPYJlAW0C+gLPy9RQ7fO CB1+f1Iq3voaap1fIPV6da/VswhTxycavWoUk5hRW9iDF7Cg+hY1j9QiYAqDo082 TQM69oeHenCdiXFd4CIY4i6sMJO6vZNtr8aMb9xMrtzFoW+Otep8FYnIOBGgnlRb lt8XxnuzZy2svYGJbWJpeFpNvfbrEG9D5A== -----END CERTIFICATE-----Generated at Tue Apr 29 12:50:08 2025 by rpki-client