$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/bb22190c-d0c9-3f85-9c06-25a71b41f7ac.roa File: bb22190c-d0c9-3f85-9c06-25a71b41f7ac.roa (raw, json) Hash identifier: 4+FjgLldGBQrwDEWzTZ1H1/znXYwkE3c0QUucfL4xcE= Subject key identifier: 47:10:B7:7F:A1:7E:7A:CD:6F:7A:35:58:D0:CD:53:A5:69:9E:47:6B Certificate issuer: /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf Certificate serial: 010D0C9F432858492CAE9C18610E5861F7C5FD00 Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/bb22190c-d0c9-3f85-9c06-25a71b41f7ac.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 397041 IP address blocks: 2604:f740:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:9c:18:61:0e:58:61:f7:c5:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=b8115bc3-55e4-4e45-8b33-f758d966c442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:af:2d:62:41:e6:35:d1:27:91:31:e2:a2:38: 60:88:65:a6:ae:88:cc:7e:ea:6b:16:24:f3:2c:e1: 8f:89:79:13:aa:7d:b8:f7:4a:dc:d9:ee:5d:60:c4: b9:0c:68:b5:e6:40:e6:7e:d6:69:99:61:50:71:fa: d0:d4:49:03:d3:b0:bd:12:d1:88:a9:8e:58:52:ab: 26:4b:31:76:19:0d:57:3d:7a:25:3b:de:c0:90:88: 6a:3f:c1:96:aa:e1:47:9f:8b:b7:98:5a:42:5c:bd: 8c:b3:92:a9:eb:53:39:73:0c:20:f3:80:57:97:d7: 7b:81:42:a9:72:1e:2d:f6:54:26:cf:e7:d7:a6:6f: f0:17:44:ee:50:85:35:07:b4:20:81:3d:f2:43:99: 2f:4c:78:5d:6b:96:8e:55:5a:43:11:a1:22:b0:d5: b8:8e:39:9b:7f:c6:bd:a6:f2:a8:ba:bc:78:7d:cf: 61:45:9b:b8:8a:b3:6b:59:d6:5d:ab:b0:d7:dc:b6: 1e:50:8e:c8:29:fa:4e:ef:e8:70:7f:b0:61:cf:c1: 50:02:cc:74:72:a2:11:b3:e0:bf:84:20:aa:fe:6f: 2d:70:2e:38:12:61:f4:99:7b:0b:9a:46:d2:65:b3: eb:b4:95:4c:4e:f4:73:b6:cb:8f:99:d2:39:71:07: 61:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:10:B7:7F:A1:7E:7A:CD:6F:7A:35:58:D0:CD:53:A5:69:9E:47:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/bb22190c-d0c9-3f85-9c06-25a71b41f7ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl X509v3 Authority Key Identifier: keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer sbgp-ipAddrBlock: critical IPv6: 2604:f740:200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:44:36:a4:70:38:69:29:b7:51:eb:e7:b8:c4:59:5e:d0:47: 35:6c:0c:03:e2:62:e1:5f:c0:07:d4:1c:0a:88:6b:36:bb:f1: a7:e0:2f:9c:a0:27:2f:9f:ed:a7:b9:f4:fe:29:4f:28:c5:09: 38:c4:c1:cd:07:13:f8:05:37:79:25:e6:c3:92:fe:c8:71:91: e1:91:34:00:09:a7:f1:a5:73:38:d1:5c:9c:17:b5:a0:3c:42: 41:e1:7c:0f:90:01:f8:17:3b:0f:82:30:42:30:1c:f9:f5:f8: fc:0f:63:07:58:fc:fb:50:65:32:d2:21:08:c1:32:4e:5e:21: b2:46:3e:da:9d:b1:f5:3d:46:b1:9b:34:a8:1a:47:5c:c0:3b: 4e:e4:7e:9d:d0:2e:7e:05:04:c2:88:23:ff:28:64:c6:23:64: ed:5c:0a:84:d9:7f:68:56:56:50:ec:f3:9e:c7:c2:4b:b9:be: 61:de:77:00:18:99:3e:c4:37:39:7b:50:ba:96:01:dd:75:25: 04:b9:03:51:7f:59:21:33:70:b6:2d:a8:a6:cd:ff:c8:29:85: 5b:b4:6a:26:20:97:1e:e2:63:2e:6b:65:85:5f:c6:ca:34:fe: d8:a6:05:1a:39:f3:d0:3d:ef:e1:ce:0e:d9:ca:3d:07:47:76: 13:c8:90:cd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEksrpwYYQ5YYffF/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTJiNzllYzAtZGMzYi00YWUwLWFjOWEtYmU1ZTQ0MGNm M2JmMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YjgxMTViYzMtNTVlNC00ZTQ1LThiMzMtZjc1OGQ5NjZjNDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK8tYkHmNdEnkTHiojhgiGWmrojMfuprFiTz LOGPiXkTqn2490rc2e5dYMS5DGi15kDmftZpmWFQcfrQ1EkD07C9EtGIqY5YUqsm SzF2GQ1XPXolO97AkIhqP8GWquFHn4u3mFpCXL2Ms5Kp61M5cwwg84BXl9d7gUKp ch4t9lQmz+fXpm/wF0TuUIU1B7QggT3yQ5kvTHhda5aOVVpDEaEisNW4jjmbf8a9 pvKourx4fc9hRZu4irNrWdZdq7DX3LYeUI7IKfpO7+hwf7Bhz8FQAsx0cqIRs+C/ hCCq/m8tcC44EmH0mXsLmkbSZbPrtJVMTvRztsuPmdI5cQdh9wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEcQt3+hfnrNb3o1WNDNU6VpnkdrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMmI3 OWVjMC1kYzNiLTRhZTAtYWM5YS1iZTVlNDQwY2YzYmYvYmIyMjE5MGMtZDBjOS0z Zjg1LTljMDYtMjVhNzFiNDFmN2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTJiNzllYzAtZGMzYi00YWUwLWFj OWEtYmU1ZTQ0MGNmM2JmLzEyYjc5ZWMwLWRjM2ItNGFlMC1hYzlhLWJlNWU0NDBj ZjNiZi5jcmwwHwYDVR0jBBgwFoAUCSgDghQhqZyoQ+WjADdHhNEkZ1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xMmI3OWVjMC1kYzNiLTRhZTAtYWM5YS1iZTVl NDQwY2YzYmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgT3QAIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJEQ2pHA4aSm3UevnuMRZXtBHNWwMA+Ji4V/AB9QcCohrNrvxp+Av nKAnL5/tp7n0/ilPKMUJOMTBzQcT+AU3eSXmw5L+yHGR4ZE0AAmn8aVzONFcnBe1 oDxCQeF8D5AB+Bc7D4IwQjAc+fX4/A9jB1j8+1BlMtIhCMEyTl4hskY+2p2x9T1G sZs0qBpHXMA7TuR+ndAufgUEwogj/yhkxiNk7VwKhNl/aFZWUOzznsfCS7m+Yd53 ABiZPsQ3OXtQupYB3XUlBLkDUX9ZITNwti2ops3/yCmFW7RqJiCXHuJjLmtlhV/G yjT+2KYFGjnz0D3v4c4O2co9B0d2E8iQzQ== -----END CERTIFICATE-----Generated at Mon Apr 28 00:37:23 2025 by rpki-client