$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/b1e7b3ba-e1a8-3371-9e60-cc480edcaf37.roa File: b1e7b3ba-e1a8-3371-9e60-cc480edcaf37.roa (raw, json) Hash identifier: AQXVJXzSFAvVQGEyaFqSlkXrVMLEw+g8bJS8DRozcZs= Subject key identifier: 4E:BA:59:EE:56:7B:62:D9:D9:4F:E6:5E:00:28:B8:D4:6F:FE:03:85 Certificate issuer: /CN=f1fa0620-c80f-4a94-9e95-ead44fb79978 Certificate serial: 010D0C9F43285849ABB4A761B0E87C3D7B377900 Authority key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/b1e7b3ba-e1a8-3371-9e60-cc480edcaf37.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 13335 IP address blocks: 2607:6bc0::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:a7:61:b0:e8:7c:3d:7b:37:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=6f65b0ad-548d-48eb-b47f-4c2e4cd60172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:23:a6:fb:ff:17:6a:1f:14:03:9c:95:64:de: b9:e7:b4:59:c7:d0:b4:8a:4e:cf:db:ea:7c:13:c0: 9d:5e:5f:d3:66:95:6d:2f:8b:7b:c1:77:8c:3b:96: 12:7d:87:09:44:34:38:95:5b:36:62:38:17:0d:58: 29:1e:dd:b9:20:6a:bc:cc:0a:a6:f1:af:69:54:cb: e5:4e:45:9d:44:44:cd:31:fe:de:55:38:6f:86:df: e4:56:55:21:44:46:c2:75:9b:e6:3e:ca:25:d7:82: 0b:bc:6d:55:77:45:20:e0:81:36:f5:7d:3c:98:b4: 69:f3:a9:9a:e8:05:96:f0:de:d4:f5:78:77:d7:1f: aa:31:ce:64:28:05:de:84:51:15:b9:b9:54:19:35: 18:cc:0a:f1:f7:2c:e6:24:fa:74:8e:b8:0b:4f:59: 6d:7b:50:62:94:ee:6a:6b:58:fc:1d:e5:68:f2:31: 93:31:03:26:28:64:ae:ba:e3:32:3b:d8:75:60:8a: bf:67:83:df:25:31:80:a0:84:8d:c7:20:1f:5c:cf: ef:5d:d7:6a:fd:26:b3:a1:d4:2c:a7:dd:c5:84:ef: 8a:7d:89:f5:c6:a1:1f:41:59:cd:c6:30:0b:9d:97: c5:b1:cb:1b:82:84:38:28:84:c9:9c:c2:a1:f1:69: 76:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BA:59:EE:56:7B:62:D9:D9:4F:E6:5E:00:28:B8:D4:6F:FE:03:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/b1e7b3ba-e1a8-3371-9e60-cc480edcaf37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl X509v3 Authority Key Identifier: keyid:A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer sbgp-ipAddrBlock: critical IPv6: 2607:6bc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:4d:d4:1b:a6:a1:dd:f7:cd:59:ff:3e:42:e3:f2:88:64:5d: e4:f3:c0:3c:74:f9:5b:87:7a:68:ad:11:76:12:0b:c8:b9:43: 19:5f:54:8c:65:9a:37:03:37:64:60:44:33:bb:4f:54:1e:29: 15:c1:a0:a2:b0:24:6a:4e:66:f1:5e:8b:45:58:00:8a:ff:1c: 56:b3:40:70:0e:a5:8a:62:45:91:94:59:1b:97:b1:63:f3:63: 1c:e6:74:ee:eb:e7:30:78:7a:cb:4e:a6:9f:bf:63:05:b7:e9: 9b:07:8d:cc:50:4d:7d:b5:30:fe:a5:ac:f8:9e:a9:28:47:c5: 2b:af:e3:e6:c9:40:af:8a:0b:3c:b3:32:f3:80:7c:78:dd:e5: 2b:a5:12:df:84:44:8d:9b:c6:42:07:21:2b:99:ea:e1:ab:5e: df:7a:3d:32:e0:bf:26:43:93:e7:c7:af:43:c9:51:bd:ef:57: b1:a9:67:15:0e:66:f9:df:19:a0:6f:10:9b:a5:38:3d:ba:68: 08:49:26:7f:9c:e8:d9:7a:f7:cd:53:0a:17:3f:25:34:74:2a: ae:57:3a:78:dd:98:ad:23:2a:99:ab:d9:12:da:a1:a3:f9:59: b3:ad:3d:cc:6a:99:66:e6:91:20:13:41:89:ed:df:1e:a0:bb: 84:f6:0a:ea -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmrtKdhsOh8PXs3eQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFmYTA2MjAtYzgwZi00YTk0LTllOTUtZWFkNDRmYjc5 OTc4MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk NmY2NWIwYWQtNTQ4ZC00OGViLWI0N2YtNGMyZTRjZDYwMTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSOm+/8Xah8UA5yVZN6557RZx9C0ik7P2+p8 E8CdXl/TZpVtL4t7wXeMO5YSfYcJRDQ4lVs2YjgXDVgpHt25IGq8zAqm8a9pVMvl TkWdRETNMf7eVThvht/kVlUhREbCdZvmPsol14ILvG1Vd0Ug4IE29X08mLRp86ma 6AWW8N7U9Xh31x+qMc5kKAXehFEVublUGTUYzArx9yzmJPp0jrgLT1lte1BilO5q a1j8HeVo8jGTMQMmKGSuuuMyO9h1YIq/Z4PfJTGAoISNxyAfXM/vXddq/SazodQs p93FhO+KfYn1xqEfQVnNxjALnZfFscsbgoQ4KITJnMKh8Wl2fQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE66We5We2LZ2U/mXgAouNRv/gOFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mMWZh MDYyMC1jODBmLTRhOTQtOWU5NS1lYWQ0NGZiNzk5NzgvYjFlN2IzYmEtZTFhOC0z MzcxLTllNjAtY2M0ODBlZGNhZjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjFmYTA2MjAtYzgwZi00YTk0LTll OTUtZWFkNDRmYjc5OTc4L2YxZmEwNjIwLWM4MGYtNGE5NC05ZTk1LWVhZDQ0ZmI3 OTk3OC5jcmwwHwYDVR0jBBgwFoAUphG/cQGHxBw5AaKqJrnTgQz+K3QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mMWZhMDYyMC1jODBmLTRhOTQtOWU5NS1lYWQ0 NGZiNzk5NzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdrwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAHTdQbpqHd981Z/z5C4/KIZF3k88A8dPlbh3porRF2EgvIuUMZX1SM ZZo3AzdkYEQzu09UHikVwaCisCRqTmbxXotFWACK/xxWs0BwDqWKYkWRlFkbl7Fj 82Mc5nTu6+cweHrLTqafv2MFt+mbB43MUE19tTD+paz4nqkoR8Urr+PmyUCvigs8 szLzgHx43eUrpRLfhESNm8ZCByErmerhq17fej0y4L8mQ5Pnx69DyVG971exqWcV Dmb53xmgbxCbpTg9umgISSZ/nOjZevfNUwoXPyU0dCquVzp43ZitIyqZq9kS2qGj +VmzrT3Maplm5pEgE0GJ7d8eoLuE9grq -----END CERTIFICATE-----Generated at Mon Apr 28 23:22:48 2025 by rpki-client