$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1a7b2f39-05ef-347b-a065-102d00f21699.roa File: 1a7b2f39-05ef-347b-a065-102d00f21699.roa (raw, json) Hash identifier: Qb4Q28Y3zv0lkOZZqalJntensaC/G6wqoFwZzVcVd3I= Subject key identifier: F5:B9:48:0D:91:E2:F6:3A:CC:C2:10:E9:40:41:0B:F5:28:CD:B8:39 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F43285849F01A81A552B0FFE1F44E3338 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1a7b2f39-05ef-347b-a065-102d00f21699.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 54994 IP address blocks: 2607:3f40:ff1d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:81:a5:52:b0:ff:e1:f4:4e:33:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=7cdd671a-299a-4257-b0bb-8329fe9f8e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1d:60:17:a9:07:83:ab:0a:23:d7:c6:ea:6d: 64:da:bf:24:fb:e9:2b:15:0a:fd:9b:4e:71:5a:06: cb:3d:0c:bb:a8:cf:c5:0f:30:45:fb:f4:ac:bc:a6: 91:26:6a:1a:c8:22:2d:ec:9a:cb:c5:cb:9f:c1:d5: 98:ba:06:9b:48:ff:ae:be:7e:94:27:8f:84:7b:a1: 80:6e:fb:2b:f7:9d:8c:9c:76:73:27:88:86:cd:d5: c2:1f:a9:f4:ab:d1:13:99:72:75:bb:c0:68:9d:0b: af:29:18:18:4a:94:55:98:44:bb:cb:5e:20:94:d6: 3b:38:26:87:57:ff:f4:24:62:db:02:5f:05:3b:60: 3e:89:e3:fc:d3:66:0a:d0:41:2d:16:61:5c:c6:84: 94:dc:e3:e0:3a:b7:79:76:12:c9:65:6f:1e:32:b0: 91:57:26:77:57:91:08:92:b7:fb:3f:d3:d5:60:5d: 57:54:f9:dd:88:56:06:fe:68:e5:75:c6:eb:08:fd: a8:9e:1f:b1:11:b6:47:b5:13:79:39:3f:a1:07:f2: e7:0b:21:2c:cb:f9:16:88:25:6d:b7:8f:35:10:45: 21:4d:d1:f2:fa:fc:25:96:24:ca:38:e3:b8:2a:6e: 3e:15:79:f0:fd:24:bd:43:1f:d9:fc:c9:23:07:27: 83:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B9:48:0D:91:E2:F6:3A:CC:C2:10:E9:40:41:0B:F5:28:CD:B8:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1a7b2f39-05ef-347b-a065-102d00f21699.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv6: 2607:3f40:ff1d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:8a:7b:85:ff:66:f5:68:21:1b:be:e7:e6:db:5e:a4:60:a5: be:27:fd:d3:75:8f:77:9d:f0:9b:10:fd:9c:14:ce:51:ae:43: b3:7e:69:fe:5f:d5:c8:89:f3:60:46:8f:22:55:49:79:8b:f8: b6:5f:93:ca:8e:a5:0c:09:9c:6c:3c:6f:f0:2d:48:3c:d1:d3: 31:70:fb:e9:ac:8d:a8:16:3a:27:00:e4:77:be:f5:ee:3f:ee: fe:d8:6a:70:19:1c:a0:34:44:54:97:18:12:61:0b:91:14:f0: 19:de:54:1e:70:c1:ee:f0:e8:3e:8f:c8:c7:28:1e:a1:63:a1: 33:65:66:4b:a2:e4:16:f3:69:59:4a:ab:87:56:f3:71:0a:b8: 25:fe:1c:43:1d:56:f7:67:48:1f:57:03:20:6c:49:d3:c2:87: 49:5c:ad:24:dd:02:dc:45:3e:b8:4a:14:30:a4:9b:7c:29:1f: 7b:fa:69:4c:67:5b:5c:59:67:aa:ae:c9:e3:17:29:13:6a:e7: 60:dc:b5:0f:75:81:99:f0:99:ef:eb:62:0d:fa:ec:1a:4f:66: 3b:ca:1d:8c:62:b9:8d:8a:39:8f:c1:ec:a1:78:d4:3c:42:5b: 62:47:b6:a7:20:a8:68:4b:cf:50:6d:b3:3b:e7:57:80:5a:f9: a3:bd:0a:94 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnwGoGlUrD/4fROMzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk N2NkZDY3MWEtMjk5YS00MjU3LWIwYmItODMyOWZlOWY4ZTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx1gF6kHg6sKI9fG6m1k2r8k++krFQr9m05x WgbLPQy7qM/FDzBF+/SsvKaRJmoayCIt7JrLxcufwdWYugabSP+uvn6UJ4+Ee6GA bvsr952MnHZzJ4iGzdXCH6n0q9ETmXJ1u8BonQuvKRgYSpRVmES7y14glNY7OCaH V//0JGLbAl8FO2A+ieP802YK0EEtFmFcxoSU3OPgOrd5dhLJZW8eMrCRVyZ3V5EI krf7P9PVYF1XVPndiFYG/mjldcbrCP2onh+xEbZHtRN5OT+hB/LnCyEsy/kWiCVt t481EEUhTdHy+vwlliTKOOO4Km4+FXnw/SS9Qx/Z/MkjByeDKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPW5SA2R4vY6zMIQ6UBBC/Uozbg5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMWE3YjJmMzktMDVlZi0z NDdiLWEwNjUtMTAyZDAwZjIxNjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgc/QP8d MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFSKe4X/ZvVoIRu+5+bbXqRgpb4n/dN1j3ed8JsQ/ZwUzlGuQ7N+ af5f1ciJ82BGjyJVSXmL+LZfk8qOpQwJnGw8b/AtSDzR0zFw++msjagWOicA5He+ 9e4/7v7YanAZHKA0RFSXGBJhC5EU8BneVB5wwe7w6D6PyMcoHqFjoTNlZkui5Bbz aVlKq4dW83EKuCX+HEMdVvdnSB9XAyBsSdPCh0lcrSTdAtxFPrhKFDCkm3wpH3v6 aUxnW1xZZ6quyeMXKRNq52DctQ91gZnwme/rYg367BpPZjvKHYxiuY2KOY/B7KF4 1DxCW2JHtqcgqGhLz1BtszvnV4Ba+aO9CpQ= -----END CERTIFICATE-----Generated at Sun Jun 15 23:17:18 2025 by rpki-client